$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/07051cd8-25af-3620-a54d-0599517c5882.roa File: 07051cd8-25af-3620-a54d-0599517c5882.roa (raw, json) Hash identifier: V6nAaAVkdauUuPaRvnTKd2nx5YBPYLDHXtYoonsC1Gg= Subject key identifier: CC:78:27:16:8F:D3:EF:11:8E:73:B0:75:A0:2B:E7:2E:48:04:33:4E Certificate issuer: /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5 Certificate serial: 010D0C9F43285849A04AF3653239090DE5B34AC0 Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/07051cd8-25af-3620-a54d-0599517c5882.roa Signing time: Wed 23 Apr 2025 22:54:11 +0000 ROA not before: Wed 23 Apr 2025 22:54:11 +0000 ROA not after: Tue 22 Jul 2025 22:54:11 +0000 asID: 16589 IP address blocks: 206.168.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a0:4a:f3:65:32:39:09:0d:e5:b3:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5 Validity Not Before: Apr 23 22:54:11 2025 GMT Not After : Jul 22 22:54:11 2025 GMT Subject: CN=03e7a552-b391-434d-a5fc-607a4bcaa257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9f:e7:6c:05:63:9c:a1:44:23:d3:26:b4:71: e8:fd:38:47:63:54:13:f3:0a:5f:7a:19:11:73:8c: 63:0f:95:b6:01:f1:84:c9:4b:44:ae:64:f4:d0:da: bf:bd:86:99:4f:ef:f1:07:32:d3:bb:7e:12:71:f9: 04:d2:3d:76:60:ab:65:ce:a3:05:cc:f1:f6:d3:3b: f6:b5:d4:5f:9a:e0:cb:cb:25:b8:5f:44:d0:42:84: 47:ba:38:ba:35:30:89:c2:3c:71:c6:4e:7e:7f:f8: b0:aa:d6:53:f1:b4:9b:21:ab:c9:a7:d4:1a:a5:03: 3f:9b:ed:1d:c3:26:0d:4b:f7:ee:69:da:27:1c:cf: 27:dd:d0:53:00:91:81:06:24:da:73:f6:34:c3:05: 34:49:8e:06:ad:b9:ae:b3:b1:5f:a7:7e:47:8c:69: 00:30:a9:2b:58:94:f8:61:42:d9:58:34:07:de:66: b9:ab:2e:05:6d:a8:48:97:75:ed:c2:36:a5:1e:ef: fe:2e:5c:89:55:9d:59:41:f9:2a:f2:91:32:f0:b7: 1a:fb:e2:02:d3:73:d7:35:6f:41:2a:48:95:91:8f: 78:55:8c:14:e3:ec:81:f5:3d:d8:2d:71:c1:95:fe: b0:d5:91:70:54:46:c2:cd:69:5c:bd:aa:4a:87:4b: 4d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:78:27:16:8F:D3:EF:11:8E:73:B0:75:A0:2B:E7:2E:48:04:33:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/07051cd8-25af-3620-a54d-0599517c5882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl X509v3 Authority Key Identifier: keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer sbgp-ipAddrBlock: critical IPv4: 206.168.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:91:ef:c2:51:ec:05:33:6c:1f:9d:b6:f8:e0:91:9e:aa:de: 2c:df:43:21:e5:94:ce:83:1b:5f:a1:ef:57:e4:11:03:e5:0c: 87:87:0a:26:4b:d2:43:70:7e:a3:46:0a:b4:87:64:c3:c4:57: 1d:d6:79:ed:bf:af:d5:02:b2:c2:50:d4:42:92:1e:50:c4:99: 3e:a5:91:a9:2c:d1:5c:94:ea:a6:5b:02:5f:62:a3:09:3e:d1: 81:f1:36:7e:02:06:01:f9:ba:c2:55:7c:6c:5d:c0:eb:15:0b: ca:88:43:55:92:6d:23:60:09:55:38:f2:6a:6c:ce:44:8f:8a: d4:e2:06:23:c8:13:ef:ff:c8:64:a8:9e:9c:1c:a3:b7:50:e4: 0c:e8:f4:81:69:65:2a:fd:e6:4a:99:47:80:9e:5b:96:d9:98: 71:ef:b4:ad:9a:7d:48:95:7d:18:3c:80:f1:17:f5:68:38:73: b2:54:18:1f:ae:07:a7:9d:13:18:f9:81:36:e7:f1:93:fe:3d: 82:ed:e2:ed:13:4f:fc:f1:9e:19:72:b0:58:b0:2e:b5:c8:51: e7:39:2b:0c:fa:b9:a2:f7:35:36:51:71:2a:7d:57:49:37:87: f5:e8:d4:e2:7d:90:30:85:57:42:66:77:cd:8d:f2:d7:a3:04: d6:bd:1d:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgSvNlMjkJDeWzSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJiMTk5NmUtMzcxZi00MmMwLWI1MTUtZTJmODc2M2Vk N2M1MB4XDTI1MDQyMzIyNTQxMVoXDTI1MDcyMjIyNTQxMVowLzEtMCsGA1UEAxMk MDNlN2E1NTItYjM5MS00MzRkLWE1ZmMtNjA3YTRiY2FhMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25/nbAVjnKFEI9MmtHHo/ThHY1QT8wpfehkR c4xjD5W2AfGEyUtErmT00Nq/vYaZT+/xBzLTu34ScfkE0j12YKtlzqMFzPH20zv2 tdRfmuDLyyW4X0TQQoRHuji6NTCJwjxxxk5+f/iwqtZT8bSbIavJp9QapQM/m+0d wyYNS/fuadonHM8n3dBTAJGBBiTac/Y0wwU0SY4Grbmus7Ffp35HjGkAMKkrWJT4 YULZWDQH3ma5qy4FbahIl3XtwjalHu/+LlyJVZ1ZQfkq8pEy8Lca++IC03PXNW9B KkiVkY94VYwU4+yB9T3YLXHBlf6w1ZFwVEbCzWlcvapKh0tNaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMx4JxaP0+8RjnOwdaAr5y5IBDNOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMmIx OTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4NzYzZWQ3YzUvMDcwNTFjZDgtMjVhZi0z NjIwLWE1NGQtMDU5OTUxN2M1ODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjJiMTk5NmUtMzcxZi00MmMwLWI1 MTUtZTJmODc2M2VkN2M1LzIyYjE5OTZlLTM3MWYtNDJjMC1iNTE1LWUyZjg3NjNl ZDdjNS5jcmwwHwYDVR0jBBgwFoAUo348kCeHbN+ipm+1GmaAC06M0a0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMmIxOTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4 NzYzZWQ3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+R78JR7AUzbB+dtvjgkZ6q3izfQyHllM6DG1+h71fkEQPlDIeHCiZL 0kNwfqNGCrSHZMPEVx3Wee2/r9UCssJQ1EKSHlDEmT6lkaks0VyU6qZbAl9iowk+ 0YHxNn4CBgH5usJVfGxdwOsVC8qIQ1WSbSNgCVU48mpszkSPitTiBiPIE+//yGSo npwco7dQ5Azo9IFpZSr95kqZR4CeW5bZmHHvtK2afUiVfRg8gPEX9Wg4c7JUGB+u B6edExj5gTbn8ZP+PYLt4u0TT/zxnhlysFiwLrXIUec5Kwz6uaL3NTZRcSp9V0k3 h/Xo1OJ9kDCFV0Jmd82N8tejBNa9He0= -----END CERTIFICATE-----Generated at Sat Apr 26 19:25:19 2025 by rpki-client