$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/56097d78-2999-3969-9cea-15a94d484a9e.roa File: 56097d78-2999-3969-9cea-15a94d484a9e.roa (raw, json) Hash identifier: XrLAr2khrr79Nryhq6cGhaOIUayZUvGJ9XfBaweYMO4= Subject key identifier: 46:71:A8:95:C8:AB:75:FF:68:EF:54:13:CC:EE:E8:BE:18:7F:A0:7C Certificate issuer: /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Certificate serial: 010D0C9F43285849EA9D20415D91A47DE3903F38 Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/56097d78-2999-3969-9cea-15a94d484a9e.roa Signing time: Tue 20 May 2025 13:49:34 +0000 ROA not before: Tue 20 May 2025 13:49:34 +0000 ROA not after: Mon 18 Aug 2025 13:49:34 +0000 asID: 36549 IP address blocks: 206.191.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:9d:20:41:5d:91:a4:7d:e3:90:3f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0 Validity Not Before: May 20 13:49:34 2025 GMT Not After : Aug 18 13:49:34 2025 GMT Subject: CN=c795e9f1-5b6f-40a2-a56e-385a1d27ef3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:e9:04:b2:1e:ea:26:58:4e:2c:7b:fb:f2: 40:31:3d:97:66:67:21:40:9f:86:9c:69:5e:f6:e0: 62:94:7e:39:fd:7b:11:41:29:5d:a5:95:e9:ca:ab: 3b:cf:3c:8a:ce:d9:e8:e8:fe:09:a0:35:f1:40:91: 16:94:c9:57:4a:ae:c9:7e:c6:c4:83:fe:81:37:ac: bd:a5:a9:be:93:59:91:c6:ad:07:8f:fb:05:6b:a1: aa:87:37:8b:1f:c4:a3:28:12:4f:d3:09:7f:5f:7d: b6:e2:ed:ce:ad:41:5d:1c:f5:53:c3:46:32:1d:07: 6d:9d:a1:de:7b:e6:3f:78:f9:67:b7:1e:d3:37:45: ab:f1:5f:b7:71:52:ff:eb:e0:ae:bd:e0:53:57:c6: bb:2b:3a:d6:a8:b3:bb:53:69:f3:41:32:6b:c7:4d: aa:62:d1:d1:43:27:fa:45:84:22:ff:06:7a:fb:9e: 37:63:8a:06:07:56:b7:38:2a:da:31:15:54:85:67: a4:7a:0e:90:da:51:b0:6a:e1:df:53:03:43:f1:1e: 38:83:25:e8:cb:f2:42:ed:40:43:9c:6c:67:1a:1f: d5:7c:5d:d7:d7:a8:6b:27:7c:f4:20:30:05:0a:1c: 2f:1c:54:55:e0:a2:0a:c0:37:17:31:d3:79:f7:db: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:71:A8:95:C8:AB:75:FF:68:EF:54:13:CC:EE:E8:BE:18:7F:A0:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/56097d78-2999-3969-9cea-15a94d484a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl X509v3 Authority Key Identifier: keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer sbgp-ipAddrBlock: critical IPv4: 206.191.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:5f:97:b4:35:4e:90:40:0d:7a:92:cb:48:32:c4:9f:20:86: 18:5c:39:b4:6d:62:5d:76:bb:86:9b:a1:8a:0c:be:0e:bb:10: ee:09:42:49:2a:93:f9:14:c4:fe:52:59:a2:33:53:20:06:14: 04:f5:e5:de:85:3f:6e:40:cd:6b:3e:dd:a2:6a:15:2f:27:be: 3c:f7:fa:ab:d0:73:3d:97:7d:fe:8f:49:8f:09:32:9b:98:c8: 5b:54:0c:83:cb:58:0b:1d:21:01:a8:b6:eb:87:52:e2:1a:5d: 9a:17:a3:2d:d6:2f:cf:9f:7e:3d:2b:13:13:7d:ba:e8:9e:d6: d1:38:0d:37:b8:ab:ec:00:0e:3b:74:35:20:2c:7e:55:b7:f0: dd:cf:74:a8:c7:ee:40:1a:4f:6f:71:ff:d0:3b:e8:16:51:3f: 33:79:af:c9:95:42:49:e5:2a:27:ee:8a:27:7d:c6:c3:07:b1: 6d:be:ff:de:d2:30:df:45:10:0f:32:e7:02:e5:35:36:f1:b9: 21:8f:25:4b:2f:20:6f:ea:d1:d3:80:5d:48:91:6a:bb:63:b6: 5f:74:87:6a:62:ff:c4:84:e5:34:fa:3a:79:cd:40:d8:af:f9: 65:e2:c3:c0:1f:8f:94:7f:71:96:4e:a1:07:2c:34:6c:35:4b: 75:43:a6:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqnSBBXZGkfeOQPzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFlNDY1YzAtMmExMC00OTVhLWI3ZDItMmFhMDQ4YjI4 NmEwMB4XDTI1MDUyMDEzNDkzNFoXDTI1MDgxODEzNDkzNFowLzEtMCsGA1UEAxMk Yzc5NWU5ZjEtNWI2Zi00MGEyLWE1NmUtMzg1YTFkMjdlZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr3pBLIe6iZYTix7+/JAMT2XZmchQJ+GnGle 9uBilH45/XsRQSldpZXpyqs7zzyKztno6P4JoDXxQJEWlMlXSq7JfsbEg/6BN6y9 pam+k1mRxq0Hj/sFa6GqhzeLH8SjKBJP0wl/X3224u3OrUFdHPVTw0YyHQdtnaHe e+Y/ePlntx7TN0Wr8V+3cVL/6+CuveBTV8a7KzrWqLO7U2nzQTJrx02qYtHRQyf6 RYQi/wZ6+543Y4oGB1a3OCraMRVUhWekeg6Q2lGwauHfUwND8R44gyXoy/JC7UBD nGxnGh/VfF3X16hrJ3z0IDAFChwvHFRV4KIKwDcXMdN599v+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZxqJXIq3X/aO9UE8zu6L4Yf6B8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0 NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEwNDhiMjg2YTAvNTYwOTdkNzgtMjk5OS0z OTY5LTljZWEtMTVhOTRkNDg0YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWFlNDY1YzAtMmExMC00OTVhLWI3 ZDItMmFhMDQ4YjI4NmEwL2FhZTQ2NWMwLTJhMTAtNDk1YS1iN2QyLTJhYTA0OGIy ODZhMC5jcmwwHwYDVR0jBBgwFoAUqvGlGuuoqNwlLVt4tOGaGNmKjyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYWU0NjVjMC0yYTEwLTQ5NWEtYjdkMi0yYWEw NDhiMjg2YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzr+GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFfl7Q1TpBADXqSy0gyxJ8ghhhcObRtYl12u4aboYoMvg67EO4JQkkq k/kUxP5SWaIzUyAGFAT15d6FP25AzWs+3aJqFS8nvjz3+qvQcz2Xff6PSY8JMpuY yFtUDIPLWAsdIQGotuuHUuIaXZoXoy3WL8+ffj0rExN9uuie1tE4DTe4q+wADjt0 NSAsflW38N3PdKjH7kAaT29x/9A76BZRPzN5r8mVQknlKifuiid9xsMHsW2+/97S MN9FEA8y5wLlNTbxuSGPJUsvIG/q0dOAXUiRartjtl90h2pi/8SE5TT6OnnNQNiv +WXiw8Afj5R/cZZOoQcsNGw1S3VDpjI= -----END CERTIFICATE-----Generated at Mon Jun 16 05:40:04 2025 by rpki-client