$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa File: 5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa (raw, json) Hash identifier: egYvCMYASc1DpT+0ba9Bfa8VvfyeM9g090AwVwaYswk= Subject key identifier: C5:FA:22:C8:45:DE:4F:C5:86:93:42:28:CA:DB:D6:5C:83:B3:89:13 Certificate issuer: /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d Certificate serial: 010D0C9F4328584999DFAD602BA9D1C991BA5400 Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa Signing time: Mon 21 Apr 2025 15:43:11 +0000 ROA not before: Mon 21 Apr 2025 15:43:11 +0000 ROA not after: Sun 20 Jul 2025 15:43:11 +0000 asID: 14618 IP address blocks: 206.219.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:99:df:ad:60:2b:a9:d1:c9:91:ba:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d Validity Not Before: Apr 21 15:43:11 2025 GMT Not After : Jul 20 15:43:11 2025 GMT Subject: CN=a9bc5678-96ba-40bb-8d44-668d7dd3d494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ce:a1:ac:dc:54:df:5b:d4:87:79:0d:37:3f: 2f:9e:44:57:0a:1a:ed:96:3d:36:1c:6f:ed:9b:da: a6:08:7d:97:ab:cd:b2:f9:e0:45:4c:dd:ee:38:4a: 5f:06:92:bc:03:9a:88:87:cb:01:5b:89:83:82:a5: fa:cb:35:8a:60:69:36:28:48:f4:9a:a2:5f:a6:e3: c5:2b:39:80:b0:90:d5:0d:17:4b:3d:84:85:6a:5a: 44:93:c3:ca:e5:7b:db:56:e3:db:18:ad:c5:58:46: 5d:81:a1:74:74:33:fc:44:9c:0b:d4:95:0c:b2:3a: d8:68:51:fd:74:42:66:0f:a5:dd:81:54:53:ee:0c: 15:69:e2:00:da:e3:09:3c:ba:0e:fa:a5:3e:97:c0: 2f:ab:1d:34:c8:38:7a:3f:1f:b6:42:f5:b0:1e:0e: 39:67:25:f5:11:0c:39:6a:69:33:77:77:1f:a2:bf: fe:e3:92:ac:f4:37:99:61:40:1a:bc:3c:df:7f:9b: 30:12:83:1e:d5:54:ad:0f:9c:20:f2:39:36:35:53: fb:76:1d:4b:b0:54:4f:1c:8c:32:b5:bc:d3:7f:bd: c6:4d:54:d9:a0:e3:38:ad:dc:a8:95:7e:f4:2b:17: 4c:cb:5a:d7:ca:c2:f0:22:fc:df:f5:16:6c:a9:7e: 8a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FA:22:C8:45:DE:4F:C5:86:93:42:28:CA:DB:D6:5C:83:B3:89:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5d2bfed8-363e-3e2b-919f-100ba77f97f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl X509v3 Authority Key Identifier: keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer sbgp-ipAddrBlock: critical IPv4: 206.219.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b6:a8:a7:1a:da:e4:01:67:63:de:23:46:91:67:2f:27:d1: f6:09:f9:e0:73:f5:16:b2:37:b7:7b:01:41:7d:53:18:c3:b4: 92:28:e9:d1:7c:6a:98:12:28:93:97:5b:90:9b:66:68:fa:67: 90:34:69:66:bc:d4:8d:80:cf:3b:36:8c:26:4a:c3:64:ff:2c: 77:f0:33:47:67:f2:9d:6d:a7:bc:01:be:c4:dc:15:df:ac:57: aa:87:e4:d2:bd:d8:38:c6:eb:2f:2f:c3:bb:16:ea:22:90:d5: ad:bf:47:aa:f3:f5:64:02:f1:12:4a:71:d2:96:25:69:b7:8f: cd:5f:0a:7e:3f:78:6e:65:1a:ad:3f:70:42:0d:c3:fb:6a:44: 00:ee:cc:46:0a:72:8b:cf:e6:f7:14:a4:30:d0:ea:bb:3b:91: 21:8c:8a:aa:28:49:65:54:5e:aa:ed:74:7b:4a:84:06:04:52: 76:e3:87:a2:50:4f:6c:54:5c:1a:ae:ea:36:fd:54:61:1e:4a: 55:df:60:fb:bd:ae:43:23:10:a9:7b:55:06:a9:9b:77:0c:95: 1c:2f:bd:f1:50:61:cd:a3:fc:cd:b9:1e:95:34:1f:81:ec:e0: 70:70:24:ec:bf:db:f3:d0:66:0f:51:75:21:5d:a8:90:4e:4e: ed:6e:a7:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmZ361gK6nRyZG6VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVhNjdiOWUtMWM5OS00YjFjLThjNTAtMDU1YzEwZDRk NTVkMB4XDTI1MDQyMTE1NDMxMVoXDTI1MDcyMDE1NDMxMVowLzEtMCsGA1UEAxMk YTliYzU2NzgtOTZiYS00MGJiLThkNDQtNjY4ZDdkZDNkNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM6hrNxU31vUh3kNNz8vnkRXChrtlj02HG/t m9qmCH2Xq82y+eBFTN3uOEpfBpK8A5qIh8sBW4mDgqX6yzWKYGk2KEj0mqJfpuPF KzmAsJDVDRdLPYSFalpEk8PK5XvbVuPbGK3FWEZdgaF0dDP8RJwL1JUMsjrYaFH9 dEJmD6XdgVRT7gwVaeIA2uMJPLoO+qU+l8Avqx00yDh6Px+2QvWwHg45ZyX1EQw5 amkzd3cfor/+45Ks9DeZYUAavDzff5swEoMe1VStD5wg8jk2NVP7dh1LsFRPHIwy tbzTf73GTVTZoOM4rdyolX70KxdMy1rXysLwIvzf9RZsqX6KsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX6IshF3k/FhpNCKMrb1lyDs4kTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2 N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVjMTBkNGQ1NWQvNWQyYmZlZDgtMzYzZS0z ZTJiLTkxOWYtMTAwYmE3N2Y5N2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGVhNjdiOWUtMWM5OS00YjFjLThj NTAtMDU1YzEwZDRkNTVkLzBlYTY3YjllLTFjOTktNGIxYy04YzUwLTA1NWMxMGQ0 ZDU1ZC5jcmwwHwYDVR0jBBgwFoAUj/m9ZGJvaK1PUYF0eFedVEqgKbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVj MTBkNGQ1NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES2qKca2uQBZ2PeI0aRZy8n0fYJ+eBz9RayN7d7AUF9UxjDtJIo6dF8 apgSKJOXW5CbZmj6Z5A0aWa81I2Azzs2jCZKw2T/LHfwM0dn8p1tp7wBvsTcFd+s V6qH5NK92DjG6y8vw7sW6iKQ1a2/R6rz9WQC8RJKcdKWJWm3j81fCn4/eG5lGq0/ cEINw/tqRADuzEYKcovP5vcUpDDQ6rs7kSGMiqooSWVUXqrtdHtKhAYEUnbjh6JQ T2xUXBqu6jb9VGEeSlXfYPu9rkMjEKl7VQapm3cMlRwvvfFQYc2j/M25HpU0H4Hs 4HBwJOy/2/PQZg9RdSFdqJBOTu1up1w= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:48 2025 by rpki-client