$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa File: 69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa (raw, json) Hash identifier: zpnYbrTdgDEpiv92WvLPusVPZwMfWctnNb6ahbOfKkw= Subject key identifier: E4:B3:BB:9C:DA:BD:22:35:3F:72:5E:EC:D0:72:1C:D1:9C:CD:3F:D3 Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F43285849E654E9D067A07AC15F086480 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 7029 IP address blocks: 206.174.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:e9:d0:67:a0:7a:c1:5f:08:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=88b93e6b-2df9-4ccf-8bc0-3f08ab906572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c4:cc:c1:0a:a0:54:ef:e9:7d:6e:0f:57:54: 18:68:b3:53:ef:8b:6a:d3:4a:b1:2b:3a:c4:bd:4f: fc:48:17:15:d8:66:14:55:88:9a:24:ee:09:1c:c8: 7a:32:bc:bf:0b:cb:94:ea:89:d7:24:fc:b7:8b:aa: 48:93:f8:83:2e:b4:ea:15:0a:ef:80:73:04:be:9e: 97:02:e4:09:1b:55:fc:24:27:2e:42:16:23:5a:10: 4f:52:91:b0:be:e9:da:b3:7d:60:13:41:e6:08:97: b3:f4:85:1d:da:40:18:1f:63:d3:89:1f:75:ac:53: f8:0a:f3:c1:3f:53:52:de:54:e8:4b:85:e7:c8:32: f1:3a:e5:c6:6a:c3:13:a3:ec:22:27:a3:33:b3:d9: 2c:0f:31:db:49:53:ca:48:f3:2b:5f:ed:9a:1f:56: a8:1b:ac:79:b2:38:06:12:90:b0:01:0a:5c:01:98: e9:19:66:cb:18:82:32:05:1e:c7:f5:0c:10:7c:4e: 3d:aa:e3:24:05:1c:b5:06:6a:30:75:8d:93:2b:39: 40:51:20:56:fe:03:d5:fa:72:3c:e3:90:1f:c4:a4: 6f:4c:7f:2b:7e:6c:b1:4b:aa:a7:fc:9f:84:72:c5: a5:c1:ec:bd:d5:10:d6:cd:4a:cb:44:07:80:5f:6c: 04:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B3:BB:9C:DA:BD:22:35:3F:72:5E:EC:D0:72:1C:D1:9C:CD:3F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:83:32:0e:b9:c0:0b:64:7f:41:49:46:5a:59:6e:5f:02:0c: ae:cd:49:0f:51:c0:94:2e:3d:38:05:99:0e:cd:d4:6c:81:93: 20:c1:0c:8d:5c:1f:bb:b2:31:e6:1a:43:56:2b:84:ff:ec:8e: e5:20:3d:51:2f:5a:fb:2b:d1:78:7c:10:f5:ee:4d:09:a8:44: fc:d9:24:5d:00:76:eb:0c:4f:76:fc:2e:bf:38:b1:2b:4e:df: 61:39:5d:01:d8:68:f8:aa:b0:f5:57:0a:8a:b8:f2:a5:17:9f: 95:4c:3e:b3:32:9d:3c:79:9d:50:80:e3:a1:6d:7d:c3:8e:02: bd:0a:9c:10:9b:51:9d:45:e5:50:08:8c:ca:93:fb:f9:a6:98: c0:64:34:d1:82:ac:2b:3e:12:e4:e7:ad:ea:4c:a2:e8:9c:13: 17:28:0f:f8:ff:74:3b:1b:06:73:0a:f5:09:f9:5d:0e:88:eb: 50:e1:c3:c5:5e:d1:ce:1d:4c:11:8e:a8:2a:df:4a:d5:28:ba: 0e:90:4e:00:44:8e:24:db:1e:1e:5e:dc:1f:ff:89:b0:a1:c3: 26:79:7a:e4:4f:0c:c2:a5:59:fc:6f:28:94:09:56:a7:89:02: 8b:da:e1:b2:aa:e2:66:4b:16:d0:39:38:16:74:d0:1d:8a:67: 86:2c:34:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVOnQZ6B6wV8IZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk ODhiOTNlNmItMmRmOS00Y2NmLThiYzAtM2YwOGFiOTA2NTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsTMwQqgVO/pfW4PV1QYaLNT74tq00qxKzrE vU/8SBcV2GYUVYiaJO4JHMh6Mry/C8uU6onXJPy3i6pIk/iDLrTqFQrvgHMEvp6X AuQJG1X8JCcuQhYjWhBPUpGwvunas31gE0HmCJez9IUd2kAYH2PTiR91rFP4CvPB P1NS3lToS4XnyDLxOuXGasMTo+wiJ6Mzs9ksDzHbSVPKSPMrX+2aH1aoG6x5sjgG EpCwAQpcAZjpGWbLGIIyBR7H9QwQfE49quMkBRy1BmowdY2TKzlAUSBW/gPV+nI8 45AfxKRvTH8rfmyxS6qn/J+EcsWlwey91RDWzUrLRAeAX2wEGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSzu5zavSI1P3Je7NByHNGczT/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvNjljNzQ4NGQtMmVkNC0z YjkxLWJhMTMtZjExNDRkZmMwNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzq6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiDMg65wAtkf0FJRlpZbl8CDK7NSQ9RwJQuPTgFmQ7N1GyBkyDBDI1c H7uyMeYaQ1YrhP/sjuUgPVEvWvsr0Xh8EPXuTQmoRPzZJF0AdusMT3b8Lr84sStO 32E5XQHYaPiqsPVXCoq48qUXn5VMPrMynTx5nVCA46FtfcOOAr0KnBCbUZ1F5VAI jMqT+/mmmMBkNNGCrCs+EuTnrepMouicExcoD/j/dDsbBnMK9Qn5XQ6I61Dhw8Ve 0c4dTBGOqCrfStUoug6QTgBEjiTbHh5e3B//ibChwyZ5euRPDMKlWfxvKJQJVqeJ Aova4bKq4mZLFtA5OBZ00B2KZ4YsNLI= -----END CERTIFICATE-----Generated at Sun Jun 15 11:41:03 2025 by rpki-client