$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa File: 2c227bfd-f08b-398c-9969-3fff99fa4025.roa (raw, json) Hash identifier: QmaQ5D5u8ZUSAnsm2PJci7Vmd7HzuRNtlCS0Q5vHQQ8= Subject key identifier: 09:BB:99:D9:6B:D4:0E:EB:0B:9E:4E:A1:62:50:0D:1A:40:06:90:7B Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F43285849DC8FBA8B55DBAB36C7322500 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 397444 IP address blocks: 208.68.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:ba:8b:55:db:ab:36:c7:32:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=be9c7751-f40e-4ab1-90e9-c3e4e0d8876c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3a:50:59:75:98:3e:69:5e:92:30:31:ed:9d: 62:e6:6b:87:9a:c4:26:7f:48:7d:a7:21:86:ea:12: 79:84:3a:ab:56:5b:d5:08:ce:5a:c6:73:75:65:0d: 0f:24:72:bd:dc:ce:70:18:43:29:e0:a6:43:2d:50: 07:4c:d5:9f:67:24:14:f4:f4:b3:52:07:ca:36:77: e2:4c:9d:41:dc:ba:b0:ef:e3:85:62:21:fe:5f:61: 2c:ff:a1:b1:80:a8:d0:e2:43:10:db:cc:dc:0c:31: 5b:94:04:55:1f:b4:93:ad:57:d2:ef:81:bf:cd:18: d5:04:23:dc:1b:f0:f7:21:55:a0:a5:e0:db:af:5f: 5a:26:4a:07:4c:89:6d:7d:ef:1f:dd:c2:92:a5:d0: 10:28:8a:59:d7:7a:3a:4b:04:af:19:43:33:d2:fa: 21:18:c6:de:7e:10:60:32:b5:72:6e:22:3d:1e:d5: 1d:e7:bc:e3:96:5d:c3:66:4b:f8:8f:98:aa:c0:7c: 0f:d7:90:c6:0d:8e:11:2c:49:a0:b3:c8:02:8b:ac: 9d:48:2e:85:c7:c2:d0:52:94:f4:c8:ab:2b:da:a5: ae:ed:43:c0:31:45:b8:4f:47:82:04:7b:4a:02:3d: 5b:95:43:e8:56:23:0a:9c:20:2c:a2:31:24:cb:c4: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:BB:99:D9:6B:D4:0E:EB:0B:9E:4E:A1:62:50:0D:1A:40:06:90:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:72:97:d2:15:ca:d7:54:cd:d7:1e:bf:53:98:2c:92:dc:55: 3e:e4:ab:42:ae:1e:00:05:e6:57:c9:c7:c1:f9:d4:65:3e:1e: a6:ad:ce:bd:6b:9e:71:1f:a9:1d:2c:1d:3e:38:58:25:f2:0c: 3c:43:6e:90:bf:6a:ed:09:a9:b1:75:ca:39:be:6c:d0:02:52: 7b:c8:ed:16:b9:c9:23:8a:c9:ef:59:3c:23:30:4b:87:f3:86: 00:cf:af:71:de:a3:73:06:b2:fe:1e:a7:1d:ae:61:af:a7:47: ae:3d:1a:e0:88:5e:4b:90:3e:4f:af:20:00:54:09:fc:70:f6: 37:47:56:59:35:bc:fc:7a:39:97:b8:df:0a:d9:41:7f:b6:c7: f7:be:97:1c:3f:f1:15:50:ca:e6:31:07:d8:43:19:8b:ba:35: ed:cc:d2:63:31:00:78:b5:9e:b7:8c:e1:fd:fe:17:8e:99:a4: 71:dc:f5:8c:9a:3c:99:c9:98:e5:43:16:5e:f7:77:a2:7b:f1: 06:db:88:52:ec:a8:3f:30:2e:24:77:53:5c:bf:75:8a:25:4c: 84:a0:b9:bc:77:76:5b:f6:9f:78:eb:8d:01:93:20:82:d1:0f: 1f:fa:ad:8d:a7:87:29:53:73:e0:d9:2f:bb:44:db:5b:ce:ae: d1:44:c3:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj7qLVdurNscyJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YmU5Yzc3NTEtZjQwZS00YWIxLTkwZTktYzNlNGUwZDg4NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijpQWXWYPmlekjAx7Z1i5muHmsQmf0h9pyGG 6hJ5hDqrVlvVCM5axnN1ZQ0PJHK93M5wGEMp4KZDLVAHTNWfZyQU9PSzUgfKNnfi TJ1B3Lqw7+OFYiH+X2Es/6GxgKjQ4kMQ28zcDDFblARVH7STrVfS74G/zRjVBCPc G/D3IVWgpeDbr19aJkoHTIltfe8f3cKSpdAQKIpZ13o6SwSvGUMz0vohGMbefhBg MrVybiI9HtUd57zjll3DZkv4j5iqwHwP15DGDY4RLEmgs8gCi6ydSC6Fx8LQUpT0 yKsr2qWu7UPAMUW4T0eCBHtKAj1blUPoViMKnCAsojEky8SU2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm7mdlr1A7rC55OoWJQDRpABpB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvMmMyMjdiZmQtZjA4Yi0z OThjLTk5NjktM2ZmZjk5ZmE0MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EQGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJyl9IVytdUzdcev1OYLJLcVT7kq0KuHgAF5lfJx8H51GU+Hqatzr1r nnEfqR0sHT44WCXyDDxDbpC/au0JqbF1yjm+bNACUnvI7Ra5ySOKye9ZPCMwS4fz hgDPr3Heo3MGsv4epx2uYa+nR649GuCIXkuQPk+vIABUCfxw9jdHVlk1vPx6OZe4 3wrZQX+2x/e+lxw/8RVQyuYxB9hDGYu6Ne3M0mMxAHi1nreM4f3+F46ZpHHc9Yya PJnJmOVDFl73d6J78QbbiFLsqD8wLiR3U1y/dYolTISgubx3dlv2n3jrjQGTIILR Dx/6rY2nhylTc+DZL7tE21vOrtFEw2Y= -----END CERTIFICATE-----Generated at Tue Jun 17 03:27:25 2025 by rpki-client