$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa File: db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa (raw, json) Hash identifier: 4V8qQEkxYpiAwLEUs62t205hjKvQSxJpdSlwNzODIAk= Subject key identifier: D5:6D:69:6F:C1:72:40:A3:EE:90:22:DD:E0:14:6D:0B:18:9B:A4:D8 Certificate issuer: /CN=1931273b-f68a-4770-b714-cad22762621f Certificate serial: 010D0C9F4328584A4C3B17E6AFB8289DB5EF5BC0 Authority key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa Signing time: Tue 24 Jun 2025 13:01:03 +0000 ROA not before: Tue 24 Jun 2025 13:01:03 +0000 ROA not after: Mon 22 Sep 2025 13:01:03 +0000 asID: 13411 IP address blocks: 206.168.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4c:3b:17:e6:af:b8:28:9d:b5:ef:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1931273b-f68a-4770-b714-cad22762621f Validity Not Before: Jun 24 13:01:03 2025 GMT Not After : Sep 22 13:01:03 2025 GMT Subject: CN=40629aaa-c932-4d89-b7b3-652d1082d58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:54:79:cb:e7:34:d2:a2:0c:b0:26:05:ab:21: bb:2e:b9:1f:f4:f5:c0:2c:b5:f2:14:f4:e8:d6:57: 05:99:16:49:fb:01:28:20:a4:c5:bc:ec:5f:ad:ad: 09:4b:38:e9:d4:10:80:04:1f:a7:b6:b8:9d:6a:98: 24:6f:74:ea:ea:91:86:bb:9c:08:47:dc:2f:63:54: c5:0e:c0:dd:da:8f:a4:ba:4a:9c:28:d3:18:1a:45: 68:e9:49:10:2f:d1:57:09:28:d5:2e:e0:bc:f4:2e: 25:29:37:8f:bd:d8:3b:20:e9:87:61:79:46:c3:3f: 7e:7d:e8:46:93:f9:ae:4b:2f:bc:66:bc:be:47:b3: dc:9f:e3:18:a7:ca:68:18:55:b3:5a:08:b3:d5:93: 01:28:df:cb:26:f8:38:b1:c6:d2:f0:7c:8e:67:68: 25:d4:76:d5:98:3a:7d:56:27:2a:6b:08:00:b2:bf: ff:e2:11:fe:96:70:53:6a:f1:7c:98:05:10:5d:ba: a0:52:6d:dc:dd:17:cb:9f:3a:ed:56:99:7b:ec:fc: 45:88:f1:08:85:e2:9a:b8:e8:26:d3:fe:af:a9:6a: 44:c2:b6:d4:27:0e:00:5f:6e:f3:cf:5d:2c:bc:11: c9:f1:a4:c2:a5:d2:4d:48:e9:93:39:5a:94:99:82: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6D:69:6F:C1:72:40:A3:EE:90:22:DD:E0:14:6D:0B:18:9B:A4:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl X509v3 Authority Key Identifier: keyid:F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer sbgp-ipAddrBlock: critical IPv4: 206.168.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:50:7f:df:b4:cc:aa:bd:fd:4d:36:51:2c:d8:66:8b:83:84: 2f:98:0e:bc:bb:11:05:84:d9:06:0f:4b:12:9d:d2:e2:90:98: 00:1b:d6:b2:ae:27:ba:34:24:89:78:85:c3:8d:d3:95:0f:71: ec:b1:41:5e:55:56:57:2d:04:0c:c4:11:32:ec:ae:fe:3d:bf: 78:d3:0f:66:78:78:d0:18:24:c6:1d:34:dd:1a:24:24:20:66: 20:70:9d:d8:31:1f:71:4d:5c:be:dd:e5:b0:5e:1f:f5:24:7d: 7a:93:97:47:e5:e0:a9:24:a0:46:48:dd:bb:0b:61:c0:10:b9: 55:e4:a4:ce:42:95:af:94:91:b5:16:e0:da:4f:3c:69:af:56: 2b:b9:7f:64:d0:c1:88:c0:4c:53:26:c7:33:97:f0:e7:e4:ca: 0a:8c:46:84:53:5d:b0:29:af:de:38:f5:74:38:e5:8d:9b:31: 51:4d:a2:bf:c8:db:b8:6f:0f:5f:30:f5:d0:46:6e:04:dc:44: 21:9e:00:19:68:17:17:30:36:9d:3d:34:c4:e9:7f:74:c9:c0: 60:e8:90:d0:7e:29:b6:3d:ea:f8:47:42:e8:8b:cd:bd:b8:2a: 8d:5a:23:13:2f:4c:12:91:24:ad:6e:69:ef:0a:02:fe:7f:2c: 08:7e:9f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxfmr7gonbXvW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkzMTI3M2ItZjY4YS00NzcwLWI3MTQtY2FkMjI3NjI2 MjFmMB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk NDA2MjlhYWEtYzkzMi00ZDg5LWI3YjMtNjUyZDEwODJkNThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1R5y+c00qIMsCYFqyG7Lrkf9PXALLXyFPTo 1lcFmRZJ+wEoIKTFvOxfra0JSzjp1BCABB+ntridapgkb3Tq6pGGu5wIR9wvY1TF DsDd2o+kukqcKNMYGkVo6UkQL9FXCSjVLuC89C4lKTePvdg7IOmHYXlGwz9+fehG k/muSy+8Zry+R7Pcn+MYp8poGFWzWgiz1ZMBKN/LJvg4scbS8HyOZ2gl1HbVmDp9 VicqawgAsr//4hH+lnBTavF8mAUQXbqgUm3c3RfLnzrtVpl77PxFiPEIheKauOgm 0/6vqWpEwrbUJw4AX27zz10svBHJ8aTCpdJNSOmTOVqUmYLLNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVtaW/BckCj7pAi3eAUbQsYm6TYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOTMx MjczYi1mNjhhLTQ3NzAtYjcxNC1jYWQyMjc2MjYyMWYvZGI1OGYxNWEtYzdiZi0z MTM2LWEwZDctMWFjZjBkZTU2ZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTkzMTI3M2ItZjY4YS00NzcwLWI3 MTQtY2FkMjI3NjI2MjFmLzE5MzEyNzNiLWY2OGEtNDc3MC1iNzE0LWNhZDIyNzYy NjIxZi5jcmwwHwYDVR0jBBgwFoAU9xaQtePJm3IlxIen6lF28k489q0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOTMxMjczYi1mNjhhLTQ3NzAtYjcxNC1jYWQy Mjc2MjYyMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxQf9+0zKq9/U02USzYZouDhC+YDry7EQWE2QYPSxKd0uKQmAAb1rKu J7o0JIl4hcON05UPceyxQV5VVlctBAzEETLsrv49v3jTD2Z4eNAYJMYdNN0aJCQg ZiBwndgxH3FNXL7d5bBeH/UkfXqTl0fl4KkkoEZI3bsLYcAQuVXkpM5Cla+UkbUW 4NpPPGmvViu5f2TQwYjATFMmxzOX8OfkygqMRoRTXbApr9449XQ45Y2bMVFNor/I 27hvD18w9dBGbgTcRCGeABloFxcwNp09NMTpf3TJwGDokNB+KbY96vhHQuiLzb24 Ko1aIxMvTBKRJK1uae8KAv5/LAh+nwg= -----END CERTIFICATE-----Generated at Wed Jul 2 10:35:58 2025 by rpki-client