$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/c1ef0eee-19de-307f-8352-756662d48fb6.roa File: c1ef0eee-19de-307f-8352-756662d48fb6.roa (raw, json) Hash identifier: AhBDAHo/NQPE7gBzzOlGe3Y2OfGtXw17RhR5cwcTamM= Subject key identifier: 60:B2:94:97:B4:EF:60:F1:C0:38:9F:8B:CE:06:C4:90:5F:1F:A4:C4 Certificate issuer: /CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059 Certificate serial: 010D0C9F43285849CBCF81AAC96FE7E6E7AD9700 Authority key identifier: ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/c1ef0eee-19de-307f-8352-756662d48fb6.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 25625 IP address blocks: 206.220.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:81:aa:c9:6f:e7:e6:e7:ad:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=0dbb6afa-2780-4604-ad6a-ace764825610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6a:a9:ef:5a:7b:6a:f5:cc:32:88:5d:ae:78: ed:76:ae:8e:fe:09:98:83:f7:21:d2:3c:68:07:21: 40:54:2a:10:9b:0b:68:0e:8c:64:1f:64:ab:34:73: 3b:bd:88:79:08:30:0f:ac:d5:d3:04:10:75:db:9a: 0c:8e:49:2a:91:df:52:27:ce:e0:bd:d2:fc:b7:6f: 33:e5:ca:0b:61:1c:72:20:28:39:02:0b:82:81:aa: 80:35:77:10:c3:00:21:2e:f1:ef:6d:fd:e9:cf:14: a5:0a:cc:67:69:5a:5d:e4:74:78:b5:0b:7c:f1:5c: b8:1e:19:e8:52:06:1f:8f:77:e9:2d:4a:e8:68:aa: 28:92:f1:94:b7:37:60:63:82:93:ea:7a:f9:71:97: 43:b6:cb:b0:e6:e8:44:4f:be:17:8a:47:a3:17:d3: 12:af:17:a8:cb:07:57:9f:14:85:e5:77:26:74:ef: 33:d8:70:13:d9:e7:83:63:67:a6:bc:1e:b8:7d:51: 37:6a:74:90:8a:a8:83:1c:eb:d9:0f:ff:72:f9:0b: b2:5c:20:74:f9:4e:b1:10:f3:32:25:a5:b0:f7:b8: 34:7c:d3:f3:20:64:7c:62:a2:9c:f0:cb:e0:79:2e: ca:ce:5f:a8:fc:90:34:9b:94:6c:a5:52:37:07:21: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B2:94:97:B4:EF:60:F1:C0:38:9F:8B:CE:06:C4:90:5F:1F:A4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/c1ef0eee-19de-307f-8352-756662d48fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl X509v3 Authority Key Identifier: keyid:ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer sbgp-ipAddrBlock: critical IPv4: 206.220.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:4d:c7:0b:bc:b2:95:84:f7:8d:65:e9:a2:02:73:3f:ab:03: 6b:0b:5d:b9:c2:7b:9e:4f:09:7d:b0:35:02:f6:df:2c:a0:07: 38:d6:37:c1:2e:16:76:ed:b3:a9:14:74:0e:5a:a0:01:51:d4: 49:28:20:e0:82:a2:f0:35:0e:28:c7:d2:b6:c2:a4:c5:ea:7f: 8f:2c:47:72:60:9f:2b:ad:19:8c:95:d2:d2:18:09:9a:ae:d6: 54:24:e7:e6:4b:04:08:48:68:e2:36:6b:f9:87:83:8d:cc:c2: 4c:ba:4e:d2:f3:e8:07:7a:d8:88:35:20:b2:35:ff:6c:29:15: 7c:d5:69:7f:b2:57:fc:d8:8b:66:56:a7:38:bd:a8:dd:c1:7b: ec:ca:fa:a7:cc:ac:69:68:09:63:56:24:d2:5c:88:0d:6c:50: db:1c:0b:36:38:86:ae:9e:6c:d8:f2:37:7e:48:5b:95:9f:c6: 2a:23:6b:de:63:ba:d1:45:22:bd:71:4a:43:de:f5:37:52:8a: 2a:dc:3d:fe:bc:05:21:7f:3d:a2:41:c2:ad:0f:f1:5f:58:20: 6d:60:e5:37:6a:68:83:9b:a6:d9:96:d7:06:2e:a1:de:20:6b: ed:8f:c6:c3:af:1c:03:5c:8d:1a:b1:45:af:bf:cf:9e:d1:00: a7:71:1e:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4GqyW/n5uetlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI4OGI0YmItNjBjNS00ZjU0LThjN2QtNzViYmE4ZDRi MDU5MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MGRiYjZhZmEtMjc4MC00NjA0LWFkNmEtYWNlNzY0ODI1NjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gqp71p7avXMMohdrnjtdq6O/gmYg/ch0jxo ByFAVCoQmwtoDoxkH2SrNHM7vYh5CDAPrNXTBBB125oMjkkqkd9SJ87gvdL8t28z 5coLYRxyICg5AguCgaqANXcQwwAhLvHvbf3pzxSlCsxnaVpd5HR4tQt88Vy4Hhno UgYfj3fpLUroaKookvGUtzdgY4KT6nr5cZdDtsuw5uhET74XikejF9MSrxeoywdX nxSF5XcmdO8z2HAT2eeDY2emvB64fVE3anSQiqiDHOvZD/9y+QuyXCB0+U6xEPMy JaWw97g0fNPzIGR8YqKc8MvgeS7Kzl+o/JA0m5RspVI3ByG51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCylJe072DxwDifi84GxJBfH6TEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjg4 YjRiYi02MGM1LTRmNTQtOGM3ZC03NWJiYThkNGIwNTkvYzFlZjBlZWUtMTlkZS0z MDdmLTgzNTItNzU2NjYyZDQ4ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTI4OGI0YmItNjBjNS00ZjU0LThj N2QtNzViYmE4ZDRiMDU5L2EyODhiNGJiLTYwYzUtNGY1NC04YzdkLTc1YmJhOGQ0 YjA1OS5jcmwwHwYDVR0jBBgwFoAU7S0kbjS6oXrnqeo/ptG3b2GWnpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjg4YjRiYi02MGM1LTRmNTQtOGM3ZC03NWJi YThkNGIwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpNxwu8spWE941l6aICcz+rA2sLXbnCe55PCX2wNQL23yygBzjWN8Eu Fnbts6kUdA5aoAFR1EkoIOCCovA1DijH0rbCpMXqf48sR3JgnyutGYyV0tIYCZqu 1lQk5+ZLBAhIaOI2a/mHg43Mwky6TtLz6Ad62Ig1ILI1/2wpFXzVaX+yV/zYi2ZW pzi9qN3Be+zK+qfMrGloCWNWJNJciA1sUNscCzY4hq6ebNjyN35IW5Wfxioja95j utFFIr1xSkPe9TdSiircPf68BSF/PaJBwq0P8V9YIG1g5TdqaIObptmW1wYuod4g a+2PxsOvHANcjRqxRa+/z57RAKdxHoo= -----END CERTIFICATE-----Generated at Sun May 11 15:41:36 2025 by rpki-client