$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa File: b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa (raw, json) Hash identifier: mbPCyF9JITL+dBPoLfV7ZjVK19baO5B4II8ng35LkhU= Subject key identifier: CD:3F:07:F1:B3:99:F1:C7:01:28:AE:75:F0:BF:AE:01:EA:08:00:85 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849CBCF870A9BA8CC731DA1A400 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 42 IP address blocks: 206.108.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:87:0a:9b:a8:cc:73:1d:a1:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=055fbb96-0876-45fc-b94c-6d3221ba8805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5b:99:1c:6d:09:70:ce:aa:b3:ed:6b:9e:e5: 6d:26:30:31:8f:fa:b3:2c:0d:34:89:5b:56:16:aa: 47:3d:96:9a:c0:5a:1a:25:44:83:31:86:f1:e6:12: 31:c0:d3:6b:66:4a:65:8f:7b:37:9f:40:9c:29:3d: f6:fb:54:80:87:a2:d0:aa:6a:30:b6:51:82:1d:1a: 4b:f2:b7:1b:0b:72:69:f8:02:9c:3f:a8:ab:37:af: 63:42:d1:f4:70:d9:30:af:4e:b5:88:34:19:f2:ac: e8:1d:ba:89:27:06:c1:e4:79:e5:77:88:37:88:bb: b6:7f:c0:3a:ce:71:b1:87:c1:b3:f0:e7:e0:33:5a: 18:68:cf:2d:c6:38:89:6c:1b:4f:8e:84:04:16:fa: 3b:9c:e9:30:94:9c:ca:91:99:ad:f2:31:1e:23:a7: 32:89:e2:5f:bd:1f:ac:91:fd:39:db:fc:44:78:4f: 85:73:3f:32:85:df:10:8b:37:63:05:e0:cd:30:46: eb:c6:bb:c4:62:ea:a9:2a:89:e0:e3:fc:5b:bb:46: 0c:27:e2:1c:bd:b1:cc:cc:6c:20:72:64:a0:a0:7b: 1e:f5:9a:b7:d6:1c:dd:15:55:5b:a1:9c:10:85:26: b9:f9:00:cc:60:ee:b5:b2:69:8a:a0:83:54:c5:97: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:3F:07:F1:B3:99:F1:C7:01:28:AE:75:F0:BF:AE:01:EA:08:00:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/b0471c4d-7069-3b3d-a127-9be0c0a65f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 206.108.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:35:c1:1f:ec:a4:75:73:79:10:50:e6:89:ab:3f:b1:84:8c: be:e7:7b:fd:a4:20:4b:05:71:12:10:80:b6:4f:49:3e:89:3e: 36:4f:bb:bf:bd:e8:b5:20:3b:63:12:c5:40:46:b3:8d:bf:81: e4:97:98:d8:e7:26:94:23:2a:4a:32:b6:77:42:b4:98:a6:ff: 8f:b0:fd:41:51:6c:67:1f:d5:c9:0d:ae:83:68:7c:10:39:fb: cf:af:18:65:df:a3:04:4e:6b:fb:af:ad:59:83:d5:3a:01:5e: 31:06:fe:fe:75:66:fe:12:68:05:20:9c:64:85:69:d6:8a:fe: 9c:c0:9a:87:e1:3d:e3:0c:4d:9c:9e:db:5f:8c:df:bd:97:76: 4c:da:3d:36:16:44:51:5b:82:88:37:7d:0b:a9:a2:2c:fb:af: 9d:63:f5:fa:ae:27:ca:d7:94:25:db:2a:18:bd:c4:96:92:e8: 50:ca:9f:84:6d:cc:27:48:39:eb:01:6a:6a:0d:1e:b5:47:0a: 33:d8:5c:1c:59:c9:81:9e:03:9e:db:55:ea:18:45:90:8b:44: 99:02:a2:20:bb:8b:b3:01:5c:1b:20:eb:7a:04:60:2f:59:1e: c2:24:e1:25:12:4e:e1:9a:35:5c:4b:ef:5f:8a:f9:8f:b8:40: b0:8b:a6:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4cKm6jMcx2hpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk MDU1ZmJiOTYtMDg3Ni00NWZjLWI5NGMtNmQzMjIxYmE4ODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFuZHG0JcM6qs+1rnuVtJjAxj/qzLA00iVtW FqpHPZaawFoaJUSDMYbx5hIxwNNrZkplj3s3n0CcKT32+1SAh6LQqmowtlGCHRpL 8rcbC3Jp+AKcP6irN69jQtH0cNkwr061iDQZ8qzoHbqJJwbB5Hnld4g3iLu2f8A6 znGxh8Gz8OfgM1oYaM8txjiJbBtPjoQEFvo7nOkwlJzKkZmt8jEeI6cyieJfvR+s kf052/xEeE+Fcz8yhd8QizdjBeDNMEbrxrvEYuqpKong4/xbu0YMJ+IcvbHMzGwg cmSgoHse9Zq31hzdFVVboZwQhSa5+QDMYO61smmKoINUxZc6RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0/B/GzmfHHASiudfC/rgHqCACFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYjA0NzFjNGQtNzA2OS0z YjNkLWExMjctOWJlMGMwYTY1ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzmxxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk1wR/spHVzeRBQ5omrP7GEjL7ne/2kIEsFcRIQgLZPST6JPjZPu7+9 6LUgO2MSxUBGs42/geSXmNjnJpQjKkoytndCtJim/4+w/UFRbGcf1ckNroNofBA5 +8+vGGXfowROa/uvrVmD1ToBXjEG/v51Zv4SaAUgnGSFadaK/pzAmofhPeMMTZye 21+M372XdkzaPTYWRFFbgog3fQupoiz7r51j9fquJ8rXlCXbKhi9xJaS6FDKn4Rt zCdIOesBamoNHrVHCjPYXBxZyYGeA57bVeoYRZCLRJkCoiC7i7MBXBsg63oEYC9Z HsIk4SUSTuGaNVxL71+K+Y+4QLCLpl0= -----END CERTIFICATE-----Generated at Sun May 11 08:34:23 2025 by rpki-client