$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa File: a725e940-6637-3306-a3a1-f7abc3c20a45.roa (raw, json) Hash identifier: EWY51qGsspeQZT2fHN8247I/gbp223F81ABRoWBayIM= Subject key identifier: 95:CA:8B:6E:DB:AB:40:19:A8:EB:E0:8F:7A:13:2E:7C:04:1B:70:9D Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858493C093A2DC9EDBDD3A0573AC0 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 21949 IP address blocks: 206.253.136.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3a:2d:c9:ed:bd:d3:a0:57:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=62d0c9fa-c616-4849-8303-7ba551983eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:31:a0:2e:d8:8c:c1:71:fd:fa:c8:7c:40:67: 3f:a6:17:dc:c0:7a:0c:2d:c7:6c:ad:93:8e:e7:93: 6a:17:ae:a5:ce:c4:dc:64:d1:4f:4d:82:71:12:31: 4b:33:e5:23:94:b0:96:9b:b2:75:4b:f2:ad:da:02: a3:00:ff:c3:62:cc:af:f5:74:7f:12:73:9c:08:7a: 96:81:86:b2:b2:b1:86:13:05:0d:a0:10:7c:ed:47: 5b:8a:55:6d:42:43:46:5e:a7:42:eb:85:8e:ed:e6: 66:50:f1:b3:12:32:32:93:15:d9:3b:32:7c:91:7d: 0f:05:49:91:78:40:85:8b:e9:77:41:7e:9f:e2:be: ad:93:2d:aa:d2:7c:80:8f:79:19:7b:f1:a8:27:59: 92:2e:09:a1:f4:78:e0:2d:48:ff:b0:78:22:37:61: e0:62:cf:94:15:1e:ef:45:58:45:f7:e0:81:22:4e: e4:d7:13:0c:b7:fe:8a:e9:53:30:13:8d:52:fc:cc: ea:95:57:45:3e:59:43:6e:5a:16:5a:ba:2f:71:b8: 2a:7d:64:c3:64:2d:a5:9b:f9:05:08:6c:f2:29:68: 1d:25:b4:5d:dc:3a:7a:fd:80:77:eb:a8:fb:c7:f2: 1a:0c:06:c7:d3:9b:27:fc:ee:ad:5a:9b:85:52:cc: ad:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CA:8B:6E:DB:AB:40:19:A8:EB:E0:8F:7A:13:2E:7C:04:1B:70:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/a725e940-6637-3306-a3a1-f7abc3c20a45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 206.253.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:75:b0:27:c3:21:9a:03:9e:6c:c3:ab:99:cb:0b:06:9d:d7: 95:28:38:58:66:b2:0b:79:a1:e2:38:6e:b9:c5:29:5a:c7:94: 94:dd:94:2b:47:c3:d2:ae:86:58:08:59:06:23:d6:f9:12:dd: b1:ed:48:b2:65:48:d5:28:90:f4:72:21:c4:a2:08:12:38:41: ac:03:fb:c4:89:18:ec:cf:0f:e5:a1:5a:58:75:a0:1e:ad:1b: 8d:24:2a:91:34:91:9b:c8:9f:b5:07:c7:2b:14:06:30:aa:c6: a6:f0:ad:88:c4:df:e4:e1:95:2a:b3:85:cf:be:f8:db:d3:de: fe:18:c1:54:0c:9f:e2:98:d9:c7:fc:12:2d:ca:37:22:de:35: d7:0a:c4:e2:34:a0:61:d0:94:27:42:5c:99:c5:9e:95:ef:a4: d6:c9:4c:5f:3f:6e:5a:93:e3:e4:cf:c7:5e:3e:99:de:6d:7e: 85:29:f9:e5:c0:05:bc:7b:f7:63:2f:83:69:e0:4a:38:dc:49: 58:68:03:bd:b2:66:5e:50:c9:40:76:e6:55:e8:09:cc:b2:e1: e5:85:ad:20:18:ef:ad:29:d9:3b:4a:3a:b2:54:5c:c2:55:41: 71:c7:91:d3:9e:73:4e:d8:46:1a:09:ca:b0:3f:bc:3b:d3:6e: 02:4b:d4:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTotye2906BXOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NjJkMGM5ZmEtYzYxNi00ODQ5LTgzMDMtN2JhNTUxOTgzZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjGgLtiMwXH9+sh8QGc/phfcwHoMLcdsrZOO 55NqF66lzsTcZNFPTYJxEjFLM+UjlLCWm7J1S/Kt2gKjAP/DYsyv9XR/EnOcCHqW gYaysrGGEwUNoBB87UdbilVtQkNGXqdC64WO7eZmUPGzEjIykxXZOzJ8kX0PBUmR eECFi+l3QX6f4r6tky2q0nyAj3kZe/GoJ1mSLgmh9HjgLUj/sHgiN2HgYs+UFR7v RVhF9+CBIk7k1xMMt/6K6VMwE41S/MzqlVdFPllDbloWWrovcbgqfWTDZC2lm/kF CGzyKWgdJbRd3Dp6/YB366j7x/IaDAbH05sn/O6tWpuFUsytIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXKi27bq0AZqOvgj3oTLnwEG3CdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvYTcyNWU5NDAtNjYzNy0z MzA2LWEzYTEtZjdhYmMzYzIwYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ1sCfDIZoDnmzDq5nLCwad15UoOFhmsgt5oeI4brnFKVrHlJTdlCtH w9KuhlgIWQYj1vkS3bHtSLJlSNUokPRyIcSiCBI4QawD+8SJGOzPD+WhWlh1oB6t G40kKpE0kZvIn7UHxysUBjCqxqbwrYjE3+ThlSqzhc+++NvT3v4YwVQMn+KY2cf8 Ei3KNyLeNdcKxOI0oGHQlCdCXJnFnpXvpNbJTF8/blqT4+TPx14+md5tfoUp+eXA Bbx792Mvg2ngSjjcSVhoA72yZl5QyUB25lXoCcyy4eWFrSAY760p2TtKOrJUXMJV QXHHkdOec07YRhoJyrA/vDvTbgJL1CM= -----END CERTIFICATE-----Generated at Sun May 11 04:29:59 2025 by rpki-client