$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa File: 925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa (raw, json) Hash identifier: Y7OWc5Vu8nV8fZcXGn7Y6os5bA46ayiwf3Fr57Z6bfc= Subject key identifier: 95:5F:38:86:95:C3:83:E4:D4:62:5B:10:63:EE:E0:BB:19:B2:3E:33 Certificate issuer: /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Certificate serial: 010D0C9F43285849350E82C0AD99A42BEBADAC00 Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 400427 IP address blocks: 206.225.0.0/22 maxlen: 24 2606:ad40::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:82:c0:ad:99:a4:2b:eb:ad:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=a8c1ff41-7c07-49e6-88f5-e633d5cf115e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:fd:88:8d:68:45:85:66:85:57:c0:82:65: 01:70:ab:26:d9:82:b6:84:ed:b7:42:cf:2d:02:ca: a3:db:53:a6:7e:4c:ad:c8:93:20:95:99:e7:5f:4e: 57:aa:8c:a8:57:24:4b:bc:88:c2:61:3c:93:9a:01: 10:1e:c0:0b:eb:32:e7:78:e9:6a:e1:01:21:1d:2f: de:1b:50:a7:32:43:1b:ca:38:94:a8:0a:89:2b:2b: 02:d9:17:ba:c4:72:7a:61:e8:c7:06:ad:74:2a:e5: 51:4e:34:04:d5:05:5a:15:94:98:7a:80:49:01:3b: 03:07:52:de:71:df:9d:ed:3e:11:b5:82:f6:1a:33: 76:42:70:53:e8:4b:7f:76:65:f0:e5:06:25:3e:96: b7:9e:9a:bb:ef:23:18:03:28:b3:c3:98:b3:44:21: c3:93:14:08:3a:c8:6b:43:d6:33:fc:1a:5a:55:c1: d0:05:48:2a:d0:9f:13:4b:54:2a:51:bc:c3:97:22: 4a:c1:68:59:4b:98:e1:1b:ad:74:26:f9:61:6e:5d: ed:ed:4d:da:6d:9d:84:60:42:e1:ae:24:0c:15:62: 62:40:c1:8f:5e:e5:2c:f6:c5:88:18:f9:86:15:00: 1e:a5:c5:6f:e2:35:73:a5:73:b8:6e:99:4c:92:48: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:38:86:95:C3:83:E4:D4:62:5B:10:63:EE:E0:BB:19:B2:3E:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl X509v3 Authority Key Identifier: keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer sbgp-ipAddrBlock: critical IPv4: 206.225.0.0/22 IPv6: 2606:ad40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9e:4a:3a:c2:f5:9b:fb:49:6a:72:bb:38:0f:81:6a:66:8c: 8d:fd:49:0c:31:d2:a3:c8:a5:11:2f:d2:53:54:bf:33:0b:c8: 5c:9b:1a:33:36:65:37:5a:22:d8:38:8d:8a:54:39:c2:cb:3f: bf:ce:b8:bd:45:2f:5c:1b:37:fc:71:04:69:3e:16:a1:f7:c2: dd:5c:6a:2a:99:cd:1e:42:3a:0d:86:1e:ad:d0:b2:af:5f:f3: bb:12:67:cf:07:de:ad:ea:ee:b6:27:c1:79:1b:00:9a:9f:b7: 84:59:87:f8:23:2f:68:2b:fc:70:65:bb:3c:f2:cc:3d:4a:8b: e0:fd:e3:36:67:15:10:a0:67:1e:92:71:7b:30:15:eb:56:95: 65:52:a9:82:e5:b1:c0:5d:b0:23:9f:bc:cf:e8:14:9c:e4:b6: cc:79:a5:95:a7:ad:3a:c6:64:16:c2:30:71:eb:0b:1c:6c:85: d6:d0:cd:4f:de:3e:30:d3:a3:cc:cb:69:65:58:e6:b9:7c:45: 25:c1:ab:84:c8:0e:7f:0e:e6:be:22:25:d0:3c:25:a1:a2:70: f9:66:80:93:fe:43:22:66:07:a3:de:37:35:f7:2c:2f:dd:25: 46:57:98:9b:9a:15:18:56:34:1f:f7:51:82:bc:55:03:36:a9: 79:ef:4f:b2 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEk1DoLArZmkK+utrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1 NzhmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YThjMWZmNDEtN2MwNy00OWU2LTg4ZjUtZTYzM2Q1Y2YxMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNj9iI1oRYVmhVfAgmUBcKsm2YK2hO23Qs8t Asqj21OmfkytyJMglZnnX05XqoyoVyRLvIjCYTyTmgEQHsAL6zLneOlq4QEhHS/e G1CnMkMbyjiUqAqJKysC2Re6xHJ6YejHBq10KuVRTjQE1QVaFZSYeoBJATsDB1Le cd+d7T4RtYL2GjN2QnBT6Et/dmXw5QYlPpa3npq77yMYAyizw5izRCHDkxQIOshr Q9Yz/BpaVcHQBUgq0J8TS1QqUbzDlyJKwWhZS5jhG610Jvlhbl3t7U3abZ2EYELh riQMFWJiQMGPXuUs9sWIGPmGFQAepcVv4jVzpXO4bplMkkiazwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFJVfOIaVw4Pk1GJbEGPu4LsZsj4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3 YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvOTI1YzhjNmUtN2E2Ni0z YTJjLTk0MGQtNTZiZDU2YzcwZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4 MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm ZDY0ZTU3OGYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzuEAMA0E AgACMAcDBQAmBq1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAG6eSjrC9Zv7SWpyuzgPgWpmjI39SQwx0qPI pREv0lNUvzMLyFybGjM2ZTdaItg4jYpUOcLLP7/OuL1FL1wbN/xxBGk+FqH3wt1c aiqZzR5COg2GHq3Qsq9f87sSZ88H3q3q7rYnwXkbAJqft4RZh/gjL2gr/HBluzzy zD1Ki+D94zZnFRCgZx6ScXswFetWlWVSqYLlscBdsCOfvM/oFJzktsx5pZWnrTrG ZBbCMHHrCxxshdbQzU/ePjDTo8zLaWVY5rl8RSXBq4TIDn8O5r4iJdA8JaGicPlm gJP+QyJmB6PeNzX3LC/dJUZXmJuaFRhWNB/3UYK8VQM2qXnvT7I= -----END CERTIFICATE-----Generated at Sun May 11 05:17:14 2025 by rpki-client