$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa File: 43abee32-0b0c-3284-ab75-86047f53ab34.roa (raw, json) Hash identifier: Y6gHxHdKS0d5NGwC7oIz8Ml/KAVjHqADizFcR+whz0Y= Subject key identifier: BF:E4:54:7C:0F:D9:3D:5A:54:C2:2B:3B:41:DF:F8:3E:FC:4C:C1:84 Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa Certificate serial: 010D0C9F43285849A784C3107EDC0FD55C30E980 Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 13821 IP address blocks: 206.218.248.0/24 maxlen: 24 206.218.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c3:10:7e:dc:0f:d5:5c:30:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=ee3b05de-a298-45da-9706-d5563d4a6b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:06:65:32:5d:8a:ca:a3:15:d4:76:b5:4f: 4d:a2:d8:fa:8b:b2:e4:3c:ee:a5:f7:b5:64:0e:10: 5c:20:9c:58:d5:df:9c:69:ea:34:a3:69:1b:87:a6: 4a:0a:d8:da:80:ce:fd:f5:c4:dd:f3:cb:3c:a5:61: f6:e6:48:46:0c:74:13:92:ac:53:62:ca:a0:04:10: b6:a7:3f:01:4c:b3:00:44:72:ed:5b:b4:9f:c6:b7: 12:cb:ad:16:7d:55:4c:70:d6:ce:9a:a2:c2:07:8c: e7:45:58:08:fc:6d:d8:25:44:a6:ab:64:83:52:22: c8:93:f9:54:6b:70:47:d6:8b:36:ac:62:fe:a4:60: d4:45:0e:21:c7:b5:56:04:ff:b7:e9:89:ca:a7:f6: 3c:64:4e:f6:c0:90:5c:7d:74:2f:36:b4:da:c4:14: f1:2c:95:75:e8:66:bd:5e:c4:df:d1:75:2c:26:8a: 41:26:1e:de:93:78:6c:8c:01:10:ff:2c:07:0c:c4: 6b:71:57:9d:5f:b2:cc:7b:ca:55:e2:dd:14:0c:64: 6b:cc:f8:f7:3f:5b:47:43:5b:3c:7d:fd:e6:b1:ba: ff:cd:1d:ac:93:38:c0:ae:62:37:2c:43:9d:f0:70: 4b:10:6f:d6:1d:a7:55:88:16:4b:c2:eb:8e:e2:fb: d1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E4:54:7C:0F:D9:3D:5A:54:C2:2B:3B:41:DF:F8:3E:FC:4C:C1:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl X509v3 Authority Key Identifier: keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer sbgp-ipAddrBlock: critical IPv4: 206.218.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:60:2f:9a:79:4d:8f:c6:78:5c:bd:88:58:74:6c:24:62:b1: a0:01:41:97:5c:f0:34:9c:bc:d9:88:e5:bd:fc:6e:b5:75:04: 6d:89:9e:75:72:b5:fa:11:87:98:69:53:30:c7:85:60:4f:5e: 55:7e:80:4b:cf:6e:96:f5:47:5b:9e:70:4b:50:82:5f:7c:54: 05:2b:d8:f2:6c:22:0d:72:50:19:d8:30:c0:a3:98:0b:08:44: 53:d5:99:80:72:e2:63:9b:d7:22:a7:b0:27:30:d6:72:ad:76: 37:4e:c6:e2:b8:39:b0:ea:66:02:47:64:11:0b:d1:37:46:ea: 3c:d8:5b:c1:a1:9c:f0:1b:68:1a:79:3e:dd:71:62:31:cd:ad: 04:b2:d1:19:e5:69:86:bf:e0:14:1b:3d:e7:0a:29:fd:19:4c: 38:bb:7f:b5:ee:61:32:be:b6:99:35:6b:75:c8:60:79:7c:ca: bc:7b:b4:f5:c0:f4:b6:c0:e1:57:3d:70:11:0b:30:b2:f6:06: 6a:20:a9:84:92:69:ed:8f:0e:c2:e7:b1:ae:b5:de:5a:52:f8: c6:b3:ee:50:88:0e:44:52:ad:50:05:b9:8a:d5:ce:f1:bc:71: 59:4a:d5:43:bc:b4:62:ab:c2:71:9b:eb:04:06:25:f4:59:c4: 14:89:5e:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMMQftwP1Vww6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU1NTk1NmYtNzE0Mi00NTNhLThhZWEtMTc3YTY4NGRk N2FhMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk ZWUzYjA1ZGUtYTI5OC00NWRhLTk3MDYtZDU1NjNkNGE2YjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+IGZTJdisqjFdR2tU9Notj6i7LkPO6l97Vk DhBcIJxY1d+caeo0o2kbh6ZKCtjagM799cTd88s8pWH25khGDHQTkqxTYsqgBBC2 pz8BTLMARHLtW7SfxrcSy60WfVVMcNbOmqLCB4znRVgI/G3YJUSmq2SDUiLIk/lU a3BH1os2rGL+pGDURQ4hx7VWBP+36YnKp/Y8ZE72wJBcfXQvNrTaxBTxLJV16Ga9 XsTf0XUsJopBJh7ek3hsjAEQ/ywHDMRrcVedX7LMe8pV4t0UDGRrzPj3P1tHQ1s8 ff3msbr/zR2skzjArmI3LEOd8HBLEG/WHadViBZLwuuO4vvRQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/kVHwP2T1aVMIrO0Hf+D78TMGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1 OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdhNjg0ZGQ3YWEvNDNhYmVlMzItMGIwYy0z Mjg0LWFiNzUtODYwNDdmNTNhYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzU1NTk1NmYtNzE0Mi00NTNhLThh ZWEtMTc3YTY4NGRkN2FhLzM1NTU5NTZmLTcxNDItNDUzYS04YWVhLTE3N2E2ODRk ZDdhYS5jcmwwHwYDVR0jBBgwFoAUTnp2SaFOHZM02c2odqnRmGb0SA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdh Njg0ZGQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBztr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhgL5p5TY/GeFy9iFh0bCRisaABQZdc8DScvNmI5b38brV1BG2JnnVy tfoRh5hpUzDHhWBPXlV+gEvPbpb1R1uecEtQgl98VAUr2PJsIg1yUBnYMMCjmAsI RFPVmYBy4mOb1yKnsCcw1nKtdjdOxuK4ObDqZgJHZBEL0TdG6jzYW8GhnPAbaBp5 Pt1xYjHNrQSy0RnlaYa/4BQbPecKKf0ZTDi7f7XuYTK+tpk1a3XIYHl8yrx7tPXA 9LbA4Vc9cBELMLL2BmogqYSSae2PDsLnsa613lpS+Maz7lCIDkRSrVAFuYrVzvG8 cVlK1UO8tGKrwnGb6wQGJfRZxBSJXq4= -----END CERTIFICATE-----Generated at Thu Jul 3 16:46:51 2025 by rpki-client