$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/56ef561e-8d8b-3b1f-b8ff-82455a6e5a29.roa File: 56ef561e-8d8b-3b1f-b8ff-82455a6e5a29.roa (raw, json) Hash identifier: bCb50tM1t0XvMNmJwIVtc8RqhUUKPcyJEtywHgmVqLw= Subject key identifier: 02:0F:C5:7D:F0:7E:45:A9:04:13:0C:5C:C1:38:E6:E4:76:63:FC:23 Certificate issuer: /CN=51dcdcba-3766-4509-a479-bbf02514719f Certificate serial: 010D0C9F4328584A5FC5DF82C66E244E3CE5F200 Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/56ef561e-8d8b-3b1f-b8ff-82455a6e5a29.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 62164 IP address blocks: 207.90.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:df:82:c6:6e:24:4e:3c:e5:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=697bb881-26bd-4db1-abf6-3a2e8fddf8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:b1:5c:f0:aa:75:85:9b:44:b5:da:f0:f1: 55:09:c6:6c:3c:1b:59:9b:e4:03:ab:ed:9e:29:c6: 3e:6e:02:e6:b1:da:bc:c5:0c:78:32:8a:0c:46:c1: 19:96:bd:a1:79:23:7b:0a:7f:bc:99:b6:98:87:2b: 9a:61:bf:ad:8e:65:d7:85:19:da:d4:09:e2:9b:5f: e2:1f:a3:c4:4b:d0:ba:a4:72:1f:a7:4a:c7:4a:86: fc:1a:08:a8:01:7a:44:5c:45:c9:d4:f9:28:49:00: 9f:80:c5:93:9d:5a:d7:68:a5:15:db:38:ae:33:3a: c5:e6:7c:d8:20:c1:0c:9e:01:d5:92:e5:42:0e:61: 25:5c:20:02:7a:7b:e8:bf:62:a8:79:db:6a:38:78: 1d:c3:1b:25:a8:67:70:0a:30:47:42:6f:1a:9c:ad: cc:d0:6b:1b:d2:77:7d:df:e3:ca:8e:43:e1:5a:49: 6c:38:a6:43:71:df:99:8c:2e:98:aa:76:5a:9f:28: c1:a3:5e:4c:8c:4f:64:d2:0b:6e:9a:71:15:f1:c5: 16:86:3f:46:53:5a:70:e0:59:1f:22:3f:47:a7:7d: 86:be:aa:2a:d9:f3:0e:7a:8a:83:df:de:78:2f:ab: 18:52:57:e5:39:5a:8f:1a:05:68:7e:29:20:bf:7f: 79:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0F:C5:7D:F0:7E:45:A9:04:13:0C:5C:C1:38:E6:E4:76:63:FC:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/56ef561e-8d8b-3b1f-b8ff-82455a6e5a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl X509v3 Authority Key Identifier: keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer sbgp-ipAddrBlock: critical IPv4: 207.90.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:14:46:79:bc:d1:2b:5f:05:20:6f:9b:2c:33:10:47:c6:79: 58:33:43:f4:d8:58:6d:33:ae:ae:9d:7c:fa:cf:2f:d4:d2:b7: a8:f0:69:53:1d:09:a8:61:88:57:c9:95:b9:75:23:11:64:04: 86:5a:63:01:7a:32:ab:d8:43:c6:3e:de:40:66:44:e4:0b:9a: e9:95:0a:6f:61:40:01:b4:74:74:2d:be:8b:73:f7:65:1a:03: 95:b8:52:d5:fb:30:d9:7c:5b:27:11:35:0c:e7:70:ae:db:94: f3:45:c1:8c:16:71:b0:05:68:47:45:a3:3f:e9:28:8a:23:6b: e4:6d:3e:39:c2:51:75:97:d9:39:cf:b8:9a:fc:03:f7:9a:79: b0:1c:b0:b4:58:01:20:0b:8d:33:89:5a:7c:3d:52:b2:92:b2: c9:63:e8:d0:d8:69:6a:41:ea:8c:c6:dd:ad:a2:10:2f:69:5a: c2:12:49:a0:e8:50:f0:21:a6:cc:4a:86:57:b5:13:a5:77:91: 4d:88:bc:0d:a0:43:43:bb:90:22:f4:ac:7e:fa:16:83:48:9a: cf:a9:eb:77:df:b9:1f:db:90:86:55:3b:a7:d8:bb:b4:10:90: 26:c6:1f:a3:2d:2c:0b:b4:df:19:a2:53:91:d5:e0:89:56:5f: 74:c2:6f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxd+Cxm4kTjzl8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkY2RjYmEtMzc2Ni00NTA5LWE0NzktYmJmMDI1MTQ3 MTlmMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk Njk3YmI4ODEtMjZiZC00ZGIxLWFiZjYtM2EyZThmZGRmOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcixXPCqdYWbRLXa8PFVCcZsPBtZm+QDq+2e KcY+bgLmsdq8xQx4MooMRsEZlr2heSN7Cn+8mbaYhyuaYb+tjmXXhRna1Anim1/i H6PES9C6pHIfp0rHSob8GgioAXpEXEXJ1PkoSQCfgMWTnVrXaKUV2ziuMzrF5nzY IMEMngHVkuVCDmElXCACenvov2KoedtqOHgdwxslqGdwCjBHQm8anK3M0Gsb0nd9 3+PKjkPhWklsOKZDcd+ZjC6YqnZanyjBo15MjE9k0gtumnEV8cUWhj9GU1pw4Fkf Ij9Hp32Gvqoq2fMOeoqD3954L6sYUlflOVqPGgVofikgv395WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIPxX3wfkWpBBMMXME45uR2Y/wjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWRj ZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYwMjUxNDcxOWYvNTZlZjU2MWUtOGQ4Yi0z YjFmLWI4ZmYtODI0NTVhNmU1YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkY2RjYmEtMzc2Ni00NTA5LWE0 NzktYmJmMDI1MTQ3MTlmLzUxZGNkY2JhLTM3NjYtNDUwOS1hNDc5LWJiZjAyNTE0 NzE5Zi5jcmwwHwYDVR0jBBgwFoAU7bns8xwSTWh6d3O68CF2ject8m8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWRjZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYw MjUxNDcxOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1rOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwURnm80StfBSBvmywzEEfGeVgzQ/TYWG0zrq6dfPrPL9TSt6jwaVMd CahhiFfJlbl1IxFkBIZaYwF6MqvYQ8Y+3kBmROQLmumVCm9hQAG0dHQtvotz92Ua A5W4UtX7MNl8WycRNQzncK7blPNFwYwWcbAFaEdFoz/pKIoja+RtPjnCUXWX2TnP uJr8A/eaebAcsLRYASALjTOJWnw9UrKSsslj6NDYaWpB6ozG3a2iEC9pWsISSaDo UPAhpsxKhle1E6V3kU2IvA2gQ0O7kCL0rH76FoNIms+p63ffuR/bkIZVO6fYu7QQ kCbGH6MtLAu03xmiU5HV4IlWX3TCb2o= -----END CERTIFICATE-----Generated at Wed Jul 2 13:09:05 2025 by rpki-client