$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ea53d45-2d93-35bf-9609-52d9decf2334.roa File: 1ea53d45-2d93-35bf-9609-52d9decf2334.roa (raw, json) Hash identifier: 3uc2x3uE2qNVH0VHaF7Xia5wYUg+JGwK07G4wl7uWX8= Subject key identifier: 42:A3:68:4F:74:61:39:C8:88:43:C5:12:06:FF:18:F5:09:90:0A:79 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C36F7E003C20B56B477E6EC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ea53d45-2d93-35bf-9609-52d9decf2334.roa Signing time: Tue 06 May 2025 13:01:01 +0000 ROA not before: Tue 06 May 2025 13:01:01 +0000 ROA not after: Mon 04 Aug 2025 13:01:01 +0000 asID: 16276 IP address blocks: 206.123.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:6f:7e:00:3c:20:b5:6b:47:7e:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 6 13:01:01 2025 GMT Not After : Aug 4 13:01:01 2025 GMT Subject: CN=27bb14b3-75a1-43fc-bef8-2598472f327c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:48:28:6f:82:2c:8c:f3:f8:16:66:65:44: e2:3d:31:2e:a1:ed:29:aa:12:d4:2a:b5:98:3f:36: f3:45:66:2f:77:ef:66:48:9a:7c:77:35:75:39:b2: b2:a7:1a:f1:0b:cb:00:ea:33:82:c6:61:3d:b7:83: 98:b1:57:72:d1:c6:cf:25:f9:0d:7a:ec:1a:dd:27: 78:1e:22:df:ea:ed:8f:09:b4:aa:51:fa:4c:36:dd: 54:19:92:93:de:a0:70:fb:38:e9:14:fc:d2:0d:1a: dd:d4:4d:0e:48:97:a5:08:0d:0f:06:59:6d:9f:c5: 4d:b1:e2:95:95:24:fd:db:3c:16:b5:ac:68:58:aa: 15:3d:ae:fe:39:9f:f0:70:4f:41:32:27:7e:58:37: 31:39:06:a3:bf:a3:08:c8:07:ab:89:16:64:3b:ef: 2d:cc:a6:be:99:a1:bf:8c:a5:06:40:4a:16:1b:1a: 36:bd:15:51:49:e9:c5:e5:f7:76:f5:1c:78:8d:a0: d2:e2:b1:56:9f:08:20:cf:c5:18:1f:b4:a9:25:7c: ea:52:d9:13:b5:d7:42:66:2d:cb:d3:7e:dd:c9:6e: fc:45:7e:b8:29:f8:c7:7a:ea:41:9c:57:ed:58:73: be:53:ff:ae:ce:76:68:95:d8:1b:77:a8:f7:a8:7d: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:68:4F:74:61:39:C8:88:43:C5:12:06:FF:18:F5:09:90:0A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1ea53d45-2d93-35bf-9609-52d9decf2334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:1d:bb:c2:e7:38:77:55:ef:c9:e1:74:11:14:7b:ca:01:43: b3:12:15:f6:83:0b:c6:77:3e:7b:d5:04:b3:c0:a1:dd:ec:d5: 71:e9:11:f9:0b:1b:e8:6c:5b:14:79:98:6b:aa:e2:42:25:59: 89:2a:c5:b3:1f:6b:4a:0b:f5:c8:e0:24:55:cb:20:20:ca:76: e9:ed:5d:70:7c:5b:62:0f:90:3c:3c:5d:d4:2d:d0:17:64:94: af:b9:9b:13:ec:50:12:34:1a:8a:d9:b3:29:ba:09:d9:05:1b: a5:1c:0b:45:a6:cf:d6:bc:ab:93:8e:aa:38:3d:64:96:e7:22: 77:04:a5:a9:18:e2:00:8b:3b:ea:52:6b:36:91:c6:9c:ce:57: af:77:78:2b:6c:a5:d0:f1:89:35:9c:17:5c:8d:41:ec:f0:2d: 8b:e5:50:73:ce:d4:d9:70:5f:74:4a:3d:5c:b3:e6:9c:c7:63: bc:d1:d1:e5:58:16:b8:ff:41:7e:b5:49:76:5e:c5:b5:6d:21: 4d:24:86:fc:14:0e:2f:fa:a7:2a:9d:a3:c4:53:44:b8:a5:9e: 54:d1:eb:47:2b:b3:eb:72:dc:1c:e4:16:67:b9:a9:d3:bb:6e: 0b:97:83:33:14:22:3c:7d:4f:58:4f:1c:44:ab:ef:13:76:c1: c1:6b:d2:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnDb34APCC1a0d+bsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwNjEzMDEwMVoXDTI1MDgwNDEzMDEwMVowLzEtMCsGA1UEAxMk MjdiYjE0YjMtNzVhMS00M2ZjLWJlZjgtMjU5ODQ3MmYzMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E9IKG+CLIzz+BZmZUTiPTEuoe0pqhLUKrWY PzbzRWYvd+9mSJp8dzV1ObKypxrxC8sA6jOCxmE9t4OYsVdy0cbPJfkNeuwa3Sd4 HiLf6u2PCbSqUfpMNt1UGZKT3qBw+zjpFPzSDRrd1E0OSJelCA0PBlltn8VNseKV lST92zwWtaxoWKoVPa7+OZ/wcE9BMid+WDcxOQajv6MIyAeriRZkO+8tzKa+maG/ jKUGQEoWGxo2vRVRSenF5fd29Rx4jaDS4rFWnwggz8UYH7SpJXzqUtkTtddCZi3L 037dyW78RX64KfjHeupBnFftWHO+U/+uznZoldgbd6j3qH3I1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKjaE90YTnIiEPFEgb/GPUJkAp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWVhNTNkNDUtMmQ5My0z NWJmLTk2MDktNTJkOWRlY2YyMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAdu8LnOHdV78nhdBEUe8oBQ7MSFfaDC8Z3PnvVBLPAod3s1XHpEfkL G+hsWxR5mGuq4kIlWYkqxbMfa0oL9cjgJFXLICDKduntXXB8W2IPkDw8XdQt0Bdk lK+5mxPsUBI0GorZsym6CdkFG6UcC0Wmz9a8q5OOqjg9ZJbnIncEpakY4gCLO+pS azaRxpzOV693eCtspdDxiTWcF1yNQezwLYvlUHPO1NlwX3RKPVyz5pzHY7zR0eVY Frj/QX61SXZexbVtIU0khvwUDi/6pyqdo8RTRLilnlTR60crs+ty3BzkFme5qdO7 bguXgzMUIjx9T1hPHESr7xN2wcFr0q8= -----END CERTIFICATE-----Generated at Sun May 11 01:50:08 2025 by rpki-client