$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa File: 27d260f7-208f-3bd1-a06b-3da7f77567a0.roa (raw, json) Hash identifier: yf2KCxkUIVmcZkqBON5r+R9ibIFJ6+yA6CyOY0vqwaw= Subject key identifier: FF:3E:76:C5:DF:98:29:93:FE:37:A3:14:ED:B1:C2:BA:B6:74:46:88 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A3B7AF5C670FB137C7A0A1680 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 9009 IP address blocks: 206.123.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f5:c6:70:fb:13:7c:7a:0a:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=c3da90d0-c7a7-462d-9248-b05eefcf383d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bb:f2:ff:53:16:5f:53:d4:ae:a1:c8:73:3f: 33:27:27:c6:59:11:93:8d:6d:cd:60:f4:7a:fc:b7: 53:8e:e5:9b:ef:6c:84:ac:47:c9:5a:cb:e3:c9:25: b4:b5:79:db:65:9a:1b:16:09:8c:dd:d2:96:64:c4: e7:d6:b6:aa:7d:29:e7:4c:7a:b8:69:14:4e:67:3e: c8:81:05:95:5e:cf:f3:c8:bc:3b:65:f2:f6:81:c8: 14:5b:78:36:fb:98:77:ec:a8:ff:d5:41:8b:29:36: db:c0:a6:46:98:e7:90:77:8f:bd:f1:86:48:ff:49: e8:07:ff:a2:91:90:59:f6:d6:7e:74:c7:2f:e9:f9: 76:a9:2b:72:fd:50:f7:e4:70:9e:b8:dd:23:6f:e6: aa:b5:a5:e4:39:14:00:df:ac:c7:11:d4:3c:2d:29: 55:c6:97:a1:a9:fb:2b:4b:3c:8d:0c:bb:78:e1:c8: a0:2e:b1:fc:a4:44:16:3b:69:89:5d:cd:5a:a9:9d: 97:69:a5:48:29:84:8e:d6:41:b0:66:f0:e6:3e:cc: 81:dc:ad:bd:02:1d:11:95:e1:cb:77:5b:e5:a3:34: 1c:2a:ad:91:d3:de:69:d9:c2:36:28:a9:65:6b:87: b5:20:b9:bf:ed:59:a1:3d:8e:19:cb:4b:0d:8b:c3: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3E:76:C5:DF:98:29:93:FE:37:A3:14:ED:B1:C2:BA:B6:74:46:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2d:71:61:d3:be:5b:38:da:ab:99:17:56:ff:8b:68:37:eb: c3:3e:59:f1:ed:59:e3:da:23:5e:f7:4d:b5:87:38:7a:39:42: aa:fc:13:30:c4:9f:5d:63:81:45:b0:b1:db:dd:a7:e6:6d:72: 12:a2:08:0a:c1:d3:37:23:eb:5f:1c:ac:92:3a:66:24:de:44: 90:25:fb:bc:1e:21:04:aa:ed:90:da:f5:52:1d:dc:c0:33:26: 51:59:e1:dc:aa:3a:c3:19:03:9a:f7:7e:c2:ca:1e:cc:d2:c9: c2:4a:52:95:31:4e:94:39:87:da:4f:58:29:68:e5:b2:4c:0c: ea:f7:3d:29:7d:8b:5f:3d:79:1d:48:92:83:2f:06:02:fc:47: b0:07:0b:4e:a4:75:c1:82:9c:6d:2f:65:28:e1:ff:39:6c:89: 96:7e:59:c8:f6:2d:6f:5e:85:69:a2:98:a5:7e:e3:61:74:e2: 66:fa:2f:52:c0:aa:57:db:bb:47:a4:c8:c0:7c:20:81:ce:aa: 19:68:2f:eb:4a:0f:30:88:1c:53:02:49:54:70:9a:b4:7b:16: de:2c:a4:a8:37:7d:c5:f4:90:0e:b2:9b:3b:32:4a:dc:d4:e0: ff:52:9b:bd:f8:00:e2:83:81:9a:44:34:51:84:e6:f5:29:f4: a7:4a:48:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evXGcPsTfHoKFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk YzNkYTkwZDAtYzdhNy00NjJkLTkyNDgtYjA1ZWVmY2YzODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67vy/1MWX1PUrqHIcz8zJyfGWRGTjW3NYPR6 /LdTjuWb72yErEfJWsvjySW0tXnbZZobFgmM3dKWZMTn1raqfSnnTHq4aRROZz7I gQWVXs/zyLw7ZfL2gcgUW3g2+5h37Kj/1UGLKTbbwKZGmOeQd4+98YZI/0noB/+i kZBZ9tZ+dMcv6fl2qSty/VD35HCeuN0jb+aqtaXkORQA36zHEdQ8LSlVxpehqfsr SzyNDLt44cigLrH8pEQWO2mJXc1aqZ2XaaVIKYSO1kGwZvDmPsyB3K29Ah0RleHL d1vlozQcKq2R095p2cI2KKlla4e1ILm/7VmhPY4Zy0sNi8N5ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8+dsXfmCmT/jejFO2xwrq2dEaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjdkMjYwZjctMjA4Zi0z YmQxLWEwNmItM2RhN2Y3NzU2N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMtcWHTvls42quZF1b/i2g368M+WfHtWePaI173TbWHOHo5Qqr8EzDE n11jgUWwsdvdp+ZtchKiCArB0zcj618crJI6ZiTeRJAl+7weIQSq7ZDa9VId3MAz JlFZ4dyqOsMZA5r3fsLKHszSycJKUpUxTpQ5h9pPWClo5bJMDOr3PSl9i189eR1I koMvBgL8R7AHC06kdcGCnG0vZSjh/zlsiZZ+Wcj2LW9ehWmimKV+42F04mb6L1LA qlfbu0ekyMB8IIHOqhloL+tKDzCIHFMCSVRwmrR7Ft4spKg3fcX0kA6ymzsyStzU 4P9Sm734AOKDgZpENFGE5vUp9KdKSG8= -----END CERTIFICATE-----Generated at Sun Jun 29 06:22:58 2025 by rpki-client