$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2af6aa92-194b-3d76-bd2e-ea92092e3356.roa File: 2af6aa92-194b-3d76-bd2e-ea92092e3356.roa (raw, json) Hash identifier: 2u62hVLxiUzVmDnRaj8QNAmtaHOyHqle6VLicVTeaLM= Subject key identifier: 52:21:31:A6:A8:40:8C:E5:94:82:7E:49:07:FF:BB:AE:7F:81:43:54 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A50EB5FB8EF6F5BAB8710AC80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2af6aa92-194b-3d76-bd2e-ea92092e3356.roa Signing time: Thu 26 Jun 2025 05:19:41 +0000 ROA not before: Thu 26 Jun 2025 05:19:41 +0000 ROA not after: Wed 24 Sep 2025 05:19:41 +0000 asID: 213990 IP address blocks: 206.123.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:eb:5f:b8:ef:6f:5b:ab:87:10:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 26 05:19:41 2025 GMT Not After : Sep 24 05:19:41 2025 GMT Subject: CN=253dd8a2-ab0a-4bf2-8878-e3bbfd99d221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:24:7f:d2:21:ea:a9:38:41:c1:84:1d:56:fb: 70:87:2c:54:13:13:74:ec:1c:93:19:fc:e2:0c:26: 4f:e9:e1:2d:80:66:0e:3c:03:a8:5b:2a:3f:09:81: 0e:73:28:e5:75:31:b8:11:1e:15:45:cc:a6:2f:b7: 8e:e0:ad:ca:27:d1:be:93:d9:34:6f:a3:47:56:84: f5:14:06:55:95:a0:70:c7:e2:cb:a6:bd:0a:05:18: 3a:81:7e:0e:78:0d:da:32:8f:ea:7a:ab:5c:b7:ba: b9:5b:05:bf:43:cc:d0:48:76:06:db:c9:bc:75:ac: 08:4a:8d:0a:7f:0b:a2:dc:79:3f:39:7e:d7:f1:80: 69:8a:a0:92:60:88:97:5b:e8:03:a4:73:6b:5d:56: d2:97:09:c5:51:75:98:15:db:60:85:1d:83:cf:6a: a6:27:f1:fd:8f:e9:3d:89:a8:21:5b:11:9e:58:f1: 4e:dc:d2:67:63:c6:36:de:62:b1:28:fa:72:a0:22: a1:ff:e4:a5:1e:01:33:23:2b:75:16:aa:7e:ec:d2: b9:3f:18:91:a2:1d:15:d1:83:ac:80:9f:3b:fc:12: 47:92:55:dd:3e:f5:f6:70:62:ee:e9:d3:e3:63:f6: 4d:f6:0f:92:79:a4:b7:1c:29:c4:77:ba:ec:b9:a5: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:21:31:A6:A8:40:8C:E5:94:82:7E:49:07:FF:BB:AE:7F:81:43:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2af6aa92-194b-3d76-bd2e-ea92092e3356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:4d:07:0f:da:f5:2f:d6:3b:e6:8e:92:9d:31:2d:21:7d:f7: 8b:46:fb:3a:f4:07:a7:85:0a:0f:48:2b:97:ae:cf:71:41:e2: 82:18:b2:34:78:23:60:bd:f6:0c:5e:1d:ef:8e:8a:f9:8d:2e: 80:dd:92:48:c6:27:c4:24:25:67:2b:9a:ab:85:cb:ee:d3:1c: 94:8d:2c:1e:b9:1f:22:ab:76:fc:40:eb:32:97:10:9a:aa:4c: db:0e:9c:69:b1:fd:94:6c:c7:b7:da:65:f6:b2:ae:9b:e6:47: d2:d7:63:d8:ad:f5:81:6c:be:4a:f0:35:46:9d:a6:9a:8b:e0: 5b:4f:ac:81:84:3d:2e:e2:e8:d6:d9:f8:77:e4:73:0f:50:9f: ad:f6:b0:ee:41:bf:70:6d:90:fe:eb:21:b6:e9:47:42:53:27: 7a:78:97:e5:b2:13:5f:5e:74:aa:66:2c:48:37:8d:d4:78:71: e7:53:cb:c3:76:60:e7:1f:ed:62:a0:34:6c:9b:c3:e2:ba:0e: 0e:70:70:7f:c7:b2:61:6e:02:02:49:b0:c2:d4:f9:3e:70:1b: d5:70:41:52:b8:07:39:f5:38:db:e0:ff:6c:61:43:14:cf:b0: 70:1e:37:d3:c4:d8:f4:4d:39:9d:58:07:f4:60:85:7f:0d:04: ea:37:91:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQ61+4729bq4cQrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYyNjA1MTk0MVoXDTI1MDkyNDA1MTk0MVowLzEtMCsGA1UEAxMk MjUzZGQ4YTItYWIwYS00YmYyLTg4NzgtZTNiYmZkOTlkMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yR/0iHqqThBwYQdVvtwhyxUExN07ByTGfzi DCZP6eEtgGYOPAOoWyo/CYEOcyjldTG4ER4VRcymL7eO4K3KJ9G+k9k0b6NHVoT1 FAZVlaBwx+LLpr0KBRg6gX4OeA3aMo/qeqtct7q5WwW/Q8zQSHYG28m8dawISo0K fwui3Hk/OX7X8YBpiqCSYIiXW+gDpHNrXVbSlwnFUXWYFdtghR2Dz2qmJ/H9j+k9 iaghWxGeWPFO3NJnY8Y23mKxKPpyoCKh/+SlHgEzIyt1Fqp+7NK5PxiRoh0V0YOs gJ87/BJHklXdPvX2cGLu6dPjY/ZN9g+SeaS3HCnEd7rsuaWq3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIhMaaoQIzllIJ+SQf/u65/gUNUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmFmNmFhOTItMTk0Yi0z ZDc2LWJkMmUtZWE5MjA5MmUzMzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxNBw/a9S/WO+aOkp0xLSF994tG+zr0B6eFCg9IK5euz3FB4oIYsjR4 I2C99gxeHe+OivmNLoDdkkjGJ8QkJWcrmquFy+7THJSNLB65HyKrdvxA6zKXEJqq TNsOnGmx/ZRsx7faZfayrpvmR9LXY9it9YFsvkrwNUadppqL4FtPrIGEPS7i6NbZ +Hfkcw9Qn632sO5Bv3BtkP7rIbbpR0JTJ3p4l+WyE19edKpmLEg3jdR4cedTy8N2 YOcf7WKgNGybw+K6Dg5wcH/HsmFuAgJJsMLU+T5wG9VwQVK4Bzn1ONvg/2xhQxTP sHAeN9PE2PRNOZ1YB/RghX8NBOo3kUY= -----END CERTIFICATE-----Generated at Mon Jun 30 11:27:28 2025 by rpki-client