$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/712e3b8f-ff47-3411-acda-7666db336804.roa File: 712e3b8f-ff47-3411-acda-7666db336804.roa (raw, json) Hash identifier: rdjTLP3jiBNXgwQD9/2AX0ntY9eXVbh9hyhhyUEKPFc= Subject key identifier: 9D:1E:0A:63:35:60:C0:CB:86:A8:ED:2F:4F:61:C6:20:9C:E3:B5:B2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849C8B50A5763725B93F47870F3 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/712e3b8f-ff47-3411-acda-7666db336804.roa Signing time: Thu 08 May 2025 10:20:16 +0000 ROA not before: Thu 08 May 2025 10:20:16 +0000 ROA not after: Wed 06 Aug 2025 10:20:16 +0000 asID: 208485 IP address blocks: 206.123.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c8:b5:0a:57:63:72:5b:93:f4:78:70:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 8 10:20:16 2025 GMT Not After : Aug 6 10:20:16 2025 GMT Subject: CN=2e6a2795-f72b-4cc7-bb47-45e8b031b1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:60:e3:fa:1d:14:84:4d:8a:82:86:0e:4e:ce: 1b:3b:d2:03:a5:d6:f0:04:f0:d5:90:b7:6c:b2:cc: cc:89:ac:05:41:7f:50:1d:aa:a5:10:87:06:97:a2: 5a:e7:8a:2e:53:17:06:dd:78:e0:9f:33:67:77:5c: 00:00:3b:be:2f:0b:62:ad:f1:f4:6c:ae:b2:09:7f: a4:19:be:bc:e3:aa:95:c5:d9:a5:97:d4:09:d9:66: 73:a7:ae:90:c5:f8:f1:2c:3f:07:e6:ec:af:5e:86: d1:8e:8c:40:d4:86:1d:11:c8:bc:ff:c4:6b:e9:91: 0b:6d:23:eb:43:cf:3e:8c:f9:4b:59:67:c2:b5:9f: dd:e9:2c:2d:cd:d9:ba:4a:9e:99:75:6b:ab:5a:1f: 84:e0:47:5a:d4:bf:32:8e:7e:df:4d:38:c9:59:2f: e0:43:36:0f:c0:1c:f6:d3:f4:99:de:c2:07:c0:f7: 28:88:4c:09:cd:ed:c8:13:c2:84:1b:2f:b5:6a:9c: 92:b2:76:e6:7a:d9:c3:7f:16:61:c8:55:28:48:a4: 02:2e:56:cf:4a:cf:e1:a3:6c:49:bf:1f:06:f5:43: ca:2d:9a:20:d1:c6:68:2e:a3:6d:e7:38:f4:2c:b4: 06:1c:7f:ac:5b:72:9b:96:f6:1f:23:46:c2:eb:54: 30:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1E:0A:63:35:60:C0:CB:86:A8:ED:2F:4F:61:C6:20:9C:E3:B5:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/712e3b8f-ff47-3411-acda-7666db336804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4c:8d:b0:de:99:a6:a4:84:0d:56:73:e0:bb:8a:58:17:59: a4:1b:43:c7:31:29:25:86:15:f0:0b:e9:b3:ba:34:3e:18:7d: a2:f1:82:1b:f7:c1:96:63:82:8f:0b:cb:0a:26:20:ac:2b:af: bb:f0:ba:ae:36:8d:95:7e:32:3a:90:31:ce:62:84:e1:dd:73: 56:30:ec:75:15:b3:a1:e8:c1:d8:0b:b6:f2:d1:7b:83:4a:79: 21:08:71:db:04:c5:81:78:2e:b5:28:1e:fa:32:54:fc:bf:12: 85:96:38:15:7c:f8:79:5f:c8:af:cf:06:7e:c7:a3:66:62:da: bc:f1:b7:56:44:19:6e:cf:94:23:57:86:dc:72:79:64:bb:c4: 7f:12:98:25:fb:31:66:8c:57:78:e2:87:83:d5:b4:c2:c3:b2: b0:cc:0d:2b:44:8f:fd:d5:9b:00:c9:9c:fd:f2:90:6f:17:c1: b0:fa:de:87:be:3a:cc:db:24:ca:21:65:2c:c8:a9:a2:c8:fa: 7c:02:87:4d:03:57:15:d4:26:45:73:be:18:8f:d7:4b:65:a0: 94:2d:75:f7:23:5b:34:91:63:7a:c4:7e:bf:24:20:2d:ae:01: a3:c9:4f:bd:21:5b:5a:dc:5a:86:f9:3b:ae:96:8e:db:46:61: 4e:31:c0:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnItQpXY3Jbk/R4cPMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUwODEwMjAxNloXDTI1MDgwNjEwMjAxNlowLzEtMCsGA1UEAxMk MmU2YTI3OTUtZjcyYi00Y2M3LWJiNDctNDVlOGIwMzFiMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWDj+h0UhE2KgoYOTs4bO9IDpdbwBPDVkLds sszMiawFQX9QHaqlEIcGl6Ja54ouUxcG3XjgnzNnd1wAADu+LwtirfH0bK6yCX+k Gb6846qVxdmll9QJ2WZzp66QxfjxLD8H5uyvXobRjoxA1IYdEci8/8Rr6ZELbSPr Q88+jPlLWWfCtZ/d6Swtzdm6Sp6ZdWurWh+E4Eda1L8yjn7fTTjJWS/gQzYPwBz2 0/SZ3sIHwPcoiEwJze3IE8KEGy+1apySsnbmetnDfxZhyFUoSKQCLlbPSs/ho2xJ vx8G9UPKLZog0cZoLqNt5zj0LLQGHH+sW3KblvYfI0bC61QwdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0eCmM1YMDLhqjtL09hxiCc47WyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzEyZTNiOGYtZmY0Ny0z NDExLWFjZGEtNzY2NmRiMzM2ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFMjbDemaakhA1Wc+C7ilgXWaQbQ8cxKSWGFfAL6bO6ND4YfaLxghv3 wZZjgo8LywomIKwrr7vwuq42jZV+MjqQMc5ihOHdc1Yw7HUVs6HowdgLtvLRe4NK eSEIcdsExYF4LrUoHvoyVPy/EoWWOBV8+HlfyK/PBn7Ho2Zi2rzxt1ZEGW7PlCNX htxyeWS7xH8SmCX7MWaMV3jih4PVtMLDsrDMDStEj/3VmwDJnP3ykG8XwbD63oe+ OszbJMohZSzIqaLI+nwCh00DVxXUJkVzvhiP10tloJQtdfcjWzSRY3rEfr8kIC2u AaPJT70hW1rcWob5O66WjttGYU4xwEc= -----END CERTIFICATE-----Generated at Sun May 11 12:23:38 2025 by rpki-client