$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ddd46f97-5489-385f-9785-acc2d0d33014.roa File: ddd46f97-5489-385f-9785-acc2d0d33014.roa (raw, json) Hash identifier: /okPKEl54bLf55Rrndla4MCIBqJbB7IfGQX2ztd+r8Q= Subject key identifier: 23:1D:4A:AC:8D:BA:94:BA:2E:F6:BE:CD:6F:BB:13:A4:97:EC:0A:94 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A43DB0B85F89FF30F4D0C0280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ddd46f97-5489-385f-9785-acc2d0d33014.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 9009 IP address blocks: 206.123.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:0b:85:f8:9f:f3:0f:4d:0c:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=aed868c6-2501-4270-8736-5747af6d1873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:71:0d:22:f2:83:a0:df:69:56:5c:a9:ab:dd: 46:d0:9d:35:96:3a:f9:be:ba:e8:bd:63:90:7e:eb: 63:86:38:b3:40:c8:94:40:bb:9e:1c:0a:bb:97:64: dc:67:ea:6f:2e:e6:90:a1:5c:ec:0e:98:a3:12:77: ce:33:d7:45:6f:00:62:f7:b6:aa:a7:d8:1c:61:c7: 20:c9:77:af:ad:7d:4e:84:92:eb:6e:31:e4:27:b8: b8:51:9f:ba:54:65:ae:68:2e:ce:95:1a:17:14:f1: bc:9d:78:90:30:83:36:46:88:04:ad:81:e3:c4:40: 5a:e2:88:e9:58:44:91:66:7a:c4:69:e5:2c:99:2f: 32:e2:ef:8c:72:80:bd:b9:a1:d7:fe:d4:a1:37:ff: d2:fd:00:2c:3f:8b:a6:2a:de:ba:88:aa:7c:0a:6a: 5c:31:3d:96:9a:14:31:53:32:1e:b6:6a:e8:3b:d7: 0d:b4:5d:d0:d2:4c:c4:ff:49:39:c8:e7:87:28:bf: ce:0f:b5:1e:74:7b:82:a9:76:86:1e:f5:a5:af:ba: bf:7d:da:e6:cb:97:a8:b1:86:fd:73:a0:1d:6c:ed: 87:98:b9:61:fa:7a:79:92:96:14:1c:52:4b:2e:2a: 28:d4:33:35:03:39:84:d0:36:14:23:9b:4a:29:a1: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1D:4A:AC:8D:BA:94:BA:2E:F6:BE:CD:6F:BB:13:A4:97:EC:0A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ddd46f97-5489-385f-9785-acc2d0d33014.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d7:3d:33:61:f2:ba:a7:63:1a:c8:fc:53:db:9f:ff:ec:36: 85:65:6a:84:9c:2f:ff:9d:9c:89:76:f9:67:cd:e0:a0:6f:10: 4d:5d:ef:69:b8:d1:c2:e7:0d:a7:d0:b2:cd:3a:9b:34:1a:40: fb:4d:47:25:b3:03:a9:e7:9d:29:4b:be:75:6e:3e:f9:54:02: 75:01:fa:0f:a9:03:9d:6f:b0:cc:18:47:93:95:a6:f8:ed:54: ef:99:fa:8f:20:7e:e6:42:73:ec:4a:80:43:3f:79:b6:07:7b: bf:16:3e:54:80:ce:06:53:07:05:3a:81:e2:6d:48:13:28:02: c2:20:1c:0d:bc:f3:c7:db:eb:2a:b4:6f:bd:5d:6b:59:ec:54: 1d:c1:fc:e6:fd:04:37:0c:68:78:e6:6c:aa:52:ed:31:1c:9f: de:be:74:42:05:ec:40:86:27:71:b2:b4:8a:96:1c:6b:6a:de: 01:89:3d:e5:9e:47:09:5c:46:41:af:60:c5:77:cd:86:73:c4: a4:c5:01:ca:14:f0:96:d5:97:fa:de:b6:be:3d:7a:d6:16:0d: dc:c1:8c:d6:e2:e2:6c:c6:ca:98:d8:3d:13:6d:34:d1:04:39: a8:24:28:49:4e:13:61:6e:25:f5:7e:b7:52:08:d7:86:69:d6: 8c:dc:99:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wuF+J/zD00MAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk YWVkODY4YzYtMjUwMS00MjcwLTg3MzYtNTc0N2FmNmQxODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHENIvKDoN9pVlypq91G0J01ljr5vrrovWOQ futjhjizQMiUQLueHAq7l2TcZ+pvLuaQoVzsDpijEnfOM9dFbwBi97aqp9gcYccg yXevrX1OhJLrbjHkJ7i4UZ+6VGWuaC7OlRoXFPG8nXiQMIM2RogErYHjxEBa4ojp WESRZnrEaeUsmS8y4u+McoC9uaHX/tShN//S/QAsP4umKt66iKp8CmpcMT2WmhQx UzIetmroO9cNtF3Q0kzE/0k5yOeHKL/OD7UedHuCqXaGHvWlr7q/fdrmy5eosYb9 c6AdbO2HmLlh+np5kpYUHFJLLioo1DM1AzmE0DYUI5tKKaFIjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMdSqyNupS6Lva+zW+7E6SX7AqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGRkNDZmOTctNTQ4OS0z ODVmLTk3ODUtYWNjMmQwZDMzMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnXPTNh8rqnYxrI/FPbn//sNoVlaoScL/+dnIl2+WfN4KBvEE1d72m4 0cLnDafQss06mzQaQPtNRyWzA6nnnSlLvnVuPvlUAnUB+g+pA51vsMwYR5OVpvjt VO+Z+o8gfuZCc+xKgEM/ebYHe78WPlSAzgZTBwU6geJtSBMoAsIgHA2888fb6yq0 b71da1nsVB3B/Ob9BDcMaHjmbKpS7TEcn96+dEIF7ECGJ3GytIqWHGtq3gGJPeWe RwlcRkGvYMV3zYZzxKTFAcoU8JbVl/retr49etYWDdzBjNbi4mzGypjYPRNtNNEE OagkKElOE2FuJfV+t1II14Zp1ozcmYU= -----END CERTIFICATE-----Generated at Sun Jun 29 09:20:28 2025 by rpki-client