$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa File: 95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa (raw, json) Hash identifier: LsmoqblvB3OYMjsHFAWdU9caVXRFSoPPiDzvbWvIaYc= Subject key identifier: BE:2D:92:FD:58:97:63:4E:F7:F4:CD:70:CB:C2:95:46:0C:C1:9C:FF Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F43285849F71525C0E9A1250B508A6B00 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 33211 IP address blocks: 206.41.120.0/22 maxlen: 22 206.41.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:25:c0:e9:a1:25:0b:50:8a:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=fed1b50b-7285-4e7b-aecd-dc6869ba1900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:b9:67:2e:f8:e3:49:14:90:75:11:3c:f7: 02:4e:75:6b:c4:25:42:85:c5:d6:7c:98:9c:9f:19: da:ae:f0:52:a2:0a:2a:4a:ae:ac:d2:8b:96:bb:ef: 02:03:5b:ab:ac:47:c8:ba:64:e1:f6:cc:f3:07:5f: ec:61:33:03:1f:86:1f:53:82:c5:76:41:5e:12:40: 35:3f:7d:74:36:63:3a:cf:c1:d0:14:f1:ba:d6:9d: 2f:26:5d:38:07:4b:8a:64:2c:fc:32:4c:78:ea:a8: 06:dd:d8:a7:22:26:40:67:5c:b7:9d:3f:75:89:83: bf:7f:be:7d:3e:da:31:00:3a:c5:78:47:c8:9f:9f: ef:c4:ba:33:3d:ab:aa:ce:f1:07:29:b3:a4:c5:be: ad:4c:f3:d9:59:47:82:58:c8:38:60:64:ad:bc:d2: 28:d8:0e:cc:5c:ff:18:ad:be:0a:b3:90:a6:cc:89: 87:f1:44:a3:fb:d4:92:7e:bc:f5:e1:d0:fc:90:08: 47:3f:c9:05:b9:a0:47:8c:73:f3:49:73:29:11:5d: d8:dc:26:96:72:92:d5:84:d1:2a:b9:f3:2d:c6:dc: b6:05:ee:ca:58:7e:10:96:88:14:a1:b2:1b:54:88: 6f:18:c0:dc:99:90:97:f7:db:19:9f:14:ee:d8:db: bb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2D:92:FD:58:97:63:4E:F7:F4:CD:70:CB:C2:95:46:0C:C1:9C:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:69:fc:fc:ad:05:e1:ec:f1:de:38:9d:dc:6d:57:e1:1d:01: ac:04:63:f1:b0:2c:38:c9:6d:00:20:6b:a9:68:12:38:20:a1: 88:18:00:43:d6:14:81:54:ba:6c:7c:a2:ae:a6:8c:37:9a:8f: e4:cc:0f:07:25:83:04:09:9d:2e:42:02:26:ef:09:c9:09:17: 64:f5:4e:4d:e7:a5:96:34:28:79:bc:63:c8:1a:82:3d:a5:b0: 03:a6:31:72:58:ae:6c:5b:68:6d:b7:5e:f2:0b:97:20:ec:e7: 0e:e7:bb:ff:57:64:c5:3b:ed:95:41:95:24:15:5b:93:5a:1c: a2:6b:31:62:b8:1e:8e:34:8e:65:b4:c9:25:a9:b5:bd:4f:b1: 62:7d:95:ce:4b:0d:8e:bf:cd:16:c0:dd:99:95:8e:76:5e:5c: a6:8c:48:91:ba:f8:01:bc:73:07:f1:0f:92:c0:3e:78:f7:fc: ec:8a:b8:a9:e9:11:2b:39:c4:d8:eb:e5:71:5f:f0:b3:92:62: 6b:ac:df:cb:42:68:ad:88:03:d6:91:fa:db:8e:6c:42:ab:6d: 58:c9:75:74:19:26:0f:d9:4a:98:3f:cf:f0:58:17:5e:cf:c7: bd:73:f0:cc:78:2c:3b:77:f7:28:4e:27:27:fa:2d:07:ae:30: c9:b6:88:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FSXA6aElC1CKawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZmVkMWI1MGItNzI4NS00ZTdiLWFlY2QtZGM2ODY5YmExOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU65Zy7440kUkHURPPcCTnVrxCVChcXWfJic nxnarvBSogoqSq6s0ouWu+8CA1urrEfIumTh9szzB1/sYTMDH4YfU4LFdkFeEkA1 P310NmM6z8HQFPG61p0vJl04B0uKZCz8Mkx46qgG3dinIiZAZ1y3nT91iYO/f759 PtoxADrFeEfIn5/vxLozPauqzvEHKbOkxb6tTPPZWUeCWMg4YGStvNIo2A7MXP8Y rb4Ks5CmzImH8USj+9SSfrz14dD8kAhHP8kFuaBHjHPzSXMpEV3Y3CaWcpLVhNEq ufMtxty2Be7KWH4QlogUobIbVIhvGMDcmZCX99sZnxTu2Nu7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4tkv1Yl2NO9/TNcMvClUYMwZz/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvOTVkZWMxNzQtZDBiMi0z Yzc3LWFhNzAtYWFlM2MxZjg2MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzil4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlp/PytBeHs8d44ndxtV+EdAawEY/GwLDjJbQAga6loEjggoYgYAEPW FIFUumx8oq6mjDeaj+TMDwclgwQJnS5CAibvCckJF2T1Tk3npZY0KHm8Y8gagj2l sAOmMXJYrmxbaG23XvILlyDs5w7nu/9XZMU77ZVBlSQVW5NaHKJrMWK4Ho40jmW0 ySWptb1PsWJ9lc5LDY6/zRbA3ZmVjnZeXKaMSJG6+AG8cwfxD5LAPnj3/OyKuKnp ESs5xNjr5XFf8LOSYmus38tCaK2IA9aR+tuObEKrbVjJdXQZJg/ZSpg/z/BYF17P x71z8Mx4LDt39yhOJyf6LQeuMMm2iFY= -----END CERTIFICATE-----Generated at Sun Jul 6 05:58:45 2025 by rpki-client