$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3631451c-499a-316e-8a60-064b30097352.roa File: 3631451c-499a-316e-8a60-064b30097352.roa (raw, json) Hash identifier: 4Rnpr5031Clq6xBvsHM3PeyTAkhrkn+YEYxy1j9gbu4= Subject key identifier: 97:E7:B0:82:0C:79:86:02:0D:3C:9A:7A:E9:E4:87:32:F5:62:D3:C9 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584AE891371C8C6E663E2B091990 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3631451c-499a-316e-8a60-064b30097352.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 26545 IP address blocks: 206.123.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:37:1c:8c:6e:66:3e:2b:09:19:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=cb82a56f-11ed-4948-84bc-0d02a3f9a657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:a0:62:03:7e:46:4e:a4:1f:cf:ec:8c:de: cc:fa:f8:91:58:08:86:92:46:db:46:0f:d5:6f:36: 01:e4:c4:cd:0d:35:3f:95:15:cd:33:c1:61:07:96: 15:1e:2e:15:f0:62:90:65:56:e1:f6:8c:09:8b:1c: 53:b6:c4:f7:7e:54:82:2a:81:fd:f4:e3:83:50:44: 8d:21:96:05:a3:22:99:a6:b0:f1:0b:9d:91:cb:a6: 4d:41:00:6f:28:b3:0a:87:21:b1:fd:e1:b0:c5:5d: b2:35:0a:ed:5c:ad:5d:44:5c:e0:3b:c7:b7:71:44: 04:f5:d1:1e:50:47:9f:ab:90:7c:73:fa:8d:a6:53: 73:20:14:db:96:27:3f:d4:e7:a0:e5:c7:fc:b4:4f: 3a:76:1a:60:7d:bf:48:6c:9b:8b:de:9d:17:c1:0d: 62:d8:ad:19:21:a9:22:1d:c5:13:41:91:66:0f:54: 56:45:e1:60:1e:28:b8:56:2d:fa:66:dc:4a:88:2e: 5a:9f:82:ea:5b:6f:da:98:df:4e:e3:bd:d3:5a:44: c1:f2:c1:5b:1a:7d:97:e4:e2:8b:5d:d8:4a:24:ad: d9:73:f0:3c:ff:7c:73:7e:05:25:d2:14:90:f2:b8: 1a:c0:eb:49:8b:60:80:0c:cd:b7:d8:c9:c9:f7:39: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E7:B0:82:0C:79:86:02:0D:3C:9A:7A:E9:E4:87:32:F5:62:D3:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3631451c-499a-316e-8a60-064b30097352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 206.123.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:14:83:97:9b:56:45:d0:5f:87:56:2a:81:67:b0:63:8e:8b: 16:5e:1d:c6:d2:64:48:08:d4:ae:44:22:f3:63:2f:85:a2:01: 01:03:53:30:e7:f1:dc:4d:95:85:a4:b8:ae:39:50:62:8f:9d: fa:fd:40:a7:51:81:74:76:b5:ab:b0:7e:9c:51:74:c0:d6:06: ac:7b:ca:f5:9c:af:cd:79:d7:bd:4c:b9:1d:48:27:55:80:ca: ce:23:6a:ad:04:65:0b:a7:52:03:f8:7e:ee:cc:4c:60:43:c7: c1:eb:bc:c0:84:4e:9e:a8:1c:5d:87:08:32:af:92:62:3b:5f: 17:5d:b6:d0:5f:d4:d8:f1:bd:bf:54:19:53:a2:37:81:24:80: 70:6b:a4:f7:50:b5:35:66:fe:b4:69:99:55:2b:85:fa:9f:cc: 7b:31:2f:ae:88:e2:1c:b6:7a:ba:5e:ea:ec:fc:4d:38:17:24: ff:d1:a6:08:91:d4:30:2a:1d:e2:ab:5a:6f:15:aa:66:f7:bd: c3:81:23:7f:9e:57:b3:69:b0:63:d8:db:8c:b4:9f:d7:42:71: f9:00:57:2c:5d:76:09:ad:2c:db:a9:4e:d1:e3:cc:5c:83:fe: 76:eb:a6:10:44:85:e1:90:8e:64:24:90:6a:30:83:c8:be:fe: 52:23:3b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTccjG5mPisJGZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk Y2I4MmE1NmYtMTFlZC00OTQ4LTg0YmMtMGQwMmEzZjlhNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ+gYgN+Rk6kH8/sjN7M+viRWAiGkkbbRg/V bzYB5MTNDTU/lRXNM8FhB5YVHi4V8GKQZVbh9owJixxTtsT3flSCKoH99OODUESN IZYFoyKZprDxC52Ry6ZNQQBvKLMKhyGx/eGwxV2yNQrtXK1dRFzgO8e3cUQE9dEe UEefq5B8c/qNplNzIBTblic/1Oeg5cf8tE86dhpgfb9IbJuL3p0XwQ1i2K0ZIaki HcUTQZFmD1RWReFgHii4Vi36ZtxKiC5an4LqW2/amN9O473TWkTB8sFbGn2X5OKL XdhKJK3Zc/A8/3xzfgUl0hSQ8rgawOtJi2CADM232MnJ9zkkvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfnsIIMeYYCDTyaeunkhzL1YtPJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvMzYzMTQ1MWMtNDk5YS0z MTZlLThhNjAtMDY0YjMwMDk3MzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzntaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAUg5ebVkXQX4dWKoFnsGOOixZeHcbSZEgI1K5EIvNjL4WiAQEDUzDn 8dxNlYWkuK45UGKPnfr9QKdRgXR2tauwfpxRdMDWBqx7yvWcr815171MuR1IJ1WA ys4jaq0EZQunUgP4fu7MTGBDx8HrvMCETp6oHF2HCDKvkmI7XxddttBf1Njxvb9U GVOiN4EkgHBrpPdQtTVm/rRpmVUrhfqfzHsxL66I4hy2erpe6uz8TTgXJP/RpgiR 1DAqHeKrWm8Vqmb3vcOBI3+eV7NpsGPY24y0n9dCcfkAVyxddgmtLNupTtHjzFyD /nbrphBEheGQjmQkkGowg8i+/lIjOzg= -----END CERTIFICATE-----Generated at Sat Aug 23 23:53:03 2025 by rpki-client