$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/339dfd66-5c3a-39f4-881d-7509f088e36d.roa File: 339dfd66-5c3a-39f4-881d-7509f088e36d.roa (raw, json) Hash identifier: 6CJ3oBjSrfbQpEdC8hZvwjd7ya/gzqWOUJ6Hm8lLL7A= Subject key identifier: 94:44:FA:71:5B:C6:13:48:64:7A:80:4F:45:A5:E6:86:52:A2:5B:A2 Certificate issuer: /CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Certificate serial: 010D0C9F4328584A43DB0CD240E29D4A0650D3C0 Authority key identifier: 43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/339dfd66-5c3a-39f4-881d-7509f088e36d.roa Signing time: Sat 21 Jun 2025 13:01:03 +0000 ROA not before: Sat 21 Jun 2025 13:01:03 +0000 ROA not after: Fri 19 Sep 2025 13:01:03 +0000 asID: 1008 IP address blocks: 206.197.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:43:db:0c:d2:40:e2:9d:4a:06:50:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a2695b7-e823-4f74-93b8-98dbbf775bcf Validity Not Before: Jun 21 13:01:03 2025 GMT Not After : Sep 19 13:01:03 2025 GMT Subject: CN=cd495a90-64f8-47a7-b0bb-98fabee5c682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fa:15:29:85:46:75:e0:ee:88:b1:7f:71:15: f7:da:19:53:68:47:f1:a2:71:75:3e:43:6e:3f:ad: f2:4b:38:3e:45:20:d3:8a:81:c2:49:bb:df:c0:5c: c3:92:df:6f:71:ea:44:46:ba:32:cb:af:de:a5:53: d5:81:19:f3:5c:56:3d:57:14:db:de:b9:8a:30:a1: 0a:15:82:ae:20:ca:2e:6c:2a:2d:c0:89:01:6a:8e: 7b:06:8c:a8:0f:f6:ec:32:23:1a:de:de:27:51:03: 91:c4:87:b6:cf:88:ca:4a:4b:6e:ed:13:1d:9e:e6: 81:f6:1f:ad:7d:22:22:d4:27:f2:ee:bc:b7:d8:8b: 33:13:1e:5b:e7:ad:1f:16:2c:6b:bb:69:8f:eb:6d: c2:bc:24:d1:a0:2d:08:ea:55:a5:6d:5b:46:56:59: 75:91:14:79:c9:8e:3a:48:66:7f:71:c6:08:57:3a: 40:22:d9:09:2e:2e:57:22:4a:3a:34:da:7e:f1:2a: cf:22:74:fc:94:48:49:c8:25:1d:95:e6:ce:d9:07: eb:6e:bd:23:3f:44:bb:9d:ba:83:0a:13:b0:76:8a: ef:76:bf:34:79:e8:57:aa:da:b6:88:14:92:2a:1a: d4:3a:59:ad:54:73:ef:34:b6:d9:5c:a7:72:0e:ac: 90:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:44:FA:71:5B:C6:13:48:64:7A:80:4F:45:A5:E6:86:52:A2:5B:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/339dfd66-5c3a-39f4-881d-7509f088e36d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf/8a2695b7-e823-4f74-93b8-98dbbf775bcf.crl X509v3 Authority Key Identifier: keyid:43:0A:58:EE:F9:9E:78:C5:3B:DC:25:A2:B4:83:93:81:46:69:C4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8a2695b7-e823-4f74-93b8-98dbbf775bcf.cer sbgp-ipAddrBlock: critical IPv4: 206.197.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6b:c3:51:97:e0:39:71:d2:5c:69:c1:42:05:fc:56:28:47: 45:ce:df:28:b5:84:31:e6:ba:10:58:28:45:e9:e0:9b:f8:e5: b0:98:7c:59:3c:35:a2:12:12:35:3c:8c:ea:70:57:96:9f:be: 0b:65:52:fa:57:d0:95:8c:fa:43:73:b3:29:17:43:29:7b:c7: 70:71:40:40:bb:0a:a1:be:0e:a8:65:84:89:8f:a8:ec:3e:5e: 07:47:88:fc:f6:ca:40:9d:33:c9:92:28:25:4f:8d:ca:3d:6d: 49:0a:4d:2d:75:ab:3d:d5:ed:9d:a4:7a:cc:19:79:17:46:4d: 05:73:d6:b0:2b:e2:eb:8a:19:4d:8a:9e:1c:66:4a:c1:19:76: 48:88:b1:9b:07:37:d1:1e:64:88:6f:3b:09:20:a9:88:a4:cd: 68:67:9e:77:a2:e0:1a:b4:18:f3:a4:80:d4:9a:6f:9d:59:d9: e6:c4:69:af:65:9d:f4:24:54:75:ed:34:25:0e:6d:9c:07:c1: 75:f8:c6:93:85:d2:11:ef:e6:d9:72:e0:d8:ad:c6:22:6a:97: 66:bd:0d:fd:de:70:86:a0:bb:62:ed:28:87:e6:6c:e1:0f:6b: 3c:22:90:5c:8a:ba:ef:78:9c:41:f4:ca:65:a6:bb:5c:8b:6f: 79:43:d0:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wzSQOKdSgZQ08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGEyNjk1YjctZTgyMy00Zjc0LTkzYjgtOThkYmJmNzc1 YmNmMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk Y2Q0OTVhOTAtNjRmOC00N2E3LWIwYmItOThmYWJlZTVjNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfoVKYVGdeDuiLF/cRX32hlTaEfxonF1PkNu P63ySzg+RSDTioHCSbvfwFzDkt9vcepERroyy6/epVPVgRnzXFY9VxTb3rmKMKEK FYKuIMoubCotwIkBao57BoyoD/bsMiMa3t4nUQORxIe2z4jKSktu7RMdnuaB9h+t fSIi1Cfy7ry32IszEx5b560fFixru2mP623CvCTRoC0I6lWlbVtGVll1kRR5yY46 SGZ/ccYIVzpAItkJLi5XIko6NNp+8SrPInT8lEhJyCUdlebO2Qfrbr0jP0S7nbqD ChOwdorvdr80eehXqtq2iBSSKhrUOlmtVHPvNLbZXKdyDqyQJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRE+nFbxhNIZHqAT0Wl5oZSoluiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2 OTViNy1lODIzLTRmNzQtOTNiOC05OGRiYmY3NzViY2YvMzM5ZGZkNjYtNWMzYS0z OWY0LTg4MWQtNzUwOWYwODhlMzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGEyNjk1YjctZTgyMy00Zjc0LTkz YjgtOThkYmJmNzc1YmNmLzhhMjY5NWI3LWU4MjMtNGY3NC05M2I4LTk4ZGJiZjc3 NWJjZi5jcmwwHwYDVR0jBBgwFoAUQwpY7vmeeMU73CWitIOTgUZpxGYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YTI2OTViNy1lODIzLTRmNzQtOTNiOC05OGRi YmY3NzViY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5rw1GX4Dlx0lxpwUIF/FYoR0XO3yi1hDHmuhBYKEXp4Jv45bCYfFk8 NaISEjU8jOpwV5afvgtlUvpX0JWM+kNzsykXQyl7x3BxQEC7CqG+DqhlhImPqOw+ XgdHiPz2ykCdM8mSKCVPjco9bUkKTS11qz3V7Z2keswZeRdGTQVz1rAr4uuKGU2K nhxmSsEZdkiIsZsHN9EeZIhvOwkgqYikzWhnnnei4Bq0GPOkgNSab51Z2ebEaa9l nfQkVHXtNCUObZwHwXX4xpOF0hHv5tly4NitxiJql2a9Df3ecIagu2LtKIfmbOEP azwikFyKuu94nEH0ymWmu1yLb3lD0Ow= -----END CERTIFICATE-----Generated at Mon Jun 30 01:38:58 2025 by rpki-client