$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/37cbe920-929d-3859-bf5c-6f9c5454b2da.roa File: 37cbe920-929d-3859-bf5c-6f9c5454b2da.roa (raw, json) Hash identifier: rsAgD7qlAWHXS8JFFnVYgHiMgKKxWD8hkU4fx8qB4Zk= Subject key identifier: 0E:B8:79:07:AC:4F:59:80:BF:07:F4:F0:55:92:A0:F3:BF:B4:78:68 Certificate issuer: /CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a Certificate serial: 010D0C9F43285849F44A5BC44EA463F854899F40 Authority key identifier: 5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/37cbe920-929d-3859-bf5c-6f9c5454b2da.roa Signing time: Sat 24 May 2025 01:00:49 +0000 ROA not before: Sat 24 May 2025 01:00:49 +0000 ROA not after: Fri 22 Aug 2025 01:00:49 +0000 asID: 11700 IP address blocks: 205.211.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f4:4a:5b:c4:4e:a4:63:f8:54:89:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a Validity Not Before: May 24 01:00:49 2025 GMT Not After : Aug 22 01:00:49 2025 GMT Subject: CN=d493ec32-78a0-4234-b18f-0ddb9f7f4579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:de:65:a0:c3:fd:be:98:75:06:31:93:c7:41: f5:66:45:ec:a9:3f:0d:d1:c7:8c:5b:dc:41:0a:68: c1:12:5f:33:5b:26:94:b5:3d:eb:f9:6a:0b:6c:6c: b9:53:12:67:3f:8c:99:1a:d4:62:40:e1:8c:d6:c4: 1d:3f:14:53:6b:cd:34:83:89:19:87:43:c3:98:62: fe:62:dd:05:a7:1c:34:7c:3d:b9:11:d5:fc:de:c4: cc:b1:28:98:69:aa:8f:c1:96:25:c8:2b:79:ff:59: f9:55:f6:69:53:83:8f:45:ef:f8:21:84:bc:58:97: dc:62:95:3d:aa:ed:29:a1:4a:df:d5:00:6e:82:da: 4a:64:04:a9:35:71:e6:2f:24:e6:a5:66:d1:c2:62: 46:a5:0e:4e:09:5a:58:ac:65:53:80:53:09:62:8e: d9:b4:9a:4e:61:d1:30:9c:56:19:74:a5:28:1e:b6: d6:aa:42:84:46:dd:86:ce:a1:91:db:08:76:f1:77: 33:87:c0:d0:2e:6b:48:e7:8e:0a:ef:87:b0:05:67: d9:8c:63:95:76:42:c9:9e:73:3b:a7:9b:a0:40:31: e8:07:f4:ac:0e:56:54:dc:cd:d9:3c:73:61:18:68: c0:7b:8c:35:ac:23:7e:e4:8a:9d:1f:47:d4:3a:93: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B8:79:07:AC:4F:59:80:BF:07:F4:F0:55:92:A0:F3:BF:B4:78:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/37cbe920-929d-3859-bf5c-6f9c5454b2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl X509v3 Authority Key Identifier: keyid:5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer sbgp-ipAddrBlock: critical IPv4: 205.211.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ee:d5:44:d0:eb:53:31:3d:08:d0:25:6c:7b:10:64:f0:a1: 7f:cc:a1:9f:05:4d:31:ea:7b:94:0d:fd:69:ba:0a:63:d8:5d: 2f:07:be:b5:46:f7:61:4d:4e:d9:83:0a:74:65:85:12:64:cd: a4:72:28:f1:1f:6d:af:b1:cf:0c:95:1a:24:b3:80:2d:3b:67: 6f:f7:2a:ac:ff:68:d5:81:d5:b8:78:11:23:f7:ca:e9:5d:ab: 75:0e:b4:65:7c:a0:59:56:91:08:34:4c:b0:5a:9f:5f:fb:b5: 87:d5:5c:4c:f6:e1:30:53:97:ba:ab:11:48:b8:6f:cb:38:e0: b2:98:67:55:f1:2f:df:ae:53:f8:7b:0b:cf:f0:aa:b6:0d:79: 53:a4:87:05:a9:29:37:98:25:9a:04:a4:71:b0:98:3e:90:1d: 43:e1:ad:bc:da:fa:31:97:a3:f9:21:01:8a:a4:0a:9d:d9:2f: 8d:d5:f3:b7:34:85:4c:72:c7:14:b3:0d:84:82:33:2f:27:63: 0d:d3:6b:61:35:7d:61:b0:4e:21:99:99:b8:05:17:b4:17:1f: 8c:93:03:ff:47:10:eb:0f:d4:68:29:d4:09:0a:cc:01:ea:9a: 53:d7:85:f9:5e:fa:a8:0c:cd:81:da:47:1c:22:d8:19:8e:d0: 05:e6:3d:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn0SlvETqRj+FSJn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI2YWI0ZWUtYjZhYS00MjIyLWFlMjYtOGJjNThjOWI3 NDJhMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk ZDQ5M2VjMzItNzhhMC00MjM0LWIxOGYtMGRkYjlmN2Y0NTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN5loMP9vph1BjGTx0H1ZkXsqT8N0ceMW9xB CmjBEl8zWyaUtT3r+WoLbGy5UxJnP4yZGtRiQOGM1sQdPxRTa800g4kZh0PDmGL+ Yt0Fpxw0fD25EdX83sTMsSiYaaqPwZYlyCt5/1n5VfZpU4OPRe/4IYS8WJfcYpU9 qu0poUrf1QBugtpKZASpNXHmLyTmpWbRwmJGpQ5OCVpYrGVTgFMJYo7ZtJpOYdEw nFYZdKUoHrbWqkKERt2GzqGR2wh28Xczh8DQLmtI544K74ewBWfZjGOVdkLJnnM7 p5ugQDHoB/SsDlZU3M3ZPHNhGGjAe4w1rCN+5IqdH0fUOpO5VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA64eQesT1mAvwf08FWSoPO/tHhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84MjZh YjRlZS1iNmFhLTQyMjItYWUyNi04YmM1OGM5Yjc0MmEvMzdjYmU5MjAtOTI5ZC0z ODU5LWJmNWMtNmY5YzU0NTRiMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODI2YWI0ZWUtYjZhYS00MjIyLWFl MjYtOGJjNThjOWI3NDJhLzgyNmFiNGVlLWI2YWEtNDIyMi1hZTI2LThiYzU4Yzli NzQyYS5jcmwwHwYDVR0jBBgwFoAUW3xsVYCsGezAv3151Czv3y23wcMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84MjZhYjRlZS1iNmFhLTQyMjItYWUyNi04YmM1 OGM5Yjc0MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdNaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3u1UTQ61MxPQjQJWx7EGTwoX/MoZ8FTTHqe5QN/Wm6CmPYXS8HvrVG 92FNTtmDCnRlhRJkzaRyKPEfba+xzwyVGiSzgC07Z2/3Kqz/aNWB1bh4ESP3yuld q3UOtGV8oFlWkQg0TLBan1/7tYfVXEz24TBTl7qrEUi4b8s44LKYZ1XxL9+uU/h7 C8/wqrYNeVOkhwWpKTeYJZoEpHGwmD6QHUPhrbza+jGXo/khAYqkCp3ZL43V87c0 hUxyxxSzDYSCMy8nYw3Ta2E1fWGwTiGZmbgFF7QXH4yTA/9HEOsP1Ggp1AkKzAHq mlPXhfle+qgMzYHaRxwi2BmO0AXmPXg= -----END CERTIFICATE-----Generated at Tue Jul 1 09:03:33 2025 by rpki-client