$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa File: 0f423575-11f9-3728-ae9b-8c70332062e1.roa (raw, json) Hash identifier: geE6pIgu3PsOrcc6TwY6BTkP5iJffist3tSsZjbexU8= Subject key identifier: D2:0B:E0:3A:B9:5D:C0:63:FA:08:4E:37:DF:25:25:9F:72:C4:85:93 Certificate issuer: /CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f Certificate serial: 010D0C9F4328584A19FAB4CD17B4D2BB40B44080 Authority key identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa Signing time: Fri 06 Jun 2025 13:01:04 +0000 ROA not before: Fri 06 Jun 2025 13:01:04 +0000 ROA not after: Thu 04 Sep 2025 13:01:04 +0000 asID: 400701 IP address blocks: 206.168.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:19:fa:b4:cd:17:b4:d2:bb:40:b4:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f Validity Not Before: Jun 6 13:01:04 2025 GMT Not After : Sep 4 13:01:04 2025 GMT Subject: CN=2d496f3c-2b72-4598-a4be-bfa21e1ec9a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:51:48:8a:33:77:8d:06:0a:95:d7:5d:c6: e7:bd:a2:e4:2f:93:cd:30:e3:43:bb:24:7f:09:24: c1:67:42:f8:20:8a:25:0e:44:b8:e6:8b:61:3c:68: 08:27:d2:e4:44:28:e0:44:c5:61:84:dc:e9:aa:06: b9:f2:2b:d3:83:52:b7:99:bf:7e:28:30:af:21:6e: c6:4d:05:f4:6f:50:b0:73:0f:d4:db:1a:9f:b5:8e: 26:b7:9d:88:05:b5:ea:69:84:c0:6e:d5:0c:40:f8: be:6e:ea:59:19:90:58:3f:ee:cf:51:2d:14:85:62: df:3f:a4:5a:35:40:86:b9:fe:51:04:c2:dc:0f:55: 2d:ac:5f:1f:ec:ed:e6:23:4f:00:05:2f:c6:55:15: 0c:25:25:33:d7:ee:2f:b5:62:dc:7e:88:66:c6:93: 50:c9:1f:6e:6d:cd:a7:0e:50:86:bd:90:2f:0b:68: 8c:c3:dc:9e:60:e8:83:47:82:1f:5f:e8:f7:5d:15: 1f:47:b6:d4:c0:96:f1:a0:84:4a:cb:95:37:c7:88: 4b:d1:da:2b:94:97:b6:d2:fb:b7:51:12:35:df:63: 15:9d:83:84:69:c7:d4:bd:3a:e3:d5:51:58:e9:aa: c0:6d:bf:ea:f1:e0:ad:e0:ef:14:5c:23:fc:f4:e3: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0B:E0:3A:B9:5D:C0:63:FA:08:4E:37:DF:25:25:9F:72:C4:85:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/0f423575-11f9-3728-ae9b-8c70332062e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl X509v3 Authority Key Identifier: keyid:CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer sbgp-ipAddrBlock: critical IPv4: 206.168.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:65:65:5b:4b:f5:ec:65:f8:78:3e:fd:38:12:37:47:59:6e: 40:21:81:c4:52:2e:b8:68:f2:37:c2:d2:60:a2:35:37:49:72: a9:25:97:31:1d:b5:af:0a:50:a7:c5:15:a8:44:0c:92:7d:ed: 9c:cc:27:2c:2e:7a:9e:ca:05:9c:d9:80:6b:54:56:80:45:08: f0:f7:10:e8:86:5a:bd:5b:8d:9e:41:12:ab:38:46:72:bb:82: 3f:71:64:dd:8d:31:0a:40:c8:db:5a:f5:dc:55:68:c8:96:78: 3e:8c:4e:1c:ce:1e:81:17:30:8e:59:7b:b8:83:aa:6e:06:fe: 92:2c:c0:a8:29:1e:cc:00:a7:e0:77:a4:d0:45:bf:e2:4c:da: 1a:02:32:54:d5:b4:0e:db:17:80:2b:ae:72:49:9e:a5:7f:4e: e8:7e:87:43:21:a6:2d:7c:1a:13:35:f4:80:72:60:f4:7d:e7: ff:12:22:20:f1:fa:3f:3a:98:ef:d4:cc:2f:6e:ba:51:16:81: ae:a7:05:f2:4f:af:06:be:e5:4b:f0:b0:8b:4a:3a:5c:6d:da: 71:d6:f3:a8:2e:65:c1:f9:e9:2c:b8:b4:87:2f:b7:37:b1:16: 61:27:ad:10:98:3c:ba:c9:75:4b:51:b1:22:95:29:0a:51:a6: 9b:a0:53:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoZ+rTNF7TSu0C0QIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmN2Y2ZmItMGJhZS00YzIxLWJjZjItMmY5OTg1NDFk YjNmMB4XDTI1MDYwNjEzMDEwNFoXDTI1MDkwNDEzMDEwNFowLzEtMCsGA1UEAxMk MmQ0OTZmM2MtMmI3Mi00NTk4LWE0YmUtYmZhMjFlMWVjOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDxRSIozd40GCpXXXcbnvaLkL5PNMONDuyR/ CSTBZ0L4IIolDkS45othPGgIJ9LkRCjgRMVhhNzpqga58ivTg1K3mb9+KDCvIW7G TQX0b1Cwcw/U2xqftY4mt52IBbXqaYTAbtUMQPi+bupZGZBYP+7PUS0UhWLfP6Ra NUCGuf5RBMLcD1UtrF8f7O3mI08ABS/GVRUMJSUz1+4vtWLcfohmxpNQyR9ubc2n DlCGvZAvC2iMw9yeYOiDR4IfX+j3XRUfR7bUwJbxoIRKy5U3x4hL0dorlJe20vu3 URI132MVnYOEacfUvTrj1VFY6arAbb/q8eCt4O8UXCP89OM+LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIL4Dq5XcBj+ghON98lJZ9yxIWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kY2Y3 ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5ODU0MWRiM2YvMGY0MjM1NzUtMTFmOS0z NzI4LWFlOWItOGM3MDMzMjA2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGNmN2Y2ZmItMGJhZS00YzIxLWJj ZjItMmY5OTg1NDFkYjNmL2RjZjdmNmZiLTBiYWUtNGMyMS1iY2YyLTJmOTk4NTQx ZGIzZi5jcmwwHwYDVR0jBBgwFoAUzC+dbcy2HM4e41A5Y5HqY9GPuAIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kY2Y3ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5 ODU0MWRiM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqiMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtlZVtL9exl+Hg+/TgSN0dZbkAhgcRSLrho8jfC0mCiNTdJcqkllzEd ta8KUKfFFahEDJJ97ZzMJywuep7KBZzZgGtUVoBFCPD3EOiGWr1bjZ5BEqs4RnK7 gj9xZN2NMQpAyNta9dxVaMiWeD6MThzOHoEXMI5Ze7iDqm4G/pIswKgpHswAp+B3 pNBFv+JM2hoCMlTVtA7bF4ArrnJJnqV/Tuh+h0Mhpi18GhM19IByYPR95/8SIiDx +j86mO/UzC9uulEWga6nBfJPrwa+5UvwsItKOlxt2nHW86guZcH56Sy4tIcvtzex FmEnrRCYPLrJdUtRsSKVKQpRppugU6M= -----END CERTIFICATE-----Generated at Mon Jun 30 01:00:57 2025 by rpki-client