$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a099a7a-8d2d-3417-ad9c-9003c356403b.roa File: 8a099a7a-8d2d-3417-ad9c-9003c356403b.roa (raw, json) Hash identifier: tjr4mimZ6UIFV67VinIF0fYhtfJy46M2J077HcpZd6o= Subject key identifier: 6D:8E:48:FD:88:53:EA:87:1B:88:AF:25:6D:13:C6:E9:39:18:28:DC Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A03A5545050818754D6398A80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a099a7a-8d2d-3417-ad9c-9003c356403b.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 7018 IP address blocks: 206.198.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:54:50:50:81:87:54:d6:39:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=0c4c9aed-ec2b-4aa1-a3f2-6ab6bba629f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:e7:82:ee:e3:a5:12:e3:5d:c4:1b:27:17: b1:24:2b:50:28:ae:9d:0b:c0:7d:82:75:ab:52:bb: 5c:6e:85:4a:62:97:4e:5b:eb:bd:d1:66:a0:e0:aa: eb:2f:33:07:bf:9e:56:90:1b:b5:7e:4c:af:c7:32: f0:79:96:dd:fb:64:d1:31:88:ef:50:f1:df:4c:9a: a7:86:e3:10:93:07:82:7d:f6:f2:b9:0b:e6:9b:c1: 8e:92:a6:c7:ad:c9:e2:b5:5a:50:23:47:b0:f5:9b: 2f:f3:81:1e:5e:41:7b:43:8e:8c:dd:21:66:45:ea: af:91:f6:43:69:ea:72:f4:e0:3c:6d:88:c2:9a:ff: b3:ab:40:dd:02:24:cb:41:cc:22:33:c1:18:0e:b7: 31:56:23:64:24:de:e3:90:a9:ea:76:c9:b7:2b:5c: 44:33:5d:07:21:4d:18:18:84:ca:a9:d6:1b:7c:f1: f7:af:9e:f8:4a:31:cd:ad:06:e2:12:64:6e:67:41: 6e:f4:1e:43:5c:46:b1:5b:b6:4e:f0:02:e3:10:f5: cd:26:5b:26:67:27:6b:eb:d7:cc:0c:e7:7a:bf:40: 38:42:f2:5f:61:15:15:81:84:78:db:28:ff:1a:88: 23:25:c4:2c:da:12:92:2f:8e:28:3c:f7:e3:ed:08: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:8E:48:FD:88:53:EA:87:1B:88:AF:25:6D:13:C6:E9:39:18:28:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a099a7a-8d2d-3417-ad9c-9003c356403b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 206.198.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:6a:23:e8:a6:b7:59:08:0e:7f:f4:d8:19:4b:0f:76:31:85: 8d:ff:aa:02:8a:9d:6d:07:41:90:2e:36:39:6d:da:6f:64:23: 16:88:15:81:cc:90:af:25:09:70:03:81:e1:48:6b:dc:96:43: ec:65:e6:11:d1:7e:ff:58:d6:dc:ba:c1:86:6b:4f:66:0b:0e: 37:55:54:73:da:8c:cd:4e:62:4b:e9:3a:44:ee:7f:2b:6b:f9: df:78:f9:0a:47:09:99:de:f0:99:cd:8a:b9:2c:1c:d7:44:40: d2:89:6d:a3:e9:bd:6b:2a:db:1d:73:b4:df:d2:60:2d:0e:55: ea:7a:5d:86:7c:7e:cf:7f:22:0f:24:4c:6a:0d:f9:07:de:2c: a8:47:d4:d0:53:b0:be:a1:24:8d:93:7b:a2:cb:33:00:63:d4: 75:af:19:c5:cd:30:14:b4:d4:c3:9f:17:fe:5f:f4:13:f4:59: 02:87:9d:d9:40:cf:4a:66:72:70:53:c7:7f:34:59:a6:c5:53: 1f:fe:ba:29:72:0c:e7:4e:53:49:9f:e8:c9:1d:e4:aa:c6:49: b8:3d:b0:bd:76:19:73:84:79:d9:e9:7c:34:d9:75:ed:bd:28: 84:bf:39:dc:23:31:2d:1c:0f:73:42:9a:ae:2d:f4:31:93:fb: 73:4b:e2:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVRQUIGHVNY5ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MGM0YzlhZWQtZWMyYi00YWExLWEzZjItNmFiNmJiYTYyOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZXngu7jpRLjXcQbJxexJCtQKK6dC8B9gnWr UrtcboVKYpdOW+u90Wag4KrrLzMHv55WkBu1fkyvxzLweZbd+2TRMYjvUPHfTJqn huMQkweCffbyuQvmm8GOkqbHrcnitVpQI0ew9Zsv84EeXkF7Q46M3SFmReqvkfZD aepy9OA8bYjCmv+zq0DdAiTLQcwiM8EYDrcxViNkJN7jkKnqdsm3K1xEM10HIU0Y GITKqdYbfPH3r574SjHNrQbiEmRuZ0Fu9B5DXEaxW7ZO8ALjEPXNJlsmZydr69fM DOd6v0A4QvJfYRUVgYR42yj/GogjJcQs2hKSL44oPPfj7QgevwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2OSP2IU+qHG4ivJW0Txuk5GCjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGEwOTlhN2EtOGQyZC0z NDE3LWFkOWMtOTAwM2MzNTY0MDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsbaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN9qI+imt1kIDn/02BlLD3YxhY3/qgKKnW0HQZAuNjlt2m9kIxaIFYHM kK8lCXADgeFIa9yWQ+xl5hHRfv9Y1ty6wYZrT2YLDjdVVHPajM1OYkvpOkTufytr +d94+QpHCZne8JnNirksHNdEQNKJbaPpvWsq2x1ztN/SYC0OVep6XYZ8fs9/Ig8k TGoN+QfeLKhH1NBTsL6hJI2Te6LLMwBj1HWvGcXNMBS01MOfF/5f9BP0WQKHndlA z0pmcnBTx380WabFUx/+uilyDOdOU0mf6Mkd5KrGSbg9sL12GXOEednpfDTZde29 KIS/OdwjMS0cD3NCmq4t9DGT+3NL4uk= -----END CERTIFICATE-----Generated at Tue Jul 1 21:07:18 2025 by rpki-client