$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/906b0674-f6a5-3c1e-96af-5da236060d6d.roa File: 906b0674-f6a5-3c1e-96af-5da236060d6d.roa (raw, json) Hash identifier: iNhZPVpvwbGWpmTGpZiKfM08hOtNzmWrtnCP3k7U2GY= Subject key identifier: 35:08:72:B4:C7:90:5B:82:54:6F:89:45:86:7F:2C:EF:5F:68:67:63 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285849955F179DE600BAB3447DD380 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/906b0674-f6a5-3c1e-96af-5da236060d6d.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 852 IP address blocks: 206.116.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:17:9d:e6:00:ba:b3:44:7d:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=ea7827e9-4902-4ec0-a21c-f6a7a223cd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9b:4e:de:44:0e:c6:d6:5d:a1:d0:c3:d8:2a: bc:7b:59:60:7b:bf:15:76:c3:d1:e9:b5:fb:2d:16: b5:29:38:e7:7b:01:07:fa:33:d5:7c:b0:9e:b8:af: c1:58:2b:52:69:10:b1:8e:d5:56:f1:15:5a:b3:a6: 2b:91:39:b9:18:fb:a2:f1:6f:b6:4c:fe:7c:65:4c: 69:5b:f8:ec:4f:e5:f7:2b:bc:63:69:82:73:ed:a7: c5:08:7c:e3:0b:9f:ac:ba:1e:06:60:c6:f1:52:cd: 81:c0:8d:0f:56:14:fd:fd:a0:6d:46:b8:92:60:f7: b6:48:42:c9:97:eb:18:1e:c1:12:73:e9:3e:76:50: 7f:ee:56:fd:9f:f9:ef:44:2d:d9:c2:d4:6d:08:f5: bb:d1:b1:48:06:da:0b:0d:c9:d5:bf:12:1a:05:10: 9f:56:ca:e6:91:78:c3:e4:57:09:61:ac:3f:6c:89: e1:22:7c:06:c4:78:74:8a:6f:fe:c0:36:ca:d7:62: 19:5e:45:c5:23:7b:d2:95:9e:d9:ea:56:da:07:79: dc:76:57:8d:d3:4c:51:f7:d3:09:4d:14:ae:e2:b5: 84:3f:48:3f:89:09:f1:f1:66:c8:fa:d1:3c:9a:21: 81:5f:6e:b1:69:c1:0e:34:80:d3:24:b5:e9:2c:1a: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:08:72:B4:C7:90:5B:82:54:6F:89:45:86:7F:2C:EF:5F:68:67:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/906b0674-f6a5-3c1e-96af-5da236060d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 206.116.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:2f:c5:d3:a2:74:a2:d8:f4:d5:1d:36:0d:61:16:48:c1:46: 1e:ad:6f:d3:c0:71:33:dd:23:11:80:cf:e2:cf:1a:bd:13:78: ee:69:36:b9:9c:30:89:27:4a:41:dd:90:5e:56:d4:e0:e0:09: 5a:09:56:2d:80:66:20:f7:2b:a7:bb:86:3c:a8:0b:80:2c:2a: 24:da:e1:0a:da:3f:c7:e1:4b:eb:65:98:7e:e3:3d:5c:09:50: d7:1e:cb:92:39:ee:88:60:cf:61:8d:17:95:e3:e8:3c:21:2c: 62:74:f9:5a:e9:a6:45:31:89:a2:d1:f1:6e:68:82:51:3c:ef: da:de:3e:e5:90:30:c4:6f:3c:03:bb:93:64:a2:d9:e9:bc:99: 0a:39:7a:d9:9d:30:94:0b:a4:ca:8e:48:e6:5b:39:3a:cd:70: fd:a8:6a:fa:2c:40:62:01:77:b0:60:98:17:f2:88:02:df:7d: 01:b1:5d:6a:07:6b:44:ad:12:09:f6:75:fc:86:68:64:85:89: f5:a2:27:4b:92:72:65:79:aa:d1:bc:67:5b:65:46:f5:64:36: 40:14:28:9f:fd:2e:3e:e6:11:59:72:f6:9e:db:0b:2f:dd:9d: 3c:24:9b:57:d6:7a:d7:76:8f:a1:9a:2c:ac:38:1a:7e:95:d1: ab:9f:b0:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxed5gC6s0R904AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk ZWE3ODI3ZTktNDkwMi00ZWMwLWEyMWMtZjZhN2EyMjNjZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJtO3kQOxtZdodDD2Cq8e1lge78VdsPR6bX7 LRa1KTjnewEH+jPVfLCeuK/BWCtSaRCxjtVW8RVas6YrkTm5GPui8W+2TP58ZUxp W/jsT+X3K7xjaYJz7afFCHzjC5+suh4GYMbxUs2BwI0PVhT9/aBtRriSYPe2SELJ l+sYHsESc+k+dlB/7lb9n/nvRC3ZwtRtCPW70bFIBtoLDcnVvxIaBRCfVsrmkXjD 5FcJYaw/bInhInwGxHh0im/+wDbK12IZXkXFI3vSlZ7Z6lbaB3ncdleN00xR99MJ TRSu4rWEP0g/iQnx8WbI+tE8miGBX26xacEONIDTJLXpLBplVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUIcrTHkFuCVG+JRYZ/LO9faGdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOTA2YjA2NzQtZjZhNS0z YzFlLTk2YWYtNWRhMjM2MDYwZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAvxdOidKLY9NUdNg1hFkjBRh6tb9PAcTPdIxGAz+LPGr0TeO5pNrmc MIknSkHdkF5W1ODgCVoJVi2AZiD3K6e7hjyoC4AsKiTa4QraP8fhS+tlmH7jPVwJ UNcey5I57ohgz2GNF5Xj6DwhLGJ0+VrppkUxiaLR8W5oglE879rePuWQMMRvPAO7 k2Si2em8mQo5etmdMJQLpMqOSOZbOTrNcP2oavosQGIBd7BgmBfyiALffQGxXWoH a0StEgn2dfyGaGSFifWiJ0uScmV5qtG8Z1tlRvVkNkAUKJ/9Lj7mEVly9p7bCy/d nTwkm1fWetd2j6GaLKw4Gn6V0aufsH0= -----END CERTIFICATE-----Generated at Sun May 11 09:11:06 2025 by rpki-client