$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa File: 8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa (raw, json) Hash identifier: 5ZoxjYh8NZnyJw9TVhG2P2PhE8O44K5YbJmqr2VbgJ8= Subject key identifier: 31:D6:D0:5D:F7:E4:B0:04:4E:71:62:0F:E6:9C:3E:AD:C9:33:4F:A4 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498CFF0F0E0F0E4F34919FC140 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 14740 IP address blocks: 206.210.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0f:0e:0f:0e:4f:34:91:9f:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=9ec7fd9a-8e0b-4094-9bb8-07a1d19d65e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:88:ff:90:4a:17:5e:2a:8d:08:97:62:26:2a: a1:a5:76:bf:0b:2d:bb:48:81:a5:fa:50:60:98:2c: 3e:33:0e:85:b2:df:93:2e:70:f9:d0:c8:05:16:a4: 8b:6d:d1:44:af:ff:68:9e:93:5e:32:18:3c:a6:c1: 11:90:45:f4:f1:43:0a:07:29:5a:23:45:96:f2:98: 3d:f2:ef:64:cc:b0:9c:2e:b8:3b:08:55:b5:18:d6: 18:44:c6:1d:7b:31:b6:eb:cd:7d:9b:9b:9c:08:95: 62:4b:8d:c6:8b:42:9c:bd:c7:a0:ac:2f:be:9b:35: b3:2e:c5:a1:fb:0c:27:2b:c8:a4:66:e7:d3:a7:24: 74:73:c5:63:2a:fc:ad:d8:29:48:5b:a6:47:61:18: 10:cd:1b:ac:11:ea:70:28:13:8c:f3:1f:ac:40:b8: 52:59:b9:3e:64:68:cb:4e:b7:31:cd:52:26:c4:8b: 5c:f9:d4:a0:b8:d9:fb:6a:bd:ca:fe:48:1f:64:3b: e2:84:55:32:ae:fb:b3:34:28:be:1b:d4:d9:fb:6d: d8:35:67:44:0e:8b:55:97:ff:d9:32:af:97:82:fa: b2:75:0e:e9:69:6b:26:ee:a0:92:44:3c:68:96:61: 4b:dc:74:a4:ed:60:67:36:12:bb:1f:96:54:3b:18: c8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D6:D0:5D:F7:E4:B0:04:4E:71:62:0F:E6:9C:3E:AD:C9:33:4F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 206.210.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d5:78:49:6f:90:3b:aa:3a:9a:62:94:7d:c6:08:46:74:33: 19:88:b1:21:b4:18:f6:fa:82:8c:8a:76:7f:67:be:2a:33:29: 55:9f:3f:2f:39:72:f4:49:bd:2f:33:6f:96:4e:34:17:95:37: eb:67:d4:f1:59:da:a0:64:96:72:69:a4:a4:2e:a4:64:d0:45: a1:cd:f2:59:6b:61:6e:b2:f2:25:30:16:7f:2e:0a:00:ed:57: de:d7:76:38:8f:54:d0:3c:fb:a1:89:7c:95:b6:f2:f9:19:83: e3:ac:0b:0a:e9:78:1f:49:51:d1:d1:0a:2a:46:54:a9:70:05: 9f:95:4e:95:d9:15:e1:33:ad:d3:08:38:00:70:8d:62:dc:bd: 04:1a:96:0d:59:e9:b5:95:44:2b:fc:56:ec:d4:2b:c9:50:f6: cc:5e:2d:ad:e0:0c:9c:b2:5a:11:f5:1e:83:4a:9e:a9:86:c6: 6f:5e:80:ee:e1:9b:5c:79:53:48:cb:ec:56:54:70:06:75:a1: 70:a2:c0:95:7d:b9:35:ec:32:3c:de:f7:85:39:34:ca:46:25: 27:bc:76:b7:e9:49:e9:09:9d:30:6b:d9:23:bd:2f:6c:9a:79: 2b:d2:97:9d:4b:0c:14:ce:cc:37:bd:86:9d:00:b6:49:96:29: be:31:16:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/w8ODw5PNJGfwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OWVjN2ZkOWEtOGUwYi00MDk0LTliYjgtMDdhMWQxOWQ2NWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIj/kEoXXiqNCJdiJiqhpXa/Cy27SIGl+lBg mCw+Mw6Fst+TLnD50MgFFqSLbdFEr/9onpNeMhg8psERkEX08UMKBylaI0WW8pg9 8u9kzLCcLrg7CFW1GNYYRMYdezG26819m5ucCJViS43Gi0KcvcegrC++mzWzLsWh +wwnK8ikZufTpyR0c8VjKvyt2ClIW6ZHYRgQzRusEepwKBOM8x+sQLhSWbk+ZGjL TrcxzVImxItc+dSguNn7ar3K/kgfZDvihFUyrvuzNCi+G9TZ+23YNWdEDotVl//Z Mq+XgvqydQ7paWsm7qCSRDxolmFL3HSk7WBnNhK7H5ZUOxjIBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHW0F335LAETnFiD+acPq3JM0+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvOGI5NGQxMjMtMWU2ZS0z OWIyLWI4YWMtZjllN2Q0MmJlZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztJVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbVeElvkDuqOppilH3GCEZ0MxmIsSG0GPb6goyKdn9nviozKVWfPy85 cvRJvS8zb5ZONBeVN+tn1PFZ2qBklnJppKQupGTQRaHN8llrYW6y8iUwFn8uCgDt V97XdjiPVNA8+6GJfJW28vkZg+OsCwrpeB9JUdHRCipGVKlwBZ+VTpXZFeEzrdMI OABwjWLcvQQalg1Z6bWVRCv8VuzUK8lQ9sxeLa3gDJyyWhH1HoNKnqmGxm9egO7h m1x5U0jL7FZUcAZ1oXCiwJV9uTXsMjze94U5NMpGJSe8drfpSekJnTBr2SO9L2ya eSvSl51LDBTOzDe9hp0AtkmWKb4xFik= -----END CERTIFICATE-----Generated at Sat May 10 15:08:14 2025 by rpki-client