$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/f5e4343a-32c9-335f-a560-175d14c2a3c8.roa File: f5e4343a-32c9-335f-a560-175d14c2a3c8.roa (raw, json) Hash identifier: 8TQ/oleLmaMW7/kbuWduE8q0D8ru0ShdBIy02rUZ/ak= Subject key identifier: E4:64:D3:DD:CF:8B:51:FD:73:CD:48:6E:D6:1D:87:56:FA:66:85:D8 Certificate issuer: /CN=c186a276-9141-41da-babe-4559d2c6d734 Certificate serial: 010D0C9F4328584946D5690ABBC3B66925AF4CC0 Authority key identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/f5e4343a-32c9-335f-a560-175d14c2a3c8.roa Signing time: Sat 22 Mar 2025 21:50:24 +0000 ROA not before: Sat 22 Mar 2025 21:50:24 +0000 ROA not after: Fri 20 Jun 2025 21:50:24 +0000 asID: 401335 IP address blocks: 206.168.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:46:d5:69:0a:bb:c3:b6:69:25:af:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c186a276-9141-41da-babe-4559d2c6d734 Validity Not Before: Mar 22 21:50:24 2025 GMT Not After : Jun 20 21:50:24 2025 GMT Subject: CN=1b4ec139-61b4-4b1b-b943-d292dff57f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e5:93:43:13:96:21:65:84:12:32:20:9b:41: d4:05:54:02:70:4a:90:53:3a:38:3e:0d:61:74:51: 42:d4:2e:c2:f5:49:03:1a:53:ba:fe:75:f3:de:f2: c1:85:cb:41:b2:c3:e8:89:99:4b:51:b9:55:27:e9: 69:a2:44:e3:43:8e:87:63:50:c0:91:74:70:e3:64: 89:97:11:16:c1:b6:9b:b9:da:fc:77:92:cb:d1:7e: dd:97:e4:b0:f6:48:ee:11:53:d1:93:e2:d3:68:6b: 57:02:fe:bf:24:b4:75:96:ca:af:17:4c:ac:fa:d4: b1:fa:67:3c:b8:74:52:23:4a:32:0c:d8:6a:2f:96: 67:4b:52:3e:22:32:84:e2:0a:8b:da:ed:66:1a:7d: a1:00:06:9f:b5:7f:2f:9a:24:c0:d6:e3:f6:73:b8: 34:49:6a:15:34:1c:b6:c6:c7:90:16:d7:33:da:13: ec:b7:04:41:23:92:ec:ad:4f:22:64:02:3e:8d:19: 31:11:37:0b:b5:af:65:99:0b:49:68:16:a1:64:f8: 6b:dc:e5:76:14:a1:fb:a8:90:d3:65:3e:56:89:30: 6a:7c:0f:d7:1b:c1:47:67:38:8a:88:76:6d:53:fe: e5:b1:19:db:ce:c6:2c:4f:31:eb:b2:d9:cc:cc:db: 17:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:64:D3:DD:CF:8B:51:FD:73:CD:48:6E:D6:1D:87:56:FA:66:85:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/f5e4343a-32c9-335f-a560-175d14c2a3c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl X509v3 Authority Key Identifier: keyid:6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer sbgp-ipAddrBlock: critical IPv4: 206.168.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d7:0b:71:f9:51:5a:de:ae:e2:c9:b6:98:c6:e3:eb:2a:55: 70:02:2d:9a:91:1f:09:1a:3f:c3:d3:89:f9:60:be:50:83:69: 60:c5:c0:0b:d7:fd:52:5f:a0:f6:31:12:2a:0a:67:34:19:02: 92:75:4c:bb:28:11:71:c6:2f:c6:d8:65:15:01:f3:ed:37:cc: 62:48:59:b8:a4:74:4e:5f:ce:11:25:c2:2f:a1:a1:4e:5c:e6: 44:19:56:6e:e0:6e:e8:bb:3d:5b:31:af:4f:0a:4d:f0:48:69: 87:6f:2c:aa:a2:57:c1:0b:4c:e0:43:3b:ab:b8:74:6e:fa:96: 9e:ae:59:d7:27:53:ff:a7:e0:1e:cf:01:78:35:ea:82:0e:64: 03:0e:58:ee:66:ac:f8:74:29:fa:da:a6:3e:39:cd:5e:1b:ff: bd:fa:fb:97:5a:c8:89:fb:a3:5c:7e:68:e8:88:76:85:a8:60: a0:0b:49:cf:7c:fa:fb:37:97:dc:14:15:23:0e:88:43:25:e8: 18:65:1d:ff:d2:0d:d3:8e:aa:8f:57:41:f4:b9:ee:e5:0a:c9: e8:9e:cf:1b:01:93:fb:e0:1e:c3:a7:cd:99:ff:63:bd:97:3d: 88:4f:d0:dc:f6:61:9f:98:38:4e:da:6f:bc:f1:01:1e:87:c1: 7d:3f:c6:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElG1WkKu8O2aSWvTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzE4NmEyNzYtOTE0MS00MWRhLWJhYmUtNDU1OWQyYzZk NzM0MB4XDTI1MDMyMjIxNTAyNFoXDTI1MDYyMDIxNTAyNFowLzEtMCsGA1UEAxMk MWI0ZWMxMzktNjFiNC00YjFiLWI5NDMtZDI5MmRmZjU3ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheWTQxOWIWWEEjIgm0HUBVQCcEqQUzo4Pg1h dFFC1C7C9UkDGlO6/nXz3vLBhctBssPoiZlLUblVJ+lpokTjQ46HY1DAkXRw42SJ lxEWwbabudr8d5LL0X7dl+Sw9kjuEVPRk+LTaGtXAv6/JLR1lsqvF0ys+tSx+mc8 uHRSI0oyDNhqL5ZnS1I+IjKE4gqL2u1mGn2hAAaftX8vmiTA1uP2c7g0SWoVNBy2 xseQFtcz2hPstwRBI5LsrU8iZAI+jRkxETcLta9lmQtJaBahZPhr3OV2FKH7qJDT ZT5WiTBqfA/XG8FHZziKiHZtU/7lsRnbzsYsTzHrstnMzNsXnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORk093Pi1H9c81IbtYdh1b6ZoXYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTg2 YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5ZDJjNmQ3MzQvZjVlNDM0M2EtMzJjOS0z MzVmLWE1NjAtMTc1ZDE0YzJhM2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzE4NmEyNzYtOTE0MS00MWRhLWJh YmUtNDU1OWQyYzZkNzM0L2MxODZhMjc2LTkxNDEtNDFkYS1iYWJlLTQ1NTlkMmM2 ZDczNC5jcmwwHwYDVR0jBBgwFoAUbP4r9dM2rlLxk8bM9YbQThMXbiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMTg2YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5 ZDJjNmQ3MzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqhRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTXC3H5UVreruLJtpjG4+sqVXACLZqRHwkaP8PTiflgvlCDaWDFwAvX /VJfoPYxEioKZzQZApJ1TLsoEXHGL8bYZRUB8+03zGJIWbikdE5fzhElwi+hoU5c 5kQZVm7gbui7PVsxr08KTfBIaYdvLKqiV8ELTOBDO6u4dG76lp6uWdcnU/+n4B7P AXg16oIOZAMOWO5mrPh0Kfrapj45zV4b/736+5dayIn7o1x+aOiIdoWoYKALSc98 +vs3l9wUFSMOiEMl6BhlHf/SDdOOqo9XQfS57uUKyeiezxsBk/vgHsOnzZn/Y72X PYhP0Nz2YZ+YOE7ab7zxAR6HwX0/xrk= -----END CERTIFICATE-----Generated at Mon May 12 11:35:35 2025 by rpki-client