$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa File: d66d3dcb-2e94-38a7-9549-d369a5770717.roa (raw, json) Hash identifier: bwxVzwbhiww0I+vyZbDmhYNTkHEO41Tg4pqfvShkLnM= Subject key identifier: F7:29:7F:DF:13:25:47:3C:12:14:19:29:95:3D:9E:0A:E5:37:67:15 Certificate issuer: /CN=325f62aa-b9c8-4315-87d2-409b60e8840d Certificate serial: 010D0C9F4328584A5A306C9CAF937EF5CF590DA0 Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa Signing time: Sun 29 Jun 2025 13:01:03 +0000 ROA not before: Sun 29 Jun 2025 13:01:03 +0000 ROA not after: Sat 27 Sep 2025 13:01:03 +0000 asID: 400228 IP address blocks: 206.41.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5a:30:6c:9c:af:93:7e:f5:cf:59:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d Validity Not Before: Jun 29 13:01:03 2025 GMT Not After : Sep 27 13:01:03 2025 GMT Subject: CN=54acb81c-64d4-4908-9bad-18f6e4d077f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:31:d5:52:ca:1a:8e:6a:b6:f2:28:c1:2a: 32:08:9b:9d:1f:15:8c:ec:5f:ed:b2:5b:4d:81:1a: eb:88:dc:b0:dd:33:7c:63:26:c8:0f:ba:c2:e5:eb: e1:df:37:02:9e:06:26:ca:68:30:54:25:e3:20:8f: e3:70:26:50:38:81:97:0f:91:88:66:e4:cb:a6:94: d8:63:3f:0f:18:f0:85:c0:05:bb:ca:fb:3e:16:9c: 52:88:23:3c:b6:6e:a9:ca:74:c4:51:71:44:8d:dd: 19:dc:3b:40:6c:7a:9b:91:67:1d:43:82:c3:54:dd: 77:cc:16:aa:09:22:b7:7f:18:1f:ed:d0:bd:f7:f9: 83:43:2a:d2:99:fd:d4:4b:e6:56:13:ee:9b:4f:e4: 3b:7d:5d:d3:8d:01:90:17:8a:f7:22:47:59:b4:5f: a1:45:0c:ca:ac:c8:d1:44:1b:5d:e2:12:61:3d:41: 76:b0:91:5b:bc:cf:6e:b1:6f:d7:b5:48:b1:41:fa: e1:3e:7a:cd:22:ae:da:df:55:f9:47:57:ee:d7:e7: 1f:e7:ff:54:43:a9:02:49:24:58:86:1a:de:db:fe: 3b:d5:a1:0f:4c:21:b4:b3:8e:9a:a1:f7:ce:0d:4d: 09:78:be:06:87:c8:7c:b2:d7:ff:52:0c:c7:ed:15: 82:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:29:7F:DF:13:25:47:3C:12:14:19:29:95:3D:9E:0A:E5:37:67:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl X509v3 Authority Key Identifier: keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer sbgp-ipAddrBlock: critical IPv4: 206.41.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:36:bb:e2:e8:88:2f:51:7f:32:86:71:63:3b:cd:f7:e9:ad: 58:d0:c1:07:77:e1:73:51:52:ee:31:9e:dd:76:52:9a:3a:f0: 68:a2:6a:66:4e:c5:c4:85:06:a7:59:ec:ec:89:48:74:de:9a: bd:3d:61:03:86:09:1f:0f:e7:fd:e2:f9:4e:48:99:ea:b1:88: c1:df:33:f9:95:69:38:32:9f:a2:39:ad:7a:67:62:da:f7:05: ac:a4:9b:42:7b:0e:4d:9c:a7:2e:c4:0b:7b:03:1c:a6:02:92: 5f:d7:a7:50:c9:74:5e:17:cb:bb:65:e8:2f:ce:c5:bc:16:8b: 7a:d9:a9:45:b5:50:75:5b:b9:df:66:eb:4b:0f:9c:64:29:ed: ab:0b:d3:9e:64:a5:69:db:a9:7a:44:66:ea:27:8e:91:0a:63: 98:7e:5e:77:16:93:0d:fe:7a:d7:a1:c5:2a:6c:86:21:e8:ce: 48:9a:39:d8:4d:b9:5e:3f:af:6a:8b:5d:5f:b1:be:44:0d:d7: 12:49:57:7d:4f:77:d2:89:f8:f5:01:83:e7:6e:82:ae:d9:ab: 19:38:ee:e8:8d:ef:86:a1:d5:2f:8f:d7:f0:f8:9b:b8:98:51: 23:d6:9a:2d:d0:5c:16:fa:24:71:9d:7a:11:99:e7:d6:ac:77: e9:d2:27:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMGycr5N+9c9ZDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI1ZjYyYWEtYjljOC00MzE1LTg3ZDItNDA5YjYwZTg4 NDBkMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk NTRhY2I4MWMtNjRkNC00OTA4LTliYWQtMThmNmU0ZDA3N2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha0x1VLKGo5qtvIowSoyCJudHxWM7F/tsltN gRrriNyw3TN8YybID7rC5evh3zcCngYmymgwVCXjII/jcCZQOIGXD5GIZuTLppTY Yz8PGPCFwAW7yvs+FpxSiCM8tm6pynTEUXFEjd0Z3DtAbHqbkWcdQ4LDVN13zBaq CSK3fxgf7dC99/mDQyrSmf3US+ZWE+6bT+Q7fV3TjQGQF4r3IkdZtF+hRQzKrMjR RBtd4hJhPUF2sJFbvM9usW/XtUixQfrhPnrNIq7a31X5R1fu1+cf5/9UQ6kCSSRY hhre2/471aEPTCG0s46aoffODU0JeL4Gh8h8stf/UgzH7RWCWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcpf98TJUc8EhQZKZU9ngrlN2cVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVm NjJhYS1iOWM4LTQzMTUtODdkMi00MDliNjBlODg0MGQvZDY2ZDNkY2ItMmU5NC0z OGE3LTk1NDktZDM2OWE1NzcwNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzI1ZjYyYWEtYjljOC00MzE1LTg3 ZDItNDA5YjYwZTg4NDBkLzMyNWY2MmFhLWI5YzgtNDMxNS04N2QyLTQwOWI2MGU4 ODQwZC5jcmwwHwYDVR0jBBgwFoAUU9KfcX1b5Y2z7lo0ZWsUMMgMD8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVmNjJhYS1iOWM4LTQzMTUtODdkMi00MDli NjBlODg0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzilvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHw2u+LoiC9RfzKGcWM7zffprVjQwQd34XNRUu4xnt12Upo68GiiamZO xcSFBqdZ7OyJSHTemr09YQOGCR8P5/3i+U5ImeqxiMHfM/mVaTgyn6I5rXpnYtr3 Baykm0J7Dk2cpy7EC3sDHKYCkl/Xp1DJdF4Xy7tl6C/OxbwWi3rZqUW1UHVbud9m 60sPnGQp7asL055kpWnbqXpEZuonjpEKY5h+XncWkw3+etehxSpshiHozkiaOdhN uV4/r2qLXV+xvkQN1xJJV31Pd9KJ+PUBg+dugq7Zqxk47uiN74ah1S+P1/D4m7iY USPWmi3QXBb6JHGdehGZ59asd+nSJ10= -----END CERTIFICATE-----Generated at Tue Jul 1 00:48:56 2025 by rpki-client