$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/a5f5452e-8fac-3345-9c38-e60126789ad0.roa File: a5f5452e-8fac-3345-9c38-e60126789ad0.roa (raw, json) Hash identifier: uqWU9TVTHiRtlWha0cG4uLG7vrGfeuz+lDZ/Qo/JJ+g= Subject key identifier: 51:96:6D:3D:27:40:E0:88:47:F2:81:F7:55:37:6D:A0:CB:FA:44:96 Certificate issuer: /CN=5a2485e6-b86b-4cb5-92da-e03f2283a405 Certificate serial: 010D0C9F43285849DAC02F9CE2A65511B8B1D800 Authority key identifier: 2F:08:F7:91:A0:E1:5C:18:34:5D:49:D3:3F:BB:A4:78:D2:6A:C3:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/a5f5452e-8fac-3345-9c38-e60126789ad0.roa Signing time: Wed 14 May 2025 21:27:17 +0000 ROA not before: Wed 14 May 2025 21:27:17 +0000 ROA not after: Tue 12 Aug 2025 21:27:17 +0000 asID: 23316 IP address blocks: 207.181.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/5a2485e6-b86b-4cb5-92da-e03f2283a405.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/5a2485e6-b86b-4cb5-92da-e03f2283a405.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:c0:2f:9c:e2:a6:55:11:b8:b1:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a2485e6-b86b-4cb5-92da-e03f2283a405 Validity Not Before: May 14 21:27:17 2025 GMT Not After : Aug 12 21:27:17 2025 GMT Subject: CN=c698a6c1-9942-4280-a2cb-04ec508aa261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:02:0c:6b:ff:b5:e7:65:fa:bf:73:55:de:9c: ee:e6:12:f8:0d:c0:35:b3:dd:3f:7f:9d:6d:0c:4e: 74:17:54:13:10:b1:6a:47:9f:f8:9c:00:5e:94:d3: 3f:43:57:d7:2f:48:ef:ac:f2:29:52:b6:a6:2a:a6: 16:5e:9a:ee:f3:71:52:88:10:aa:9e:6c:82:7a:01: d5:32:e7:36:74:a9:19:cb:b0:8c:e8:7b:9d:48:45: 6a:3d:9e:40:b7:c7:c0:4b:43:d8:d2:e2:41:53:5c: ce:9e:59:e3:37:96:e3:0c:9c:43:84:43:75:4a:fc: 03:d8:0a:18:f6:8c:80:ce:96:0b:63:ce:9e:93:75: 67:56:f1:9e:16:98:da:d5:7b:e9:a1:e5:54:58:a3: a4:b9:54:67:0f:af:bb:b9:fd:a6:ee:db:a0:c0:9f: f7:55:72:c0:d4:70:7b:1c:2c:bc:a4:39:3d:82:55: 11:3d:90:87:a2:45:45:87:04:3f:d1:3e:bd:36:48: 06:51:b8:27:a2:36:f9:27:fa:28:4b:35:85:6c:c6: bb:10:1e:81:96:be:f9:85:38:b6:63:ed:e1:0a:d0: 38:94:b5:e6:18:97:33:21:4a:ea:b1:5b:c6:eb:5a: ad:65:df:18:e6:b8:fb:d4:84:c7:26:13:92:38:c5: d8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:96:6D:3D:27:40:E0:88:47:F2:81:F7:55:37:6D:A0:CB:FA:44:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/a5f5452e-8fac-3345-9c38-e60126789ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405/5a2485e6-b86b-4cb5-92da-e03f2283a405.crl X509v3 Authority Key Identifier: keyid:2F:08:F7:91:A0:E1:5C:18:34:5D:49:D3:3F:BB:A4:78:D2:6A:C3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5a2485e6-b86b-4cb5-92da-e03f2283a405.cer sbgp-ipAddrBlock: critical IPv4: 207.181.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ca:09:54:d6:95:7f:c6:f3:77:fa:0f:10:f7:2f:9d:35:70: 5c:7f:b7:08:ec:d4:7a:4d:33:09:53:5f:d7:99:60:16:89:d1: 56:9d:6d:6c:48:0e:1c:2d:7b:50:89:1d:c7:da:2f:ca:fb:ee: 3f:c1:97:11:9b:a3:f1:c1:8f:e3:91:74:bb:48:f7:32:b5:97: 2c:66:67:3f:45:62:83:79:90:70:1d:b0:95:78:76:cc:87:50: 79:e4:3d:d4:8b:77:dc:9f:be:f7:2f:56:52:e4:54:05:5f:99: c4:7b:10:b7:00:e0:f0:10:2d:36:d6:f2:54:17:67:80:ad:3f: 1c:60:a5:b9:23:dd:ee:41:74:90:fc:38:f9:51:4b:d5:c2:22: 67:e0:01:09:b5:0a:91:3b:68:8c:39:a8:f1:a9:e0:8c:48:11: 34:18:05:43:bb:24:82:08:ca:99:d9:f4:bc:6a:4a:7e:4f:9a: 3d:2a:45:5c:00:7e:c0:fa:09:56:2d:8f:52:05:00:3b:05:14: bb:78:bf:b8:bd:e0:25:f0:45:13:fb:89:ae:61:04:82:9f:c4: 74:29:f8:4e:7a:be:a2:2c:06:af:0f:1c:ec:52:b1:44:08:34: 76:17:bd:1c:21:8b:0d:73:b5:c5:cb:b5:91:6a:f9:bb:c3:be: 4d:fa:3d:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnawC+c4qZVEbix2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEyNDg1ZTYtYjg2Yi00Y2I1LTkyZGEtZTAzZjIyODNh NDA1MB4XDTI1MDUxNDIxMjcxN1oXDTI1MDgxMjIxMjcxN1owLzEtMCsGA1UEAxMk YzY5OGE2YzEtOTk0Mi00MjgwLWEyY2ItMDRlYzUwOGFhMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAIMa/+152X6v3NV3pzu5hL4DcA1s90/f51t DE50F1QTELFqR5/4nABelNM/Q1fXL0jvrPIpUramKqYWXpru83FSiBCqnmyCegHV Muc2dKkZy7CM6HudSEVqPZ5At8fAS0PY0uJBU1zOnlnjN5bjDJxDhEN1SvwD2AoY 9oyAzpYLY86ek3VnVvGeFpja1XvpoeVUWKOkuVRnD6+7uf2m7tugwJ/3VXLA1HB7 HCy8pDk9glURPZCHokVFhwQ/0T69NkgGUbgnojb5J/ooSzWFbMa7EB6Blr75hTi2 Y+3hCtA4lLXmGJczIUrqsVvG61qtZd8Y5rj71ITHJhOSOMXYsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGWbT0nQOCIR/KB91U3baDL+kSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81YTI0 ODVlNi1iODZiLTRjYjUtOTJkYS1lMDNmMjI4M2E0MDUvYTVmNTQ1MmUtOGZhYy0z MzQ1LTljMzgtZTYwMTI2Nzg5YWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWEyNDg1ZTYtYjg2Yi00Y2I1LTky ZGEtZTAzZjIyODNhNDA1LzVhMjQ4NWU2LWI4NmItNGNiNS05MmRhLWUwM2YyMjgz YTQwNS5jcmwwHwYDVR0jBBgwFoAULwj3kaDhXBg0XUnTP7ukeNJqwyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81YTI0ODVlNi1iODZiLTRjYjUtOTJkYS1lMDNm MjI4M2E0MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz7UAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDKCVTWlX/G83f6DxD3L501cFx/twjs1HpNMwlTX9eZYBaJ0VadbWxI Dhwte1CJHcfaL8r77j/BlxGbo/HBj+ORdLtI9zK1lyxmZz9FYoN5kHAdsJV4dsyH UHnkPdSLd9yfvvcvVlLkVAVfmcR7ELcA4PAQLTbW8lQXZ4CtPxxgpbkj3e5BdJD8 OPlRS9XCImfgAQm1CpE7aIw5qPGp4IxIETQYBUO7JIIIypnZ9LxqSn5Pmj0qRVwA fsD6CVYtj1IFADsFFLt4v7i94CXwRRP7ia5hBIKfxHQp+E56vqIsBq8PHOxSsUQI NHYXvRwhiw1ztcXLtZFq+bvDvk36Pf4= -----END CERTIFICATE-----Generated at Wed Jul 2 06:13:42 2025 by rpki-client