$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/02ed1e37-01c0-3943-8e65-9f93c3bce6b6.roa File: 02ed1e37-01c0-3943-8e65-9f93c3bce6b6.roa (raw, json) Hash identifier: KThZMVtWaqZnjF2IWrHASMLhzW4Y2GR/NCueFZOBt+g= Subject key identifier: ED:15:08:A5:22:12:AA:9A:DA:23:10:5D:A0:86:73:27:35:AB:95:55 Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F43285849B4149341254CDFE19C1337C0 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/02ed1e37-01c0-3943-8e65-9f93c3bce6b6.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 7029 IP address blocks: 206.174.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:93:41:25:4c:df:e1:9c:13:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=703ad292-1d7d-474a-912a-ae445003889a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:c7:b6:eb:c5:34:9f:20:b9:66:8f:07:1b: d3:34:08:3a:12:03:75:02:4a:2c:e1:af:f6:9e:93: e9:41:6f:4e:07:9e:3a:33:d9:36:cb:54:8b:02:e3: 3c:78:28:9a:5f:20:23:a6:e4:fc:68:87:10:3a:49: ee:0f:15:ab:55:b1:9b:14:8f:8c:a3:74:d0:4d:c8: 2a:53:0e:71:43:71:0a:58:04:0d:86:3d:84:23:1d: 3b:b9:71:24:b8:a0:1e:bb:b1:a5:40:21:58:89:4f: 53:b1:1e:e6:b1:9e:a3:95:df:6a:e0:cd:e1:01:3e: bb:5b:85:f7:67:b6:c2:08:d6:d2:6e:f3:f2:dc:22: 89:ba:20:fa:04:c9:49:e6:d5:88:82:c0:81:39:f3: 6e:af:37:1f:d1:77:aa:97:b4:79:fc:4d:90:a7:3c: 09:61:2f:af:fc:b5:ac:ad:5d:69:d8:38:93:e8:96: 68:90:f3:d2:ec:2e:fc:e2:9a:16:8a:57:77:04:41: ed:08:01:81:11:8c:46:34:c5:4b:e5:e1:b0:58:b9: 87:a3:6a:0c:32:76:fb:d3:f9:bb:5f:c7:60:92:25: 8e:f8:eb:33:ef:1a:12:c5:69:77:75:27:9a:6a:31: 38:14:4e:2b:68:34:7a:68:96:86:4b:18:4b:7c:c8: 9c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:15:08:A5:22:12:AA:9A:DA:23:10:5D:A0:86:73:27:35:AB:95:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/02ed1e37-01c0-3943-8e65-9f93c3bce6b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:bf:53:59:b1:93:a9:b2:b1:23:38:7d:9f:31:f5:ec:32:89: 30:61:c5:9d:16:ef:41:4d:d6:cf:9e:c6:3e:64:f3:0b:ff:f4: d1:a3:c9:b7:29:3d:2d:2a:56:52:76:0a:f4:6e:6c:1a:5e:3c: 8d:41:4d:0d:77:0b:0c:d7:62:bd:2e:5a:92:9e:4a:ee:74:30: 3b:65:99:c7:54:a7:df:a7:ea:d7:d2:b9:d3:17:3f:a9:f6:85: 73:5d:bd:57:bb:26:7c:80:7c:71:f7:66:85:5a:14:83:c0:59: 0b:af:17:af:7a:c6:67:c9:26:f8:98:8f:01:1d:6a:86:6e:f3: 9a:f0:be:5d:02:60:c6:f8:1a:a6:a8:c2:5d:4a:29:26:26:d9: 4d:4c:38:3c:56:f3:5e:7a:71:b9:38:c0:e4:fc:0d:07:17:6f: e8:49:32:81:7d:34:5c:d2:30:9a:90:32:6c:93:5a:e6:ed:ea: b7:15:dc:78:40:23:73:03:f8:e9:f8:3c:c5:93:21:8c:39:e6: 47:c7:8e:08:13:c7:54:40:58:7d:1c:71:71:b9:bb:1a:7f:e0: fa:ef:dd:50:26:7c:f2:ee:cf:4d:be:ef:a2:40:9c:49:8d:19: 83:28:cf:51:b4:a9:e7:b2:4c:c3:fe:0c:a6:44:4e:7c:48:84: 0d:d6:6a:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm0FJNBJUzf4ZwTN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk NzAzYWQyOTItMWQ3ZC00NzRhLTkxMmEtYWU0NDUwMDM4ODlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnvHtuvFNJ8guWaPBxvTNAg6EgN1Akos4a/2 npPpQW9OB546M9k2y1SLAuM8eCiaXyAjpuT8aIcQOknuDxWrVbGbFI+Mo3TQTcgq Uw5xQ3EKWAQNhj2EIx07uXEkuKAeu7GlQCFYiU9TsR7msZ6jld9q4M3hAT67W4X3 Z7bCCNbSbvPy3CKJuiD6BMlJ5tWIgsCBOfNurzcf0Xeql7R5/E2QpzwJYS+v/LWs rV1p2DiT6JZokPPS7C784poWild3BEHtCAGBEYxGNMVL5eGwWLmHo2oMMnb70/m7 X8dgkiWO+Osz7xoSxWl3dSeaajE4FE4raDR6aJaGSxhLfMic5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0VCKUiEqqa2iMQXaCGcyc1q5VVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvMDJlZDFlMzctMDFjMC0z OTQzLThlNjUtOWY5M2MzYmNlNmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzq6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2/U1mxk6mysSM4fZ8x9ewyiTBhxZ0W70FN1s+exj5k8wv/9NGjybcp PS0qVlJ2CvRubBpePI1BTQ13CwzXYr0uWpKeSu50MDtlmcdUp9+n6tfSudMXP6n2 hXNdvVe7JnyAfHH3ZoVaFIPAWQuvF696xmfJJviYjwEdaoZu85rwvl0CYMb4Gqao wl1KKSYm2U1MODxW8156cbk4wOT8DQcXb+hJMoF9NFzSMJqQMmyTWubt6rcV3HhA I3MD+On4PMWTIYw55kfHjggTx1RAWH0ccXG5uxp/4Prv3VAmfPLuz02+76JAnEmN GYMoz1G0qeeyTMP+DKZETnxIhA3Waic= -----END CERTIFICATE-----Generated at Wed May 7 00:51:22 2025 by rpki-client