$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa File: 1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa (raw, json) Hash identifier: x2GHIMEf9V+SDwsqR274NxB7MFqqxkR6/2AWEof7xh0= Subject key identifier: 32:77:F2:16:1E:F6:18:19:BF:38:58:8A:19:45:41:5C:F5:22:B6:1F Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F43285849E654E76F1CF4EF5796F50500 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 5650 IP address blocks: 206.174.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:e7:6f:1c:f4:ef:57:96:f5:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=22c3e1cb-fd9f-4dcf-bc27-1d33d7b43fa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:a5:90:9d:f1:c1:78:0e:ba:3f:50:1a:94: 22:af:80:1b:44:9c:12:bb:01:92:e1:a8:9e:e1:3b: 6e:84:eb:53:ed:1b:26:c3:7c:6d:97:7c:50:b0:71: 36:67:95:67:56:71:d4:05:30:d2:43:be:e9:86:e6: fc:f1:12:02:38:9f:2c:42:ed:7d:15:a5:1a:ab:24: 94:a0:d8:ab:60:0f:f3:35:41:4a:d8:da:0c:e4:2e: 92:61:99:bc:da:a5:82:9c:05:fd:9e:f8:0d:0e:b4: 3b:a3:85:44:10:56:a4:3c:ec:00:ec:2b:97:b5:9c: 4f:d4:50:ab:3e:70:9b:d3:05:ca:21:c5:77:5e:76: b7:26:f8:cb:b4:d4:d6:a9:e6:64:6b:e4:48:ef:7f: 05:b6:29:0a:0f:b5:53:23:3a:55:df:40:5e:bd:76: ee:af:5f:fa:9f:f8:b3:13:6b:62:85:f7:59:39:77: f1:75:3a:f8:82:e5:34:aa:38:6e:a3:47:57:cc:96: 5c:be:7d:86:4c:2f:49:63:af:83:9f:3e:a0:ea:eb: 57:5f:3f:4e:58:fd:54:29:cb:9e:c8:5c:fc:96:7e: cd:c6:91:56:99:9c:f5:31:ce:ca:e0:c7:31:60:78: f2:63:f6:72:a4:64:6b:d6:18:67:c7:68:1b:07:da: b2:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:77:F2:16:1E:F6:18:19:BF:38:58:8A:19:45:41:5C:F5:22:B6:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0a:de:22:3c:66:61:43:e1:eb:d9:29:47:eb:f6:c1:c0:c3: 24:46:3a:67:4a:1c:6e:bf:17:96:0b:8e:7c:6b:09:13:c0:df: 6c:17:1d:43:20:a4:8c:ad:97:8b:1e:9c:3c:66:d9:37:47:8c: 0d:55:c6:b0:28:26:c8:c8:bc:02:f6:e9:3f:4c:db:9f:44:8f: c7:77:18:6f:a9:89:26:41:1a:3c:f0:f2:07:e4:f8:eb:6a:04: 89:28:8d:2f:2a:72:80:e5:1e:58:cd:5d:f5:10:23:ff:6d:b2: 40:66:32:61:44:12:76:29:e8:89:ee:11:13:6e:6f:8e:0b:9a: 48:88:1a:e2:8a:32:d6:d1:a6:a3:d0:24:4f:55:00:03:cb:b2: 81:f7:d0:81:7b:21:0e:14:47:9c:0e:6e:61:48:eb:2d:05:0f: c0:28:8b:c5:a3:17:8e:f9:2c:fe:d5:ed:b0:86:36:cc:52:fd: 7f:56:6c:6c:7d:03:d7:e0:ff:de:22:49:55:14:19:50:a3:d1: 2b:20:aa:20:36:ba:26:e6:08:49:f4:19:f3:ff:4d:61:fb:da: 76:57:8c:e0:cc:38:1f:28:7e:21:bf:6e:9b:77:bf:39:c7:e6: 56:14:2e:1c:65:29:3c:de:04:0f:69:7b:14:42:b4:59:be:2e: b9:9d:fe:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVOdvHPTvV5b1BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MjJjM2UxY2ItZmQ5Zi00ZGNmLWJjMjctMWQzM2Q3YjQzZmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSilkJ3xwXgOuj9QGpQir4AbRJwSuwGS4aie 4TtuhOtT7Rsmw3xtl3xQsHE2Z5VnVnHUBTDSQ77phub88RICOJ8sQu19FaUaqySU oNirYA/zNUFK2NoM5C6SYZm82qWCnAX9nvgNDrQ7o4VEEFakPOwA7CuXtZxP1FCr PnCb0wXKIcV3Xna3JvjLtNTWqeZka+RI738FtikKD7VTIzpV30BevXbur1/6n/iz E2tihfdZOXfxdTr4guU0qjhuo0dXzJZcvn2GTC9JY6+Dnz6g6utXXz9OWP1UKcue yFz8ln7NxpFWmZz1Mc7K4McxYHjyY/ZypGRr1hhnx2gbB9qy8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ38hYe9hgZvzhYihlFQVz1IrYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvMWYxZmQzZmQtY2IwMC0z MmFkLThlMTEtNTc4MjQ5NWY1ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzq6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwK3iI8ZmFD4evZKUfr9sHAwyRGOmdKHG6/F5YLjnxrCRPA32wXHUMg pIytl4senDxm2TdHjA1VxrAoJsjIvAL26T9M259Ej8d3GG+piSZBGjzw8gfk+Otq BIkojS8qcoDlHljNXfUQI/9tskBmMmFEEnYp6InuERNub44LmkiIGuKKMtbRpqPQ JE9VAAPLsoH30IF7IQ4UR5wObmFI6y0FD8Aoi8WjF475LP7V7bCGNsxS/X9WbGx9 A9fg/94iSVUUGVCj0SsgqiA2uibmCEn0GfP/TWH72nZXjODMOB8ofiG/bpt3vznH 5lYULhxlKTzeBA9pexRCtFm+Lrmd/mM= -----END CERTIFICATE-----Generated at Sun Jun 29 13:50:11 2025 by rpki-client