$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa File: 7e94502a-45eb-379b-b267-18d68fcecb1d.roa (raw, json) Hash identifier: MN3ZCOnDa5mur/x08k3HEvAaU4RfBHkX0zMv3V8JvAM= Subject key identifier: 19:05:C4:27:0A:84:7F:2E:69:A6:66:BD:E0:8B:73:1F:14:EC:1D:13 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849AA4F71AEED63777EF5DD62C0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 4760 IP address blocks: 206.161.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:71:ae:ed:63:77:7e:f5:dd:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=6d3639d0-aef3-45df-abe6-732772b60811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c9:fc:88:b2:dc:9c:1b:06:91:f5:e8:a3:a1: 38:eb:25:0c:ed:f6:ad:a9:22:c9:3b:7c:79:a5:fd: a6:5f:fe:06:59:b9:17:15:49:f6:ef:79:6e:3b:2d: e5:fd:df:4a:ec:53:bd:69:72:7d:c9:42:a8:f2:71: 10:ad:6d:bf:06:00:8b:f9:2c:cd:05:82:06:c1:72: be:d4:f7:0c:c5:03:b2:e9:30:07:0e:b7:d1:f9:c9: 4b:bb:09:44:b6:29:4a:82:f8:29:11:b9:a7:6f:93: 0e:b5:a4:0c:50:5c:1f:01:6e:db:f5:75:c2:15:2f: 0e:5d:7e:4f:e1:83:35:53:b9:56:3e:57:ab:6b:03: 7c:a1:29:26:15:83:b8:18:ff:5f:71:60:33:da:bc: 26:7a:e1:38:11:7e:86:92:50:dd:90:89:b7:f5:8e: db:0f:c3:e4:61:c1:68:2b:a5:9c:05:87:46:12:17: 12:b2:31:45:db:fd:b2:17:e8:2c:e3:44:70:fa:dd: bc:bd:1a:d4:fd:1e:8f:da:12:72:1e:6c:27:f8:9b: 45:91:ec:39:b6:a0:b4:9a:63:7a:1f:48:ee:c4:a1: ef:32:ef:b2:fa:d3:e2:7b:49:06:f9:65:cf:ca:6c: 23:93:8f:83:1d:00:ac:8f:99:52:22:1a:0c:e2:af: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:05:C4:27:0A:84:7F:2E:69:A6:66:BD:E0:8B:73:1F:14:EC:1D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7e94502a-45eb-379b-b267-18d68fcecb1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 206.161.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:25:56:53:a3:13:fe:1f:e9:c1:4f:2c:4b:15:d0:04:7e:4c: 2e:57:b7:f5:ed:cd:b0:69:36:f2:cd:8a:02:9b:9a:a0:70:0d: c4:d4:f2:a8:2e:bf:08:38:c2:43:d3:af:5e:34:6e:36:0c:c8: fd:da:29:00:8d:55:32:61:18:e8:b4:d6:16:fb:d4:2b:f1:e1: f9:a4:0b:4f:5f:c4:81:9b:35:3a:7c:47:95:f0:b7:4b:07:5b: 1a:6f:cd:5b:24:a7:85:11:34:30:ad:50:f2:9b:2d:98:3a:ba: 0e:12:99:06:fb:b5:0c:33:cf:9d:44:f3:28:5f:91:8a:de:ef: 39:d3:f0:a3:93:bc:7e:cd:d2:b8:2f:43:41:03:11:9a:a1:dd: 2d:ea:6e:86:c0:69:d7:fd:ff:f0:2e:f6:ee:5a:6f:f2:58:fd: 60:86:fc:ec:ce:b6:e4:b1:25:9c:05:b2:d5:c2:f4:90:57:5c: e2:d8:f5:94:3a:fa:a3:bd:c1:ec:40:16:08:fb:54:e1:5e:60: 1b:38:4e:b0:63:61:35:c0:87:31:e6:88:37:29:91:50:8e:c1: 72:53:75:19:2b:36:66:3f:77:c1:a4:5c:8f:32:da:d1:9b:b6: b2:21:00:78:1f:97:99:76:09:00:15:ba:ff:0f:e4:c9:0f:3a: 9e:05:e3:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3Gu7WN3fvXdYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk NmQzNjM5ZDAtYWVmMy00NWRmLWFiZTYtNzMyNzcyYjYwODExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMn8iLLcnBsGkfXoo6E46yUM7fatqSLJO3x5 pf2mX/4GWbkXFUn273luOy3l/d9K7FO9aXJ9yUKo8nEQrW2/BgCL+SzNBYIGwXK+ 1PcMxQOy6TAHDrfR+clLuwlEtilKgvgpEbmnb5MOtaQMUFwfAW7b9XXCFS8OXX5P 4YM1U7lWPlerawN8oSkmFYO4GP9fcWAz2rwmeuE4EX6GklDdkIm39Y7bD8PkYcFo K6WcBYdGEhcSsjFF2/2yF+gs40Rw+t28vRrU/R6P2hJyHmwn+JtFkew5tqC0mmN6 H0juxKHvMu+y+tPie0kG+WXPymwjk4+DHQCsj5lSIhoM4q8oewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkFxCcKhH8uaaZmveCLcx8U7B0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvN2U5NDUwMmEtNDVlYi0z NzliLWIyNjctMThkNjhmY2VjYjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzqFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJglVlOjE/4f6cFPLEsV0AR+TC5Xt/XtzbBpNvLNigKbmqBwDcTU8qgu vwg4wkPTr140bjYMyP3aKQCNVTJhGOi01hb71Cvx4fmkC09fxIGbNTp8R5Xwt0sH WxpvzVskp4URNDCtUPKbLZg6ug4SmQb7tQwzz51E8yhfkYre7znT8KOTvH7N0rgv Q0EDEZqh3S3qbobAadf9//Au9u5ab/JY/WCG/OzOtuSxJZwFstXC9JBXXOLY9ZQ6 +qO9wexAFgj7VOFeYBs4TrBjYTXAhzHmiDcpkVCOwXJTdRkrNmY/d8GkXI8y2tGb trIhAHgfl5l2CQAVuv8P5MkPOp4F4+c= -----END CERTIFICATE-----Generated at Tue May 13 23:29:51 2025 by rpki-client