$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/206642a2-d7e1-3098-9a4d-25ac023b6972.roa File: 206642a2-d7e1-3098-9a4d-25ac023b6972.roa (raw, json) Hash identifier: Kb+44PgXO1M/WtwERpEuRdFcqmlIU96t2C8+KqQ3RKk= Subject key identifier: 29:D3:50:6D:85:73:34:25:1C:2B:09:5A:BD:85:A3:39:48:BE:08:AF Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584A454041A406B7F7A8CA3B0400 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/206642a2-d7e1-3098-9a4d-25ac023b6972.roa Signing time: Sun 22 Jun 2025 01:00:50 +0000 ROA not before: Sun 22 Jun 2025 01:00:50 +0000 ROA not after: Sat 20 Sep 2025 01:00:50 +0000 asID: 46450 IP address blocks: 192.81.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:40:41:a4:06:b7:f7:a8:ca:3b:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Jun 22 01:00:50 2025 GMT Not After : Sep 20 01:00:50 2025 GMT Subject: CN=d1575cea-c795-45b5-8eb4-28ac787819ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:c3:12:b7:bf:2c:8b:88:31:1e:25:b3:17: 18:ef:bb:72:2b:ec:af:21:ec:88:53:af:1f:6d:b6: 48:84:a1:e2:35:44:5c:a3:41:e3:ee:9c:bd:2e:5c: ce:1a:b8:59:46:33:ed:c9:91:c8:3c:f2:61:c9:08: b6:71:d7:f5:2f:31:e7:66:c3:0a:5d:34:35:16:61: ad:84:63:49:9a:26:56:b2:71:cb:cb:ec:8e:91:64: a9:9d:23:6a:cf:92:15:f0:3b:b4:75:d0:e2:4b:b9: e6:cc:57:9c:ff:03:2a:7e:b7:13:de:4f:e2:42:db: a3:df:60:a9:eb:f5:9c:2d:b4:35:df:e7:64:d5:2b: 21:56:77:79:c7:93:5c:61:31:1c:2e:ec:a6:26:40: ac:bb:44:aa:61:fd:18:d4:96:96:24:c1:ea:bd:bd: 6c:ca:86:bf:eb:70:c5:97:bc:e2:bc:3d:10:ec:7a: b4:97:19:97:b5:d9:06:9d:ae:62:d3:d7:3f:84:55: 9a:f6:82:cf:be:03:c4:68:6d:16:3d:a0:3b:ac:35: ec:90:bc:f1:e5:7c:86:ee:ef:c7:4d:ff:63:bd:63: e6:ce:8b:1b:36:73:0f:d1:c8:4c:57:62:da:4b:4a: bb:01:e2:79:5d:37:db:1d:fe:29:7c:67:b8:27:07: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D3:50:6D:85:73:34:25:1C:2B:09:5A:BD:85:A3:39:48:BE:08:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/206642a2-d7e1-3098-9a4d-25ac023b6972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 192.81.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:5a:21:e0:60:79:81:3b:c6:4d:4d:9f:f6:01:9b:b5:1d:e3: 5a:45:91:ee:24:3a:f8:36:51:d1:ad:5c:95:97:b4:c8:b5:62: 54:bd:17:be:08:85:28:db:b6:5d:70:7f:1d:8d:d6:4a:67:69: 3d:26:96:c8:3b:cd:d3:90:db:f3:6e:43:74:22:27:cb:e0:fa: 76:8f:48:30:8f:ff:55:2a:16:56:87:37:b9:0e:40:53:c5:da: 39:18:aa:9e:83:01:aa:20:ea:81:7f:e6:3c:af:b1:4a:0f:6e: e8:2d:cd:fe:1f:6c:11:d7:87:82:91:8b:72:13:f4:6f:71:69: b5:27:55:6d:df:75:31:a6:05:97:b9:e6:d8:03:a1:54:79:57: e3:ec:0c:37:05:ff:04:21:27:96:8d:fc:bc:ff:18:c7:27:2a: fc:e8:60:cf:d1:f5:0a:ef:11:18:99:20:b0:b0:1a:90:be:40: 69:dd:e4:a7:71:cd:45:6c:25:1a:77:78:b6:02:80:d0:a3:61: 2e:93:3d:c7:b5:84:5c:80:eb:67:ac:51:2f:a1:92:b7:b6:d7: 32:45:3f:ed:40:bb:10:17:64:0c:9b:bf:07:c7:fa:ac:15:7f: 31:f5:28:5d:e5:ce:a9:16:75:67:76:a4:94:60:04:88:9c:9f: 3f:83:fc:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpFQEGkBrf3qMo7BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI1MDYyMjAxMDA1MFoXDTI1MDkyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZDE1NzVjZWEtYzc5NS00NWI1LThlYjQtMjhhYzc4NzgxOWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDHDEre/LIuIMR4lsxcY77tyK+yvIeyIU68f bbZIhKHiNURco0Hj7py9LlzOGrhZRjPtyZHIPPJhyQi2cdf1LzHnZsMKXTQ1FmGt hGNJmiZWsnHLy+yOkWSpnSNqz5IV8Du0ddDiS7nmzFec/wMqfrcT3k/iQtuj32Cp 6/WcLbQ13+dk1SshVnd5x5NcYTEcLuymJkCsu0SqYf0Y1JaWJMHqvb1syoa/63DF l7zivD0Q7Hq0lxmXtdkGna5i09c/hFWa9oLPvgPEaG0WPaA7rDXskLzx5XyG7u/H Tf9jvWPmzosbNnMP0chMV2LaS0q7AeJ5XTfbHf4pfGe4JwfntwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnTUG2FczQlHCsJWr2FozlIvgivMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMjA2NjQyYTItZDdlMS0z MDk4LTlhNGQtMjVhYzAyM2I2OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwFGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBaIeBgeYE7xk1Nn/YBm7Ud41pFke4kOvg2UdGtXJWXtMi1YlS9F74I hSjbtl1wfx2N1kpnaT0mlsg7zdOQ2/NuQ3QiJ8vg+naPSDCP/1UqFlaHN7kOQFPF 2jkYqp6DAaog6oF/5jyvsUoPbugtzf4fbBHXh4KRi3IT9G9xabUnVW3fdTGmBZe5 5tgDoVR5V+PsDDcF/wQhJ5aN/Lz/GMcnKvzoYM/R9QrvERiZILCwGpC+QGnd5Kdx zUVsJRp3eLYCgNCjYS6TPce1hFyA62esUS+hkre21zJFP+1AuxAXZAybvwfH+qwV fzH1KF3lzqkWdWd2pJRgBIicnz+D/FQ= -----END CERTIFICATE-----Generated at Tue Jul 1 03:57:57 2025 by rpki-client