$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2337eb37-13ca-33d0-89f4-e02585d1a1b9.roa File: 2337eb37-13ca-33d0-89f4-e02585d1a1b9.roa (raw, json) Hash identifier: 52004QUpZHg6cwQCr/Rs+6pYN+1yCs+J8TCztroaDkI= Subject key identifier: 32:43:62:DB:D4:ED:23:3F:5E:90:28:C1:E0:A1:62:82:47:59:4A:05 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A976A8C220CC32D0F1CEFA6C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2337eb37-13ca-33d0-89f4-e02585d1a1b9.roa Signing time: Mon 21 Jul 2025 11:22:30 +0000 ROA not before: Mon 21 Jul 2025 11:22:30 +0000 ROA not after: Sun 19 Oct 2025 11:22:30 +0000 asID: 213990 IP address blocks: 206.123.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:6a:8c:22:0c:c3:2d:0f:1c:ef:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 21 11:22:30 2025 GMT Not After : Oct 19 11:22:30 2025 GMT Subject: CN=54b2f649-d317-4fa6-b42a-771be82b9da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a1:94:0d:ab:46:69:93:d3:fe:0e:2a:06:05: aa:cc:9d:83:de:a4:38:a0:9d:d3:03:c7:71:69:cf: 74:47:98:ae:89:66:da:80:39:ed:41:65:67:96:76: 80:0a:55:87:98:bc:11:95:71:37:f9:31:ee:17:4e: 6e:9f:50:e3:c9:a8:38:ef:d5:70:2a:e2:bf:52:65: 45:ac:8a:71:78:73:34:07:f7:ec:33:42:3c:43:4f: 7e:69:ab:e3:05:84:e2:98:3e:12:8f:f7:67:9f:57: b1:36:84:64:8e:73:f9:88:06:c3:eb:13:8b:f0:81: 21:9d:f3:dc:7e:e2:69:cc:3e:0c:91:a7:56:f9:a0: e6:8d:a2:4d:de:a7:b6:f8:44:c7:66:59:0c:83:d7: c5:5b:04:07:4c:2c:d1:9d:3a:e9:19:95:a5:17:80: f0:20:fc:df:c4:e0:a0:6e:84:48:a9:38:24:e3:fc: 79:75:4b:e1:c1:2f:1d:a5:27:42:86:e2:92:c7:e6: 5a:dd:cf:67:4c:8f:c8:c4:f0:de:dc:85:54:42:5a: ac:5b:83:e5:a1:36:2c:1f:a1:9e:f3:df:7a:7e:90: a9:97:93:88:e9:d5:67:14:28:13:a3:16:ce:e6:bd: 49:40:4d:6e:a6:e6:b7:f7:80:53:21:1a:f4:f3:1d: 39:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:43:62:DB:D4:ED:23:3F:5E:90:28:C1:E0:A1:62:82:47:59:4A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2337eb37-13ca-33d0-89f4-e02585d1a1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:bd:43:54:ac:a3:a6:55:04:3c:44:f3:19:e4:12:46:46:d4: fc:d8:2d:68:e4:c7:95:d1:47:1f:38:d1:0a:77:3d:94:22:33: 83:31:51:a4:ae:f7:2c:37:1b:e8:06:bf:24:ff:a9:06:ca:fa: 8b:f7:39:c4:f1:93:78:fb:67:d0:64:5c:3a:3b:55:23:d3:00: 86:f5:59:2b:ef:59:33:a5:79:79:6d:5e:6d:fa:9a:19:ec:bc: 8c:e7:6e:d2:f0:4a:53:ee:9b:28:3b:43:00:ea:43:a6:55:d1: c8:c1:8b:80:ae:0b:bb:f8:b1:76:7f:51:dd:6d:77:91:13:8b: de:c6:2a:d0:95:2b:29:b9:ee:95:be:6c:f5:c3:0e:8e:db:c4: 5b:4d:a0:57:f9:a9:3a:66:93:f2:03:d2:eb:51:30:be:1d:25: a2:80:77:ec:53:8d:7d:3d:48:ff:2f:29:33:b4:da:31:64:47: 15:31:73:bc:97:af:e8:73:74:26:c3:3b:5b:53:d0:e1:f2:73: 84:48:fb:2a:1a:9b:d1:08:aa:b2:be:54:c0:4b:10:4b:42:ab: a6:63:b2:51:de:50:49:9f:d2:88:56:4e:44:80:09:ef:72:34: 95:44:e3:e3:ed:0d:0c:2c:a3:db:9f:41:84:6c:58:1d:12:db: 29:91:64:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqXaowiDMMtDxzvpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyMTExMjIzMFoXDTI1MTAxOTExMjIzMFowLzEtMCsGA1UEAxMk NTRiMmY2NDktZDMxNy00ZmE2LWI0MmEtNzcxYmU4MmI5ZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKGUDatGaZPT/g4qBgWqzJ2D3qQ4oJ3TA8dx ac90R5iuiWbagDntQWVnlnaAClWHmLwRlXE3+THuF05un1Djyag479VwKuK/UmVF rIpxeHM0B/fsM0I8Q09+aavjBYTimD4Sj/dnn1exNoRkjnP5iAbD6xOL8IEhnfPc fuJpzD4MkadW+aDmjaJN3qe2+ETHZlkMg9fFWwQHTCzRnTrpGZWlF4DwIPzfxOCg boRIqTgk4/x5dUvhwS8dpSdChuKSx+Za3c9nTI/IxPDe3IVUQlqsW4PloTYsH6Ge 8996fpCpl5OI6dVnFCgToxbO5r1JQE1upua394BTIRr08x05LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJDYtvU7SM/XpAoweChYoJHWUoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjMzN2ViMzctMTNjYS0z M2QwLTg5ZjQtZTAyNTg1ZDFhMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW9Q1Sso6ZVBDxE8xnkEkZG1PzYLWjkx5XRRx840Qp3PZQiM4MxUaSu 9yw3G+gGvyT/qQbK+ov3OcTxk3j7Z9BkXDo7VSPTAIb1WSvvWTOleXltXm36mhns vIznbtLwSlPumyg7QwDqQ6ZV0cjBi4CuC7v4sXZ/Ud1td5ETi97GKtCVKym57pW+ bPXDDo7bxFtNoFf5qTpmk/ID0utRML4dJaKAd+xTjX09SP8vKTO02jFkRxUxc7yX r+hzdCbDO1tT0OHyc4RI+yoam9EIqrK+VMBLEEtCq6ZjslHeUEmf0ohWTkSACe9y NJVE4+PtDQwso9ufQYRsWB0S2ymRZHo= -----END CERTIFICATE-----Generated at Tue Jul 22 11:54:21 2025 by rpki-client