$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c6031b31-0b51-32ae-8278-8afedc10eb0c.roa File: c6031b31-0b51-32ae-8278-8afedc10eb0c.roa (raw, json) Hash identifier: NBbqRIXQCvfGB6aFrdJ9CTPF+ZPnnWSX+/nWkLb2rIU= Subject key identifier: B7:AA:A0:4E:98:B4:8B:A8:1E:64:4F:E6:6B:8A:CF:C6:93:8F:27:3D Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A8A16BF2150D5C5A17D3A1F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c6031b31-0b51-32ae-8278-8afedc10eb0c.roa Signing time: Wed 16 Jul 2025 16:48:09 +0000 ROA not before: Wed 16 Jul 2025 16:48:09 +0000 ROA not after: Tue 14 Oct 2025 16:48:09 +0000 asID: 213790 IP address blocks: 206.123.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8a:16:bf:21:50:d5:c5:a1:7d:3a:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 16 16:48:09 2025 GMT Not After : Oct 14 16:48:09 2025 GMT Subject: CN=3e782872-0459-45d3-9b5e-b45dfd569bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:88:47:2c:1a:54:34:44:74:1d:df:21:de:7d: 3c:cc:ca:89:b6:3a:ab:1e:26:42:82:fe:57:e1:68: be:a3:46:33:a7:4a:ba:14:4f:b9:eb:c5:de:02:d3: ac:2e:c2:d0:da:62:cb:be:04:6f:5d:3e:53:2e:78: 33:e9:c0:1c:ab:9b:d7:66:53:a5:85:fb:c4:61:d4: bc:34:55:b6:5f:a9:63:e6:ca:44:3a:ce:b3:3c:db: 25:48:b4:97:3a:ed:d0:21:79:26:d3:39:13:8f:ae: ab:e5:46:3f:ce:35:d4:83:99:db:08:cb:6c:c2:4f: c6:21:23:80:a9:6a:7f:11:09:be:a7:af:51:20:22: 7c:ec:80:61:2c:7f:02:0d:22:99:35:9c:20:63:29: 06:5a:bd:63:02:17:25:a4:b1:ae:11:54:5a:d5:6f: 94:7c:ec:31:af:45:13:56:18:7d:4e:0c:38:9c:35: 48:af:75:d3:cd:6c:c4:4c:e6:1b:2c:85:68:cb:eb: a4:a7:14:1e:6c:74:82:38:94:67:84:7a:86:74:03: 10:bb:80:94:a1:12:64:65:d0:b2:92:25:07:f9:7e: 68:bc:d0:61:45:08:9f:72:d5:10:ee:e5:c3:13:96: 4f:f9:eb:42:e1:49:d6:c9:d2:e7:07:a8:39:b8:c9: e8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AA:A0:4E:98:B4:8B:A8:1E:64:4F:E6:6B:8A:CF:C6:93:8F:27:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c6031b31-0b51-32ae-8278-8afedc10eb0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:5c:01:d9:a4:c0:19:d3:c6:f9:dd:e3:73:77:74:b6:fa:97: ed:73:4c:bc:60:7e:b9:81:b8:ee:40:fc:0d:b7:df:21:15:66: 8d:af:94:2b:02:ad:0c:b3:ee:88:3d:0d:8e:76:d1:53:07:93: ae:fd:26:55:26:2e:1e:7d:cc:71:88:65:32:96:75:61:7a:a7: cc:9d:13:90:d6:15:b7:a5:05:53:6d:9d:3e:4f:59:67:60:76: 2c:12:5d:c5:70:69:b5:59:ed:19:b7:e4:50:38:a0:07:b8:8c: 26:e0:7f:02:d3:96:f5:2a:2a:eb:a8:df:9c:8f:0a:c5:14:f1: d0:e4:30:88:b0:ff:1e:a6:5e:48:77:ea:d3:6c:49:89:55:a2: 12:7f:7d:ee:71:12:98:f6:ec:58:be:75:88:e4:a3:83:6c:45: 1f:24:19:fc:91:9d:96:16:5b:7f:e2:8d:fa:c2:16:d8:be:10: fc:e2:16:ee:79:04:8e:39:89:d3:64:23:07:d3:3c:21:5b:4d: 75:fc:a4:7d:ae:03:d3:b9:cf:2d:a1:46:6f:f0:04:86:54:4e: 12:71:31:dd:23:06:e4:dd:16:43:9d:ab:83:75:e1:1c:68:19: c2:17:96:60:59:e9:6e:67:f5:7e:d9:1b:68:d8:86:cf:6a:c5: b9:4a:6c:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqKFr8hUNXFoX06H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNjE2NDgwOVoXDTI1MTAxNDE2NDgwOVowLzEtMCsGA1UEAxMk M2U3ODI4NzItMDQ1OS00NWQzLTliNWUtYjQ1ZGZkNTY5YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IhHLBpUNER0Hd8h3n08zMqJtjqrHiZCgv5X 4Wi+o0Yzp0q6FE+568XeAtOsLsLQ2mLLvgRvXT5TLngz6cAcq5vXZlOlhfvEYdS8 NFW2X6lj5spEOs6zPNslSLSXOu3QIXkm0zkTj66r5UY/zjXUg5nbCMtswk/GISOA qWp/EQm+p69RICJ87IBhLH8CDSKZNZwgYykGWr1jAhclpLGuEVRa1W+UfOwxr0UT Vhh9Tgw4nDVIr3XTzWzETOYbLIVoy+ukpxQebHSCOJRnhHqGdAMQu4CUoRJkZdCy kiUH+X5ovNBhRQifctUQ7uXDE5ZP+etC4UnWydLnB6g5uMnoMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeqoE6YtIuoHmRP5muKz8aTjyc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzYwMzFiMzEtMGI1MS0z MmFlLTgyNzgtOGFmZWRjMTBlYjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFcAdmkwBnTxvnd43N3dLb6l+1zTLxgfrmBuO5A/A233yEVZo2vlCsC rQyz7og9DY520VMHk679JlUmLh59zHGIZTKWdWF6p8ydE5DWFbelBVNtnT5PWWdg diwSXcVwabVZ7Rm35FA4oAe4jCbgfwLTlvUqKuuo35yPCsUU8dDkMIiw/x6mXkh3 6tNsSYlVohJ/fe5xEpj27Fi+dYjko4NsRR8kGfyRnZYWW3/ijfrCFti+EPziFu55 BI45idNkIwfTPCFbTXX8pH2uA9O5zy2hRm/wBIZUThJxMd0jBuTdFkOdq4N14Rxo GcIXlmBZ6W5n9X7ZG2jYhs9qxblKbD4= -----END CERTIFICATE-----Generated at Tue Jul 22 11:49:03 2025 by rpki-client