$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4933c998-3bd5-398a-a712-385a5e8a6c92.roa File: 4933c998-3bd5-398a-a712-385a5e8a6c92.roa (raw, json) Hash identifier: SU52V3WtSxpl5bVE9nnQtC4Wmkh8fEQWCv6AfjglOmU= Subject key identifier: A4:77:AD:6A:FD:52:C9:95:4D:7A:E6:0E:12:85:F1:65:4D:3D:94:18 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584A7780A3E21518438A2DFAA200 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4933c998-3bd5-398a-a712-385a5e8a6c92.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 376 IP address blocks: 206.167.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:a3:e2:15:18:43:8a:2d:fa:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=e8f150f1-478e-49fe-a13a-d6291cd79472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5e:62:12:25:a2:78:0b:aa:e3:12:8a:fa:5c: 4d:41:79:96:e1:90:56:f3:c6:d7:f3:d7:38:90:4c: 49:17:da:2b:09:e3:9c:50:8c:23:d1:17:51:34:35: 2f:fe:10:c2:e0:78:b6:b3:73:19:5b:84:6b:b3:e7: eb:16:2c:25:45:75:22:8a:c4:99:ef:9e:f2:dd:24: dd:cb:01:b5:08:27:81:df:51:cf:73:76:61:46:d3: 61:c5:f1:64:6d:98:0f:51:8e:4d:12:57:34:83:ab: ca:05:73:97:f3:dd:21:12:e5:63:8b:1c:37:9f:dc: d6:8e:6a:12:9a:25:93:1b:28:7c:4f:9a:49:a0:17: 5e:5f:3a:43:34:cb:a1:0b:78:c9:82:8a:28:7f:ca: 3c:66:23:b2:06:ba:ff:a0:cc:78:91:04:d2:d9:d5: 00:cf:14:cc:05:39:79:30:35:1b:b2:3d:fc:dd:6c: b2:d7:55:c2:b4:86:23:6d:20:e0:fa:d4:9e:84:b2: bf:af:e8:6f:7c:3d:7d:57:5c:de:45:bf:2a:91:88: eb:d9:7d:83:67:b1:80:5b:1a:45:81:12:43:9c:54: 34:51:6d:5f:7b:bf:06:83:25:f5:32:06:3f:5b:91: c5:77:26:c4:32:e8:a7:a6:55:cc:35:b3:4e:12:8e: 72:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:77:AD:6A:FD:52:C9:95:4D:7A:E6:0E:12:85:F1:65:4D:3D:94:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4933c998-3bd5-398a-a712-385a5e8a6c92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:05:6d:d0:90:cf:c3:98:99:b2:a3:14:14:96:eb:7e:b5:5c: 6f:5c:46:28:fd:13:97:33:00:7c:6c:06:e0:b4:d7:ba:33:c6: b0:02:15:9e:99:c3:1f:5a:3b:a3:d4:c8:8a:91:46:cc:27:39: 8a:80:92:02:64:16:c3:48:3a:eb:a1:94:ff:0b:15:75:84:30: c3:7f:36:89:c6:85:e1:7e:d3:a0:28:e4:d5:40:1f:8a:29:7a: e0:61:36:d8:a1:83:7f:36:df:e4:f3:25:a2:cc:45:03:31:99: 1c:75:99:ad:82:cb:f9:e4:1b:50:c7:f8:11:c4:d1:3b:40:ce: c9:df:cf:b4:58:a7:21:a7:f2:32:ee:83:07:8a:34:73:0c:d0: 3e:17:c9:10:be:71:45:39:10:fe:e7:89:aa:39:b2:08:29:60: e6:25:0a:3e:ac:f5:59:69:c1:12:13:6e:84:39:27:bb:8e:b9: c9:93:04:0d:e0:d8:f5:98:ab:aa:3d:cf:bd:10:79:5d:4a:ca: a6:36:41:b2:38:6a:5d:a0:85:91:df:4b:77:4a:4c:ac:33:1f: f4:e2:82:3b:49:e5:8d:18:77:40:d8:8f:42:57:01:3b:90:05: 08:93:71:02:1e:32:16:ed:b4:af:d5:a9:1a:e9:41:5a:1e:e2: 19:4e:0b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gKPiFRhDii36ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk ZThmMTUwZjEtNDc4ZS00OWZlLWExM2EtZDYyOTFjZDc5NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV5iEiWieAuq4xKK+lxNQXmW4ZBW88bX89c4 kExJF9orCeOcUIwj0RdRNDUv/hDC4Hi2s3MZW4Rrs+frFiwlRXUiisSZ757y3STd ywG1CCeB31HPc3ZhRtNhxfFkbZgPUY5NElc0g6vKBXOX890hEuVjixw3n9zWjmoS miWTGyh8T5pJoBdeXzpDNMuhC3jJgooof8o8ZiOyBrr/oMx4kQTS2dUAzxTMBTl5 MDUbsj383Wyy11XCtIYjbSDg+tSehLK/r+hvfD19V1zeRb8qkYjr2X2DZ7GAWxpF gRJDnFQ0UW1fe78GgyX1MgY/W5HFdybEMuinplXMNbNOEo5yXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR3rWr9UsmVTXrmDhKF8WVNPZQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvNDkzM2M5OTgtM2JkNS0z OThhLWE3MTItMzg1YTVlOGE2YzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8FbdCQz8OYmbKjFBSW6361XG9cRij9E5czAHxsBuC017ozxrACFZ6Z wx9aO6PUyIqRRswnOYqAkgJkFsNIOuuhlP8LFXWEMMN/NonGheF+06Ao5NVAH4op euBhNtihg3823+TzJaLMRQMxmRx1ma2Cy/nkG1DH+BHE0TtAzsnfz7RYpyGn8jLu gweKNHMM0D4XyRC+cUU5EP7niao5sggpYOYlCj6s9VlpwRITboQ5J7uOucmTBA3g 2PWYq6o9z70QeV1KyqY2QbI4al2ghZHfS3dKTKwzH/TigjtJ5Y0Yd0DYj0JXATuQ BQiTcQIeMhbttK/VqRrpQVoe4hlOC+E= -----END CERTIFICATE-----Generated at Sat Jul 26 20:08:27 2025 by rpki-client