$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/966d2a02-29e3-317f-8c12-cbb4d1fd490d.roa File: 966d2a02-29e3-317f-8c12-cbb4d1fd490d.roa (raw, json) Hash identifier: xd0MC5xqcmh8QtHLFDaIoGIPNPdWngTfTMxKP/KGm/E= Subject key identifier: 40:78:57:ED:A0:97:1C:A4:FE:3B:4B:58:0F:78:1B:94:3D:F9:F0:84 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A5D7D5F94311A6AAEC23063C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/966d2a02-29e3-317f-8c12-cbb4d1fd490d.roa Signing time: Mon 30 Jun 2025 17:23:33 +0000 ROA not before: Mon 30 Jun 2025 17:23:33 +0000 ROA not after: Sun 28 Sep 2025 17:23:33 +0000 asID: 134578 IP address blocks: 206.54.14.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5d:7d:5f:94:31:1a:6a:ae:c2:30:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 30 17:23:33 2025 GMT Not After : Sep 28 17:23:33 2025 GMT Subject: CN=780d01a9-bdff-4e74-abf7-3d767f32f7a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:5a:ec:d7:8d:76:df:80:81:37:5a:b4:4d: 4f:a7:0c:d6:fd:b1:44:64:4b:cd:51:f2:45:00:22: bb:bf:ab:bc:2e:02:29:29:a4:4a:a6:35:22:91:2c: d2:53:1e:75:14:c8:0d:9d:b3:2a:41:2f:40:3a:9a: 4b:51:83:b5:a5:a6:61:9a:6d:2d:54:d4:4e:21:95: c1:6d:13:56:98:1a:3e:b7:e4:c5:f9:39:0f:67:b0: b6:17:23:58:02:d8:14:1e:55:c0:30:d6:29:21:26: 7d:1b:55:c5:ed:e4:dd:42:c6:bc:a7:a3:27:95:4d: fd:88:af:40:db:c0:71:35:f9:83:1a:7b:6c:3d:1d: f6:a9:8e:62:27:09:3a:d3:f3:30:c3:e7:5c:81:b4: e8:a8:22:84:0f:58:02:c9:96:0a:a6:14:7f:16:58: 00:15:33:db:bd:3c:1c:d4:9b:e4:70:4d:2d:28:30: 5e:fb:b8:c6:53:ec:34:fa:68:5d:70:26:60:dc:b8: f0:e2:60:47:fc:05:c4:a1:21:e8:5e:b9:8c:0d:03: af:1e:34:70:af:c9:29:2d:ef:19:39:e7:68:c7:a8: 6e:d4:40:f8:37:f1:62:20:df:d0:00:23:3b:25:c1: d2:6d:54:b4:bd:25:d8:bd:db:ca:8e:b7:2e:c2:e0: de:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:78:57:ED:A0:97:1C:A4:FE:3B:4B:58:0F:78:1B:94:3D:F9:F0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/966d2a02-29e3-317f-8c12-cbb4d1fd490d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.14.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:74:6b:ab:3c:48:75:1d:d5:6b:d3:41:a5:9c:6c:17:dd:fc: 55:d1:5a:46:dd:9b:1b:93:b1:b3:43:bc:9b:60:8c:a2:6c:ca: 8f:14:cd:3f:37:33:9e:b8:31:bf:8a:43:03:64:df:80:13:74: e6:9b:80:c6:cb:e0:70:45:2e:08:63:c6:75:78:75:d2:ef:54: cb:b0:50:c4:8c:86:62:dd:61:5d:a9:07:f3:74:f2:87:05:a1: 1f:bf:27:58:ab:cb:b3:e4:a0:5f:67:33:60:87:54:6e:ea:93: a8:44:04:13:04:49:ad:b1:b1:fb:fc:b7:b5:f5:57:3c:c4:0c: c8:af:cf:79:2b:3a:68:03:c6:96:dc:fe:7b:80:74:f3:10:fc: 06:0d:70:03:78:db:2e:59:1b:57:96:c1:ab:37:d6:ba:75:bd: 42:75:94:94:96:44:6b:26:7d:ef:31:a5:ae:d1:3d:e1:45:ac: 42:9b:19:7c:56:ac:9d:a9:b1:e5:a0:c4:e9:21:d5:41:c0:43: 8e:e5:61:be:2a:a4:ae:2f:7f:6e:40:8a:2a:eb:9c:55:9b:8d: af:37:7f:ec:bd:9d:1d:ae:c9:1f:64:bd:dc:21:bd:eb:d4:37: 2a:c5:b0:6c:6e:cc:cc:e6:1c:50:58:8e:13:8b:d9:df:8e:55: 4c:5d:b3:b3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpdfV+UMRpqrsIwY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYzMDE3MjMzM1oXDTI1MDkyODE3MjMzM1owLzEtMCsGA1UEAxMk NzgwZDAxYTktYmRmZi00ZTc0LWFiZjctM2Q3NjdmMzJmN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt1a7NeNdt+AgTdatE1PpwzW/bFEZEvNUfJF ACK7v6u8LgIpKaRKpjUikSzSUx51FMgNnbMqQS9AOppLUYO1paZhmm0tVNROIZXB bRNWmBo+t+TF+TkPZ7C2FyNYAtgUHlXAMNYpISZ9G1XF7eTdQsa8p6MnlU39iK9A 28BxNfmDGntsPR32qY5iJwk60/Mww+dcgbToqCKED1gCyZYKphR/FlgAFTPbvTwc 1JvkcE0tKDBe+7jGU+w0+mhdcCZg3Ljw4mBH/AXEoSHoXrmMDQOvHjRwr8kpLe8Z Oedox6hu1ED4N/FiIN/QACM7JcHSbVS0vSXYvdvKjrcuwuDeHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEB4V+2glxyk/jtLWA94G5Q9+fCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTY2ZDJhMDItMjllMy0z MTdmLThjMTItY2JiNGQxZmQ0OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzjYOgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBndGurPEh1HdVr00GlnGwX3fxV0VpG3Zsbk7GzQ7ybYIyibMqPFM0/ NzOeuDG/ikMDZN+AE3Tmm4DGy+BwRS4IY8Z1eHXS71TLsFDEjIZi3WFdqQfzdPKH BaEfvydYq8uz5KBfZzNgh1Ru6pOoRAQTBEmtsbH7/Le19Vc8xAzIr895KzpoA8aW 3P57gHTzEPwGDXADeNsuWRtXlsGrN9a6db1CdZSUlkRrJn3vMaWu0T3hRaxCmxl8 VqydqbHloMTpIdVBwEOO5WG+KqSuL39uQIoq65xVm42vN3/svZ0drskfZL3cIb3r 1DcqxbBsbszM5hxQWI4Ti9nfjlVMXbOz -----END CERTIFICATE-----Generated at Tue Jul 1 01:47:06 2025 by rpki-client