$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa File: ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa (raw, json) Hash identifier: ONP+oLuB1i5gWb2lYz7RqJxoLOi3TBj5csft3gHhM+A= Subject key identifier: 66:B9:31:44:68:1A:84:86:E2:59:F4:B0:76:8E:6C:87:93:D0:7C:B5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A0311D78357898AAC32F71A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa Signing time: Thu 29 May 2025 08:04:08 +0000 ROA not before: Thu 29 May 2025 08:04:08 +0000 ROA not after: Wed 27 Aug 2025 08:04:08 +0000 asID: 134578 IP address blocks: 206.54.11.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:11:d7:83:57:89:8a:ac:32:f7:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 29 08:04:08 2025 GMT Not After : Aug 27 08:04:08 2025 GMT Subject: CN=6470652e-9bf3-4765-929b-bf1abe39f652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:e6:6f:4d:20:3b:49:a4:cc:0d:e9:81:52: 57:de:7e:e9:90:b7:c1:0b:9d:cd:cb:ef:b5:1f:37: 8b:16:eb:48:13:50:e8:19:c3:07:e7:0d:df:13:80: 6a:33:21:28:22:d3:96:e7:b1:b6:0a:a9:a7:d2:e3: 25:52:ba:11:2b:c0:2e:02:33:8d:43:48:c7:86:62: 2b:f9:21:41:77:11:b0:1f:de:7b:f4:d4:a1:06:da: a6:f2:7e:99:1d:30:73:9f:1f:91:31:a2:42:f1:ff: a1:e8:ce:3c:39:18:3d:cf:53:7c:63:a3:66:c7:d6: 96:08:ff:5a:f9:f0:7f:00:cc:1d:ce:70:0c:98:4f: a5:e1:36:81:5b:15:54:99:51:39:f3:7f:4e:15:f5: 9b:26:7d:46:f8:61:7f:67:f0:33:5a:63:3a:6d:77: 68:f8:6b:14:55:27:78:03:5b:4b:e5:c9:45:26:89: 89:08:b1:bc:e5:98:7d:00:35:13:e9:4e:ed:c9:80: 9d:31:f2:68:a7:fa:22:72:c6:5a:33:a6:e9:42:a9: b4:f4:46:bd:57:c1:43:23:75:49:92:af:ef:ef:17: c2:38:18:fa:c0:73:9d:69:20:86:61:03:54:9f:8d: d7:4d:09:6f:dd:e8:ad:62:7d:ad:30:94:08:02:1d: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B9:31:44:68:1A:84:86:E2:59:F4:B0:76:8E:6C:87:93:D0:7C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ba0ea17e-dac9-3ee8-a70a-dc8aebab6e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.11.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:a2:59:e3:8b:89:67:56:35:41:a8:6c:ce:be:b5:4c:94:34: b5:0d:4e:09:ea:e6:c4:8f:24:21:b1:c8:fe:87:40:08:c3:a9: 3c:6a:6c:d1:bd:b0:51:15:5c:16:be:0b:4a:e7:5e:ac:89:9d: 51:95:9e:f1:63:1a:2f:a2:ea:16:ac:11:81:51:ac:cd:5c:ce: b9:27:93:58:9d:6b:1f:cc:80:aa:bf:3f:4c:f4:94:4d:bc:ae: 02:c0:9b:53:7e:df:5f:0f:af:54:0f:22:f8:e7:14:e5:b6:8b: 48:9a:cd:87:ea:57:2b:42:57:48:c5:fa:b8:a5:99:cf:ca:99: a0:73:02:b9:b7:47:d1:e6:1f:92:34:2d:bc:be:77:4a:87:63: 1f:c5:a5:c9:bc:06:2f:11:cb:1c:8f:d4:48:ff:38:5d:e6:09: 78:dd:fe:54:a9:16:89:06:28:a6:ae:42:b5:68:a7:4a:a5:9c: c4:75:76:40:16:3c:c4:d1:27:ad:dd:c5:3e:07:ad:42:49:9f: 94:bb:c8:3d:7e:18:6d:dd:1a:5e:e9:d0:70:82:bf:0b:b8:e8: c7:96:b8:e5:45:a7:a5:fe:4d:a6:12:1c:59:c7:fb:34:1b:ef: cd:81:9e:69:53:a3:92:8f:94:19:39:81:ce:5a:b2:3a:93:68: 4c:e7:2b:9e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoDEdeDV4mKrDL3GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDUyOTA4MDQwOFoXDTI1MDgyNzA4MDQwOFowLzEtMCsGA1UEAxMk NjQ3MDY1MmUtOWJmMy00NzY1LTkyOWItYmYxYWJlMzlmNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxnmb00gO0mkzA3pgVJX3n7pkLfBC53Ny++1 HzeLFutIE1DoGcMH5w3fE4BqMyEoItOW57G2Cqmn0uMlUroRK8AuAjONQ0jHhmIr +SFBdxGwH9579NShBtqm8n6ZHTBznx+RMaJC8f+h6M48ORg9z1N8Y6Nmx9aWCP9a +fB/AMwdznAMmE+l4TaBWxVUmVE5839OFfWbJn1G+GF/Z/AzWmM6bXdo+GsUVSd4 A1tL5clFJomJCLG85Zh9ADUT6U7tyYCdMfJop/oicsZaM6bpQqm09Ea9V8FDI3VJ kq/v7xfCOBj6wHOdaSCGYQNUn43XTQlv3eitYn2tMJQIAh2R+QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGa5MURoGoSG4ln0sHaObIeT0Hy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmEwZWExN2UtZGFjOS0z ZWU4LWE3MGEtZGM4YWViYWI2ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzjYLADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoolnji4lnVjVBqGzOvrVMlDS1DU4J6ubEjyQhscj+h0AIw6k8amzR vbBRFVwWvgtK516siZ1RlZ7xYxovouoWrBGBUazNXM65J5NYnWsfzICqvz9M9JRN vK4CwJtTft9fD69UDyL45xTltotIms2H6lcrQldIxfq4pZnPypmgcwK5t0fR5h+S NC28vndKh2MfxaXJvAYvEcscj9RI/zhd5gl43f5UqRaJBiimrkK1aKdKpZzEdXZA FjzE0Set3cU+B61CSZ+Uu8g9fhht3Rpe6dBwgr8LuOjHlrjlRael/k2mEhxZx/s0 G+/NgZ5pU6OSj5QZOYHOWrI6k2hM5yue -----END CERTIFICATE-----Generated at Thu Jun 5 18:20:38 2025 by rpki-client