$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa File: f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa (raw, json) Hash identifier: AgV6FQof14JtrTWTPIQpwUJ2bL3khniu3ncQRJQiyG4= Subject key identifier: DF:E4:6A:A1:74:5A:FD:55:24:AE:92:0A:56:F6:65:EC:17:39:50:AE Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584A506AEFA116EF3E3A968B8F00 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa Signing time: Thu 26 Jun 2025 01:00:49 +0000 ROA not before: Thu 26 Jun 2025 01:00:49 +0000 ROA not after: Wed 24 Sep 2025 01:00:49 +0000 asID: 398420 IP address blocks: 206.71.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:50:6a:ef:a1:16:ef:3e:3a:96:8b:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jun 26 01:00:49 2025 GMT Not After : Sep 24 01:00:49 2025 GMT Subject: CN=141f24cf-f569-486b-8594-fc8dec752cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:76:5a:01:c2:bd:5c:e6:71:ef:9f:33:0a: 90:93:ea:16:7c:e4:5c:5b:3c:7a:7e:2a:2c:1a:57: 63:0b:ef:4c:b1:f7:77:a0:26:2b:2c:8c:f8:f9:20: 00:c2:5f:db:82:51:75:1c:74:96:9c:72:77:42:7d: 9c:9a:c5:c3:e8:92:bf:97:85:2b:9d:af:b2:c9:9c: fc:72:16:41:3e:bb:6e:97:ff:dc:d3:a1:db:2e:cb: 8d:a2:b4:96:e3:01:b6:02:86:ec:3f:40:57:16:6e: 56:b8:a8:5e:5a:69:ce:b2:b8:bd:6a:de:57:d4:6d: b4:d6:25:7f:4e:81:8e:f0:cf:ec:dd:1e:cc:17:3a: 7a:dd:c5:df:a4:bb:55:6e:12:23:97:b4:f2:46:92: f3:04:3c:3f:57:f9:ab:47:48:e0:9c:53:3a:4e:5a: 06:f4:61:19:c3:94:49:ff:f1:12:b5:17:3e:3f:f3: 05:98:21:f7:6e:e7:0e:aa:dc:d9:6a:6a:0b:c7:9d: 53:60:13:75:c7:50:72:6f:16:35:16:d8:53:ce:32: b7:ba:d4:d9:a2:a3:f4:a1:0f:26:f2:c6:7b:e9:b5: f1:7b:44:bf:b6:28:48:06:05:d9:79:e0:10:50:90: 1e:b0:fe:f3:7f:03:7f:4e:e8:64:4d:28:09:74:5c: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E4:6A:A1:74:5A:FD:55:24:AE:92:0A:56:F6:65:EC:17:39:50:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/f6685b7a-5f10-3bf3-8eb9-9b0310d9e34c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 206.71.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:5a:18:72:d9:c2:46:80:e1:8a:82:68:42:16:5f:16:5a:aa: 1f:8a:dc:ee:58:c1:6b:de:6e:b5:58:af:6d:ec:56:5a:4e:87: 29:e6:cc:13:b8:a9:9e:30:b3:b7:2c:98:e9:8b:15:e7:2d:77: 4d:1c:1f:a9:1a:da:22:ae:05:3f:5f:e8:1d:90:14:3f:6b:b1: d5:be:7d:9d:87:9b:b8:0b:e0:b1:09:e6:d9:cd:50:c8:4d:56: c8:33:62:46:91:9e:bb:2f:26:b4:f1:40:6d:37:69:73:03:d8: 1d:2b:92:83:87:c9:a8:6c:8a:35:84:cd:13:93:13:fe:5e:c9: df:76:64:30:8e:71:ea:a1:fd:84:58:0d:d0:90:a8:ec:12:49: 52:ff:8f:46:27:7d:08:3d:4d:64:d5:9a:b6:33:18:bc:64:08: e3:c6:4a:e0:d5:27:da:85:4b:fb:81:4e:72:96:c6:a2:37:bc: a3:bb:4a:8d:e0:dc:59:9a:89:96:54:5c:18:e2:eb:e3:ce:5f: 68:59:e1:0d:c4:8d:ee:2f:30:34:dd:7e:b9:19:89:09:1b:f5: 4a:8b:62:f4:f5:23:dd:7e:c1:93:ec:a7:36:ac:c9:95:2d:2d: 5a:8c:1e:c9:6a:46:c5:cf:02:a3:1a:35:ac:82:52:f1:2e:1d: cb:0a:7e:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpQau+hFu8+OpaLjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDYyNjAxMDA0OVoXDTI1MDkyNDAxMDA0OVowLzEtMCsGA1UEAxMk MTQxZjI0Y2YtZjU2OS00ODZiLTg1OTQtZmM4ZGVjNzUyY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1952WgHCvVzmce+fMwqQk+oWfORcWzx6fios GldjC+9Msfd3oCYrLIz4+SAAwl/bglF1HHSWnHJ3Qn2cmsXD6JK/l4Urna+yyZz8 chZBPrtul//c06HbLsuNorSW4wG2AobsP0BXFm5WuKheWmnOsri9at5X1G201iV/ ToGO8M/s3R7MFzp63cXfpLtVbhIjl7TyRpLzBDw/V/mrR0jgnFM6TloG9GEZw5RJ //EStRc+P/MFmCH3bucOqtzZamoLx51TYBN1x1BybxY1FthTzjK3utTZoqP0oQ8m 8sZ76bXxe0S/tihIBgXZeeAQUJAesP7zfwN/TuhkTSgJdFw28wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/kaqF0Wv1VJK6SClb2ZewXOVCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZjY2ODViN2EtNWYxMC0z YmYzLThlYjktOWIwMzEwZDllMzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzkeSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlaGHLZwkaA4YqCaEIWXxZaqh+K3O5YwWvebrVYr23sVlpOhynmzBO4 qZ4ws7csmOmLFectd00cH6ka2iKuBT9f6B2QFD9rsdW+fZ2Hm7gL4LEJ5tnNUMhN VsgzYkaRnrsvJrTxQG03aXMD2B0rkoOHyahsijWEzROTE/5eyd92ZDCOceqh/YRY DdCQqOwSSVL/j0YnfQg9TWTVmrYzGLxkCOPGSuDVJ9qFS/uBTnKWxqI3vKO7So3g 3FmaiZZUXBji6+POX2hZ4Q3Eje4vMDTdfrkZiQkb9UqLYvT1I91+wZPspzasyZUt LVqMHslqRsXPAqMaNayCUvEuHcsKfqM= -----END CERTIFICATE-----Generated at Fri Jul 4 08:21:01 2025 by rpki-client