$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/235b8ef0-f7b5-38f9-a813-3166a4b7ce51.roa File: 235b8ef0-f7b5-38f9-a813-3166a4b7ce51.roa (raw, json) Hash identifier: 7hVTAuuZbP8Vn6iqJZaoMfQoJaJQe6rVQifNzTRSxzc= Subject key identifier: 68:C6:07:A4:4C:C9:84:13:D2:0D:C9:3C:D3:D5:00:62:7C:E5:D8:30 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858494B6414372E44DF714AC7CAC0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/235b8ef0-f7b5-38f9-a813-3166a4b7ce51.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 3223 IP address blocks: 206.123.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:14:37:2e:44:df:71:4a:c7:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=5ff302c3-993c-4f65-8d36-b715a3a3cd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:09:d4:4f:45:04:90:0a:f2:14:2c:1a:c5: ac:d3:49:87:e9:71:01:81:9d:2f:50:5d:3a:ba:dd: 21:95:b0:c7:ab:b1:02:c1:02:8a:77:01:f3:d4:ab: aa:f5:8d:9d:16:cb:32:ba:f5:4b:96:12:fd:a7:9b: c9:b1:51:66:e6:2d:85:33:53:04:3a:e6:37:d0:43: df:38:58:34:10:62:b4:5b:f9:07:cf:a7:1f:f4:24: 69:ba:f3:f8:ff:fc:15:bc:43:48:8e:2e:72:57:41: 80:e3:54:e1:e5:75:22:e9:de:41:7f:ed:c7:82:d6: 7c:6b:fc:de:b5:6d:96:ca:f0:3c:2f:5b:d3:8e:5e: 80:7f:8e:a4:0a:3d:89:5e:98:a3:86:69:cc:58:15: 12:28:20:27:4f:40:a2:19:3d:64:f1:bb:5a:b4:04: 7c:4d:bf:2c:6a:f3:34:d3:1a:53:59:fe:bf:85:f8: 0a:56:b5:17:f1:05:6e:20:2d:53:28:70:a5:0b:03: d7:d9:b2:41:cd:b1:af:cf:5b:d0:70:d8:bf:93:08: 6b:37:29:5a:38:49:cf:70:8b:54:68:8f:8d:79:44: 1d:7f:0d:6e:d5:d9:62:01:d5:b8:2e:2e:47:93:d9: cd:94:5b:fd:f2:72:d2:42:5f:8c:6a:14:dc:23:82: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C6:07:A4:4C:C9:84:13:D2:0D:C9:3C:D3:D5:00:62:7C:E5:D8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/235b8ef0-f7b5-38f9-a813-3166a4b7ce51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:f0:4c:3f:fe:fc:a4:ca:30:24:3a:f3:26:bd:9c:4f:0e:be: b4:ba:56:6f:0a:03:98:bc:4b:ea:05:12:a9:ac:80:0e:cd:1a: 1a:1d:6f:e1:46:82:bd:ec:8c:68:bd:1c:fe:ee:ea:91:df:31: 0a:11:b4:6c:46:4a:02:76:5e:bf:54:47:71:78:cf:87:0c:3d: 47:1b:28:bc:aa:de:7a:e9:64:fc:b3:17:59:70:87:f2:65:7f: 7e:75:d1:79:74:3d:0a:e7:29:00:95:27:0d:73:d0:6c:96:2e: 0b:d7:9e:01:ad:44:7c:e4:1a:c4:cd:71:9e:1c:dd:10:e3:27: 29:c3:a6:5b:70:05:f7:de:09:b3:fa:30:f1:d2:af:b9:a9:45: ac:81:35:ed:a9:a2:e9:ff:7e:3a:c6:82:c0:3d:52:db:55:cb: ad:71:5b:d7:82:2b:56:d7:46:b1:88:bd:06:5e:6e:a3:4e:16: a6:de:50:c2:24:48:fd:68:84:cf:d9:30:61:88:f9:6c:e6:68: 30:f5:4e:75:83:41:8f:7b:95:44:6f:b2:c3:e3:65:b9:83:22: 7b:7d:87:cd:8c:36:2b:59:42:05:49:a3:b8:a3:e2:0e:27:27: 86:ae:28:a1:8a:70:e6:d1:c4:f3:4a:21:a5:bf:94:25:ed:95: eb:b5:ba:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBQ3LkTfcUrHysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NWZmMzAyYzMtOTkzYy00ZjY1LThkMzYtYjcxNWEzYTNjZDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjMJ1E9FBJAK8hQsGsWs00mH6XEBgZ0vUF06 ut0hlbDHq7ECwQKKdwHz1Kuq9Y2dFssyuvVLlhL9p5vJsVFm5i2FM1MEOuY30EPf OFg0EGK0W/kHz6cf9CRpuvP4//wVvENIji5yV0GA41Th5XUi6d5Bf+3HgtZ8a/ze tW2WyvA8L1vTjl6Af46kCj2JXpijhmnMWBUSKCAnT0CiGT1k8btatAR8Tb8savM0 0xpTWf6/hfgKVrUX8QVuIC1TKHClCwPX2bJBzbGvz1vQcNi/kwhrNylaOEnPcItU aI+NeUQdfw1u1dliAdW4Li5Hk9nNlFv98nLSQl+MahTcI4JTrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjGB6RMyYQT0g3JPNPVAGJ85dgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjM1YjhlZjAtZjdiNS0z OGY5LWE4MTMtMzE2NmE0YjdjZTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7wTD/+/KTKMCQ68ya9nE8OvrS6Vm8KA5i8S+oFEqmsgA7NGhodb+FG gr3sjGi9HP7u6pHfMQoRtGxGSgJ2Xr9UR3F4z4cMPUcbKLyq3nrpZPyzF1lwh/Jl f3510Xl0PQrnKQCVJw1z0GyWLgvXngGtRHzkGsTNcZ4c3RDjJynDpltwBffeCbP6 MPHSr7mpRayBNe2poun/fjrGgsA9UttVy61xW9eCK1bXRrGIvQZebqNOFqbeUMIk SP1ohM/ZMGGI+WzmaDD1TnWDQY97lURvssPjZbmDInt9h82MNitZQgVJo7ij4g4n J4auKKGKcObRxPNKIaW/lCXtleu1ujo= -----END CERTIFICATE-----Generated at Wed Apr 9 12:48:42 2025 by rpki-client