$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27b28b00-07b8-3b86-9122-8a3fd680dabd.roa File: 27b28b00-07b8-3b86-9122-8a3fd680dabd.roa (raw, json) Hash identifier: qtUFz7sO0uCHcPiYtg2v+jvdZcbHwPliSfOPJ3u5k7U= Subject key identifier: 74:71:76:55:F7:CA:75:E1:9C:C5:78:D0:50:14:E7:61:23:03:DB:79 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285849ED4FD245552D036FA6375EF0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27b28b00-07b8-3b86-9122-8a3fd680dabd.roa Signing time: Wed 21 May 2025 13:01:04 +0000 ROA not before: Wed 21 May 2025 13:01:04 +0000 ROA not after: Tue 19 Aug 2025 13:01:04 +0000 asID: 9009 IP address blocks: 206.123.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:4f:d2:45:55:2d:03:6f:a6:37:5e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 21 13:01:04 2025 GMT Not After : Aug 19 13:01:04 2025 GMT Subject: CN=1a80239c-418b-4110-9045-410f714f4cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3f:22:f8:e7:eb:23:e9:15:5b:a6:0e:60:dc: 66:95:f4:59:12:52:1c:0e:a4:f1:5e:35:a9:20:00: 6d:4e:1a:c3:f9:22:dd:91:5d:4c:3e:bb:2a:f6:48: ab:e7:59:b3:9f:b8:04:3f:da:e3:0c:68:8f:ad:db: 04:57:18:70:0f:7a:f1:24:a0:86:24:6e:6d:18:f1: b8:6c:c8:30:3f:b5:55:8b:b2:f3:17:c9:6e:5a:98: 84:2b:de:08:2b:f9:b5:dc:3c:6d:83:30:c7:48:b7: 2a:b9:f6:71:de:3b:d0:42:4e:88:a4:29:39:0f:07: 7f:4c:19:d6:47:43:e1:7a:ad:d6:6c:9a:0e:64:ea: 2a:97:06:20:7c:41:63:8c:f7:27:d2:7c:8e:cd:36: 13:92:af:30:59:d1:26:13:03:f3:f1:33:90:38:3a: 64:51:29:ad:81:7e:f3:95:1a:63:47:bd:4a:2d:fc: 64:4c:a7:88:d7:16:df:5f:58:11:3b:dc:bd:15:3c: 72:90:ee:01:94:5e:44:39:c8:3e:ed:28:8f:b2:17: 37:84:df:68:db:54:59:2f:60:6e:4b:6d:52:f4:be: 8b:af:9a:bd:05:31:85:97:7b:1c:a9:ec:3e:03:fd: 44:14:72:b0:4a:17:d5:be:1d:51:f9:99:d0:ec:ef: 2c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:71:76:55:F7:CA:75:E1:9C:C5:78:D0:50:14:E7:61:23:03:DB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27b28b00-07b8-3b86-9122-8a3fd680dabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0f:2f:8d:67:8a:6e:25:62:23:84:a9:bf:d8:fc:d8:65:47: 39:e3:8f:31:cc:8f:fa:da:11:b8:92:2c:df:67:8c:27:c8:10: 6d:5d:62:c7:72:15:e6:87:63:65:00:9e:ec:64:31:bb:f5:8e: 59:fa:b7:81:6c:7a:25:a0:c3:2f:e3:41:94:c2:df:82:84:de: 4b:79:fb:2f:23:74:a4:cd:2c:60:9e:0b:2d:04:9f:ed:86:0d: 25:20:fe:3f:20:e4:19:f9:ed:77:d7:0a:f8:ba:45:f2:e9:71: 25:22:45:65:97:45:ab:6e:72:b0:04:04:14:df:cd:2c:8c:23: f2:3d:c3:56:ac:eb:6e:55:92:90:3b:1a:3a:e7:1d:28:4f:eb: d3:c2:92:e4:ce:7a:39:92:3a:3f:57:ab:33:11:7c:13:42:06: 93:88:62:03:e3:47:0c:5b:7a:45:a4:e6:49:7f:c1:3c:ad:a5: 0d:90:d6:03:8b:d9:44:a3:31:c0:c4:6b:1d:f0:8a:69:03:29: e1:65:5d:e5:38:2d:c1:8e:c5:5b:b8:86:33:10:21:83:69:63: 42:86:72:58:56:1d:0d:cf:a0:15:0a:9f:f0:f4:42:89:69:66: 67:48:42:0c:37:74:6f:cb:ca:0b:6f:29:6c:9d:e5:8c:ab:14: 53:9b:62:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9JFVS0Db6Y3XvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk MWE4MDIzOWMtNDE4Yi00MTEwLTkwNDUtNDEwZjcxNGY0Y2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz8i+OfrI+kVW6YOYNxmlfRZElIcDqTxXjWp IABtThrD+SLdkV1MPrsq9kir51mzn7gEP9rjDGiPrdsEVxhwD3rxJKCGJG5tGPG4 bMgwP7VVi7LzF8luWpiEK94IK/m13DxtgzDHSLcqufZx3jvQQk6IpCk5Dwd/TBnW R0Pheq3WbJoOZOoqlwYgfEFjjPcn0nyOzTYTkq8wWdEmEwPz8TOQODpkUSmtgX7z lRpjR71KLfxkTKeI1xbfX1gRO9y9FTxykO4BlF5EOcg+7SiPshc3hN9o21RZL2Bu S21S9L6Lr5q9BTGFl3scqew+A/1EFHKwShfVvh1R+ZnQ7O8sjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRxdlX3ynXhnMV40FAU52EjA9t5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjdiMjhiMDAtMDdiOC0z Yjg2LTkxMjItOGEzZmQ2ODBkYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAPL41nim4lYiOEqb/Y/NhlRznjjzHMj/raEbiSLN9njCfIEG1dYsdy FeaHY2UAnuxkMbv1jln6t4FseiWgwy/jQZTC34KE3kt5+y8jdKTNLGCeCy0En+2G DSUg/j8g5Bn57XfXCvi6RfLpcSUiRWWXRatucrAEBBTfzSyMI/I9w1as625VkpA7 GjrnHShP69PCkuTOejmSOj9XqzMRfBNCBpOIYgPjRwxbekWk5kl/wTytpQ2Q1gOL 2USjMcDEax3wimkDKeFlXeU4LcGOxVu4hjMQIYNpY0KGclhWHQ3PoBUKn/D0Qolp ZmdIQgw3dG/LygtvKWyd5YyrFFObYts= -----END CERTIFICATE-----Generated at Tue Jun 3 10:19:01 2025 by rpki-client