$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa File: 27d260f7-208f-3bd1-a06b-3da7f77567a0.roa (raw, json) Hash identifier: hQUi6RXZZA/UnW1JyFvLFK2Diq1Ge2Rv9XamjkPoDHo= Subject key identifier: 09:85:BC:9D:CF:81:2D:E4:F5:1D:F3:D8:62:3C:F6:20:EB:44:A8:CF Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F432858495C2439E8E1268539B52DE780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 9009 IP address blocks: 206.123.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:39:e8:e1:26:85:39:b5:2d:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=38f6a044-e066-47ee-88b5-3ef61bc44ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:65:56:59:20:45:34:d9:fd:9f:b2:df:f1:70: 8d:94:e1:45:7a:78:36:f6:7f:85:f8:ac:63:71:02: 43:66:3b:0a:8d:0c:d1:13:15:0a:c4:14:b3:3f:7d: 19:ee:e0:02:c5:87:73:74:1c:4d:a4:90:03:fd:2b: 7b:20:f9:03:43:be:f6:b4:a1:0c:08:4d:11:eb:03: 1b:19:38:20:ef:9a:6c:92:89:79:16:5f:86:ac:65: 5e:2c:23:fd:1f:7c:93:fb:07:1e:85:a0:5b:d2:22: 0d:28:e3:a5:73:07:8b:b6:ef:fb:d3:c2:af:61:2b: d7:03:c5:06:50:32:7e:f2:ab:23:a5:a5:5a:a2:af: a4:37:0b:5f:83:a2:e8:8f:b1:1a:0b:a0:72:69:f6: 32:dd:08:48:12:f2:d6:43:3f:f3:74:02:00:a1:7e: 68:a7:18:2d:5d:0d:46:4b:12:56:73:d8:e1:86:55: e3:c3:d9:a9:5c:b1:c5:86:8c:a0:f5:67:a2:03:0b: 06:b6:68:61:cf:ec:aa:cc:fb:cf:bc:cf:7f:09:69: e5:36:1d:75:18:a3:8a:3d:16:ab:07:6d:99:c5:21: 04:4a:52:4e:ea:6d:ce:55:af:d5:67:0e:8a:ce:90: ef:5c:49:26:6f:6d:90:75:d8:97:43:1d:c4:60:80: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:85:BC:9D:CF:81:2D:E4:F5:1D:F3:D8:62:3C:F6:20:EB:44:A8:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/27d260f7-208f-3bd1-a06b-3da7f77567a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:97:ae:24:37:00:d3:36:a1:95:16:bf:13:ef:dc:74:a6:2f: 57:b2:a9:a9:d2:33:02:2f:27:fe:e5:a6:e6:c8:cd:2a:df:23: 51:98:5d:df:e5:b3:58:db:1c:b5:0d:4b:57:95:e9:9b:25:7d: 9a:25:a8:44:52:28:92:8a:97:2d:b3:71:6f:3e:f8:ac:64:70: 0f:8a:3d:4a:54:5c:37:40:73:03:e2:70:31:cf:a9:16:18:1f: a6:89:3b:ac:95:00:36:82:32:1c:21:8e:1b:ff:da:b0:78:cf: 0b:93:d9:e4:e1:0b:88:db:cf:d8:d3:19:a2:f1:07:8a:d6:72: 7d:73:87:04:b3:9d:f7:e7:cd:8a:23:bb:1c:b6:2f:76:6f:78: 8f:db:cc:fb:4e:26:58:f3:40:9a:37:6c:ae:5f:90:6d:73:14: d8:21:b8:84:30:5f:e5:49:4b:f9:94:28:bd:79:83:29:29:71: 77:ef:17:84:00:ca:34:9d:ea:86:ce:93:66:c3:00:45:1b:e0: 72:fa:36:7e:ce:4d:1e:b9:e4:62:73:82:b4:f0:37:e5:b8:ae: 16:ce:70:7d:2c:86:12:4f:fa:7b:70:29:54:3f:3d:ae:91:4e: bd:5b:7f:fb:fa:ae:2e:67:9d:e5:a4:e7:58:39:c6:63:ad:4c: 03:85:5f:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDno4SaFObUt54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk MzhmNmEwNDQtZTA2Ni00N2VlLTg4YjUtM2VmNjFiYzQ0YmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWVWWSBFNNn9n7Lf8XCNlOFFeng29n+F+Kxj cQJDZjsKjQzRExUKxBSzP30Z7uACxYdzdBxNpJAD/St7IPkDQ772tKEMCE0R6wMb GTgg75pskol5Fl+GrGVeLCP9H3yT+wcehaBb0iINKOOlcweLtu/708KvYSvXA8UG UDJ+8qsjpaVaoq+kNwtfg6Loj7EaC6ByafYy3QhIEvLWQz/zdAIAoX5opxgtXQ1G SxJWc9jhhlXjw9mpXLHFhoyg9WeiAwsGtmhhz+yqzPvPvM9/CWnlNh11GKOKPRar B22ZxSEESlJO6m3OVa/VZw6KzpDvXEkmb22QddiXQx3EYIDFnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmFvJ3PgS3k9R3z2GI89iDrRKjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjdkMjYwZjctMjA4Zi0z YmQxLWEwNmItM2RhN2Y3NzU2N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+XriQ3ANM2oZUWvxPv3HSmL1eyqanSMwIvJ/7lpubIzSrfI1GYXd/l s1jbHLUNS1eV6ZslfZolqERSKJKKly2zcW8++KxkcA+KPUpUXDdAcwPicDHPqRYY H6aJO6yVADaCMhwhjhv/2rB4zwuT2eThC4jbz9jTGaLxB4rWcn1zhwSznffnzYoj uxy2L3ZveI/bzPtOJljzQJo3bK5fkG1zFNghuIQwX+VJS/mUKL15gykpcXfvF4QA yjSd6obOk2bDAEUb4HL6Nn7OTR655GJzgrTwN+W4rhbOcH0shhJP+ntwKVQ/Pa6R Tr1bf/v6ri5nneWk51g5xmOtTAOFXx0= -----END CERTIFICATE-----Generated at Sat Apr 12 02:16:02 2025 by rpki-client