$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa File: 828ae03b-a727-34a7-b93a-e90b4f4a563b.roa (raw, json) Hash identifier: dMeJCV8uHsdVPbNkynhyeT0Xnq8Yoa8u5Yfn9aZD1CU= Subject key identifier: 40:C4:69:82:4E:DB:08:48:9A:95:BC:8F:77:B7:31:F9:6F:E3:AD:E4 Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Certificate serial: 010D0C9F4328584A6DBB39E14C9ED53CFEDDF280 Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 142064 IP address blocks: 206.168.133.0/24 maxlen: 24 2602:fbd9:100::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:39:e1:4c:9e:d5:3c:fe:dd:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=065b33c8-3812-4294-9121-fda0ed0b8093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:6e:16:ae:cd:57:c8:c7:bc:fa:4c:95:b7: e0:6c:84:d3:50:7d:64:93:a3:47:61:30:c3:9d:fd: 47:a5:58:5d:6b:fa:ce:bd:e6:b7:51:d6:c5:da:88: 4a:ba:00:8e:c4:c0:a3:c5:5e:3f:97:ef:ec:61:72: 78:cf:c7:73:75:dc:95:b3:9c:f5:26:e3:bc:d8:0f: 74:2b:79:79:eb:30:e3:70:da:15:55:2f:03:ed:77: ba:aa:5a:0e:e4:35:7e:7b:32:df:68:75:8e:37:ba: 3d:23:9d:83:fe:36:33:23:ae:32:7c:4a:8c:48:f2: 66:78:a8:b2:2c:ba:f1:63:d5:58:5c:2e:4b:09:9e: 8e:61:6e:9e:f0:3a:3f:89:30:b9:e3:ca:d5:2a:71: 5f:4c:b9:3f:f1:08:5c:01:8d:6e:79:26:c6:c4:f8: f8:3d:dc:05:8d:a3:b0:d8:02:a1:c5:38:8b:72:b7: 1f:a6:ad:3b:a3:f0:86:12:8e:63:a4:89:7f:10:e8: 11:b2:3c:cd:fa:64:4c:5d:9d:92:a2:ca:2f:b7:b3: ea:48:4a:24:3e:99:58:29:cd:8e:8f:38:37:05:79: 2f:25:33:99:60:60:c6:f5:86:f5:6b:bf:8d:69:18: bc:b0:48:db:c3:ec:b8:3e:c4:2c:03:de:2e:fa:78: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C4:69:82:4E:DB:08:48:9A:95:BC:8F:77:B7:31:F9:6F:E3:AD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl X509v3 Authority Key Identifier: keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer sbgp-ipAddrBlock: critical IPv4: 206.168.133.0/24 IPv6: 2602:fbd9:100::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:23:28:2a:ad:05:d5:84:49:01:16:1e:ed:a5:5c:bc:4e:59: 2c:b9:88:26:56:d9:31:72:4a:ea:10:63:26:a6:93:cc:14:28: 1b:82:5b:0e:e9:40:0b:83:ed:66:07:de:0c:d1:51:87:a3:dc: 6c:e9:d1:e1:a4:7b:f3:9c:39:af:c6:ef:dc:ad:ae:af:c8:9f: f0:50:8b:8d:a3:cc:d7:b4:7e:a9:8c:92:3b:f7:c1:53:5c:2c: de:38:f3:d6:72:74:b4:74:90:cf:4b:33:cc:5d:da:95:50:ff: de:52:b1:60:2c:41:01:b8:2f:01:e9:9d:f5:4f:ba:10:a2:a4: fa:6b:07:2f:61:06:9b:04:88:59:2a:78:c2:e4:21:78:ac:45: 0a:5f:a1:b2:37:dc:29:b6:c1:f2:fc:16:73:60:81:df:37:1c: 85:6b:36:dd:10:32:04:04:29:1d:fa:84:08:0f:fa:98:0e:f5: 8e:ba:72:78:95:20:6e:94:00:51:ed:79:ad:1c:8d:83:d7:9e: 2d:cb:42:9d:04:b7:0a:4e:4a:b0:26:f2:2c:65:45:52:88:31: 52:61:7f:f6:24:09:7d:95:71:9e:01:f8:b4:ae:a8:f9:37:05: 9c:6c:a5:64:71:10:9d:d2:d5:dc:4b:f6:db:dd:4d:fc:86:66: 91:9c:77:e3 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEptuznhTJ7VPP7d8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl Njc2MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk MDY1YjMzYzgtMzgxMi00Mjk0LTkxMjEtZmRhMGVkMGI4MDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNNuFq7NV8jHvPpMlbfgbITTUH1kk6NHYTDD nf1HpVhda/rOvea3UdbF2ohKugCOxMCjxV4/l+/sYXJ4z8dzddyVs5z1JuO82A90 K3l56zDjcNoVVS8D7Xe6qloO5DV+ezLfaHWON7o9I52D/jYzI64yfEqMSPJmeKiy LLrxY9VYXC5LCZ6OYW6e8Do/iTC548rVKnFfTLk/8QhcAY1ueSbGxPj4PdwFjaOw 2AKhxTiLcrcfpq07o/CGEo5jpIl/EOgRsjzN+mRMXZ2Sosovt7PqSEokPplYKc2O jzg3BXkvJTOZYGDG9Yb1a7+NaRi8sEjbw+y4PsQsA94u+niowQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFEDEaYJO2whImpW8j3e3Mflv463kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvODI4YWUwM2ItYTcyNy0z NGE3LWI5M2EtZTkwYjRmNGE1NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2 YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw MjFlY2U2NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzqiFMA8E AgACMAkDBwQmAvvZAQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARyMoKq0F1YRJARYe7aVcvE5ZLLmIJlbZ MXJK6hBjJqaTzBQoG4JbDulAC4PtZgfeDNFRh6PcbOnR4aR785w5r8bv3K2ur8if 8FCLjaPM17R+qYySO/fBU1ws3jjz1nJ0tHSQz0szzF3alVD/3lKxYCxBAbgvAemd 9U+6EKKk+msHL2EGmwSIWSp4wuQheKxFCl+hsjfcKbbB8vwWc2CB3zcchWs23RAy BAQpHfqECA/6mA71jrpyeJUgbpQAUe15rRyNg9eeLctCnQS3Ck5KsCbyLGVFUogx UmF/9iQJfZVxngH4tK6o+TcFnGylZHEQndLV3Ev2291N/IZmkZx34w== -----END CERTIFICATE-----Generated at Sun Jul 27 12:09:40 2025 by rpki-client