$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/096ed644-dc92-3c18-ab10-0f2f45957b18.roa File: 096ed644-dc92-3c18-ab10-0f2f45957b18.roa (raw, json) Hash identifier: 6GRMwSnZSZp+Lis8eWUTcZwCiRsM2sjwaFl5qUgCfEU= Subject key identifier: 28:AC:D4:EF:C1:6F:BB:B9:24:87:D5:48:82:E3:CA:9E:7C:18:07:47 Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F4328584A14655CC0DC5F0BF5AF777840 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/096ed644-dc92-3c18-ab10-0f2f45957b18.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 22851 IP address blocks: 206.176.20.0/23 maxlen: 24 206.176.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:5c:c0:dc:5f:0b:f5:af:77:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=cf55349c-7a63-4d6d-a8c7-58dc310b8766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c3:c3:93:03:fd:86:f9:3c:9b:52:c3:ee:be: 43:5d:27:cd:c7:24:ae:72:1d:87:a2:5b:1e:c0:92: 32:5a:19:e4:f5:63:94:6c:ee:7b:1e:e6:b9:ad:b7: 84:d9:9c:95:4c:5f:02:41:71:ec:4c:bc:71:2f:d3: e4:a3:0e:56:7c:b0:5a:b6:70:37:b5:c1:fe:e0:af: 1e:19:ce:18:f9:df:75:27:a9:96:25:79:e8:14:56: e8:97:a9:63:4e:fd:87:2d:d8:81:0e:bd:57:ed:cf: b1:cf:f3:19:23:d5:d9:95:1c:38:14:d5:ac:b8:93: fa:a1:47:ee:fa:cc:40:09:26:bf:47:28:7d:f9:b1: 96:c4:e2:93:a0:73:a9:06:f5:96:08:29:f2:b3:2e: 8e:04:9c:ee:35:3e:59:b2:75:14:dc:44:cf:f1:2c: a0:18:d6:71:99:f7:e9:b2:03:95:63:e4:b8:71:94: 96:79:10:ee:b0:7a:b4:f8:fc:8f:fe:33:f6:d0:db: c4:cc:04:9d:97:c3:e4:05:f6:98:53:e2:c1:19:74: e9:57:1f:f9:cc:72:f4:a9:d1:8e:69:4b:f9:6f:f0: dd:ae:8d:3b:ad:4d:a3:dc:5e:7d:2c:cc:6e:7e:01: 22:67:15:dd:a5:e1:4d:8b:b3:99:b8:76:3b:78:1b: 20:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AC:D4:EF:C1:6F:BB:B9:24:87:D5:48:82:E3:CA:9E:7C:18:07:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/096ed644-dc92-3c18-ab10-0f2f45957b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv4: 206.176.20.0/23 206.176.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a7:fc:b0:0d:ca:8a:fe:fb:f2:eb:ba:e7:d4:bc:b2:98:8b: dc:f1:93:64:b7:38:de:5b:b0:36:34:2c:ae:b6:2c:4e:11:75: db:c7:2c:41:91:89:e2:09:3b:d5:e0:db:d9:d5:80:66:4e:70: 13:fc:f9:b8:bd:48:3c:e1:2b:41:9e:bb:03:a1:72:e6:c3:86: 6a:13:07:28:ee:eb:5c:f3:29:c4:88:a1:ac:92:ee:45:46:ae: c8:a7:15:b9:7f:fa:48:68:f1:fe:db:fa:d7:84:5f:58:04:7a: 1d:8d:8a:00:76:85:41:fb:2a:c2:04:a8:bf:08:90:74:f0:f7: a9:e6:60:11:b4:0e:bf:4e:91:79:7d:50:28:5c:bc:d7:b0:4f: 34:2d:44:d8:0d:20:bc:04:ee:8e:9b:e7:ca:13:27:a7:12:8e: b4:57:f4:72:aa:e1:ee:ed:2c:1c:9a:53:31:01:25:a2:40:41: ec:32:74:e6:53:14:59:3a:0e:0d:1c:c2:4b:ff:42:9f:4f:e3: 79:cd:22:56:a3:fc:12:a4:2d:a1:1f:38:73:a1:43:29:68:ec: 07:c7:c2:41:de:25:7c:74:48:11:40:2b:e0:a0:b5:05:7f:88: 5c:77:db:cc:cf:53:c9:60:25:e9:49:9d:65:68:2b:1a:e8:d1: dd:ae:42:a1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoUZVzA3F8L9a93eEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2Y1NTM0OWMtN2E2My00ZDZkLWE4YzctNThkYzMxMGI4NzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18PDkwP9hvk8m1LD7r5DXSfNxySuch2Holse wJIyWhnk9WOUbO57Hua5rbeE2ZyVTF8CQXHsTLxxL9Pkow5WfLBatnA3tcH+4K8e Gc4Y+d91J6mWJXnoFFbol6ljTv2HLdiBDr1X7c+xz/MZI9XZlRw4FNWsuJP6oUfu +sxACSa/Ryh9+bGWxOKToHOpBvWWCCnysy6OBJzuNT5ZsnUU3ETP8SygGNZxmffp sgOVY+S4cZSWeRDusHq0+PyP/jP20NvEzASdl8PkBfaYU+LBGXTpVx/5zHL0qdGO aUv5b/Ddro07rU2j3F59LMxufgEiZxXdpeFNi7OZuHY7eBsgPQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCis1O/Bb7u5JIfVSILjyp58GAdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvMDk2ZWQ2NDQtZGM5Mi0z YzE4LWFiMTAtMGYyZjQ1OTU3YjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzrAUAwQA zrA2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADKn/LANyor++/LruufUvLKYi9zxk2S3ON5bsDY0LK62LE4R ddvHLEGRieIJO9Xg29nVgGZOcBP8+bi9SDzhK0GeuwOhcubDhmoTByju61zzKcSI oayS7kVGrsinFbl/+kho8f7b+teEX1gEeh2NigB2hUH7KsIEqL8IkHTw96nmYBG0 Dr9OkXl9UChcvNewTzQtRNgNILwE7o6b58oTJ6cSjrRX9HKq4e7tLByaUzEBJaJA QewydOZTFFk6Dg0cwkv/Qp9P43nNIlaj/BKkLaEfOHOhQylo7AfHwkHeJXx0SBFA K+CgtQV/iFx328zPU8lgJelJnWVoKxro0d2uQqE= -----END CERTIFICATE-----Generated at Mon Jun 9 02:06:01 2025 by rpki-client