$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1218d5c6-756a-3992-a485-5f1f4fb0ae45.roa File: 1218d5c6-756a-3992-a485-5f1f4fb0ae45.roa (raw, json) Hash identifier: e70P7YI4n27LqJYiPQuBF72dQNEscfC5ngS28iiW5zw= Subject key identifier: 8D:A4:CC:C4:99:77:34:A6:D4:CD:28:18:33:55:C6:C9:E6:C7:99:58 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849D85FA2A04139E11E27FAFF40 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1218d5c6-756a-3992-a485-5f1f4fb0ae45.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 25899 IP address blocks: 206.192.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:a2:a0:41:39:e1:1e:27:fa:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=73e25687-2e50-4757-9bba-7488c5b3761e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:2d:ba:52:a7:c7:95:e4:80:09:56:1b:b6: aa:a2:4d:13:1b:e8:bc:64:e8:df:6b:f5:50:0c:fa: f1:8f:f3:fe:2a:08:87:c9:80:c7:5f:10:8b:21:4f: a3:86:f5:d6:09:24:84:b4:d9:b3:05:bf:27:04:34: d4:08:89:5d:75:cb:5d:fa:a9:86:c8:5b:02:1c:db: d6:b5:c7:8b:af:3a:41:a4:4a:3e:c3:d3:59:b8:e3: e4:38:48:47:23:65:ca:0e:94:de:3b:07:08:c9:e3: 86:ee:2c:5f:ef:e3:fa:37:6d:fe:65:14:34:c0:68: 00:45:46:87:8a:55:7f:e9:9a:4b:d0:d8:20:5a:6c: 5d:45:7f:5b:2a:be:a7:eb:5a:1a:ed:52:2a:77:2b: cd:fd:5c:50:85:4f:79:cc:f6:91:17:92:05:59:fd: 55:f7:d6:af:14:db:f2:ec:fa:1b:56:e5:58:9c:54: ab:14:2e:29:79:de:3b:e9:83:de:83:33:a5:b5:38: 97:ba:f1:a3:4e:3b:d9:0f:83:91:c4:85:87:bb:18: 5a:e3:18:8d:e8:63:e6:c9:74:a6:05:22:49:34:23: 10:92:6f:6b:62:21:28:fc:98:f3:f0:0a:c2:48:be: d0:0a:25:34:df:66:8a:ef:c2:be:ff:c2:50:b1:80: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A4:CC:C4:99:77:34:A6:D4:CD:28:18:33:55:C6:C9:E6:C7:99:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/1218d5c6-756a-3992-a485-5f1f4fb0ae45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 206.192.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:1a:bb:bf:dd:75:13:f9:6d:00:31:2a:b9:a5:1e:01:d6:65: c1:4a:c0:8b:ef:b6:d7:7c:44:16:e9:fa:0b:70:d6:4b:77:64: 4d:92:56:db:5c:c7:d5:57:89:84:77:a0:cf:fa:60:b4:36:7d: ac:b9:28:53:aa:e2:72:8e:c3:6a:39:3b:1c:14:43:fc:a0:33: 22:92:11:8e:65:cb:bf:be:2d:b8:7c:36:c4:78:46:8e:30:90: 7b:90:fc:39:b0:55:03:9a:d0:b8:f7:04:64:0e:93:cd:bc:c1: 36:e9:c8:b1:d8:2e:d8:67:b4:e6:f1:b3:ed:21:d1:69:02:16: 6a:0b:b6:9d:f5:a3:0f:c2:dc:5d:88:7d:7c:6b:86:b6:16:24: cb:a4:b8:a3:77:29:2b:77:4b:fd:ba:af:c7:f1:3d:37:05:12: 77:db:e0:1b:ea:df:58:4d:0e:f0:b1:cf:9f:eb:db:c4:9d:70: 39:e4:be:79:ac:0d:ad:a4:27:4c:08:c3:a8:85:9c:7b:55:46: 2a:15:81:f4:64:58:ad:07:c8:2f:a3:73:2b:60:00:24:fd:2c: b0:99:82:fe:5f:4f:0e:17:98:c0:2a:a1:f2:f3:f4:89:c6:48: 8c:e9:47:a4:68:77:fa:9a:8e:4e:af:26:ba:d8:58:3b:66:f2: 96:79:c9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6KgQTnhHif6/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk NzNlMjU2ODctMmU1MC00NzU3LTliYmEtNzQ4OGM1YjM3NjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl44tulKnx5XkgAlWG7aqok0TG+i8ZOjfa/VQ DPrxj/P+KgiHyYDHXxCLIU+jhvXWCSSEtNmzBb8nBDTUCIlddctd+qmGyFsCHNvW tceLrzpBpEo+w9NZuOPkOEhHI2XKDpTeOwcIyeOG7ixf7+P6N23+ZRQ0wGgARUaH ilV/6ZpL0NggWmxdRX9bKr6n61oa7VIqdyvN/VxQhU95zPaRF5IFWf1V99avFNvy 7PobVuVYnFSrFC4ped476YPegzOltTiXuvGjTjvZD4ORxIWHuxha4xiN6GPmyXSm BSJJNCMQkm9rYiEo/Jjz8ArCSL7QCiU032aK78K+/8JQsYC47QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2kzMSZdzSm1M0oGDNVxsnmx5lYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMTIxOGQ1YzYtNzU2YS0z OTkyLWE0ODUtNWYxZjRmYjBhZTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsDmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4au7/ddRP5bQAxKrmlHgHWZcFKwIvvttd8RBbp+gtw1kt3ZE2SVttc x9VXiYR3oM/6YLQ2fay5KFOq4nKOw2o5OxwUQ/ygMyKSEY5ly7++Lbh8NsR4Ro4w kHuQ/DmwVQOa0Lj3BGQOk828wTbpyLHYLthntObxs+0h0WkCFmoLtp31ow/C3F2I fXxrhrYWJMukuKN3KSt3S/26r8fxPTcFEnfb4Bvq31hNDvCxz5/r28SdcDnkvnms Da2kJ0wIw6iFnHtVRioVgfRkWK0HyC+jcytgACT9LLCZgv5fTw4XmMAqofLz9InG SIzpR6Rod/qajk6vJrrYWDtm8pZ5yfk= -----END CERTIFICATE-----Generated at Sun Jun 15 16:29:17 2025 by rpki-client