$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/45b9e6db-9715-34eb-967d-8fb6aa9ec867.roa File: 45b9e6db-9715-34eb-967d-8fb6aa9ec867.roa (raw, json) Hash identifier: DbXVsSM/+LMRBmbokt2VaxZNSy+v+OSYd4FgmUERtEs= Subject key identifier: 5E:B3:01:59:D3:02:32:09:1C:1A:39:DF:7F:70:A0:E6:51:37:F3:BA Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A0739CA611DFE91DE80130B00 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/45b9e6db-9715-34eb-967d-8fb6aa9ec867.roa Signing time: Fri 30 May 2025 19:47:52 +0000 ROA not before: Fri 30 May 2025 19:47:52 +0000 ROA not after: Thu 28 Aug 2025 19:47:52 +0000 asID: 7029 IP address blocks: 206.245.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:39:ca:61:1d:fe:91:de:80:13:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 30 19:47:52 2025 GMT Not After : Aug 28 19:47:52 2025 GMT Subject: CN=f58427f0-3c90-4fbd-bbf4-f30c571f5656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:64:48:82:bb:b0:12:1e:4f:c2:7a:16:58:95: 19:a9:2e:be:a5:2b:3d:9b:9d:7f:d8:21:b1:1a:4a: b9:e4:4f:7c:a4:0e:41:c1:8b:0e:22:38:b9:ad:8a: 77:69:ff:01:f3:01:64:55:fe:41:df:c7:c3:01:cf: ef:6a:0f:4b:93:03:ed:a5:db:c0:aa:18:62:b6:9c: 9d:68:83:e9:11:bc:53:8c:c1:25:3c:4e:0e:ec:17: 23:28:cb:d1:eb:55:4e:19:1a:d8:59:e3:5d:9d:a0: 9f:e9:7b:dc:04:5a:1c:95:87:b5:e8:33:3b:be:a5: f2:91:73:d4:23:c2:44:45:45:d6:aa:6d:99:b9:f5: 27:7f:a0:cb:80:bf:e4:33:8e:ff:a8:c7:7f:2d:5f: 8e:e0:80:e9:2a:a6:f7:bc:0a:50:40:5b:d7:06:ed: 11:a0:fc:ac:d6:d4:c0:d1:4a:a4:00:2f:b9:32:53: 56:fd:07:e0:b2:27:cb:a4:e2:c6:36:cc:0e:99:6f: ba:ab:5a:4a:6a:64:64:71:78:e3:a8:29:4f:95:58: 04:51:0c:d6:7c:87:bd:b6:98:aa:96:f5:36:6a:ff: 98:24:44:99:bc:c4:b9:e7:60:87:e4:2d:29:04:ac: ec:15:56:97:b2:dd:9c:06:0e:37:59:5c:e2:ba:04: 8b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:01:59:D3:02:32:09:1C:1A:39:DF:7F:70:A0:E6:51:37:F3:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/45b9e6db-9715-34eb-967d-8fb6aa9ec867.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:7b:75:14:cd:ef:12:6e:dd:12:01:23:fe:ed:51:d6:d9:9b: 70:35:6b:b3:b5:79:5a:6a:c4:0e:0f:1f:7d:9f:30:95:a6:6f: 16:40:82:7b:14:37:58:8e:8c:17:d9:c2:8f:66:b8:ac:6d:1d: 48:e9:6a:3d:69:9d:89:be:09:fe:3d:c9:3b:97:e1:72:0b:b1: f2:07:12:d7:57:a0:c5:c1:b8:aa:4a:2f:3e:d0:da:3b:8f:5d: a7:83:1b:4d:25:d8:33:9d:99:d9:7c:12:af:64:20:2f:aa:45: 66:a9:10:4f:25:95:0c:1b:09:6b:7b:ef:51:c9:56:be:2f:b6: 23:30:6e:d3:1a:6e:2c:bf:c3:20:64:72:cb:d4:c5:fd:80:09: 5c:e9:5a:b3:57:2b:2d:13:db:fd:e8:cd:97:09:8e:98:05:54: b7:e7:56:bb:b3:a2:57:01:0c:8e:61:0c:ab:01:95:25:dc:1e: 59:ac:72:71:e0:e3:b0:11:e1:ab:d9:e0:ff:d0:54:2c:e0:d8: df:e3:84:f7:2a:bc:c4:33:d8:1f:da:3f:b8:5b:92:cf:d9:49: 79:69:2b:e4:eb:a6:46:1e:7a:75:92:58:65:f2:5f:ab:8c:7a: 49:ec:c6:3a:48:ed:dd:f4:71:ac:bf:4b:ea:24:c4:77:b3:ec: c4:ec:f9:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHOcphHf6R3oATCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDUzMDE5NDc1MloXDTI1MDgyODE5NDc1MlowLzEtMCsGA1UEAxMk ZjU4NDI3ZjAtM2M5MC00ZmJkLWJiZjQtZjMwYzU3MWY1NjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGRIgruwEh5PwnoWWJUZqS6+pSs9m51/2CGx Gkq55E98pA5BwYsOIji5rYp3af8B8wFkVf5B38fDAc/vag9LkwPtpdvAqhhitpyd aIPpEbxTjMElPE4O7BcjKMvR61VOGRrYWeNdnaCf6XvcBFoclYe16DM7vqXykXPU I8JERUXWqm2ZufUnf6DLgL/kM47/qMd/LV+O4IDpKqb3vApQQFvXBu0RoPys1tTA 0UqkAC+5MlNW/QfgsifLpOLGNswOmW+6q1pKamRkcXjjqClPlVgEUQzWfIe9tpiq lvU2av+YJESZvMS552CH5C0pBKzsFVaXst2cBg43WVziugSL3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6zAVnTAjIJHBo5339woOZRN/O6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvNDViOWU2ZGItOTcxNS0z NGViLTk2N2QtOGZiNmFhOWVjODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZ7dRTN7xJu3RIBI/7tUdbZm3A1a7O1eVpqxA4PH32fMJWmbxZAgnsU N1iOjBfZwo9muKxtHUjpaj1pnYm+Cf49yTuX4XILsfIHEtdXoMXBuKpKLz7Q2juP XaeDG00l2DOdmdl8Eq9kIC+qRWapEE8llQwbCWt771HJVr4vtiMwbtMabiy/wyBk csvUxf2ACVzpWrNXKy0T2/3ozZcJjpgFVLfnVruzolcBDI5hDKsBlSXcHlmscnHg 47AR4avZ4P/QVCzg2N/jhPcqvMQz2B/aP7hbks/ZSXlpK+TrpkYeenWSWGXyX6uM eknsxjpI7d30cay/S+okxHez7MTs+eA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:24:58 2025 by rpki-client