$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/952f842b-b2a6-30bc-ae43-85820673e3b2.roa File: 952f842b-b2a6-30bc-ae43-85820673e3b2.roa (raw, json) Hash identifier: KQ9+lpZmJQ0P4mzGoKqx5FaHZBlCwiFXYH9ZBzZTkA8= Subject key identifier: 89:AB:A4:82:40:2F:24:D2:78:0D:E7:8D:70:FE:62:23:EE:5E:88:55 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584A073A2AAAF2345C53F74C4F80 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/952f842b-b2a6-30bc-ae43-85820673e3b2.roa Signing time: Fri 30 May 2025 19:48:37 +0000 ROA not before: Fri 30 May 2025 19:48:37 +0000 ROA not after: Thu 28 Aug 2025 19:48:37 +0000 asID: 7029 IP address blocks: 206.245.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:3a:2a:aa:f2:34:5c:53:f7:4c:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: May 30 19:48:37 2025 GMT Not After : Aug 28 19:48:37 2025 GMT Subject: CN=b02669cc-3de0-4c76-b0f6-d4e40a33acc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:2d:99:39:20:51:10:c1:a5:e4:2f:d5:a8: ef:3b:47:1a:a7:46:22:a7:4e:6f:1b:40:67:68:35: fa:9d:a2:d4:cf:c2:e1:cf:7d:1c:bd:53:b4:fb:35: 1e:12:d1:f8:0c:12:05:fc:9c:c5:a8:00:85:57:1d: ef:ba:e0:bb:fe:a6:a7:a2:50:99:9f:fd:ca:7c:f3: 7c:60:60:35:81:0c:0c:29:56:10:5e:b9:c3:b5:53: 6c:f1:fa:46:f7:9a:a5:90:81:b9:be:eb:00:df:3e: e0:d8:57:de:ae:fa:97:b5:6b:7b:88:bc:12:ae:cf: 4e:65:6c:cd:a5:ce:ba:0d:65:0f:26:78:52:db:4b: da:b4:f1:f7:2d:bb:b2:42:ea:40:07:ef:bc:5d:30: 49:92:75:8c:88:17:c6:09:4a:7d:8e:e9:c0:19:b4: 65:1d:f0:47:35:d2:05:9d:3a:98:d2:65:cf:dd:f6: 7e:6d:19:50:ed:5e:76:2a:02:2d:9d:16:23:76:e4: 14:5b:fb:cb:d7:b8:60:ce:71:13:33:86:e9:64:1c: 5f:1a:b1:f4:4d:8e:d8:cb:77:c9:6f:18:72:ae:3e: 25:30:4c:8b:0a:cd:76:c7:01:5f:62:bd:aa:62:95: 93:ad:06:18:2d:b9:09:9b:17:4b:e7:93:d7:9c:bb: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AB:A4:82:40:2F:24:D2:78:0D:E7:8D:70:FE:62:23:EE:5E:88:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/952f842b-b2a6-30bc-ae43-85820673e3b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 206.245.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:51:16:7d:37:bf:d7:3c:35:ec:f7:fe:92:be:f4:9d:d3:7f: fe:e6:8e:cc:a4:fb:00:d2:07:77:ef:37:92:12:d4:3d:c9:df: 64:f8:62:be:50:5b:66:b1:0b:ac:70:0b:13:6e:58:05:54:d3: 47:6f:32:f9:e7:2d:cc:c4:2a:42:01:d3:be:17:12:fa:74:77: 7a:7d:70:f7:dd:29:bc:0b:a7:63:57:c5:52:44:da:61:c4:8b: e3:c2:da:ba:ba:40:dc:98:69:23:fd:c6:e2:1a:f6:1d:81:1a: 35:f3:ba:44:c4:85:99:fd:b2:d9:1b:7a:e0:fb:ae:03:6e:18: db:d2:44:d0:92:2c:bd:d2:c8:40:3a:2d:e4:05:aa:94:0b:17: 16:cc:a5:7d:cb:aa:7c:d1:57:c1:4d:8e:32:6a:01:ec:e4:37: a2:0b:74:6b:d5:25:ff:92:d2:32:35:ae:42:cd:1e:6b:4b:63: eb:d0:f8:a4:2a:c7:d5:15:c2:e1:bb:e9:61:0d:6a:23:79:3d: ea:66:71:6e:33:b1:62:57:ad:39:55:fe:3a:3b:de:0c:de:ef: 44:26:f2:e5:c0:04:4c:bc:e2:71:4a:85:d7:d9:fa:c1:48:a7: e7:5b:e1:1a:a0:f1:56:67:06:49:98:75:32:5e:48:86:b4:45: 2a:44:8e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHOiqq8jRcU/dMT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MDUzMDE5NDgzN1oXDTI1MDgyODE5NDgzN1owLzEtMCsGA1UEAxMk YjAyNjY5Y2MtM2RlMC00Yzc2LWIwZjYtZDRlNDBhMzNhY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkctmTkgURDBpeQv1ajvO0cap0Yip05vG0Bn aDX6naLUz8Lhz30cvVO0+zUeEtH4DBIF/JzFqACFVx3vuuC7/qanolCZn/3KfPN8 YGA1gQwMKVYQXrnDtVNs8fpG95qlkIG5vusA3z7g2FfervqXtWt7iLwSrs9OZWzN pc66DWUPJnhS20vatPH3LbuyQupAB++8XTBJknWMiBfGCUp9junAGbRlHfBHNdIF nTqY0mXP3fZ+bRlQ7V52KgItnRYjduQUW/vL17hgznETM4bpZBxfGrH0TY7Yy3fJ bxhyrj4lMEyLCs12xwFfYr2qYpWTrQYYLbkJmxdL55PXnLuiwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImrpIJALyTSeA3njXD+YiPuXohVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTUyZjg0MmItYjJhNi0z MGJjLWFlNDMtODU4MjA2NzNlM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBRFn03v9c8Nez3/pK+9J3Tf/7mjsyk+wDSB3fvN5IS1D3J32T4Yr5Q W2axC6xwCxNuWAVU00dvMvnnLczEKkIB074XEvp0d3p9cPfdKbwLp2NXxVJE2mHE i+PC2rq6QNyYaSP9xuIa9h2BGjXzukTEhZn9stkbeuD7rgNuGNvSRNCSLL3SyEA6 LeQFqpQLFxbMpX3LqnzRV8FNjjJqAezkN6ILdGvVJf+S0jI1rkLNHmtLY+vQ+KQq x9UVwuG76WENaiN5PepmcW4zsWJXrTlV/jo73gze70Qm8uXABEy84nFKhdfZ+sFI p+db4Rqg8VZnBkmYdTJeSIa0RSpEjms= -----END CERTIFICATE-----Generated at Sat Jun 7 19:50:13 2025 by rpki-client