$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa File: 0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa (raw, json) Hash identifier: D4lIuvnsq4DLC4ofM22Qa/3ocoXWioZS0AV8OYQzY6s= Subject key identifier: FA:4A:47:74:DA:EE:39:7E:C6:F5:B5:CE:21:60:5F:00:B0:81:17:C9 Certificate issuer: /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b Certificate serial: 010D0C9F43285849E7BA6AEC758152D812F89880 Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 0 IP address blocks: 206.53.174.0/24 maxlen: 24 2606:a980:0:7::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:6a:ec:75:81:52:d8:12:f8:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=eff7493c-ea55-4316-8026-53e81620551b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:0d:73:c4:db:85:2d:f4:f7:c4:73:2c:e1: 02:29:41:da:a6:ee:f1:b5:ef:e5:78:c8:33:70:81: 6b:0e:ce:f3:6f:4c:e3:b5:a4:24:8f:df:ca:f9:9c: 3d:94:d2:b7:c0:5a:4b:05:37:47:ed:b2:29:f3:85: ca:85:7d:8f:48:2a:ab:f1:1a:19:b5:1a:5a:61:56: 41:29:e1:65:a4:97:70:e5:57:8d:b7:f5:66:42:d0: 2e:73:f4:38:2a:05:e4:dc:11:1e:c0:2e:a2:12:3b: ac:31:93:a2:2a:c2:22:12:1f:8b:89:1e:17:5a:a0: da:25:45:6b:b9:a9:41:c6:27:a1:f4:46:da:e2:d7: 0b:1b:54:fe:e4:dc:0d:68:43:70:76:ba:16:63:b1: d1:c4:90:85:8f:f5:55:a8:9b:59:a8:7c:70:c0:b0: bc:0d:6f:2a:dd:02:a4:c6:fb:88:3d:89:71:e2:45: 7c:8d:be:05:a0:7d:4b:d9:a4:29:4c:fa:8d:15:5f: a7:6d:3b:a8:2d:43:a2:c7:b7:a3:a0:5c:bd:a9:9d: 0b:b3:9a:e4:df:6f:12:a3:28:2a:93:72:4e:ec:c7: ad:21:e4:f4:a3:b2:db:fa:de:f7:59:56:cc:64:ee: c9:ac:9e:52:bd:5d:c1:ce:b0:36:c0:c2:06:aa:dc: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4A:47:74:DA:EE:39:7E:C6:F5:B5:CE:21:60:5F:00:B0:81:17:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/0957b244-7eff-37b9-a0b1-7e6981aac0f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl X509v3 Authority Key Identifier: keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer sbgp-ipAddrBlock: critical IPv4: 206.53.174.0/24 IPv6: 2606:a980:0:7::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:31:25:d6:e1:c6:9e:d4:58:7b:e4:a8:d9:a9:f4:9c:cd:1f: 61:58:db:8e:12:fb:d7:05:1e:59:a9:bb:02:90:85:6f:13:e2: da:de:0c:a5:6f:5f:0e:a2:ed:77:7e:3e:38:3f:41:67:cc:75: 31:81:3a:ad:e9:d4:c6:fd:98:d2:73:d7:44:17:7d:20:d4:3f: 08:b8:df:6f:8e:32:83:16:7e:82:38:82:3d:f4:06:82:9c:b5: ea:d2:dc:99:d6:60:98:3f:51:af:04:64:97:5b:f6:b5:17:7d: e5:b1:19:70:7e:1f:bb:e4:4d:c1:b9:ba:18:94:70:7c:7e:e1: 12:b2:04:f8:b6:78:d5:68:fe:5f:31:01:ea:6b:e5:88:45:55: c7:9e:2c:74:6b:12:f5:31:09:dd:1d:8f:29:26:ed:69:e7:a6: 9a:12:70:54:e3:21:38:6b:64:16:4e:90:5a:2a:e2:71:d8:01: bd:28:c3:68:bf:3a:2a:e7:92:d6:01:66:a0:12:7b:b1:c0:90: 0e:0a:85:9c:8b:81:7d:f8:b7:a6:90:7d:a3:1e:8a:ff:86:ed: 77:2c:32:fd:73:f9:45:2f:b2:08:98:d2:a5:51:ec:99:aa:fc: 15:5e:49:fb:5d:fb:f0:8d:93:11:d7:32:cf:80:13:e4:c4:82: 72:1a:bd:be -----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgIUAQ0Mn0MoWEnnumrsdYFS2BL4mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJkYWEyMTctZjAwZi00NmM1LWExMDItZTVmZjJhY2Ix MDViMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk ZWZmNzQ5M2MtZWE1NS00MzE2LTgwMjYtNTNlODE2MjA1NTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP4Nc8TbhS3098RzLOECKUHapu7xte/leMgz cIFrDs7zb0zjtaQkj9/K+Zw9lNK3wFpLBTdH7bIp84XKhX2PSCqr8RoZtRpaYVZB KeFlpJdw5VeNt/VmQtAuc/Q4KgXk3BEewC6iEjusMZOiKsIiEh+LiR4XWqDaJUVr ualBxieh9Eba4tcLG1T+5NwNaENwdroWY7HRxJCFj/VVqJtZqHxwwLC8DW8q3QKk xvuIPYlx4kV8jb4FoH1L2aQpTPqNFV+nbTuoLUOix7ejoFy9qZ0Ls5rk328Soygq k3JO7MetIeT0o7Lb+t73WVbMZO7JrJ5SvV3BzrA2wMIGqtzT/wIDAQABo4IDaDCC A2QwHQYDVR0OBBYEFPpKR3Ta7jl+xvW1ziFgXwCwgRfJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRh YTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZmMmFjYjEwNWIvMDk1N2IyNDQtN2VmZi0z N2I5LWEwYjEtN2U2OTgxYWFjMGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmJkYWEyMTctZjAwZi00NmM1LWEx MDItZTVmZjJhY2IxMDViLzJiZGFhMjE3LWYwMGYtNDZjNS1hMTAyLWU1ZmYyYWNi MTA1Yi5jcmwwHwYDVR0jBBgwFoAUwIjTWY7ATOSXd4i3N52Puz3pHqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRhYTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZm MmFjYjEwNWIuY2VyMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQAzjWuMBEE AgACMAsDCQAmBqmAAAAABzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADMSXW4cae1Fh75KjZqfSczR9hWNuO EvvXBR5ZqbsCkIVvE+La3gylb18Oou13fj44P0FnzHUxgTqt6dTG/ZjSc9dEF30g 1D8IuN9vjjKDFn6COII99AaCnLXq0tyZ1mCYP1GvBGSXW/a1F33lsRlwfh+75E3B uboYlHB8fuESsgT4tnjVaP5fMQHqa+WIRVXHnix0axL1MQndHY8pJu1p56aaEnBU 4yE4a2QWTpBaKuJx2AG9KMNovzoq55LWAWagEnuxwJAOCoWci4F9+LemkH2jHor/ hu13LDL9c/lFL7IImNKlUeyZqvwVXkn7XfvwjZMR1zLPgBPkxIJyGr2+ -----END CERTIFICATE-----Generated at Sun Jun 1 03:18:05 2025 by rpki-client