$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9cb3074b-5613-3410-ae02-49c4a3ccba88.roa File: 9cb3074b-5613-3410-ae02-49c4a3ccba88.roa (raw, json) Hash identifier: A5F6eOM4g5v9xgN3jAfZMthIvwrhzjQKWhtYpBkR4ZQ= Subject key identifier: 37:D6:87:4B:D8:17:72:F1:0B:DB:B5:90:75:7E:AA:79:A0:52:A1:4D Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F43285849F715137FF7C31A24F1ABE040 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9cb3074b-5613-3410-ae02-49c4a3ccba88.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 14297 IP address blocks: 206.201.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Jun 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:13:7f:f7:c3:1a:24:f1:ab:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=1a4227be-ddaa-42f5-990d-f5c9735683d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:5d:9b:2a:d1:df:d2:d3:57:a6:e1:b9:a5: 00:5e:61:f0:8d:e7:c0:ed:91:bd:4d:5e:c7:dc:df: 70:21:bd:c6:1e:33:cd:f6:3a:35:f4:d7:63:09:17: 67:2c:2a:d8:f6:28:81:aa:1a:26:e4:1b:11:f6:bb: e2:3d:81:b4:67:19:75:23:94:9b:64:0a:55:d7:50: d1:86:21:0d:fd:85:17:ed:f7:c3:2b:f9:bf:98:3c: 2d:a1:23:bd:45:a9:86:bc:f3:f2:86:e7:cd:4b:bc: ee:c6:ec:ab:83:8c:6e:e7:d6:dc:42:77:9e:46:9d: 40:9e:7b:4e:e8:84:2f:3b:95:2c:1c:da:84:3c:50: ec:fa:36:95:eb:62:79:78:a3:5e:c4:65:8d:b7:8a: c4:d9:61:00:99:12:01:01:08:13:ad:37:40:2d:fc: 4d:d6:04:60:3b:ef:06:b8:16:ce:61:43:fa:e1:89: 08:6b:9a:dc:1a:4a:10:1c:10:f8:ba:93:a2:c3:92: 11:df:e2:51:50:c5:f7:ad:b5:12:ee:97:62:47:5a: ec:41:e6:f2:32:27:38:cf:c4:48:d2:bb:26:ae:04: 00:3a:ec:f7:87:28:b4:b7:db:6a:e8:90:34:33:ea: d1:ba:fb:78:cd:6a:fd:f4:a8:5b:37:60:97:df:0a: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D6:87:4B:D8:17:72:F1:0B:DB:B5:90:75:7E:AA:79:A0:52:A1:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/9cb3074b-5613-3410-ae02-49c4a3ccba88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 206.201.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ce:f3:28:8d:a3:74:e5:b8:c2:26:51:6c:fc:7e:84:83:ff: 4e:4b:90:d5:61:95:b1:58:2c:46:63:31:20:98:0d:6a:b3:cc: 46:33:1c:01:b2:26:11:c5:5d:cf:8c:7f:1c:5b:c9:59:5e:de: 52:56:19:18:a4:25:28:d4:a5:1c:0a:75:a8:32:f4:cd:39:d1: e6:ab:53:3d:3a:1f:bb:10:21:e2:84:74:d4:40:62:7c:b2:84: 03:e2:e2:e2:62:28:46:8e:6d:f2:24:51:00:2a:06:ec:3f:73: 26:25:0f:28:7a:8d:72:e0:6b:19:c6:1b:a4:f7:6f:67:40:11: c9:c1:04:1e:65:c9:33:5d:0e:69:ba:0d:55:73:58:6b:3f:59: e1:29:d7:7a:df:c6:85:05:cd:45:62:dc:03:28:eb:a3:ac:57: 20:72:68:d5:85:4d:8d:13:4a:d2:41:ed:59:6a:13:db:e4:ac: 4a:f0:08:83:77:8e:4b:de:8e:83:8a:9d:8d:3d:92:fe:a6:d9: fd:10:c6:fa:8b:4c:af:ad:47:46:7a:3f:de:8e:80:cf:26:9c: 0b:19:b7:68:a9:bc:09:c5:49:93:c9:3b:c2:d4:a1:7e:95:33: 69:4d:88:4c:2b:9a:a5:88:65:aa:6c:61:11:ca:b9:a9:14:cc: a6:2a:36:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRN/98MaJPGr4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk MWE0MjI3YmUtZGRhYS00MmY1LTk5MGQtZjVjOTczNTY4M2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjhdmyrR39LTV6bhuaUAXmHwjefA7ZG9TV7H 3N9wIb3GHjPN9jo19NdjCRdnLCrY9iiBqhom5BsR9rviPYG0Zxl1I5SbZApV11DR hiEN/YUX7ffDK/m/mDwtoSO9RamGvPPyhufNS7zuxuyrg4xu59bcQneeRp1AnntO 6IQvO5UsHNqEPFDs+jaV62J5eKNexGWNt4rE2WEAmRIBAQgTrTdALfxN1gRgO+8G uBbOYUP64YkIa5rcGkoQHBD4upOiw5IR3+JRUMX3rbUS7pdiR1rsQebyMic4z8RI 0rsmrgQAOuz3hyi0t9tq6JA0M+rRuvt4zWr99KhbN2CX3woJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfWh0vYF3LxC9u1kHV+qnmgUqFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvOWNiMzA3NGItNTYxMy0z NDEwLWFlMDItNDljNGEzY2NiYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzskUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrO8yiNo3TluMImUWz8foSD/05LkNVhlbFYLEZjMSCYDWqzzEYzHAGy JhHFXc+MfxxbyVle3lJWGRikJSjUpRwKdagy9M050earUz06H7sQIeKEdNRAYnyy hAPi4uJiKEaObfIkUQAqBuw/cyYlDyh6jXLgaxnGG6T3b2dAEcnBBB5lyTNdDmm6 DVVzWGs/WeEp13rfxoUFzUVi3AMo66OsVyByaNWFTY0TStJB7VlqE9vkrErwCIN3 jkvejoOKnY09kv6m2f0QxvqLTK+tR0Z6P96OgM8mnAsZt2ipvAnFSZPJO8LUoX6V M2lNiEwrmqWIZapsYRHKuakUzKYqNoU= -----END CERTIFICATE-----Generated at Tue Jun 10 05:04:32 2025 by rpki-client