$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/b9f5a775-9db5-3ced-93e4-ef3be0773c3d.roa File: b9f5a775-9db5-3ced-93e4-ef3be0773c3d.roa (raw, json) Hash identifier: CcvXSGfEtb0lyxsl6roU3CKxpNcAspceSL5YW7gjoh8= Subject key identifier: 9B:67:9D:86:D4:A7:1D:0F:98:2E:2E:86:FA:F5:52:25:AA:2D:80:0F Certificate issuer: /CN=66108100-1fc2-4d23-b89e-3e81cc652270 Certificate serial: 010D0C9F43285849CE9A58922E74F28936922280 Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/b9f5a775-9db5-3ced-93e4-ef3be0773c3d.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 54238 IP address blocks: 206.124.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:58:92:2e:74:f2:89:36:92:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=d94a29c2-d707-48b8-8379-37606bf45552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0c:2f:6c:a4:21:d9:93:2c:9a:8c:91:1e:67: 47:b5:9a:6b:d8:e9:b4:b5:da:d3:63:33:e7:7d:43: 35:dc:b1:7c:49:b4:d6:79:e0:c7:51:8d:76:e2:60: ff:60:da:c7:fd:62:35:ed:cc:35:f3:24:97:f6:9b: 11:f4:f0:87:57:62:21:76:ea:06:0c:ba:0e:99:b2: e7:a1:f8:9e:cb:d4:c8:b2:c2:79:d1:4b:32:40:09: 77:4f:a9:f1:08:62:ab:07:60:cc:40:98:55:b1:20: fa:5c:37:e1:13:2a:38:36:e3:fd:9d:18:aa:eb:f0: 5f:7c:3d:0e:c3:ca:37:97:cc:54:e6:49:f3:07:e1: 38:c8:7d:20:0b:be:15:bb:ab:b0:a8:e9:42:66:f3: 17:58:8c:b3:b8:e5:7a:10:7b:8c:b3:87:3f:55:54: b4:5e:31:56:23:3f:b7:ed:9f:04:d1:a6:e8:62:87: 26:aa:74:56:1b:26:b6:f4:ef:58:dd:1f:85:c8:ab: 81:19:d0:54:ec:cb:47:23:0e:a8:e1:c3:e7:2d:85: e5:28:a5:f0:74:32:3b:2a:1e:86:89:ca:63:5b:cf: 09:0f:d4:3b:b6:68:25:07:77:a2:80:77:bb:3a:f2: fc:f7:1f:69:fd:20:40:dd:23:44:9d:86:a2:37:12: 35:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:67:9D:86:D4:A7:1D:0F:98:2E:2E:86:FA:F5:52:25:AA:2D:80:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/b9f5a775-9db5-3ced-93e4-ef3be0773c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl X509v3 Authority Key Identifier: keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer sbgp-ipAddrBlock: critical IPv4: 206.124.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:03:91:38:70:51:0b:da:8b:14:4d:d8:39:0d:cc:42:42:45: 4d:7c:43:4f:7e:21:90:f1:f7:1f:43:31:93:18:ca:58:fe:98: c8:48:7c:1c:55:a0:a5:b5:d6:fe:2d:f5:62:17:e2:5b:1a:89: 27:59:80:7b:08:5f:fe:45:a7:cb:0e:3c:db:e2:73:1a:ad:a0: a8:76:80:df:16:f3:b0:4e:89:9a:ec:78:71:94:6d:c2:d8:01: 56:ca:3d:06:1a:f8:99:6f:a3:fc:31:fe:d6:ed:25:a9:b7:e1: 1e:3b:9d:66:10:54:cc:e8:f1:10:41:e0:4f:11:d0:8f:91:06: 93:ce:2a:65:43:ae:14:e2:c3:63:c8:15:67:0d:88:21:1e:98: 18:72:c1:05:74:77:9f:ad:8c:10:fe:a3:6a:7a:36:2f:bf:6b: db:b5:10:fb:bc:d0:21:db:0a:a3:61:26:b4:10:ca:90:d1:ff: 8e:9e:1b:49:99:9f:5e:ad:9a:b6:81:65:d8:fe:fd:5c:73:dc: de:a1:e1:e0:c9:22:e7:6f:3c:7a:7f:6e:ab:bd:2b:7e:4f:9b: c9:22:63:8f:b2:0e:fd:54:d5:19:f8:35:01:36:62:48:e8:5d: 79:56:44:a3:08:1c:25:57:14:fd:67:6f:5a:3e:38:93:59:68: c2:7d:e5:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmliSLnTyiTaSIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYxMDgxMDAtMWZjMi00ZDIzLWI4OWUtM2U4MWNjNjUy MjcwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZDk0YTI5YzItZDcwNy00OGI4LTgzNzktMzc2MDZiZjQ1NTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQwvbKQh2ZMsmoyRHmdHtZpr2Om0tdrTYzPn fUM13LF8SbTWeeDHUY124mD/YNrH/WI17cw18ySX9psR9PCHV2IhduoGDLoOmbLn ofiey9TIssJ50UsyQAl3T6nxCGKrB2DMQJhVsSD6XDfhEyo4NuP9nRiq6/BffD0O w8o3l8xU5knzB+E4yH0gC74Vu6uwqOlCZvMXWIyzuOV6EHuMs4c/VVS0XjFWIz+3 7Z8E0aboYocmqnRWGya29O9Y3R+FyKuBGdBU7MtHIw6o4cPnLYXlKKXwdDI7Kh6G icpjW88JD9Q7tmglB3eigHe7OvL89x9p/SBA3SNEnYaiNxI1rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtnnYbUpx0PmC4uhvr1UiWqLYAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NjEw ODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgxY2M2NTIyNzAvYjlmNWE3NzUtOWRiNS0z Y2VkLTkzZTQtZWYzYmUwNzczYzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjYxMDgxMDAtMWZjMi00ZDIzLWI4 OWUtM2U4MWNjNjUyMjcwLzY2MTA4MTAwLTFmYzItNGQyMy1iODllLTNlODFjYzY1 MjI3MC5jcmwwHwYDVR0jBBgwFoAUS/ubJjcpjIkvFL3SC1nWsO5jAEcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NjEwODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgx Y2M2NTIyNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznyiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIDkThwUQvaixRN2DkNzEJCRU18Q09+IZDx9x9DMZMYylj+mMhIfBxV oKW11v4t9WIX4lsaiSdZgHsIX/5Fp8sOPNvicxqtoKh2gN8W87BOiZrseHGUbcLY AVbKPQYa+Jlvo/wx/tbtJam34R47nWYQVMzo8RBB4E8R0I+RBpPOKmVDrhTiw2PI FWcNiCEemBhywQV0d5+tjBD+o2p6Ni+/a9u1EPu80CHbCqNhJrQQypDR/46eG0mZ n16tmraBZdj+/Vxz3N6h4eDJIudvPHp/bqu9K35Pm8kiY4+yDv1U1Rn4NQE2Ykjo XXlWRKMIHCVXFP1nb1o+OJNZaMJ95ZU= -----END CERTIFICATE-----Generated at Sun Jun 8 18:30:41 2025 by rpki-client