$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/a8d95147-2bf2-381a-b436-c637c0802b79.roa File: a8d95147-2bf2-381a-b436-c637c0802b79.roa (raw, json) Hash identifier: NwHrpcjd2RZV6aCJN5/MGWl0zCc+F8Rct2eNcdr8hy0= Subject key identifier: AD:AA:97:FB:86:D7:90:7A:65:0D:2B:46:14:C5:FC:59:6C:0F:B6:D8 Certificate issuer: /CN=03d20efd-729c-46b2-b268-510d1f9f7dd3 Certificate serial: 010D0C9F4328584A03A5476E299EC63410456F00 Authority key identifier: EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/a8d95147-2bf2-381a-b436-c637c0802b79.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 393424 IP address blocks: 206.108.0.0/24 maxlen: 24 2602:fde5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:47:6e:29:9e:c6:34:10:45:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d20efd-729c-46b2-b268-510d1f9f7dd3 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=160f28bf-4149-4f2c-a8d7-c70a01c3d976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:19:63:ef:9f:e0:de:99:ec:52:a4:ab:9b: 57:24:f4:e2:e9:a7:43:97:f8:02:e9:90:82:5a:b0: 09:c4:52:92:59:c4:f4:ac:9b:c0:25:c0:45:1a:a3: 43:25:38:f2:63:99:6d:97:3b:64:49:be:52:81:91: d7:a4:67:87:93:e4:95:b1:26:22:b2:b8:33:d2:ab: da:2a:d8:03:e4:80:ec:95:8c:2f:25:e1:82:d9:f8: 46:4e:51:c6:db:1f:0f:ec:36:42:f6:7c:9d:df:d4: e1:92:b0:f1:ec:a8:7f:34:aa:a3:e9:dd:81:42:56: 73:12:25:8d:c8:57:49:09:df:34:8d:b0:c0:df:eb: 2e:0a:f9:0f:ce:c6:c4:26:58:3f:f5:e5:fe:8c:db: b2:44:14:c9:69:2a:10:eb:ab:fb:e5:6c:3d:18:c8: d8:92:31:98:a7:80:56:01:97:e9:9c:15:90:ea:0d: 4d:e0:c4:69:22:b3:49:76:0d:68:f3:af:26:cb:2b: e0:c8:b1:6f:1e:35:78:aa:51:ea:83:9b:99:ad:e2: e2:4d:7d:e7:10:d3:8a:d1:1a:43:94:34:ac:db:69: dd:8e:f1:01:22:84:59:0b:c2:e4:71:3f:bb:0e:86: bb:ad:46:2c:a8:bc:ba:4c:69:8f:df:fe:66:29:0c: f6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:AA:97:FB:86:D7:90:7A:65:0D:2B:46:14:C5:FC:59:6C:0F:B6:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/a8d95147-2bf2-381a-b436-c637c0802b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl X509v3 Authority Key Identifier: keyid:EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer sbgp-ipAddrBlock: critical IPv4: 206.108.0.0/24 IPv6: 2602:fde5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:07:66:93:fd:8b:ab:eb:09:06:39:7f:e0:aa:bf:f8:90:bb: 13:d3:5a:69:32:39:55:d2:83:74:e7:05:1d:f4:f6:2d:1f:c1: f6:36:79:26:16:ca:93:d8:e5:24:44:dc:d3:d1:af:53:a1:c9: 01:cf:27:5a:be:f2:9b:74:f2:91:10:da:44:c2:bf:20:90:b9: cc:51:c2:48:a3:cb:a9:c5:43:eb:0b:cc:a0:e8:25:52:ad:78: a5:c5:e7:72:18:1b:e8:94:12:84:1b:2e:f1:7b:3f:67:cf:27: c1:1b:25:c8:93:da:5b:5b:9c:35:37:0a:6c:70:9a:74:bc:0b: 1e:37:ec:7f:de:f9:69:d8:bd:7c:4f:63:da:f4:ce:33:a1:b8: 90:c9:7a:e4:74:dd:6e:f4:8b:c2:c9:00:98:80:9c:d2:3d:1b: c1:73:0c:2e:7c:48:05:62:84:2b:14:53:01:5a:b3:92:81:ea: 1b:41:84:08:fd:f0:b4:94:02:26:01:6d:08:29:ae:4f:4a:b8: f3:19:ea:6d:c1:ca:c2:5b:95:52:09:0c:52:a2:82:39:bf:bd: a0:64:6f:1d:7f:93:33:5d:92:89:9f:39:e7:d7:20:26:bc:eb: dd:e2:10:d4:77:2c:59:c5:27:7f:37:7e:96:b9:f5:da:a2:57: da:54:aa:e7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoDpUduKZ7GNBBFbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNkMjBlZmQtNzI5Yy00NmIyLWIyNjgtNTEwZDFmOWY3 ZGQzMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MTYwZjI4YmYtNDE0OS00ZjJjLWE4ZDctYzcwYTAxYzNkOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr4ZY++f4N6Z7FKkq5tXJPTi6adDl/gC6ZCC WrAJxFKSWcT0rJvAJcBFGqNDJTjyY5ltlztkSb5SgZHXpGeHk+SVsSYisrgz0qva KtgD5IDslYwvJeGC2fhGTlHG2x8P7DZC9nyd39ThkrDx7Kh/NKqj6d2BQlZzEiWN yFdJCd80jbDA3+suCvkPzsbEJlg/9eX+jNuyRBTJaSoQ66v75Ww9GMjYkjGYp4BW AZfpnBWQ6g1N4MRpIrNJdg1o868myyvgyLFvHjV4qlHqg5uZreLiTX3nENOK0RpD lDSs22ndjvEBIoRZC8LkcT+7Doa7rUYsqLy6TGmP3/5mKQz25QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFK2ql/uG15B6ZQ0rRhTF/FlsD7bYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Qy MGVmZC03MjljLTQ2YjItYjI2OC01MTBkMWY5ZjdkZDMvYThkOTUxNDctMmJmMi0z ODFhLWI0MzYtYzYzN2MwODAyYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNkMjBlZmQtNzI5Yy00NmIyLWIy NjgtNTEwZDFmOWY3ZGQzLzAzZDIwZWZkLTcyOWMtNDZiMi1iMjY4LTUxMGQxZjlm N2RkMy5jcmwwHwYDVR0jBBgwFoAU7igQcfxLoYlblvWnORaycggT39QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2QyMGVmZC03MjljLTQ2YjItYjI2OC01MTBk MWY5ZjdkZDMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzmwAMA4E AgACMAgDBgQmAv3lADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDDB2aT/Yur6wkGOX/gqr/4kLsT01ppMjlV 0oN05wUd9PYtH8H2NnkmFsqT2OUkRNzT0a9TockBzydavvKbdPKRENpEwr8gkLnM UcJIo8upxUPrC8yg6CVSrXilxedyGBvolBKEGy7xez9nzyfBGyXIk9pbW5w1Nwps cJp0vAseN+x/3vlp2L18T2Pa9M4zobiQyXrkdN1u9IvCyQCYgJzSPRvBcwwufEgF YoQrFFMBWrOSgeobQYQI/fC0lAImAW0IKa5PSrjzGeptwcrCW5VSCQxSooI5v72g ZG8df5MzXZKJnznn1yAmvOvd4hDUdyxZxSd/N36WufXaolfaVKrn -----END CERTIFICATE-----Generated at Sat Jun 7 07:29:32 2025 by rpki-client