$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/89909fdf-6692-3e87-bf0b-54e01c820bc1.roa File: 89909fdf-6692-3e87-bf0b-54e01c820bc1.roa (raw, json) Hash identifier: 7Cb+1e7SaleZfnfwYNjyDVYXek6j8ZJYRvXhi4zdaNA= Subject key identifier: A6:37:5E:12:63:20:8A:EC:E0:72:21:38:1B:D8:17:44:EE:E7:E6:00 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849D594E4094AB75C19202FFF80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/89909fdf-6692-3e87-bf0b-54e01c820bc1.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 135391 IP address blocks: 206.161.232.0/24 maxlen: 24 206.161.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e4:09:4a:b7:5c:19:20:2f:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=a60a0978-44a2-4100-9169-47f292b4ccb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ec:21:5d:0a:51:03:c2:f1:ed:af:5c:2f:17: 90:1f:7b:f6:f0:57:53:2a:21:c6:80:de:82:e1:52: 7d:78:f0:34:41:4c:d4:e3:aa:be:5e:c7:ea:d2:ad: 85:43:a9:c1:4b:4d:25:b6:70:69:2e:3f:86:79:fa: 09:16:67:6c:2e:46:db:af:c2:d5:10:cb:68:b0:2a: f9:bb:c8:c9:11:18:e5:d6:7f:a8:e1:ec:04:3d:f5: 9d:7f:e4:89:e6:08:fa:a7:85:c2:c0:f6:e8:10:39: 30:20:b3:c0:65:0d:5c:ff:a7:92:c6:f6:6b:a0:c2: cf:9c:0e:3f:90:9e:dd:9c:eb:ff:72:2e:b4:f9:93: 5a:57:20:4c:41:25:5a:63:d7:a8:e8:89:c6:de:66: e1:a0:d7:e9:74:f1:6f:c2:a2:93:74:45:2a:b6:bd: 29:b2:c5:b8:ce:8f:80:0a:94:5b:92:3e:9b:c4:56: 2d:1a:eb:fe:13:75:5f:35:f5:be:ba:36:96:6f:b3: c8:25:54:87:49:db:16:7b:5b:f9:b1:ce:f9:52:9e: 80:01:f6:ec:00:a3:0e:02:0c:49:7d:2c:91:3d:05: 72:ba:40:2e:78:81:7a:45:22:03:d8:30:e8:5d:f2: 2e:48:31:5a:62:3b:bd:99:78:7e:64:a3:be:b0:41: 05:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:37:5E:12:63:20:8A:EC:E0:72:21:38:1B:D8:17:44:EE:E7:E6:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/89909fdf-6692-3e87-bf0b-54e01c820bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 206.161.232.0/24 206.161.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:9d:3a:c6:10:94:0e:c9:30:d6:b9:f4:f1:52:0b:df:d4:96: ce:28:d6:31:8a:9c:93:90:b2:a5:4b:21:b0:08:bb:22:3f:65: d9:24:d6:43:b2:fd:8c:11:fe:4b:e1:0a:bc:67:8c:84:c3:f9: 90:7c:6f:3b:44:b7:77:47:83:7e:6b:34:c0:f0:4e:2e:38:1d: c4:2d:f7:7f:b3:14:ee:bb:4f:ba:c4:60:09:03:d5:65:23:22: e6:7b:1b:1c:3a:ef:b8:e4:7a:14:cd:3e:f7:e9:02:a5:4d:57: 3b:39:2f:21:10:b8:a5:3a:6c:57:c4:28:76:16:08:1c:95:6b: 4b:cf:a7:5d:dc:e3:46:f4:a4:14:cf:d7:96:df:eb:73:59:28: ae:d3:6f:54:9c:42:f6:c7:21:b1:ab:26:c0:b8:59:43:9f:aa: 86:07:26:e6:6c:da:38:f8:1f:2e:f4:17:7a:c2:79:ad:58:64: 28:6a:1f:35:73:3f:42:53:2f:b3:1e:94:ae:54:94:46:9c:07: af:7f:cb:b4:6b:84:69:5c:53:13:d0:56:ee:38:e6:6a:3f:48: 9c:af:c1:01:1a:c0:54:c1:0d:e4:d4:4e:06:d3:c6:1b:7f:e6: 6e:b9:f0:5b:8b:7b:c6:85:85:fe:47:ba:a4:49:d6:f6:29:87: 39:c6:bd:d9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnVlOQJSrdcGSAv/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YTYwYTA5NzgtNDRhMi00MTAwLTkxNjktNDdmMjkyYjRjY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+whXQpRA8Lx7a9cLxeQH3v28FdTKiHGgN6C 4VJ9ePA0QUzU46q+Xsfq0q2FQ6nBS00ltnBpLj+GefoJFmdsLkbbr8LVEMtosCr5 u8jJERjl1n+o4ewEPfWdf+SJ5gj6p4XCwPboEDkwILPAZQ1c/6eSxvZroMLPnA4/ kJ7dnOv/ci60+ZNaVyBMQSVaY9eo6InG3mbhoNfpdPFvwqKTdEUqtr0pssW4zo+A CpRbkj6bxFYtGuv+E3VfNfW+ujaWb7PIJVSHSdsWe1v5sc75Up6AAfbsAKMOAgxJ fSyRPQVyukAueIF6RSID2DDoXfIuSDFaYju9mXh+ZKO+sEEFbwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKY3XhJjIIrs4HIhOBvYF0Tu5+YAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvODk5MDlmZGYtNjY5Mi0z ZTg3LWJmMGItNTRlMDFjODIwYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzqHoAwQA zqHqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG+dOsYQlA7JMNa59PFSC9/Uls4o1jGKnJOQsqVLIbAIuyI/ Zdkk1kOy/YwR/kvhCrxnjITD+ZB8bztEt3dHg35rNMDwTi44HcQt93+zFO67T7rE YAkD1WUjIuZ7Gxw677jkehTNPvfpAqVNVzs5LyEQuKU6bFfEKHYWCByVa0vPp13c 40b0pBTP15bf63NZKK7Tb1ScQvbHIbGrJsC4WUOfqoYHJuZs2jj4Hy70F3rCea1Y ZChqHzVzP0JTL7MelK5UlEacB69/y7RrhGlcUxPQVu445mo/SJyvwQEawFTBDeTU TgbTxht/5m658FuLe8aFhf5HuqRJ1vYphznGvdk= -----END CERTIFICATE-----Generated at Fri Jun 6 16:29:48 2025 by rpki-client