$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e2b312ac-2872-3596-b20b-7efce0e09984.roa File: e2b312ac-2872-3596-b20b-7efce0e09984.roa (raw, json) Hash identifier: /ALyXz5ZKFhTrqEKHaqZzJLFMzcyi9Xwl+SwWalepgk= Subject key identifier: 74:41:FE:F1:48:2E:64:76:05:E7:0B:F7:C4:03:B8:E1:1C:8A:A4:09 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849DF5A5E1477C00C168B4F0600 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e2b312ac-2872-3596-b20b-7efce0e09984.roa Signing time: Fri 16 May 2025 13:00:59 +0000 ROA not before: Fri 16 May 2025 13:00:59 +0000 ROA not after: Thu 14 Aug 2025 13:00:59 +0000 asID: 31898 IP address blocks: 206.161.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:df:5a:5e:14:77:c0:0c:16:8b:4f:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 16 13:00:59 2025 GMT Not After : Aug 14 13:00:59 2025 GMT Subject: CN=003ddb8c-25d5-4750-93f6-23e64efc9cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:aa:83:a5:c7:e2:9d:66:13:2c:70:7b:06: 7b:dd:2a:70:65:a0:8d:92:b4:21:bd:c5:aa:3c:70: 06:e2:83:7e:2f:8f:c7:ef:df:ac:9d:27:1a:d1:fc: ca:aa:8f:8d:11:ae:6c:0c:54:23:24:e7:e6:3b:34: 08:0f:26:8d:8f:1f:ee:ec:f9:87:34:51:37:a0:1e: f3:5a:a4:3d:95:f7:56:94:92:bb:dc:49:77:b5:6a: da:c9:fb:d0:ee:f9:e4:d2:c6:bc:da:83:26:04:6d: 90:58:52:f8:db:79:ed:2a:da:d3:f9:1c:2f:33:50: 8d:08:e2:4c:4d:e2:8e:80:dd:18:ea:70:79:39:25: 27:36:c2:35:b3:4a:f3:89:22:8e:af:e4:51:07:2b: 2d:75:cc:56:2d:dc:be:04:bc:44:33:01:6c:55:e5: cd:d2:8d:d1:9f:4b:15:38:36:95:1d:3d:49:5a:a5: 3b:85:cd:d1:ec:f5:51:6c:89:c3:36:36:e8:64:27: 7c:17:2b:c4:b8:36:85:48:02:fb:30:8f:ff:b1:96: f3:8f:e6:c8:5f:cf:c4:3f:f8:b1:e3:2e:7d:2d:74: 1e:a9:f9:29:db:41:7e:ad:98:31:d7:14:65:aa:4a: c8:6f:2b:24:b4:a2:f3:a7:20:ce:80:89:fd:bf:4d: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:41:FE:F1:48:2E:64:76:05:E7:0B:F7:C4:03:B8:E1:1C:8A:A4:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e2b312ac-2872-3596-b20b-7efce0e09984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 206.161.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d4:fc:c1:41:11:fe:d8:27:13:10:0a:f7:1a:f8:e0:eb:4b: 40:ca:ba:a7:2e:82:5d:a1:55:bc:33:96:97:55:62:83:52:6d: c8:c5:7e:18:dd:4e:ce:1a:be:65:85:11:79:92:75:b9:b3:b5: 1e:1d:8c:95:8e:5f:2c:04:d3:a9:f0:0f:51:df:67:6b:82:d9: 7a:cb:0f:3c:5f:e1:15:7b:c7:90:45:0e:f2:1a:b8:29:67:87: fd:aa:ee:ca:60:0b:44:1b:4f:62:0e:da:73:43:f9:e5:5b:f2: e8:e6:2d:eb:24:c9:bb:43:05:2c:85:08:e1:5d:f9:55:7a:2c: 66:6e:fa:8e:78:a4:8d:97:c9:91:a9:a6:67:cf:b3:0f:df:13: 46:3b:c1:84:8f:70:58:99:60:be:df:f9:16:4e:bb:a0:69:94: 8a:1a:45:4b:f7:bd:f2:ee:05:49:75:a0:ce:d5:76:76:ac:6d: f8:6a:ba:09:9c:3c:0d:5b:30:1a:3b:00:71:a9:6a:82:95:cc: 82:1a:57:3b:cc:fd:4f:d4:fc:59:63:3d:65:41:ac:1a:ea:44: 95:1d:f9:5f:14:ec:92:2a:58:53:49:65:5b:28:4a:da:e4:a4: b2:38:39:cc:cf:6f:4c:e9:c0:30:9d:f5:e7:46:a1:52:c2:56: 4f:9a:1d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWl4Ud8AMFotPBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk MDAzZGRiOGMtMjVkNS00NzUwLTkzZjYtMjNlNjRlZmM5Y2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqaqg6XH4p1mEyxwewZ73SpwZaCNkrQhvcWq PHAG4oN+L4/H79+snSca0fzKqo+NEa5sDFQjJOfmOzQIDyaNjx/u7PmHNFE3oB7z WqQ9lfdWlJK73El3tWrayfvQ7vnk0sa82oMmBG2QWFL423ntKtrT+RwvM1CNCOJM TeKOgN0Y6nB5OSUnNsI1s0rziSKOr+RRBystdcxWLdy+BLxEMwFsVeXN0o3Rn0sV ODaVHT1JWqU7hc3R7PVRbInDNjboZCd8FyvEuDaFSAL7MI//sZbzj+bIX8/EP/ix 4y59LXQeqfkp20F+rZgx1xRlqkrIbysktKLzpyDOgIn9v021SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRB/vFILmR2BecL98QDuOEciqQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZTJiMzEyYWMtMjg3Mi0z NTk2LWIyMGItN2VmY2UwZTA5OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqHhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADU/MFBEf7YJxMQCvca+ODrS0DKuqcugl2hVbwzlpdVYoNSbcjFfhjd Ts4avmWFEXmSdbmztR4djJWOXywE06nwD1HfZ2uC2XrLDzxf4RV7x5BFDvIauCln h/2q7spgC0QbT2IO2nND+eVb8ujmLeskybtDBSyFCOFd+VV6LGZu+o54pI2XyZGp pmfPsw/fE0Y7wYSPcFiZYL7f+RZOu6BplIoaRUv3vfLuBUl1oM7Vdnasbfhqugmc PA1bMBo7AHGpaoKVzIIaVzvM/U/U/FljPWVBrBrqRJUd+V8U7JIqWFNJZVsoStrk pLI4OczPb0zpwDCd9edGoVLCVk+aHSM= -----END CERTIFICATE-----Generated at Sun Jun 1 06:03:28 2025 by rpki-client