$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cdee8dfc-1d31-3c7a-ace6-1390d23f6067.roa File: cdee8dfc-1d31-3c7a-ace6-1390d23f6067.roa (raw, json) Hash identifier: gi4hkNA41l3W9jexv9HQoNeztVMH/oxcZzcA+kVuk4U= Subject key identifier: 7B:D4:AB:6B:F7:15:85:61:3A:36:C4:92:82:68:1B:ED:05:0F:27:60 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285848B626190230C821A2E7430700 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cdee8dfc-1d31-3c7a-ace6-1390d23f6067.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 209 IP address blocks: 206.29.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:19:02:30:c8:21:a2:e7:43:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=bba0a489-38e4-464b-858a-c9a3aedc21ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:1e:2f:dc:a6:8a:ce:ef:3b:f4:a2:4a:92: a8:8b:64:67:a4:b0:66:89:cd:53:d6:18:5c:b2:1d: e7:d8:9a:18:03:12:83:03:2c:d3:36:fe:2f:dd:b4: 2b:d1:dd:5c:91:0f:d5:20:9a:93:35:27:76:af:ab: 2c:92:fb:81:0b:6d:e5:47:a0:95:02:7a:19:ae:a2: 37:3c:09:da:b2:2a:7d:67:a2:d6:52:41:fb:45:12: db:e3:11:17:2b:4e:cb:86:3e:66:ce:d3:a7:96:7b: 3c:cf:5b:51:dc:4d:e6:96:04:b3:62:82:fa:7e:e1: cd:e0:d3:07:59:9a:23:9a:1b:28:e9:71:2e:ee:56: 86:58:fe:f2:95:5c:d5:42:1d:07:ff:5e:2f:e3:9d: b7:5e:86:e2:6f:ac:57:06:69:d1:96:c5:d0:f5:8d: e8:63:5b:c2:d5:4b:9e:f2:10:c1:fc:f5:f8:cb:8e: 3a:a6:b1:25:41:6c:cd:45:c9:a1:18:0d:6b:3a:93: c7:41:45:77:ca:33:c4:1e:d9:e0:32:f6:21:0b:31: 42:3c:0b:ce:b1:b4:bf:44:07:f4:4f:93:12:00:bb: e3:7d:33:64:5d:cf:07:c3:9b:fa:fa:2e:9e:5d:5d: 87:e7:56:fb:14:6e:cf:ff:8c:d2:44:0a:ab:cb:4d: 89:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D4:AB:6B:F7:15:85:61:3A:36:C4:92:82:68:1B:ED:05:0F:27:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cdee8dfc-1d31-3c7a-ace6-1390d23f6067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 206.29.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:17:79:d6:9d:4d:d0:90:e9:cf:15:1d:d8:c8:b8:74:78:23: 5d:9c:6e:81:0b:64:16:57:c3:e1:ed:9a:06:d5:98:da:c0:95: c8:b2:ea:a4:a8:8f:95:4c:62:2d:69:30:13:4a:52:b1:3a:c5: f3:f7:d0:07:98:4d:ff:10:04:32:5d:b4:30:e0:40:fb:c2:60: 06:a8:25:e1:48:36:44:b2:f4:f0:88:9b:51:47:3a:7e:9a:84: a3:97:d2:94:a2:b0:cc:12:93:50:df:ad:95:ee:bd:d1:b0:f5: 99:a2:75:ce:41:90:81:eb:70:98:fc:0f:fe:9e:d4:b1:ec:42: 49:9b:c0:25:01:15:e4:33:05:b3:9e:e6:f0:d8:df:ac:74:a9: c1:d0:ac:ae:cf:41:da:f4:66:74:78:db:a7:87:d8:41:45:15: 53:4f:7e:52:02:f2:7d:1f:ae:e9:5b:3a:24:84:91:fa:03:78: ef:c1:c9:41:5e:f5:ea:51:78:6d:6c:8b:b5:a9:a4:e0:0b:b1: 94:b5:22:bb:34:25:52:f6:77:91:26:95:7d:22:fa:a9:7b:82: 43:83:68:40:4d:3c:a3:7c:da:bb:df:a9:42:d4:38:e5:14:4a: c5:9f:5e:f9:aa:f7:98:49:3a:dc:bc:50:f2:cb:92:e5:0a:41: 56:a5:58:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhkCMMghoudDBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk YmJhMGE0ODktMzhlNC00NjRiLTg1OGEtYzlhM2FlZGMyMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlMeL9ymis7vO/SiSpKoi2RnpLBmic1T1hhc sh3n2JoYAxKDAyzTNv4v3bQr0d1ckQ/VIJqTNSd2r6sskvuBC23lR6CVAnoZrqI3 PAnasip9Z6LWUkH7RRLb4xEXK07Lhj5mztOnlns8z1tR3E3mlgSzYoL6fuHN4NMH WZojmhso6XEu7laGWP7ylVzVQh0H/14v4523Xobib6xXBmnRlsXQ9Y3oY1vC1Uue 8hDB/PX4y446prElQWzNRcmhGA1rOpPHQUV3yjPEHtngMvYhCzFCPAvOsbS/RAf0 T5MSALvjfTNkXc8Hw5v6+i6eXV2H51b7FG7P/4zSRAqry02JaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvUq2v3FYVhOjbEkoJoG+0FDydgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvY2RlZThkZmMtMWQzMS0z YzdhLWFjZTYtMTM5MGQyM2Y2MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzh0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQXedadTdCQ6c8VHdjIuHR4I12cboELZBZXw+HtmgbVmNrAlciy6qSo j5VMYi1pMBNKUrE6xfP30AeYTf8QBDJdtDDgQPvCYAaoJeFINkSy9PCIm1FHOn6a hKOX0pSisMwSk1DfrZXuvdGw9Zmidc5BkIHrcJj8D/6e1LHsQkmbwCUBFeQzBbOe 5vDY36x0qcHQrK7PQdr0ZnR426eH2EFFFVNPflIC8n0frulbOiSEkfoDeO/ByUFe 9epReG1si7WppOALsZS1Irs0JVL2d5EmlX0i+ql7gkODaEBNPKN82rvfqULUOOUU SsWfXvmq95hJOty8UPLLkuUKQValWPE= -----END CERTIFICATE-----Generated at Sun Apr 6 17:15:34 2025 by rpki-client