$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/860fd924-b8ec-3982-9f11-0757a0bd2182.roa File: 860fd924-b8ec-3982-9f11-0757a0bd2182.roa (raw, json) Hash identifier: QiZ21DXgHLFv58KCbPXoQgt1wPJT/+WTrJCA3NYmkoE= Subject key identifier: 39:43:4B:C0:29:56:54:4B:F6:05:D2:30:33:8D:28:62:16:C2:DC:B9 Certificate issuer: /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Certificate serial: 010D0C9F43285848D0ABB45A31A421C147689C80 Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/860fd924-b8ec-3982-9f11-0757a0bd2182.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 206.225.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b4:5a:31:a4:21:c1:47:68:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=a5518e88-b06e-4703-b8e1-34f1086ed3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e1:23:fc:30:48:96:16:86:68:0f:0d:aa:ee: 50:f7:69:4c:15:5e:03:8a:96:a0:9f:1f:64:77:44: 96:93:e7:3e:c1:d1:9e:cb:2f:37:45:30:9c:04:be: e9:9e:98:3a:69:4a:15:ad:0c:12:d3:bf:c7:d2:da: f3:ce:8f:86:55:9f:05:27:94:c1:df:52:83:f9:f1: 19:59:26:40:14:b2:27:13:82:bd:fb:0a:14:e9:7f: 2f:cf:0d:78:a5:dc:24:cd:ac:2e:ad:18:98:e1:17: 06:60:05:e4:ea:23:4b:2c:17:2a:9b:c0:b5:8c:db: 70:12:2c:6d:fc:d9:37:43:a7:a3:20:ee:59:4d:0c: 71:d8:a5:02:ce:09:88:0c:2f:e2:de:d1:85:a3:5a: 5e:88:fb:cb:67:20:ff:a1:e8:b9:b5:c0:59:c8:83: 83:7d:93:56:5a:c5:c9:bf:7d:51:79:3b:6d:4c:88: e1:97:13:ee:9b:f8:0f:fe:66:36:d7:1d:ce:1a:c8: cd:ee:93:44:fa:a1:98:ed:85:bc:0a:0a:80:05:49: 8d:b8:41:db:dd:91:7f:ac:1d:7b:ec:0d:cf:f4:1c: 25:8e:68:88:d4:73:8c:ac:af:f3:c5:df:4d:09:80: 3d:86:9b:d2:18:04:b9:19:97:ff:b8:ce:70:2f:50: b6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:43:4B:C0:29:56:54:4B:F6:05:D2:30:33:8D:28:62:16:C2:DC:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/860fd924-b8ec-3982-9f11-0757a0bd2182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl X509v3 Authority Key Identifier: keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer sbgp-ipAddrBlock: critical IPv4: 206.225.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:53:76:58:3d:9e:08:3c:99:dc:7c:fc:9a:58:24:df:32:c2: 5c:8c:65:b6:e1:fe:d0:3e:2a:ef:90:05:6c:b8:28:b3:65:d2: d9:0d:a3:69:fe:ef:38:a5:ef:cd:84:0c:b6:92:51:b8:a9:9d: a6:35:6c:43:f5:e9:23:e2:00:75:91:a0:34:b3:50:57:c3:d9: 11:bc:f7:7a:47:fb:2e:1c:d7:ef:75:e8:3f:6c:4a:33:e9:77: 0f:66:89:67:b6:5f:32:8a:7e:d3:e7:43:7c:f3:8a:d5:33:c1: 21:0d:5f:a6:6e:f8:46:be:1b:3a:44:44:6b:a9:51:48:85:8c: 54:8d:e2:3a:2f:48:4e:a5:c3:8e:f0:3f:d5:c3:9a:82:1d:e9: 6f:08:b8:32:03:20:07:24:8c:1a:44:57:56:60:09:60:33:05: 94:33:fa:3c:fa:bf:18:21:3c:4e:45:fa:ec:b9:b8:d7:71:6a: 63:bf:ac:55:7b:5d:d6:9c:9c:07:d9:9e:59:63:97:64:11:23: a5:07:e9:77:f6:55:74:de:5c:80:f8:d2:94:f5:92:d7:1d:49: ac:12:04:62:68:4b:d7:8c:41:4c:26:d8:47:60:40:43:f8:5c: ac:3d:8f:72:79:0a:e3:cb:0f:8d:8c:5d:5d:73:99:6b:26:b8: 00:6c:17:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7RaMaQhwUdonIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0 MGRmMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk YTU1MThlODgtYjA2ZS00NzAzLWI4ZTEtMzRmMTA4NmVkM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuEj/DBIlhaGaA8Nqu5Q92lMFV4Dipagnx9k d0SWk+c+wdGeyy83RTCcBL7pnpg6aUoVrQwS07/H0trzzo+GVZ8FJ5TB31KD+fEZ WSZAFLInE4K9+woU6X8vzw14pdwkzawurRiY4RcGYAXk6iNLLBcqm8C1jNtwEixt /Nk3Q6ejIO5ZTQxx2KUCzgmIDC/i3tGFo1peiPvLZyD/oei5tcBZyIODfZNWWsXJ v31ReTttTIjhlxPum/gP/mY21x3OGsjN7pNE+qGY7YW8CgqABUmNuEHb3ZF/rB17 7A3P9BwljmiI1HOMrK/zxd9NCYA9hpvSGAS5GZf/uM5wL1C2rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlDS8ApVlRL9gXSMDONKGIWwty5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvODYwZmQ5MjQtYjhlYy0z OTgyLTlmMTEtMDc1N2EwYmQyMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk ODI2YTQwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzuHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANJTdlg9ngg8mdx8/JpYJN8ywlyMZbbh/tA+Ku+QBWy4KLNl0tkNo2n+ 7zil782EDLaSUbipnaY1bEP16SPiAHWRoDSzUFfD2RG893pH+y4c1+916D9sSjPp dw9miWe2XzKKftPnQ3zzitUzwSENX6Zu+Ea+GzpERGupUUiFjFSN4jovSE6lw47w P9XDmoId6W8IuDIDIAckjBpEV1ZgCWAzBZQz+jz6vxghPE5F+uy5uNdxamO/rFV7 XdacnAfZnlljl2QRI6UH6Xf2VXTeXID40pT1ktcdSawSBGJoS9eMQUwm2EdgQEP4 XKw9j3J5CuPLD42MXV1zmWsmuABsF9E= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:44 2025 by rpki-client