$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/56ef561e-8d8b-3b1f-b8ff-82455a6e5a29.roa File: 56ef561e-8d8b-3b1f-b8ff-82455a6e5a29.roa (raw, json) Hash identifier: TfrpToR88CkpRrjZ78NmnmeHBbCJg6you8lJhiloesM= Subject key identifier: 12:A8:43:2B:B9:FC:EF:31:D1:42:9D:04:B4:80:B1:C7:9E:24:7D:55 Certificate issuer: /CN=51dcdcba-3766-4509-a479-bbf02514719f Certificate serial: 010D0C9F43285848A136128215F766BA9B384BE0 Authority key identifier: ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/56ef561e-8d8b-3b1f-b8ff-82455a6e5a29.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 62164 IP address blocks: 207.90.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:12:82:15:f7:66:ba:9b:38:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51dcdcba-3766-4509-a479-bbf02514719f Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=43d9c682-6e8a-491d-81a2-c07b81f23bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:ac:87:8b:f6:2d:58:d6:9e:43:93:d1:4d: e0:14:55:e0:3e:f8:b1:62:97:6b:9f:4a:aa:09:f7: ed:17:2c:48:77:67:7e:2a:0c:99:34:44:0e:62:e4: 69:af:a0:1f:c7:23:4d:fb:c6:72:e8:82:cd:44:a8: a8:b6:6a:ec:0a:a2:be:c8:00:db:96:e6:37:9a:fc: 10:01:cf:40:08:7d:9b:1f:84:f8:aa:fd:ef:d6:ae: 2d:a0:51:f0:bf:b8:4d:44:d1:e0:c3:44:f6:aa:30: 0c:9f:76:b4:b2:d1:ed:ea:0d:3a:39:35:17:f7:80: 31:7c:bd:04:b4:41:43:1b:49:7b:bd:d4:39:fe:ff: 7c:d7:14:ce:31:f5:3a:81:5c:06:72:8f:e6:5a:af: b8:40:a4:33:c2:ad:70:da:00:5a:a7:1e:39:e3:60: 4a:2e:03:8f:e2:1e:f8:a1:55:02:fb:6c:a1:6f:99: a0:df:36:69:44:7c:44:2a:99:d6:50:1c:59:6d:4a: a0:07:3d:47:f4:c7:81:de:c4:0a:c6:39:ec:62:fd: 87:71:99:f4:10:60:b5:e5:d7:8a:2d:b4:b8:47:6c: 01:ff:9f:5a:a5:80:ec:fa:67:c9:54:81:f6:0f:ec: d6:e3:ae:8b:da:7c:4b:1e:c2:77:23:2d:5b:f8:c1: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A8:43:2B:B9:FC:EF:31:D1:42:9D:04:B4:80:B1:C7:9E:24:7D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/56ef561e-8d8b-3b1f-b8ff-82455a6e5a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f/51dcdcba-3766-4509-a479-bbf02514719f.crl X509v3 Authority Key Identifier: keyid:ED:B9:EC:F3:1C:12:4D:68:7A:77:73:BA:F0:21:76:8D:E7:2D:F2:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51dcdcba-3766-4509-a479-bbf02514719f.cer sbgp-ipAddrBlock: critical IPv4: 207.90.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:31:8d:44:d9:b3:4b:47:31:91:99:cc:fe:ac:7c:21:36:bf: 41:47:2a:54:8d:c4:f9:5d:80:b0:99:ee:30:3c:a7:1f:8d:9d: 51:83:05:78:8f:cf:3b:d6:3e:f4:cf:27:b5:87:de:ed:1d:1f: 2b:99:a1:07:bf:98:1d:f0:7c:28:10:b2:82:d4:53:95:83:82: 0d:30:83:30:49:96:f4:16:08:fd:14:d4:35:f1:bc:61:4f:25: f7:a2:6c:c1:29:3e:f9:f5:8f:2b:df:b1:11:c3:c1:fb:a3:f4: 8d:fc:9f:ca:b4:70:57:c7:90:66:9e:9e:0d:5d:5c:5f:d9:8d: 8e:79:24:c8:9e:3c:a2:6d:05:5c:37:3c:bd:f6:61:f1:c2:92: cb:fc:87:c2:f0:1f:1a:2b:5f:86:c4:1d:cc:f4:1c:8b:77:e4: eb:ec:8c:7f:1b:ff:f3:af:2e:1e:78:37:99:06:e3:af:5b:0b: ce:47:9e:eb:4d:49:f3:54:64:ed:1c:dc:28:21:7a:97:e3:f5: 21:9a:f4:a8:9c:89:c8:18:0c:c0:75:49:4c:e4:23:f2:e4:29: c7:d9:8b:be:39:79:50:d7:80:80:59:56:0c:5b:af:ff:1f:b1: 57:71:95:d6:ea:24:e6:50:a8:21:12:41:b6:95:cb:7d:26:a0: 4d:8c:49:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhKCFfdmups4S+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkY2RjYmEtMzc2Ni00NTA5LWE0NzktYmJmMDI1MTQ3 MTlmMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NDNkOWM2ODItNmU4YS00OTFkLTgxYTItYzA3YjgxZjIzYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvish4v2LVjWnkOT0U3gFFXgPvixYpdrn0qq CfftFyxId2d+KgyZNEQOYuRpr6AfxyNN+8Zy6ILNRKiotmrsCqK+yADbluY3mvwQ Ac9ACH2bH4T4qv3v1q4toFHwv7hNRNHgw0T2qjAMn3a0stHt6g06OTUX94AxfL0E tEFDG0l7vdQ5/v981xTOMfU6gVwGco/mWq+4QKQzwq1w2gBapx4542BKLgOP4h74 oVUC+2yhb5mg3zZpRHxEKpnWUBxZbUqgBz1H9MeB3sQKxjnsYv2HcZn0EGC15deK LbS4R2wB/59apYDs+mfJVIH2D+zW466L2nxLHsJ3Iy1b+MG2FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKoQyu5/O8x0UKdBLSAsceeJH1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWRj ZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYwMjUxNDcxOWYvNTZlZjU2MWUtOGQ4Yi0z YjFmLWI4ZmYtODI0NTVhNmU1YTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkY2RjYmEtMzc2Ni00NTA5LWE0 NzktYmJmMDI1MTQ3MTlmLzUxZGNkY2JhLTM3NjYtNDUwOS1hNDc5LWJiZjAyNTE0 NzE5Zi5jcmwwHwYDVR0jBBgwFoAU7bns8xwSTWh6d3O68CF2ject8m8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWRjZGNiYS0zNzY2LTQ1MDktYTQ3OS1iYmYw MjUxNDcxOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1rOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsxjUTZs0tHMZGZzP6sfCE2v0FHKlSNxPldgLCZ7jA8px+NnVGDBXiP zzvWPvTPJ7WH3u0dHyuZoQe/mB3wfCgQsoLUU5WDgg0wgzBJlvQWCP0U1DXxvGFP JfeibMEpPvn1jyvfsRHDwfuj9I38n8q0cFfHkGaeng1dXF/ZjY55JMiePKJtBVw3 PL32YfHCksv8h8LwHxorX4bEHcz0HIt35OvsjH8b//OvLh54N5kG469bC85HnutN SfNUZO0c3Cghepfj9SGa9KicicgYDMB1SUzkI/LkKcfZi745eVDXgIBZVgxbr/8f sVdxldbqJOZQqCESQbaVy30moE2MSYg= -----END CERTIFICATE-----Generated at Thu Apr 10 22:06:21 2025 by rpki-client