$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa File: 828ae03b-a727-34a7-b93a-e90b4f4a563b.roa (raw, json) Hash identifier: S3lsj5pfgs3GTb39XsQ8abh7Z4KhlPjp2qp6OL9XKTs= Subject key identifier: 33:1F:F1:44:1C:F6:5C:AA:D8:39:63:7C:AD:AE:26:21:11:A7:52:56 Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Certificate serial: 010D0C9F43285848ADD8763F0EA0B3FF884B1880 Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa Signing time: Mon 27 Jan 2025 02:37:53 +0000 ROA not before: Mon 27 Jan 2025 02:37:53 +0000 ROA not after: Sun 27 Apr 2025 01:37:53 +0000 asID: 142064 IP address blocks: 206.168.133.0/24 maxlen: 24 2602:fbd9:100::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:d8:76:3f:0e:a0:b3:ff:88:4b:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Validity Not Before: Jan 27 02:37:53 2025 GMT Not After : Apr 27 01:37:53 2025 GMT Subject: CN=a4a4ca47-55f2-493f-a0ff-2f91b9cf3658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:33:39:7a:26:6a:15:58:7a:92:21:d0:1d: f8:a6:f5:0f:4f:56:c0:b3:1b:93:ca:88:92:40:3c: 71:1a:8c:18:0c:8e:e8:11:84:8c:e6:5b:4b:3b:42: 07:08:f7:dd:8d:c8:19:d7:68:86:53:5f:8e:39:20: 3c:fa:fa:50:5d:fb:fb:7c:89:a4:8e:49:dc:b8:09: 0e:cb:56:27:f4:6d:2e:97:06:0a:a6:a5:32:63:93: e4:e6:31:44:67:c7:5c:07:f2:e3:84:86:03:82:10: 21:11:7d:af:23:77:9b:8a:14:ac:10:c5:4a:c6:70: af:00:ed:64:81:38:d6:36:6c:4d:92:dc:c7:8d:7f: 5a:71:f4:e6:2c:71:0d:88:04:a3:b4:67:93:d1:ae: 52:be:45:6c:b2:c6:7d:2e:e5:79:29:63:66:ad:95: 58:c0:4c:91:01:64:c2:ea:3b:aa:8e:33:62:a2:46: 6c:41:7a:82:cd:56:17:8c:98:96:ea:16:5e:65:2a: f5:d9:c6:1f:6b:66:7b:8a:db:da:b5:ed:36:97:a8: a0:2f:67:72:af:b0:66:41:d5:28:c6:db:68:cb:25: 60:02:b8:f5:da:d0:a7:9a:1c:3f:52:b6:42:ac:bb: 5c:db:2d:6f:f9:c6:26:20:6b:4c:44:a3:9d:76:2e: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1F:F1:44:1C:F6:5C:AA:D8:39:63:7C:AD:AE:26:21:11:A7:52:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl X509v3 Authority Key Identifier: keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer sbgp-ipAddrBlock: critical IPv4: 206.168.133.0/24 IPv6: 2602:fbd9:100::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:3d:43:16:b9:17:6b:44:a3:48:54:f3:f0:79:ea:8b:5f:0a: 8f:cc:8f:bd:6c:bd:c5:43:e7:5f:80:2f:aa:88:04:3f:8b:95: a9:1a:9a:7a:16:bf:79:ae:f3:8b:ba:1e:5d:c8:08:1d:cf:ec: da:30:9d:cb:bf:91:c5:37:14:c4:53:45:f2:25:12:9d:0d:f2: e0:55:c0:02:3a:6c:e0:35:e3:b3:4b:24:4e:6a:38:81:36:55: dc:4b:77:70:93:c1:bb:ec:88:0e:96:3c:1e:dd:9b:6c:ef:b3: bf:58:c9:bc:88:40:19:be:da:d1:ab:ae:9f:69:d8:e8:62:ea: 30:54:a8:23:cd:65:b1:4d:44:79:46:72:0d:d3:95:3a:4f:d9: e3:1b:3d:71:ec:14:66:0c:02:96:73:52:f5:5b:2e:da:bc:b5: c4:d7:15:ed:a2:7d:a6:53:eb:84:f7:3e:3f:e5:70:da:06:76: a7:67:95:bc:5e:ed:83:c2:d2:7a:df:dd:b4:41:c7:61:d8:3d: 8b:4d:a6:13:d2:67:01:b1:e4:98:87:83:4a:c7:53:a5:2e:96: 78:b6:0c:de:a3:18:98:ff:97:f7:fa:be:87:e4:9d:97:cc:61: 64:53:51:b9:ac:2e:46:c4:d7:2e:97:27:01:14:82:07:e7:3c: c7:55:04:55 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEit2HY/DqCz/4hLGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl Njc2MB4XDTI1MDEyNzAyMzc1M1oXDTI1MDQyNzAxMzc1M1owLzEtMCsGA1UEAxMk YTRhNGNhNDctNTVmMi00OTNmLWEwZmYtMmY5MWI5Y2YzNjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPQzOXomahVYepIh0B34pvUPT1bAsxuTyoiS QDxxGowYDI7oEYSM5ltLO0IHCPfdjcgZ12iGU1+OOSA8+vpQXfv7fImkjkncuAkO y1Yn9G0ulwYKpqUyY5Pk5jFEZ8dcB/LjhIYDghAhEX2vI3ebihSsEMVKxnCvAO1k gTjWNmxNktzHjX9acfTmLHENiASjtGeT0a5SvkVsssZ9LuV5KWNmrZVYwEyRAWTC 6juqjjNiokZsQXqCzVYXjJiW6hZeZSr12cYfa2Z7itvate02l6igL2dyr7BmQdUo xttoyyVgArj12tCnmhw/UrZCrLtc2y1v+cYmIGtMRKOddi43VwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDMf8UQc9lyq2DljfK2uJiERp1JWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvODI4YWUwM2ItYTcyNy0z NGE3LWI5M2EtZTkwYjRmNGE1NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2 YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw MjFlY2U2NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzqiFMA8E AgACMAkDBwQmAvvZAQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMT1DFrkXa0SjSFTz8Hnqi18Kj8yPvWy9 xUPnX4AvqogEP4uVqRqaeha/ea7zi7oeXcgIHc/s2jCdy7+RxTcUxFNF8iUSnQ3y 4FXAAjps4DXjs0skTmo4gTZV3Et3cJPBu+yIDpY8Ht2bbO+zv1jJvIhAGb7a0auu n2nY6GLqMFSoI81lsU1EeUZyDdOVOk/Z4xs9cewUZgwClnNS9Vsu2ry1xNcV7aJ9 plPrhPc+P+Vw2gZ2p2eVvF7tg8LSet/dtEHHYdg9i02mE9JnAbHkmIeDSsdTpS6W eLYM3qMYmP+X9/q+h+Sdl8xhZFNRuawuRsTXLpcnARSCB+c8x1UEVQ== -----END CERTIFICATE-----Generated at Mon Apr 7 09:45:58 2025 by rpki-client