$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/c88fdc86-ec71-34b3-8e06-81c2c4b555b3.roa File: c88fdc86-ec71-34b3-8e06-81c2c4b555b3.roa (raw, json) Hash identifier: C0sgnzHsIHHEOCU3fzCl+Q44eh30q1nhkDvpku9+Nz0= Subject key identifier: EE:2E:30:F6:78:17:9A:72:62:CF:49:AF:5E:96:B3:C7:32:B8:AC:8A Certificate issuer: /CN=4ae94b09-7143-463d-a217-f7e62f4a7dc0 Certificate serial: 010D0C9F43285848FD569D8E1D1DBED7E6911D00 Authority key identifier: E6:11:AC:38:33:0A:D5:A7:3B:80:0D:45:0B:75:C4:9A:7D:00:C9:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/c88fdc86-ec71-34b3-8e06-81c2c4b555b3.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 205.166.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:9d:8e:1d:1d:be:d7:e6:91:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ae94b09-7143-463d-a217-f7e62f4a7dc0 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=dba6af71-853e-4ccf-a499-8fcb2253cf0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:b4:a6:e4:bc:36:ba:66:76:aa:b5:84:13: 26:9d:5b:c5:10:de:18:a5:8e:f4:6a:ee:c1:83:01: c1:30:47:26:42:e7:95:90:74:19:3c:e3:5b:69:8f: 6e:34:2b:3d:41:b7:a7:88:32:57:13:b9:1b:0c:df: eb:cb:04:ab:96:f1:89:74:ca:f9:91:f4:6e:62:39: 09:d4:8c:70:90:3d:4f:df:95:48:50:88:e0:01:67: bd:b4:ab:76:61:96:79:c6:7a:27:53:91:92:ab:04: 11:df:c1:39:f2:17:e7:76:82:d4:ac:99:91:7e:50: 5a:ab:85:2b:5c:ed:07:90:99:ab:b0:1d:84:5f:2f: bb:2f:b6:4a:28:51:47:5d:3b:70:cc:6b:a9:c6:d3: f6:23:5f:e1:05:31:27:68:9f:ff:cc:c8:cc:34:cb: ae:b4:df:22:09:db:b4:43:27:d5:a4:99:63:ab:2c: 8e:98:f1:22:4c:58:32:e7:19:9c:26:0e:01:fa:e5: de:91:03:e3:70:52:20:c7:c8:41:52:c9:11:9a:c0: 4b:b9:9b:2c:b7:d0:b4:d9:ac:66:79:70:13:e1:8a: 6b:fc:18:b7:21:5c:50:27:0f:7c:f9:ae:47:a3:32: 67:14:45:08:97:19:af:5c:5c:a7:f0:92:ec:b5:70: 90:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2E:30:F6:78:17:9A:72:62:CF:49:AF:5E:96:B3:C7:32:B8:AC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/c88fdc86-ec71-34b3-8e06-81c2c4b555b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0/4ae94b09-7143-463d-a217-f7e62f4a7dc0.crl X509v3 Authority Key Identifier: keyid:E6:11:AC:38:33:0A:D5:A7:3B:80:0D:45:0B:75:C4:9A:7D:00:C9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4ae94b09-7143-463d-a217-f7e62f4a7dc0.cer sbgp-ipAddrBlock: critical IPv4: 205.166.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ba:ac:52:99:75:17:5d:0c:c2:a8:1f:eb:1c:6b:43:88:56: 30:5e:0e:ae:fa:af:0d:dd:d5:6b:f4:fa:cf:99:e7:15:e6:22: 77:6a:24:a5:f2:69:f3:80:25:86:47:59:0e:94:60:f3:3e:3c: 96:a3:8c:1c:e9:2b:4b:57:05:74:c6:5e:ec:0b:af:61:8c:52: 33:0e:3c:3b:ba:4c:b8:4b:18:64:a6:5b:79:00:13:e2:a1:21: 1e:7d:84:93:8b:6b:8f:d4:1f:c7:2a:b1:06:58:74:d7:b0:05: 1e:26:eb:b7:45:da:e2:d3:30:cc:de:2b:08:6e:25:f6:c4:61: 7e:6d:02:01:c0:9c:e7:2d:6a:75:21:e1:7a:f7:28:4e:10:5d: 25:a6:38:d1:8e:24:02:41:d8:33:ec:3b:e8:31:db:34:b1:30: 38:bd:b1:06:4c:f5:88:70:40:01:55:f3:98:27:6c:23:f1:e8: 07:18:1a:50:36:9f:63:fd:ee:bc:5c:a0:b9:88:15:c6:fe:b3: c2:38:73:fc:6f:fe:5c:bb:78:f8:84:e7:a7:bb:ea:77:b7:c3: e3:00:35:91:9c:17:37:30:1b:aa:0b:70:a2:76:58:e9:68:7c: 74:b2:09:be:b7:8e:9e:f3:93:a4:b0:44:f0:cf:7d:24:0e:c7: ff:6d:63:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vp2OHR2+1+aRHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFlOTRiMDktNzE0My00NjNkLWEyMTctZjdlNjJmNGE3 ZGMwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGJhNmFmNzEtODUzZS00Y2NmLWE0OTktOGZjYjIyNTNjZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8q0puS8Nrpmdqq1hBMmnVvFEN4YpY70au7B gwHBMEcmQueVkHQZPONbaY9uNCs9QbeniDJXE7kbDN/rywSrlvGJdMr5kfRuYjkJ 1IxwkD1P35VIUIjgAWe9tKt2YZZ5xnonU5GSqwQR38E58hfndoLUrJmRflBaq4Ur XO0HkJmrsB2EXy+7L7ZKKFFHXTtwzGupxtP2I1/hBTEnaJ//zMjMNMuutN8iCdu0 QyfVpJljqyyOmPEiTFgy5xmcJg4B+uXekQPjcFIgx8hBUskRmsBLuZsst9C02axm eXAT4Ypr/Bi3IVxQJw98+a5HozJnFEUIlxmvXFyn8JLstXCQrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4uMPZ4F5pyYs9Jr16Ws8cyuKyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWU5 NGIwOS03MTQzLTQ2M2QtYTIxNy1mN2U2MmY0YTdkYzAvYzg4ZmRjODYtZWM3MS0z NGIzLThlMDYtODFjMmM0YjU1NWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlOTRiMDktNzE0My00NjNkLWEy MTctZjdlNjJmNGE3ZGMwLzRhZTk0YjA5LTcxNDMtNDYzZC1hMjE3LWY3ZTYyZjRh N2RjMC5jcmwwHwYDVR0jBBgwFoAU5hGsODMK1ac7gA1FC3XEmn0AydAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80YWU5NGIwOS03MTQzLTQ2M2QtYTIxNy1mN2U2 MmY0YTdkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzabDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu6rFKZdRddDMKoH+sca0OIVjBeDq76rw3d1Wv0+s+Z5xXmIndqJKXy afOAJYZHWQ6UYPM+PJajjBzpK0tXBXTGXuwLr2GMUjMOPDu6TLhLGGSmW3kAE+Kh IR59hJOLa4/UH8cqsQZYdNewBR4m67dF2uLTMMzeKwhuJfbEYX5tAgHAnOctanUh 4Xr3KE4QXSWmONGOJAJB2DPsO+gx2zSxMDi9sQZM9YhwQAFV85gnbCPx6AcYGlA2 n2P97rxcoLmIFcb+s8I4c/xv/ly7ePiE56e76ne3w+MANZGcFzcwG6oLcKJ2WOlo fHSyCb63jp7zk6SwRPDPfSQOx/9tY+A= -----END CERTIFICATE-----Generated at Sat Apr 5 11:03:19 2025 by rpki-client