$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d1fae880-b285-35f6-8ff7-129faa08b072.roa File: d1fae880-b285-35f6-8ff7-129faa08b072.roa (raw, json) Hash identifier: LLFrykGxzSKz9N1QLL6krOyGEW1PlvbycP53B1CZiC0= Subject key identifier: 2E:00:33:14:ED:CE:41:D2:27:F8:74:4D:EB:7A:44:04:DB:8C:14:76 Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Certificate serial: 010D0C9F43285848E59BB32366B43E4C3B884080 Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d1fae880-b285-35f6-8ff7-129faa08b072.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 0 IP address blocks: 206.72.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:b3:23:66:b4:3e:4c:3b:88:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=ce4ab16f-4cfe-4009-b342-14be7af31342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:58:db:51:28:a2:d3:39:5b:cc:00:67:2d: d4:78:4a:c2:26:88:f2:70:65:f9:7d:fa:72:37:f2: d7:23:19:87:ef:bb:ae:67:b6:c9:d2:50:94:4d:1b: 11:96:ef:89:65:08:e5:69:86:80:42:30:c0:e0:21: 38:20:55:d4:4a:ea:e2:5b:2f:57:b4:f3:47:5b:2b: 28:bf:ba:1c:c2:7e:fc:5b:84:60:e4:e5:18:c1:95: ef:58:e4:9a:68:a3:90:86:d9:bd:41:b3:52:61:6d: a0:38:4f:6f:2b:b0:a6:18:38:8d:f6:01:08:db:bc: 3e:75:82:dc:28:19:7f:c9:70:f0:91:cf:9f:fb:f3: d6:a5:0e:6b:1b:ea:14:08:e1:60:a5:d6:cb:59:5d: b1:4e:62:db:a5:2c:f0:76:56:de:c5:4f:da:8e:32: 56:13:75:9c:4d:b8:6f:5e:4d:02:e4:0e:fb:45:28: ed:fb:ee:27:72:fb:a1:b0:71:5f:0f:72:4f:83:22: 21:8c:53:f4:b2:26:24:81:71:10:e9:40:3d:48:62: 88:79:0c:a6:85:5b:bf:5b:09:cb:51:62:c8:b0:35: c8:9c:b0:a7:06:7b:84:01:90:71:6f:bf:ee:ca:2d: 7e:a1:68:11:76:87:03:38:0a:eb:32:0b:e4:4e:38: a7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:00:33:14:ED:CE:41:D2:27:F8:74:4D:EB:7A:44:04:DB:8C:14:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/d1fae880-b285-35f6-8ff7-129faa08b072.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl X509v3 Authority Key Identifier: keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer sbgp-ipAddrBlock: critical IPv4: 206.72.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:27:5a:c4:a3:49:60:5f:d0:2b:5b:8f:50:dd:6b:26:93:fc: ce:5c:37:d4:9e:8d:2d:68:51:60:0c:a5:83:a6:9e:dc:c1:6b: cf:74:d1:65:b2:83:e4:ca:49:7d:7a:6f:37:d9:c8:58:41:2c: d6:42:a3:de:4c:72:1f:f6:23:22:f8:7e:8b:8f:ff:30:d4:87: f1:5a:f3:48:88:7d:c2:b7:9f:af:85:3b:7e:53:60:7a:28:16: 93:55:2b:71:b5:56:7b:e3:3e:c1:cd:4e:09:76:cb:a0:93:2f: 48:07:94:7d:03:c0:10:8f:2d:67:c8:42:27:37:39:e4:93:0c: da:62:06:2d:10:05:fe:4c:52:fe:f8:2b:5e:df:6e:41:ff:00: fc:19:41:cd:0e:9f:81:5f:52:3c:23:ef:41:b7:25:97:1f:98: 39:cb:e7:a2:52:ec:ae:64:93:af:88:79:95:fe:24:be:e2:10: 76:a8:d3:42:51:7d:79:40:74:c6:6d:89:e9:df:5f:0f:ad:86: ee:88:69:3e:6e:46:c6:c5:8d:42:ae:df:11:4d:e2:80:9b:1c: 64:3d:8d:a0:c0:66:c3:20:1b:73:bd:f7:f7:9a:37:6b:ab:d0: be:77:7a:8e:cc:a6:e8:1d:41:cd:13:70:60:31:57:31:70:b9: 43:cc:73:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7MjZrQ+TDuIQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw MTRhMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk Y2U0YWIxNmYtNGNmZS00MDA5LWIzNDItMTRiZTdhZjMxMzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUJY21EootM5W8wAZy3UeErCJojycGX5ffpy N/LXIxmH77uuZ7bJ0lCUTRsRlu+JZQjlaYaAQjDA4CE4IFXUSuriWy9XtPNHWyso v7ocwn78W4Rg5OUYwZXvWOSaaKOQhtm9QbNSYW2gOE9vK7CmGDiN9gEI27w+dYLc KBl/yXDwkc+f+/PWpQ5rG+oUCOFgpdbLWV2xTmLbpSzwdlbexU/ajjJWE3WcTbhv Xk0C5A77RSjt++4ncvuhsHFfD3JPgyIhjFP0siYkgXEQ6UA9SGKIeQymhVu/WwnL UWLIsDXInLCnBnuEAZBxb7/uyi1+oWgRdocDOArrMgvkTjinIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4AMxTtzkHSJ/h0Tet6RATbjBR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1 ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvZDFmYWU4ODAtYjI4NS0z NWY2LThmZjctMTI5ZmFhMDhiMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5 MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2 MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzkjSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwnWsSjSWBf0Ctbj1DdayaT/M5cN9SejS1oUWAMpYOmntzBa8900WWy g+TKSX16bzfZyFhBLNZCo95Mch/2IyL4fouP/zDUh/Fa80iIfcK3n6+FO35TYHoo FpNVK3G1VnvjPsHNTgl2y6CTL0gHlH0DwBCPLWfIQic3OeSTDNpiBi0QBf5MUv74 K17fbkH/APwZQc0On4FfUjwj70G3JZcfmDnL56JS7K5kk6+IeZX+JL7iEHao00JR fXlAdMZtienfXw+thu6IaT5uRsbFjUKu3xFN4oCbHGQ9jaDAZsMgG3O99/eaN2ur 0L53eo7MpugdQc0TcGAxVzFwuUPMc4g= -----END CERTIFICATE-----Generated at Mon Apr 7 23:39:13 2025 by rpki-client