$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa File: db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa (raw, json) Hash identifier: at23ImyjYNjCzHo575S10UrEpyTSWbdebDDDIOh3PXI= Subject key identifier: DC:30:A8:5E:90:F0:64:96:3F:6D:F6:C4:BE:D0:CB:A7:32:6A:A4:B3 Certificate issuer: /CN=1931273b-f68a-4770-b714-cad22762621f Certificate serial: 010D0C9F432858488DAB4D61E9E00EF7DBC53800 Authority key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 13411 IP address blocks: 206.168.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:4d:61:e9:e0:0e:f7:db:c5:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1931273b-f68a-4770-b714-cad22762621f Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=8cb50594-3403-4548-80d0-17942fc7bc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:57:c6:19:f7:78:6f:71:4c:eb:c9:e2:c3:71: 97:83:a8:81:d8:5b:5e:f9:f7:41:42:de:c7:4e:76: 8c:7e:c5:e1:b1:90:af:0d:3f:11:2a:77:06:14:02: 46:fc:a5:c1:7b:6a:e7:a3:3d:4f:ba:3e:91:f7:c7: 8c:fc:9e:18:fc:0f:ef:1a:a4:e8:4c:82:04:d7:dc: 5a:b3:2b:2f:e8:ee:d2:68:3e:4c:df:c5:80:aa:ab: c1:3e:cf:5e:8c:00:12:7f:2b:37:5d:b4:7f:15:3c: 9e:b7:3e:60:97:69:a1:9b:2b:1f:59:c9:2d:dc:a8: 1a:eb:95:f7:eb:73:ad:b6:a0:54:6f:de:bd:45:78: a2:37:73:bb:a5:55:61:93:45:e5:77:c9:f3:75:46: 83:09:2e:5e:ba:5e:24:36:2d:c5:85:da:1c:19:13: 62:29:1f:60:5d:86:4f:41:39:a0:02:a1:45:0b:d9: 8c:0c:ff:b6:28:b8:67:1e:89:c7:c6:56:e4:6c:0d: ff:a1:ab:9b:21:0a:d1:04:c2:44:86:5c:b1:3c:aa: 6b:06:ad:46:40:8e:7f:9c:18:e6:5f:73:ba:ea:95: f7:4a:f7:7f:04:8c:05:b2:62:0d:ca:94:55:3f:4c: 4b:c4:26:4e:56:a8:b4:de:f5:df:b6:56:34:61:76: 00:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:30:A8:5E:90:F0:64:96:3F:6D:F6:C4:BE:D0:CB:A7:32:6A:A4:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/db58f15a-c7bf-3136-a0d7-1acf0de56f73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl X509v3 Authority Key Identifier: keyid:F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer sbgp-ipAddrBlock: critical IPv4: 206.168.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:68:4d:73:e0:22:35:b2:7d:22:b3:b1:d3:40:82:15:d7:66: 53:9b:38:fb:83:04:68:b8:28:b0:3d:b3:64:b8:c4:ae:6e:6e: fa:f5:7d:28:de:68:6e:b8:79:64:f2:06:01:94:53:16:ae:3b: b9:ca:4b:35:5e:eb:d4:c4:f9:f2:38:3b:d3:0f:0e:9f:e6:2f: df:c4:49:9a:ac:f5:81:c0:1b:ec:3a:c4:26:63:c4:3c:1d:b8: 5a:0f:68:6d:55:5c:22:7c:66:e8:0b:e1:d5:98:1f:7b:81:94: 33:49:89:03:1f:c5:7b:f2:c0:3c:14:f8:77:e7:49:ec:ff:e1: da:cc:56:68:b3:2e:f8:dd:bd:fb:5b:a0:52:6f:bf:80:36:1a: 28:15:ad:eb:5b:63:2e:54:6b:0b:cc:4d:b9:97:6f:3b:f5:66: 2f:89:2d:e6:f7:54:ed:87:ff:a8:7f:5f:ad:16:2b:bb:5a:5a: 93:31:b1:93:ee:29:30:2f:de:4a:f8:98:f8:1a:3c:0e:0e:11: d2:45:3c:b0:ab:a8:e1:7f:0c:da:bc:67:ad:87:78:44:6a:09: b9:a7:75:76:de:3c:bc:1e:ba:67:d6:6e:d7:1d:c6:df:e1:e0: e7:ae:82:03:fd:1f:fa:ac:e3:6c:a5:b7:37:20:d6:48:ed:6c: ce:3a:83:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq01h6eAO99vFOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTkzMTI3M2ItZjY4YS00NzcwLWI3MTQtY2FkMjI3NjI2 MjFmMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk OGNiNTA1OTQtMzQwMy00NTQ4LTgwZDAtMTc5NDJmYzdiYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1fGGfd4b3FM68niw3GXg6iB2Fte+fdBQt7H TnaMfsXhsZCvDT8RKncGFAJG/KXBe2rnoz1Puj6R98eM/J4Y/A/vGqToTIIE19xa sysv6O7SaD5M38WAqqvBPs9ejAASfys3XbR/FTyetz5gl2mhmysfWckt3Kga65X3 63OttqBUb969RXiiN3O7pVVhk0Xld8nzdUaDCS5eul4kNi3FhdocGRNiKR9gXYZP QTmgAqFFC9mMDP+2KLhnHonHxlbkbA3/oaubIQrRBMJEhlyxPKprBq1GQI5/nBjm X3O66pX3Svd/BIwFsmINypRVP0xLxCZOVqi03vXftlY0YXYAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwwqF6Q8GSWP232xL7Qy6cyaqSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOTMx MjczYi1mNjhhLTQ3NzAtYjcxNC1jYWQyMjc2MjYyMWYvZGI1OGYxNWEtYzdiZi0z MTM2LWEwZDctMWFjZjBkZTU2ZjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTkzMTI3M2ItZjY4YS00NzcwLWI3 MTQtY2FkMjI3NjI2MjFmLzE5MzEyNzNiLWY2OGEtNDc3MC1iNzE0LWNhZDIyNzYy NjIxZi5jcmwwHwYDVR0jBBgwFoAU9xaQtePJm3IlxIen6lF28k489q0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOTMxMjczYi1mNjhhLTQ3NzAtYjcxNC1jYWQy Mjc2MjYyMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqjsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1oTXPgIjWyfSKzsdNAghXXZlObOPuDBGi4KLA9s2S4xK5ubvr1fSje aG64eWTyBgGUUxauO7nKSzVe69TE+fI4O9MPDp/mL9/ESZqs9YHAG+w6xCZjxDwd uFoPaG1VXCJ8ZugL4dWYH3uBlDNJiQMfxXvywDwU+HfnSez/4drMVmizLvjdvftb oFJvv4A2GigVretbYy5UawvMTbmXbzv1Zi+JLeb3VO2H/6h/X60WK7taWpMxsZPu KTAv3kr4mPgaPA4OEdJFPLCrqOF/DNq8Z62HeERqCbmndXbePLweumfWbtcdxt/h 4OeuggP9H/qs42yltzcg1kjtbM46gzw= -----END CERTIFICATE-----Generated at Sat Apr 5 04:37:37 2025 by rpki-client