$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa File: 3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa (raw, json) Hash identifier: o+NFd1qANC16haDO8o27Q9YFPhQKT4Q5L3Dbnx7g5eE= Subject key identifier: F1:25:72:B7:6C:6B:06:D1:FA:DB:58:3E:17:EB:6D:D4:43:49:B6:75 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584921344D86B677BCD46E9A7A80 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa Signing time: Sun 09 Mar 2025 10:20:53 +0000 ROA not before: Sun 09 Mar 2025 10:20:53 +0000 ROA not after: Sat 07 Jun 2025 10:20:53 +0000 asID: 36522 IP address blocks: 206.47.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:4d:86:b6:77:bc:d4:6e:9a:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:53 2025 GMT Not After : Jun 7 10:20:53 2025 GMT Subject: CN=d61d59b2-5705-4835-a09b-9132dc6bc293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:f8:1e:2e:cf:71:a5:c5:f9:e2:63:3a:f1: 07:00:51:58:34:57:45:80:9a:44:aa:50:f3:14:8f: 16:31:83:4a:4c:8d:1d:be:db:86:f3:39:14:b8:82: 43:67:60:c9:9a:f5:53:5f:77:5a:f8:c0:9e:46:ad: 7e:13:bc:89:53:b5:5e:be:e4:b9:a5:94:bd:db:54: cc:62:07:f1:19:69:24:bc:a4:e7:72:5f:70:05:be: 16:20:ef:36:47:11:33:59:09:e3:ca:ca:a7:ff:3e: 10:7b:bb:7e:6f:55:45:f9:c5:bb:a8:55:02:89:fd: 92:2c:08:12:78:81:ad:e5:24:a0:19:39:fd:e1:f6: 5a:e7:e4:a6:de:7e:1b:f8:ec:4b:29:51:c6:d4:96: ef:db:7e:fe:7b:10:87:c0:7c:ab:ea:0b:19:ae:ff: b0:a0:d5:15:b6:11:db:0a:c1:3d:10:01:99:23:d6: 1f:69:d7:5d:e7:4f:ae:f1:2f:c9:86:9f:d8:d0:9b: 89:f1:06:c2:24:23:12:4d:10:cf:b3:2a:f9:6d:c8: c1:c6:39:ef:32:ed:a7:e1:09:55:a2:92:f2:4a:d2: 4b:48:ee:dd:12:ed:c9:78:a1:2a:18:84:c6:2a:dd: d1:de:57:e0:a0:39:21:62:e2:8a:ff:4a:04:bc:fd: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:72:B7:6C:6B:06:D1:FA:DB:58:3E:17:EB:6D:D4:43:49:B6:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3d5e6c37-d97a-30a2-bfcd-b824afd55a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 206.47.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:79:0e:bb:ee:a4:90:16:99:31:44:7a:8e:b1:ec:4f:c9:7b: f3:2c:f4:b4:c7:7b:14:8f:6a:8c:b2:4f:47:b4:88:a9:0c:40: da:65:b8:d7:7a:7d:64:fb:15:74:5b:d4:a1:57:c8:04:b3:6d: 0d:df:50:c2:5d:bf:31:97:aa:cb:30:3f:ff:eb:4e:98:d6:e0: cc:7f:16:a6:23:2f:c7:2b:b2:04:e8:8c:dd:5f:f2:9e:e1:0b: 0a:d9:ec:d6:69:c2:6f:7c:9f:d8:d5:db:85:c5:79:6d:75:6e: e3:2e:8f:4b:cb:16:72:f4:9f:49:7c:95:52:7b:9a:1f:2b:2b: 40:47:21:dd:27:cf:94:c0:82:cc:7f:2d:5f:5f:7a:b6:e5:b1: ce:b5:8d:5e:fc:39:24:7c:26:f6:38:d5:c0:93:fa:2d:82:9d: 4c:94:4d:b5:29:f7:49:53:db:55:4b:ed:aa:c9:75:1b:55:b7: 62:91:53:d8:db:f6:89:d5:46:a6:fd:04:6b:1a:a4:84:13:69: 4a:ee:49:2d:cd:d6:32:4c:9a:a0:dd:32:d3:7f:87:71:55:27: 08:1e:01:3a:ff:9c:5a:df:5e:4b:25:63:3d:e1:63:1e:cc:ad: 85:8a:bb:cc:a9:17:1e:98:f6:fa:5e:69:0b:89:c9:40:90:c9: 4a:28:c8:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNE2Gtne81G6aeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjA1M1oXDTI1MDYwNzEwMjA1M1owLzEtMCsGA1UEAxMk ZDYxZDU5YjItNTcwNS00ODM1LWEwOWItOTEzMmRjNmJjMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4z4Hi7PcaXF+eJjOvEHAFFYNFdFgJpEqlDz FI8WMYNKTI0dvtuG8zkUuIJDZ2DJmvVTX3da+MCeRq1+E7yJU7VevuS5pZS921TM YgfxGWkkvKTncl9wBb4WIO82RxEzWQnjysqn/z4Qe7t+b1VF+cW7qFUCif2SLAgS eIGt5SSgGTn94fZa5+Sm3n4b+OxLKVHG1Jbv237+exCHwHyr6gsZrv+woNUVthHb CsE9EAGZI9Yfaddd50+u8S/Jhp/Y0JuJ8QbCJCMSTRDPsyr5bcjBxjnvMu2n4QlV opLyStJLSO7dEu3JeKEqGITGKt3R3lfgoDkhYuKK/0oEvP27zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPElcrdsawbR+ttYPhfrbdRDSbZ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2Q1ZTZjMzctZDk3YS0z MGEyLWJmY2QtYjgyNGFmZDU1YTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB55DrvupJAWmTFEeo6x7E/Je/Ms9LTHexSPaoyyT0e0iKkMQNpluNd6 fWT7FXRb1KFXyASzbQ3fUMJdvzGXqsswP//rTpjW4Mx/FqYjL8crsgTojN1f8p7h CwrZ7NZpwm98n9jV24XFeW11buMuj0vLFnL0n0l8lVJ7mh8rK0BHId0nz5TAgsx/ LV9ferblsc61jV78OSR8JvY41cCT+i2CnUyUTbUp90lT21VL7arJdRtVt2KRU9jb 9onVRqb9BGsapIQTaUruSS3N1jJMmqDdMtN/h3FVJwgeATr/nFrfXkslYz3hYx7M rYWKu8ypFx6Y9vpeaQuJyUCQyUooyBU= -----END CERTIFICATE-----Generated at Mon Apr 7 16:51:02 2025 by rpki-client