$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/513b70a1-3c50-3168-a6a9-58b6b68249ef.roa File: 513b70a1-3c50-3168-a6a9-58b6b68249ef.roa (raw, json) Hash identifier: qJ6s3gs2tb5+Jgie5ulwiAP8kImb4xevZ07193R4zEo= Subject key identifier: 9B:BF:E1:59:21:36:05:1C:47:D3:CA:E9:DF:97:D6:2D:44:F7:DA:7D Certificate issuer: /CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059 Certificate serial: 010D0C9F432858497279A929B89F84B6F518A580 Authority key identifier: ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/513b70a1-3c50-3168-a6a9-58b6b68249ef.roa Signing time: Mon 07 Apr 2025 13:00:59 +0000 ROA not before: Mon 07 Apr 2025 13:00:59 +0000 ROA not after: Sun 06 Jul 2025 13:00:59 +0000 asID: 46634 IP address blocks: 206.220.200.0/23 maxlen: 23 206.220.200.0/24 maxlen: 24 206.220.201.0/24 maxlen: 24 206.220.202.0/24 maxlen: 24 206.220.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:79:a9:29:b8:9f:84:b6:f5:18:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a288b4bb-60c5-4f54-8c7d-75bba8d4b059 Validity Not Before: Apr 7 13:00:59 2025 GMT Not After : Jul 6 13:00:59 2025 GMT Subject: CN=a799dd2f-807b-4d5b-a759-c5538e2ad311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:03:c3:9b:cf:82:49:4c:62:7b:eb:58:f7:0d: 40:93:f7:1b:47:75:aa:5d:1c:0a:9a:42:54:8a:66: bb:73:2c:be:ed:78:0a:34:9f:9c:94:c9:b6:df:60: 02:97:d3:58:1b:c8:5f:c0:86:1b:74:bc:bf:be:ff: f1:13:f5:6a:fc:f0:33:ce:dc:a9:56:f7:bd:64:be: 94:da:94:dd:41:9b:be:a6:c9:57:1d:1c:89:b8:1a: 32:b2:00:dc:ca:e4:b5:9d:75:7a:17:c6:9c:ae:34: 66:3f:ef:73:66:b4:f1:aa:c9:7d:c2:f1:04:b1:2d: 35:e7:0d:d1:1f:e7:7f:d8:f6:5c:16:d0:c0:cc:06: 8e:80:ed:d2:d7:89:44:ad:02:f4:f2:ed:1f:50:73: e8:e5:ce:09:bb:52:af:cb:fb:7a:79:ce:4c:44:9d: c4:ca:28:6f:d0:46:2c:5a:38:b2:c0:fa:f5:76:c6: eb:8e:0c:7c:c8:f5:ae:8d:0d:e2:76:3e:24:e4:75: 85:a4:c9:0d:85:fd:de:a8:b2:00:7e:e7:3f:e0:15: f4:9f:ca:7f:e6:7a:37:cb:c6:46:69:d2:86:18:80: ea:34:b7:b7:99:25:e5:36:bf:e3:82:ef:a3:be:5c: 68:c0:2f:40:57:5f:1f:77:3a:b7:e7:59:c2:2b:09: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BF:E1:59:21:36:05:1C:47:D3:CA:E9:DF:97:D6:2D:44:F7:DA:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/513b70a1-3c50-3168-a6a9-58b6b68249ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.crl X509v3 Authority Key Identifier: keyid:ED:2D:24:6E:34:BA:A1:7A:E7:A9:EA:3F:A6:D1:B7:6F:61:96:9E:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a288b4bb-60c5-4f54-8c7d-75bba8d4b059.cer sbgp-ipAddrBlock: critical IPv4: 206.220.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:3b:00:9d:5b:43:1c:cb:1f:19:58:26:73:f4:14:ac:c6:fc: 8e:84:cd:d3:70:c9:14:8e:45:e9:9b:ef:93:a5:04:82:d5:08: 69:7a:15:05:30:16:27:12:cd:50:0b:29:36:ca:f2:87:9d:c4: 98:15:93:cb:8e:f2:3b:f0:8c:76:03:84:3f:c8:38:ee:36:02: 97:cc:c0:d2:b0:82:c4:73:21:73:be:2b:2f:4d:96:d4:67:17: 35:61:cc:b4:7a:10:d4:b7:49:2a:86:03:f8:d7:de:5f:c2:68: a3:d2:e0:a2:8b:1c:b5:ef:0f:0c:c9:65:74:19:d4:44:52:b1: 5d:a7:11:35:fd:fe:d3:bf:3f:fc:a1:ab:32:a9:ad:6c:00:4d: 68:60:6d:63:ce:39:c5:a8:ef:95:33:7e:9f:86:b7:39:0a:3e: 8a:c3:8b:1a:e5:29:56:1d:8a:83:86:b0:10:3e:7d:19:3f:92: a1:e9:20:b3:3c:27:ea:00:c3:40:43:f9:3e:04:bf:9a:59:8e: 17:91:09:a5:31:97:a4:d4:01:9a:79:49:b5:2b:92:a7:9a:ee: 49:fe:19:65:bb:6d:7b:11:12:e6:af:6a:0b:a3:79:bd:b4:34: 4a:df:30:f3:94:0f:cd:41:07:6d:be:71:92:9f:fe:c1:6b:16: f5:64:df:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyeakpuJ+EtvUYpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI4OGI0YmItNjBjNS00ZjU0LThjN2QtNzViYmE4ZDRi MDU5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk YTc5OWRkMmYtODA3Yi00ZDViLWE3NTktYzU1MzhlMmFkMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAPDm8+CSUxie+tY9w1Ak/cbR3WqXRwKmkJU ima7cyy+7XgKNJ+clMm232ACl9NYG8hfwIYbdLy/vv/xE/Vq/PAzztypVve9ZL6U 2pTdQZu+pslXHRyJuBoysgDcyuS1nXV6F8acrjRmP+9zZrTxqsl9wvEEsS015w3R H+d/2PZcFtDAzAaOgO3S14lErQL08u0fUHPo5c4Ju1Kvy/t6ec5MRJ3Eyihv0EYs WjiywPr1dsbrjgx8yPWujQ3idj4k5HWFpMkNhf3eqLIAfuc/4BX0n8p/5no3y8ZG adKGGIDqNLe3mSXlNr/jgu+jvlxowC9AV18fdzq351nCKwlTmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu/4VkhNgUcR9PK6d+X1i1E99p9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjg4 YjRiYi02MGM1LTRmNTQtOGM3ZC03NWJiYThkNGIwNTkvNTEzYjcwYTEtM2M1MC0z MTY4LWE2YTktNThiNmI2ODI0OWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTI4OGI0YmItNjBjNS00ZjU0LThj N2QtNzViYmE4ZDRiMDU5L2EyODhiNGJiLTYwYzUtNGY1NC04YzdkLTc1YmJhOGQ0 YjA1OS5jcmwwHwYDVR0jBBgwFoAU7S0kbjS6oXrnqeo/ptG3b2GWnpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjg4YjRiYi02MGM1LTRmNTQtOGM3ZC03NWJi YThkNGIwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCztzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC87AJ1bQxzLHxlYJnP0FKzG/I6EzdNwyRSORemb75OlBILVCGl6FQUw FicSzVALKTbK8oedxJgVk8uO8jvwjHYDhD/IOO42ApfMwNKwgsRzIXO+Ky9NltRn FzVhzLR6ENS3SSqGA/jX3l/CaKPS4KKLHLXvDwzJZXQZ1ERSsV2nETX9/tO/P/yh qzKprWwATWhgbWPOOcWo75Uzfp+GtzkKPorDixrlKVYdioOGsBA+fRk/kqHpILM8 J+oAw0BD+T4Ev5pZjheRCaUxl6TUAZp5SbUrkqea7kn+GWW7bXsREuavagujeb20 NErfMPOUD81BB22+cZKf/sFrFvVk36o= -----END CERTIFICATE-----Generated at Fri Apr 11 23:27:53 2025 by rpki-client