$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/585d4a39-5934-3024-8706-f6af69baec72.roa File: 585d4a39-5934-3024-8706-f6af69baec72.roa (raw, json) Hash identifier: 6Bkhq5It7xJrJSPFGQprS1hR7JJQd02ZYPgPxAE188I= Subject key identifier: 00:5B:0C:AA:8F:CB:70:17:06:C1:31:78:05:67:90:05:54:7F:FE:C7 Certificate issuer: /CN=ac04797e-f41e-4575-a76e-d3656d2d0da3 Certificate serial: 010D0C9F432858487755D7841295B029AE84F300 Authority key identifier: 00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/585d4a39-5934-3024-8706-f6af69baec72.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 206.252.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d7:84:12:95:b0:29:ae:84:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac04797e-f41e-4575-a76e-d3656d2d0da3 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=c4b499af-be4d-4b33-8752-8a45025d3798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:46:75:0f:e8:fa:3e:cb:43:b0:ed:1b:a0: f9:d5:31:91:0b:29:e9:4f:5c:e2:ae:22:25:f1:f3: 63:a5:ab:ac:a8:a8:96:cb:6b:c5:54:92:30:10:b0: 28:21:3b:13:83:0e:0a:51:bf:e8:cc:77:ff:f0:84: ca:a3:0c:fc:11:31:92:24:7d:ff:ff:64:27:5b:15: cf:e2:d7:85:e9:66:89:70:d1:be:0b:22:ff:54:22: 43:9b:dd:c2:ad:95:85:82:84:76:40:d5:d9:d7:4a: d9:43:40:d0:37:3f:b8:ef:0b:8d:26:14:d8:eb:22: dc:79:c2:b4:7b:de:34:66:cb:95:fc:d1:50:c4:70: 52:ea:bd:65:b4:12:78:7b:e1:f5:d1:6b:fa:8f:2f: f9:2a:0c:17:7d:92:c8:70:f2:08:86:ea:bb:0d:89: 95:91:a5:2d:7b:3e:b5:74:8b:1e:7c:25:0a:f8:ec: 78:cd:3a:a8:12:1e:a5:66:a4:32:92:35:5c:d0:37: bc:4d:9b:6f:74:8f:93:58:1d:f1:93:55:69:12:f0: 58:96:ce:19:34:cb:ec:a9:8f:c3:4b:84:5f:da:50: f2:01:7a:72:68:92:78:e0:a4:18:43:65:57:f9:60: a8:af:93:60:ad:63:2b:4e:00:43:97:12:93:0c:49: 5b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5B:0C:AA:8F:CB:70:17:06:C1:31:78:05:67:90:05:54:7F:FE:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/585d4a39-5934-3024-8706-f6af69baec72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl X509v3 Authority Key Identifier: keyid:00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer sbgp-ipAddrBlock: critical IPv4: 206.252.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:2a:13:9f:2c:81:c4:d8:db:94:3e:e6:15:b7:40:f4:f0:fd: 70:b2:28:f0:b6:f9:95:06:67:a6:1b:e0:e4:e8:2b:38:e7:4f: 7c:d1:4f:37:af:17:b3:72:e1:eb:0a:49:e1:ba:ec:e9:a8:06: e2:33:a1:08:45:bc:53:ec:ee:4d:c0:4d:f9:52:54:24:85:1a: c2:6b:17:3c:7a:1b:a8:a2:d7:3d:83:ea:c9:41:f0:5e:88:46: a0:89:c9:a2:4b:f7:3f:04:00:0c:48:47:90:06:80:ce:cd:f3: 86:36:36:be:ab:99:f2:d1:3a:3a:56:1e:f7:da:bf:bb:41:13: 57:82:d7:f8:05:c8:2e:22:b8:47:56:b4:da:00:55:6e:35:73: 67:1b:2b:0f:b3:99:f6:8c:db:61:cc:42:ac:af:d0:d8:c2:7a: de:50:3f:c5:d1:29:af:f2:a6:96:95:3c:ab:f3:85:77:40:c4: 41:29:c6:db:f7:70:7f:2b:34:02:3e:df:9d:85:de:a1:e8:97: c6:08:b8:f6:a8:bf:88:ad:09:ac:cf:11:41:5a:19:55:88:7f: 3d:8e:dd:fe:df:d6:78:79:6e:a1:a2:56:88:ca:11:f1:0e:cd: 26:dd:a7:05:50:3f:3f:7e:61:e6:b8:d9:a5:53:51:fa:bd:e0: 1c:21:09:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdeEEpWwKa6E8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMwNDc5N2UtZjQxZS00NTc1LWE3NmUtZDM2NTZkMmQw ZGEzMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk YzRiNDk5YWYtYmU0ZC00YjMzLTg3NTItOGE0NTAyNWQzNzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIdGdQ/o+j7LQ7DtG6D51TGRCynpT1ziriIl 8fNjpausqKiWy2vFVJIwELAoITsTgw4KUb/ozHf/8ITKowz8ETGSJH3//2QnWxXP 4teF6WaJcNG+CyL/VCJDm93CrZWFgoR2QNXZ10rZQ0DQNz+47wuNJhTY6yLcecK0 e940ZsuV/NFQxHBS6r1ltBJ4e+H10Wv6jy/5KgwXfZLIcPIIhuq7DYmVkaUtez61 dIsefCUK+Ox4zTqoEh6lZqQykjVc0De8TZtvdI+TWB3xk1VpEvBYls4ZNMvsqY/D S4Rf2lDyAXpyaJJ44KQYQ2VX+WCor5NgrWMrTgBDlxKTDElbmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABbDKqPy3AXBsExeAVnkAVUf/7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzA0 Nzk3ZS1mNDFlLTQ1NzUtYTc2ZS1kMzY1NmQyZDBkYTMvNTg1ZDRhMzktNTkzNC0z MDI0LTg3MDYtZjZhZjY5YmFlYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMwNDc5N2UtZjQxZS00NTc1LWE3 NmUtZDM2NTZkMmQwZGEzL2FjMDQ3OTdlLWY0MWUtNDU3NS1hNzZlLWQzNjU2ZDJk MGRhMy5jcmwwHwYDVR0jBBgwFoAUAAcmEA8YxpPDHUrjrSxWot0Sb6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzA0Nzk3ZS1mNDFlLTQ1NzUtYTc2ZS1kMzY1 NmQyZDBkYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcqE58sgcTY25Q+5hW3QPTw/XCyKPC2+ZUGZ6Yb4OToKzjnT3zRTzev F7Ny4esKSeG67OmoBuIzoQhFvFPs7k3ATflSVCSFGsJrFzx6G6ii1z2D6slB8F6I RqCJyaJL9z8EAAxIR5AGgM7N84Y2Nr6rmfLROjpWHvfav7tBE1eC1/gFyC4iuEdW tNoAVW41c2cbKw+zmfaM22HMQqyv0NjCet5QP8XRKa/yppaVPKvzhXdAxEEpxtv3 cH8rNAI+352F3qHol8YIuPaov4itCazPEUFaGVWIfz2O3f7f1nh5bqGiVojKEfEO zSbdpwVQPz9+Yea42aVTUfq94BwhCZ8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:37 2025 by rpki-client