$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/68884d9c-689f-3558-bca5-84a7a0d377e6.roa File: 68884d9c-689f-3558-bca5-84a7a0d377e6.roa (raw, json) Hash identifier: 6Z7JCk/Da3r/h8+ch2tUHaDcgR44VtRkHlk2E5at/jU= Subject key identifier: B0:94:E7:CA:8D:A5:68:E8:19:36:D3:7B:0F:73:E9:FC:0E:4B:5F:F7 Certificate issuer: /CN=ac04797e-f41e-4575-a76e-d3656d2d0da3 Certificate serial: 010D0C9F4328584957F3F6EF348BB8FDB7BEBC48 Authority key identifier: 00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/68884d9c-689f-3558-bca5-84a7a0d377e6.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 6650 IP address blocks: 206.252.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:f6:ef:34:8b:b8:fd:b7:be:bc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac04797e-f41e-4575-a76e-d3656d2d0da3 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=bfd2d606-99ef-4ca8-b2cd-18e50f6ec507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:5d:ba:1b:a9:0e:92:99:ea:88:ed:d8:4a: b5:ce:72:b1:94:5f:f4:52:28:8b:c1:90:b4:c3:e8: 0b:58:23:33:d7:98:5b:fb:9b:17:19:3c:5e:a6:88: 40:27:ae:ff:d4:23:c9:a8:31:4f:af:a0:de:d6:00: be:44:ee:51:18:7a:a6:0e:a7:a5:40:b1:e2:85:5c: 37:eb:25:2e:e3:19:a9:21:00:d8:92:4b:31:fd:dd: bc:41:a1:82:cc:21:84:2b:93:81:67:29:f5:ee:b3: 7f:8e:91:bc:75:f8:3d:d8:78:cc:9f:f0:e7:ba:79: 25:d0:33:30:e4:1e:9f:a7:58:95:4e:e0:d2:86:33: 56:e1:11:3d:84:4d:dd:8e:30:1e:7b:23:eb:9e:52: a2:42:ec:6b:ed:b2:4a:4b:6f:e9:eb:65:c3:09:f0: c4:4a:23:1b:80:f6:b7:40:4e:48:7c:6c:17:97:c9: 5b:58:0d:16:70:1f:5d:99:41:54:f5:f1:81:6c:9d: 3b:3a:f9:ff:c1:04:92:33:7b:1b:eb:fd:c0:79:99: 56:64:a2:32:8c:4b:9a:e1:9f:76:85:f5:13:cd:3d: ee:85:cb:e4:40:b6:2e:fd:d0:72:dc:35:ec:a6:0c: 09:24:ac:60:f0:02:8f:da:f2:70:1d:98:3d:e0:c0: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:94:E7:CA:8D:A5:68:E8:19:36:D3:7B:0F:73:E9:FC:0E:4B:5F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/68884d9c-689f-3558-bca5-84a7a0d377e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl X509v3 Authority Key Identifier: keyid:00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer sbgp-ipAddrBlock: critical IPv4: 206.252.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3b:b6:bf:89:77:a8:70:b0:c6:23:9b:05:9c:db:1d:9a:4e: 73:ac:99:3d:a9:b6:d4:fc:13:37:10:6e:20:57:dd:b8:6d:f9: 5c:55:2b:b5:9c:5b:ca:5e:64:9d:6e:07:58:6e:80:29:89:5e: de:64:15:51:e6:db:49:3f:51:90:83:da:9c:43:ba:c0:97:eb: c3:17:12:fa:4d:3a:96:4a:4a:70:24:db:23:80:35:f8:7c:94: eb:87:ac:ab:64:57:96:9b:68:27:bf:36:10:69:62:35:11:25: cd:47:a0:b2:34:98:8a:85:d8:6f:48:6c:a1:06:f4:8c:85:7b: 8d:3e:6e:bd:dd:81:ab:2b:a1:d2:75:05:4a:04:9d:ab:ec:b6: 27:df:5d:f3:8f:70:5e:62:9b:51:3f:4f:41:4d:7e:a5:57:b4: 2b:df:98:e8:f5:32:1d:03:00:01:ef:71:3b:fb:55:65:63:e8: c6:2c:ad:62:d0:21:c6:20:fc:83:40:2f:99:48:89:56:0a:cf: 4a:20:82:f8:2b:77:80:ac:b8:85:f5:c3:13:d1:40:02:3a:be: 7b:f6:8d:03:28:ea:ee:fe:d3:10:e9:ce:41:3b:b3:89:41:ed: 65:10:13:8c:fc:ac:4f:48:3e:78:3f:73:fb:7d:b9:9e:05:7d: 34:97:4f:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/bvNIu4/be+vEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMwNDc5N2UtZjQxZS00NTc1LWE3NmUtZDM2NTZkMmQw ZGEzMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YmZkMmQ2MDYtOTllZi00Y2E4LWIyY2QtMThlNTBmNmVjNTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVBduhupDpKZ6ojt2Eq1znKxlF/0UiiLwZC0 w+gLWCMz15hb+5sXGTxepohAJ67/1CPJqDFPr6De1gC+RO5RGHqmDqelQLHihVw3 6yUu4xmpIQDYkksx/d28QaGCzCGEK5OBZyn17rN/jpG8dfg92HjMn/Dnunkl0DMw 5B6fp1iVTuDShjNW4RE9hE3djjAeeyPrnlKiQuxr7bJKS2/p62XDCfDESiMbgPa3 QE5IfGwXl8lbWA0WcB9dmUFU9fGBbJ07Ovn/wQSSM3sb6/3AeZlWZKIyjEua4Z92 hfUTzT3uhcvkQLYu/dBy3DXspgwJJKxg8AKP2vJwHZg94MD91QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCU58qNpWjoGTbTew9z6fwOS1/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzA0 Nzk3ZS1mNDFlLTQ1NzUtYTc2ZS1kMzY1NmQyZDBkYTMvNjg4ODRkOWMtNjg5Zi0z NTU4LWJjYTUtODRhN2EwZDM3N2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMwNDc5N2UtZjQxZS00NTc1LWE3 NmUtZDM2NTZkMmQwZGEzL2FjMDQ3OTdlLWY0MWUtNDU3NS1hNzZlLWQzNjU2ZDJk MGRhMy5jcmwwHwYDVR0jBBgwFoAUAAcmEA8YxpPDHUrjrSxWot0Sb6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzA0Nzk3ZS1mNDFlLTQ1NzUtYTc2ZS1kMzY1 NmQyZDBkYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ7tr+Jd6hwsMYjmwWc2x2aTnOsmT2pttT8EzcQbiBX3bht+VxVK7Wc W8peZJ1uB1hugCmJXt5kFVHm20k/UZCD2pxDusCX68MXEvpNOpZKSnAk2yOANfh8 lOuHrKtkV5abaCe/NhBpYjURJc1HoLI0mIqF2G9IbKEG9IyFe40+br3dgasrodJ1 BUoEnavstiffXfOPcF5im1E/T0FNfqVXtCvfmOj1Mh0DAAHvcTv7VWVj6MYsrWLQ IcYg/INAL5lIiVYKz0oggvgrd4CsuIX1wxPRQAI6vnv2jQMo6u7+0xDpzkE7s4lB 7WUQE4z8rE9IPng/c/t9uZ4FfTSXTw0= -----END CERTIFICATE-----Generated at Sat Apr 5 03:49:52 2025 by rpki-client