$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/1a06f661-94dc-3859-a9e2-bf46059fef60.roa File: 1a06f661-94dc-3859-a9e2-bf46059fef60.roa (raw, json) Hash identifier: GDj8oGyDs6U57EBy8BTRhnDmmyNPygCdEoA7hLtClpk= Subject key identifier: 07:92:0C:CB:0F:3E:43:54:42:B2:E1:F6:98:D0:F7:97:26:A4:B4:9F Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F43285848CDE11210676D17CB9BC32D80 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/1a06f661-94dc-3859-a9e2-bf46059fef60.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 33442 IP address blocks: 157.235.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:12:10:67:6d:17:cb:9b:c3:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=46f28bc3-9e9d-4719-8a83-8c9a28fe7d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:5f:a4:64:50:c5:68:f4:52:23:b8:2d:2d: c2:70:eb:02:54:81:ac:a1:69:ae:ab:d5:6b:8c:de: 0f:64:2b:82:d3:67:b9:f1:0a:45:47:76:8b:b9:70: 63:1d:a3:2c:90:46:86:af:fc:e0:ba:47:35:c3:30: 47:9a:8a:c8:aa:f0:23:a8:10:3d:00:5d:75:2a:27: c9:aa:b3:e5:d0:16:e0:3f:34:af:74:47:3a:65:b4: ae:29:53:79:37:8d:f2:e1:d6:2e:d7:0a:83:63:7d: fc:31:97:ee:f3:d8:c0:5c:38:d0:bc:8e:9d:38:a8: e1:e2:8d:1d:ee:e2:f3:19:33:c3:9d:44:33:94:c1: 9b:5b:02:a6:24:17:12:90:7d:3a:08:66:17:2c:91: 95:b6:a7:b1:53:56:f5:e3:40:be:fd:ad:1f:da:08: ed:20:a6:e0:67:73:b7:ce:2d:51:de:c7:74:37:e2: 3d:b1:93:13:5b:fd:7e:cb:00:ed:01:8f:98:3e:d4: 36:68:5b:57:65:11:04:6e:b1:f2:cb:74:5d:68:a5: 99:a4:4d:aa:1c:7c:22:47:a2:d3:95:2d:ab:db:1b: d5:36:32:77:35:af:72:bb:ad:35:72:14:ed:d3:6e: 41:14:52:c0:97:dd:1e:10:7b:a2:59:b6:38:01:32: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:92:0C:CB:0F:3E:43:54:42:B2:E1:F6:98:D0:F7:97:26:A4:B4:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/1a06f661-94dc-3859-a9e2-bf46059fef60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a7:7e:19:3a:82:a7:e7:be:b3:79:80:67:37:46:35:ef:41: e1:0c:47:d1:a9:9f:5f:af:d5:25:dd:fe:86:9e:e3:a6:ca:f4: ac:80:a9:a5:33:d8:9b:96:d5:38:c8:79:c4:35:6e:dd:67:cb: fc:27:34:4b:4a:f4:c7:e8:ed:ce:a0:8b:d3:f4:c1:f7:98:7e: cb:e4:bb:6c:87:15:f7:08:fd:83:96:f9:3d:0c:a5:71:ad:f9: c3:2d:fa:52:06:ba:ee:3b:e4:e9:76:fd:2a:35:f0:d4:c3:4c: 09:78:ff:16:9c:71:16:a4:28:f1:be:08:3d:67:2b:88:e6:78: b8:7c:df:17:8d:0c:b3:62:7d:79:e9:52:f3:44:37:ba:f3:98: ed:83:8e:f3:ee:f8:4b:2a:33:2f:84:b1:35:c0:62:80:c6:08: 36:ef:dd:77:af:47:e6:0a:4c:b3:52:45:fa:5a:a8:e2:b6:ca: c0:d5:d4:fc:3b:a0:3b:da:20:5d:8b:69:41:fa:66:ac:e3:bd: b2:e1:9e:71:bb:fa:8f:27:82:18:2e:31:c4:3d:09:9d:61:8b: f0:b3:3f:69:ac:de:a2:63:ad:60:d0:fc:38:15:82:f6:4d:46: 3a:68:71:5c:15:65:a9:3d:fc:4e:f3:db:8a:c0:be:71:81:1d: 4f:ee:24:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RIQZ20Xy5vDLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NDZmMjhiYzMtOWU5ZC00NzE5LThhODMtOGM5YTI4ZmU3ZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA1fpGRQxWj0UiO4LS3CcOsCVIGsoWmuq9Vr jN4PZCuC02e58QpFR3aLuXBjHaMskEaGr/zgukc1wzBHmorIqvAjqBA9AF11KifJ qrPl0BbgPzSvdEc6ZbSuKVN5N43y4dYu1wqDY338MZfu89jAXDjQvI6dOKjh4o0d 7uLzGTPDnUQzlMGbWwKmJBcSkH06CGYXLJGVtqexU1b140C+/a0f2gjtIKbgZ3O3 zi1R3sd0N+I9sZMTW/1+ywDtAY+YPtQ2aFtXZREEbrHyy3RdaKWZpE2qHHwiR6LT lS2r2xvVNjJ3Na9yu601chTt025BFFLAl90eEHuiWbY4ATJ3awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeSDMsPPkNUQrLh9pjQ95cmpLSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMWEwNmY2NjEtOTRkYy0z ODU5LWE5ZTItYmY0NjA1OWZlZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnevOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGnfhk6gqfnvrN5gGc3RjXvQeEMR9Gpn1+v1SXd/oae46bK9KyAqaUz 2JuW1TjIecQ1bt1ny/wnNEtK9Mfo7c6gi9P0wfeYfsvku2yHFfcI/YOW+T0MpXGt +cMt+lIGuu475Ol2/So18NTDTAl4/xaccRakKPG+CD1nK4jmeLh83xeNDLNifXnp UvNEN7rzmO2DjvPu+EsqMy+EsTXAYoDGCDbv3XevR+YKTLNSRfpaqOK2ysDV1Pw7 oDvaIF2LaUH6ZqzjvbLhnnG7+o8nghguMcQ9CZ1hi/CzP2ms3qJjrWDQ/DgVgvZN RjpocVwVZak9/E7z24rAvnGBHU/uJEI= -----END CERTIFICATE-----Generated at Sat Apr 12 00:09:36 2025 by rpki-client