$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/cc3a59c6-a2d3-37c7-b60a-9816fe079ff3.roa File: cc3a59c6-a2d3-37c7-b60a-9816fe079ff3.roa (raw, json) Hash identifier: zfzI+MZlxhYgho40eLINLVBtPfaNw8Xi0BsbsCeKb2Q= Subject key identifier: AF:09:04:24:07:F6:D0:95:4C:3E:7E:D0:24:C0:E3:B2:BB:A0:ED:AE Certificate issuer: /CN=11111c75-ef67-41bd-b074-4c401bf74ccd Certificate serial: 010D0C9F4328584911BB622CCADB690963883940 Authority key identifier: 29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/cc3a59c6-a2d3-37c7-b60a-9816fe079ff3.roa Signing time: Mon 03 Mar 2025 21:20:07 +0000 ROA not before: Mon 03 Mar 2025 21:20:07 +0000 ROA not after: Sun 01 Jun 2025 20:20:07 +0000 asID: 8047 IP address blocks: 206.174.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:bb:62:2c:ca:db:69:09:63:88:39:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11111c75-ef67-41bd-b074-4c401bf74ccd Validity Not Before: Mar 3 21:20:07 2025 GMT Not After : Jun 1 20:20:07 2025 GMT Subject: CN=1baa68f3-1c04-403f-ba37-98e31a547a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:3a:36:dd:f2:82:29:f2:99:cb:2f:59:fe: 4a:ee:1a:a6:63:2b:2e:86:57:82:05:8d:54:4f:b1: 1c:f4:d2:48:b0:dc:00:19:e9:81:17:5b:38:58:c3: 12:ba:b8:05:70:05:f3:cf:da:35:3f:81:47:89:be: b2:2c:89:3c:61:f9:2a:c0:50:0c:ea:ce:c8:72:43: 2e:3b:ce:62:b8:03:e2:80:14:fa:e4:0d:0d:61:3e: c2:24:8b:fd:ca:17:1d:22:31:5a:81:b9:c4:19:a8: c6:72:2e:64:71:20:31:28:b4:f0:58:bf:1e:87:4d: ad:23:52:59:1f:25:85:6c:44:51:80:25:b6:3c:62: 23:74:af:63:43:fa:16:b6:e2:ea:c9:4d:7c:99:37: b3:97:76:2c:d6:a5:d2:ac:31:51:43:47:2a:04:af: 38:98:49:30:bd:8c:c4:49:ad:9d:f8:93:f3:7e:3b: 08:28:a7:29:3f:50:a5:2c:82:d1:0f:8a:89:77:8b: 0b:74:0d:54:bf:4b:b7:ae:26:7f:b9:4f:29:2f:81: d0:a1:c4:15:24:f6:a5:12:2a:60:b4:4c:00:7d:8d: fd:e2:28:fc:12:7d:e8:8b:14:9a:b4:9e:ba:8a:2f: 5b:94:15:48:57:61:59:a9:9b:3a:76:fd:31:8f:16: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:09:04:24:07:F6:D0:95:4C:3E:7E:D0:24:C0:E3:B2:BB:A0:ED:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/cc3a59c6-a2d3-37c7-b60a-9816fe079ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd/11111c75-ef67-41bd-b074-4c401bf74ccd.crl X509v3 Authority Key Identifier: keyid:29:B8:F7:05:F8:67:60:30:DB:26:B9:66:F3:69:B3:C3:BF:59:90:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11111c75-ef67-41bd-b074-4c401bf74ccd.cer sbgp-ipAddrBlock: critical IPv4: 206.174.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d6:48:10:9e:3c:46:01:23:f4:f3:0d:10:59:6e:47:0d:a7: 33:62:ac:65:01:ae:79:72:ae:2a:8b:f3:5b:28:0b:07:e6:cc: a1:b2:80:d5:85:ab:a2:21:e4:25:be:d7:40:b7:17:71:22:84: c5:9b:d4:14:6e:e1:fc:b7:0f:aa:1a:06:e2:04:79:38:9a:5c: 28:2a:fd:86:13:72:1e:f8:1f:a0:16:a5:c7:3a:1f:2d:60:23: 14:7a:cb:7f:c6:67:38:e4:74:01:2e:0c:dc:37:db:c5:90:d0: 42:c0:3c:0c:46:ac:b4:05:3d:ff:86:01:90:73:53:5b:86:4e: 73:93:eb:0f:ff:0f:5c:56:a1:ee:45:71:6b:dd:f3:c4:f2:c3: ad:93:6d:fb:21:df:67:29:e8:53:1b:ff:ce:54:08:f5:80:35: 8a:33:ef:fc:83:39:ca:7e:12:54:29:ab:4e:db:5f:a9:3c:6c: e7:15:bb:1b:db:54:73:81:e7:10:85:e3:e2:41:a5:19:f4:43: 91:fc:af:6c:0f:53:26:0b:99:06:29:75:bd:4d:d5:27:ee:a5: 40:db:e6:b4:08:af:40:74:e2:24:50:63:48:9a:0e:7b:f2:e1: 69:8b:46:35:ae:0d:a1:08:25:46:41:f8:a5:f7:46:f4:6e:97: fa:f1:43:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRu2IsyttpCWOIOUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTExMTFjNzUtZWY2Ny00MWJkLWIwNzQtNGM0MDFiZjc0 Y2NkMB4XDTI1MDMwMzIxMjAwN1oXDTI1MDYwMTIwMjAwN1owLzEtMCsGA1UEAxMk MWJhYTY4ZjMtMWMwNC00MDNmLWJhMzctOThlMzFhNTQ3YTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiho6Nt3yginymcsvWf5K7hqmYysuhleCBY1U T7Ec9NJIsNwAGemBF1s4WMMSurgFcAXzz9o1P4FHib6yLIk8YfkqwFAM6s7IckMu O85iuAPigBT65A0NYT7CJIv9yhcdIjFagbnEGajGci5kcSAxKLTwWL8eh02tI1JZ HyWFbERRgCW2PGIjdK9jQ/oWtuLqyU18mTezl3Ys1qXSrDFRQ0cqBK84mEkwvYzE Sa2d+JPzfjsIKKcpP1ClLILRD4qJd4sLdA1Uv0u3riZ/uU8pL4HQocQVJPalEipg tEwAfY394ij8En3oixSatJ66ii9blBVIV2FZqZs6dv0xjxagbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8JBCQH9tCVTD5+0CTA47K7oO2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMTEx MWM3NS1lZjY3LTQxYmQtYjA3NC00YzQwMWJmNzRjY2QvY2MzYTU5YzYtYTJkMy0z N2M3LWI2MGEtOTgxNmZlMDc5ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTExMTFjNzUtZWY2Ny00MWJkLWIw NzQtNGM0MDFiZjc0Y2NkLzExMTExYzc1LWVmNjctNDFiZC1iMDc0LTRjNDAxYmY3 NGNjZC5jcmwwHwYDVR0jBBgwFoAUKbj3BfhnYDDbJrlm82mzw79ZkP4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMTExMWM3NS1lZjY3LTQxYmQtYjA3NC00YzQw MWJmNzRjY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzq4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjWSBCePEYBI/TzDRBZbkcNpzNirGUBrnlyriqL81soCwfmzKGygNWF q6Ih5CW+10C3F3EihMWb1BRu4fy3D6oaBuIEeTiaXCgq/YYTch74H6AWpcc6Hy1g IxR6y3/GZzjkdAEuDNw328WQ0ELAPAxGrLQFPf+GAZBzU1uGTnOT6w//D1xWoe5F cWvd88Tyw62Tbfsh32cp6FMb/85UCPWANYoz7/yDOcp+ElQpq07bX6k8bOcVuxvb VHOB5xCF4+JBpRn0Q5H8r2wPUyYLmQYpdb1N1SfupUDb5rQIr0B04iRQY0iaDnvy 4WmLRjWuDaEIJUZB+KX3RvRul/rxQ5w= -----END CERTIFICATE-----Generated at Sat Apr 12 00:09:46 2025 by rpki-client