$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/871367a2-06a4-3d61-9643-e4d5d8226731.roa File: 871367a2-06a4-3d61-9643-e4d5d8226731.roa (raw, json) Hash identifier: 5QwNwfnPdBRYfMA6noM7FQmEFFWhuxKlWHMPX/uPq0g= Subject key identifier: 1A:9D:D0:B0:3D:E6:3B:04:29:88:DA:D2:20:69:DE:71:B7:1F:88:5D Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F432858490881552D281EB31F4CA31CC0 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/871367a2-06a4-3d61-9643-e4d5d8226731.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 209 IP address blocks: 206.99.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:55:2d:28:1e:b3:1f:4c:a3:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=63afcf7a-4db8-410f-bf33-3127816a6ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c7:ff:ac:05:7a:85:8e:cf:17:62:12:69:ac: 5f:81:23:e9:b6:9a:cc:12:10:9c:fc:f7:0c:9e:1a: e4:6e:cb:f7:ea:e1:27:1e:4c:b4:50:bd:de:7b:ce: bb:4f:0e:f6:0f:ef:0b:93:0f:4c:9a:b0:24:db:92: 2d:aa:28:71:19:5d:cf:81:2c:01:c7:c8:8e:cb:62: 47:46:68:16:ea:69:1d:60:92:5b:2a:72:6b:6a:27: 19:3b:d2:a8:bf:86:c4:d2:a4:20:06:de:54:95:90: 0c:05:36:0e:28:63:30:9b:62:7a:9e:9d:f0:1d:93: d2:20:db:6b:37:e9:a2:69:33:07:33:5d:1b:22:19: 2a:85:7e:2b:f1:01:5b:d7:98:2a:53:8d:f6:b3:6c: 73:ae:43:2c:53:9f:75:51:1a:e5:24:e9:13:66:f8: d7:c2:ff:96:6d:94:84:dc:31:41:f9:ba:07:be:d4: dc:aa:78:e7:65:a6:33:0a:c3:12:57:41:df:53:cb: 73:74:ff:43:c8:ad:75:31:66:04:24:3d:7f:29:5a: 6d:ad:f0:9d:cb:9c:ed:2f:ed:fe:d5:ec:8b:a6:88: e9:b7:bd:30:be:bf:9f:7a:d3:81:41:7c:60:45:ee: 60:c5:a5:90:20:b0:c8:10:eb:89:e0:8c:3f:0a:3f: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9D:D0:B0:3D:E6:3B:04:29:88:DA:D2:20:69:DE:71:B7:1F:88:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/871367a2-06a4-3d61-9643-e4d5d8226731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 206.99.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:a2:d2:a4:f4:6b:2f:fe:9d:69:ec:4c:fa:f8:c7:4b:37:1d: b3:c6:0f:bc:67:4a:b5:22:f8:50:e5:70:40:85:6b:c5:5b:5f: c4:59:a7:02:32:09:f5:b4:48:cd:c1:19:d1:58:db:5d:37:e8: c3:3a:e3:f2:3f:fb:00:fa:ea:fa:bc:cf:02:28:a7:56:55:b3: da:5d:4d:3d:ce:5d:07:43:60:d8:20:16:c9:36:56:d7:cf:df: 99:6c:5b:31:49:ec:ad:5e:93:72:5b:90:6b:bf:27:8b:3e:56: ed:39:7a:2a:b8:12:cd:db:cb:78:6e:a5:9c:7d:75:84:30:5b: 1f:1b:46:cf:47:6a:13:33:5d:02:d5:d9:11:6b:0b:da:ca:79: 93:1b:c3:43:a2:b4:60:a5:50:17:01:69:d7:a7:f8:33:c7:ea: 28:73:ec:26:8c:72:6d:2f:83:a5:76:b2:e9:6b:33:c5:de:91: e4:9d:47:fb:e6:78:99:81:4a:18:70:ec:8a:72:60:25:f7:ce: 43:c9:b4:7e:74:16:87:b9:7b:71:09:06:38:09:79:57:68:7a: fe:97:fc:11:91:53:df:85:55:ba:0a:cb:08:e4:50:3c:2d:67: 10:cd:c7:e7:1e:ea:4f:7b:c6:91:45:ef:fb:77:e0:db:d6:b3: 0c:e3:bf:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgVUtKB6zH0yjHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NjNhZmNmN2EtNGRiOC00MTBmLWJmMzMtMzEyNzgxNmE2ZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsf/rAV6hY7PF2ISaaxfgSPptprMEhCc/PcM nhrkbsv36uEnHky0UL3ee867Tw72D+8Lkw9MmrAk25ItqihxGV3PgSwBx8iOy2JH RmgW6mkdYJJbKnJraicZO9Kov4bE0qQgBt5UlZAMBTYOKGMwm2J6np3wHZPSINtr N+miaTMHM10bIhkqhX4r8QFb15gqU432s2xzrkMsU591URrlJOkTZvjXwv+WbZSE 3DFB+boHvtTcqnjnZaYzCsMSV0HfU8tzdP9DyK11MWYEJD1/KVptrfCdy5ztL+3+ 1eyLpojpt70wvr+fetOBQXxgRe5gxaWQILDIEOuJ4Iw/Cj/T8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqd0LA95jsEKYja0iBp3nG3H4hdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvODcxMzY3YTItMDZhNC0z ZDYxLTk2NDMtZTRkNWQ4MjI2NzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzmO5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyi0qT0ay/+nWnsTPr4x0s3HbPGD7xnSrUi+FDlcECFa8VbX8RZpwIy CfW0SM3BGdFY21036MM64/I/+wD66vq8zwIop1ZVs9pdTT3OXQdDYNggFsk2VtfP 35lsWzFJ7K1ek3JbkGu/J4s+Vu05eiq4Es3by3hupZx9dYQwWx8bRs9HahMzXQLV 2RFrC9rKeZMbw0OitGClUBcBaden+DPH6ihz7CaMcm0vg6V2sulrM8XekeSdR/vm eJmBShhw7IpyYCX3zkPJtH50Foe5e3EJBjgJeVdoev6X/BGRU9+FVboKywjkUDwt ZxDNx+ce6k97xpFF7/t34NvWswzjv2M= -----END CERTIFICATE-----Generated at Fri Mar 14 10:06:04 2025 by rpki-client