$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/25566234-b5bd-3ac8-bcc4-ac7b7e1301fd.roa File: 25566234-b5bd-3ac8-bcc4-ac7b7e1301fd.roa (raw, json) Hash identifier: m4LtWPXZEEmQGQUHcRNcVgJ5At4UHI0SfWmBD3pjqK4= Subject key identifier: 42:79:37:0E:37:66:24:6D:4F:8A:E2:8F:E6:24:61:D0:33:21:1C:FE Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F432858491ED6EB3DA8798DFCB54CFAA0 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/25566234-b5bd-3ac8-bcc4-ac7b7e1301fd.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 32133 IP address blocks: 169.197.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:eb:3d:a8:79:8d:fc:b5:4c:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=54545ba6-0e29-4777-b4ae-949ba25581ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:ad:28:80:01:3c:ce:45:4b:f8:c9:e3:c7: 93:31:36:be:7f:5c:08:b7:9b:1f:84:36:fd:76:d1: 0b:f4:3d:33:d7:cb:d2:af:75:b4:a3:ec:1d:46:0b: eb:f9:6b:0a:da:c6:28:f5:6a:7d:a5:44:ac:cd:3d: e4:43:b0:d5:a3:fb:e5:f2:b1:53:c8:e5:dd:2d:d6: e5:dc:7d:b8:3e:2d:52:76:49:11:9f:78:b9:cb:f0: 0f:b5:ed:0d:fd:95:4e:1f:13:c2:6a:f5:5f:61:41: 52:1f:3a:3f:f3:35:b6:c1:02:3c:3f:2d:92:96:eb: a0:43:b1:48:79:01:64:99:a2:e7:33:be:cc:39:7a: f8:70:3c:72:62:31:a6:b8:b5:8a:6a:10:67:92:02: 73:cf:83:af:ff:fb:a9:c3:e0:78:82:f4:48:e9:07: 6d:f8:23:5c:47:31:a0:c5:8a:d2:a5:0a:fe:69:7c: 33:01:0d:06:4d:90:65:54:72:7a:60:e8:f2:97:38: 29:cc:2b:49:63:39:84:a0:c5:41:3f:f0:0f:bf:d7: 0f:29:9d:72:34:71:56:70:9e:99:67:f8:aa:11:d3: 74:b8:30:6d:54:04:e7:29:85:2b:d4:5a:63:0b:24: 62:00:d9:4a:c3:72:2e:57:33:7d:94:74:ca:c3:c4: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:79:37:0E:37:66:24:6D:4F:8A:E2:8F:E6:24:61:D0:33:21:1C:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/25566234-b5bd-3ac8-bcc4-ac7b7e1301fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 169.197.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:47:8f:ad:60:fc:3f:e6:e6:73:b7:65:6f:37:f1:62:38:42: b0:67:ae:21:31:be:a2:38:97:c5:18:24:a0:0e:d5:99:23:8f: e0:d1:35:62:90:5e:d8:20:18:be:eb:1f:a8:a1:ed:81:ff:5f: f7:7f:cd:eb:14:5a:a4:0d:5e:6c:5f:53:77:bb:f2:6e:84:40: 61:d8:b2:f4:d4:d6:e5:b7:94:05:75:de:d6:e1:63:c0:35:e5: c8:6f:e2:2d:75:12:ff:60:43:90:8b:e3:ef:6d:0a:d8:95:88: 7f:ff:49:43:dc:04:20:5a:4c:7a:9c:85:3d:5c:de:56:9f:15: 41:56:db:f0:38:1b:b0:b3:45:fb:8d:62:bd:db:dc:06:37:dc: ee:70:0d:71:47:fb:a7:0a:39:04:b0:71:86:2a:69:08:02:6e: 82:00:2d:cc:36:d2:51:1c:47:9a:0d:8f:42:9b:03:c9:f2:a6: 34:35:9b:63:61:a9:07:56:45:46:75:d8:ab:01:51:4b:ee:92: 84:1f:7b:85:47:ee:2a:b1:bd:25:f0:cd:f8:f7:11:e2:f6:85: 2d:89:9b:2a:22:79:71:ad:2f:29:e7:f0:ee:45:86:15:e2:8e: 54:16:11:cd:af:1b:47:14:9b:5c:ab:b5:6b:2e:56:90:c6:42: ab:ff:4b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1us9qHmN/LVM+qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk NTQ1NDViYTYtMGUyOS00Nzc3LWI0YWUtOTQ5YmEyNTU4MWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVutKIABPM5FS/jJ48eTMTa+f1wIt5sfhDb9 dtEL9D0z18vSr3W0o+wdRgvr+WsK2sYo9Wp9pUSszT3kQ7DVo/vl8rFTyOXdLdbl 3H24Pi1SdkkRn3i5y/APte0N/ZVOHxPCavVfYUFSHzo/8zW2wQI8Py2SluugQ7FI eQFkmaLnM77MOXr4cDxyYjGmuLWKahBnkgJzz4Ov//upw+B4gvRI6Qdt+CNcRzGg xYrSpQr+aXwzAQ0GTZBlVHJ6YOjylzgpzCtJYzmEoMVBP/APv9cPKZ1yNHFWcJ6Z Z/iqEdN0uDBtVATnKYUr1FpjCyRiANlKw3IuVzN9lHTKw8Q3QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ5Nw43ZiRtT4rij+YkYdAzIRz+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvMjU1NjYyMzQtYjViZC0z YWM4LWJjYzQtYWM3YjdlMTMwMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqcU4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtHj61g/D/m5nO3ZW838WI4QrBnriExvqI4l8UYJKAO1Zkjj+DRNWKQ XtggGL7rH6ih7YH/X/d/zesUWqQNXmxfU3e78m6EQGHYsvTU1uW3lAV13tbhY8A1 5chv4i11Ev9gQ5CL4+9tCtiViH//SUPcBCBaTHqchT1c3lafFUFW2/A4G7CzRfuN Yr3b3AY33O5wDXFH+6cKOQSwcYYqaQgCboIALcw20lEcR5oNj0KbA8nypjQ1m2Nh qQdWRUZ12KsBUUvukoQfe4VH7iqxvSXwzfj3EeL2hS2JmyoieXGtLynn8O5FhhXi jlQWEc2vG0cUm1yrtWsuVpDGQqv/SwE= -----END CERTIFICATE-----Generated at Mon Apr 7 20:00:37 2025 by rpki-client