$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/9a865f68-013b-39c2-81db-f8731bebd10f.roa File: 9a865f68-013b-39c2-81db-f8731bebd10f.roa (raw, json) Hash identifier: CMV5sgDR3bRD+mLl+eGrfTUDoWdANYj4gtXjMRXEbYM= Subject key identifier: 38:22:60:19:C5:39:FC:8E:5F:AF:77:E8:31:17:49:D6:ED:F5:3A:1A Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285849218405D24BE785BA0B9EBA20 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/9a865f68-013b-39c2-81db-f8731bebd10f.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 8014 IP address blocks: 206.48.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:05:d2:4b:e7:85:ba:0b:9e:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=b49f3fc9-4e30-483b-870c-12dce2673de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:a8:35:ae:57:f6:a6:5d:22:25:b3:16:72: 66:05:bd:d3:d5:a1:e5:6b:c4:29:ad:34:ee:e5:f8: c8:7d:59:92:d0:85:45:3d:79:36:69:a4:48:43:67: 4c:9f:21:bc:3c:66:b1:9e:f7:27:6b:32:fc:d1:90: 0a:b1:b4:4c:b8:7a:98:35:73:6b:d1:64:dd:01:67: 21:9e:c6:84:b1:3d:c6:58:f3:8a:21:bf:5c:47:3e: 28:4c:2b:d5:05:be:86:ad:c6:51:e2:7e:5f:4e:2c: dd:13:b2:bb:3b:a4:63:bb:80:c9:34:e0:c3:1e:96: ae:93:97:8e:34:03:3b:56:c1:0c:ed:41:f3:a7:96: 2a:b7:7c:94:05:af:79:22:b5:68:cd:86:5f:6c:68: 64:e7:fd:18:9e:42:0a:b9:6a:07:ea:77:64:32:fd: 4d:e7:b8:df:b0:55:bd:26:1f:1b:25:5f:ac:ce:c4: 68:6d:c4:a9:b5:b5:df:50:30:d5:10:e2:a3:f7:39: 07:34:c8:8b:65:18:9b:79:d8:e6:56:21:a6:a3:d3: b9:2d:c3:c3:71:f5:50:21:c8:70:6f:4d:75:a3:01: 2c:51:30:ee:5e:5d:2c:24:80:5e:50:94:05:8c:b0: bb:d4:34:c0:83:ee:8c:39:99:9c:c0:10:3a:cc:74: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:22:60:19:C5:39:FC:8E:5F:AF:77:E8:31:17:49:D6:ED:F5:3A:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/9a865f68-013b-39c2-81db-f8731bebd10f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 206.48.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:4a:6a:7d:55:69:9d:ac:36:1f:f2:d3:09:43:16:a0:b5:d7: f6:97:b7:11:28:2f:34:aa:eb:df:f2:ce:c3:cb:7a:e9:33:a9: 69:86:d9:ca:f5:bc:4b:59:11:9e:8c:a2:bc:54:9a:f2:13:96: 2d:03:56:69:a5:4d:39:02:7f:4d:e2:46:c2:62:b4:c7:b3:3e: 47:4e:9d:03:9b:47:25:f2:61:9f:03:43:25:84:62:0d:26:c9: 3d:4d:01:3e:da:7a:4e:05:db:f6:83:7c:bb:31:67:1e:66:9b: af:79:cb:f7:0f:b7:b3:15:f8:9e:2e:09:98:aa:9c:bc:60:5d: 96:ff:14:ee:0b:d9:41:9c:8e:6f:74:38:7f:3f:5a:47:e9:da: da:36:18:c8:4c:1d:04:d6:87:2a:da:02:10:d3:65:7d:bf:42: fa:47:b8:8b:91:fc:13:20:34:c1:5e:ef:6c:bd:18:e4:be:86: dc:c9:f9:2e:07:18:db:78:00:38:4e:10:b4:80:69:bd:29:e6: 8f:c9:06:ec:27:a1:3e:19:05:d2:c4:c1:fb:7b:37:29:e4:dd: 9a:7b:98:7f:f8:85:6f:9c:e0:ec:86:22:ec:b7:13:da:b3:1d: 1f:2a:5c:76:4d:27:8f:f1:a2:b5:68:23:32:0d:90:29:03:7e: 95:18:58:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAXSS+eFugueuiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YjQ5ZjNmYzktNGUzMC00ODNiLTg3MGMtMTJkY2UyNjczZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgimoNa5X9qZdIiWzFnJmBb3T1aHla8QprTTu 5fjIfVmS0IVFPXk2aaRIQ2dMnyG8PGaxnvcnazL80ZAKsbRMuHqYNXNr0WTdAWch nsaEsT3GWPOKIb9cRz4oTCvVBb6GrcZR4n5fTizdE7K7O6Rju4DJNODDHpauk5eO NAM7VsEM7UHzp5Yqt3yUBa95IrVozYZfbGhk5/0YnkIKuWoH6ndkMv1N57jfsFW9 Jh8bJV+szsRobcSptbXfUDDVEOKj9zkHNMiLZRibedjmViGmo9O5LcPDcfVQIchw b011owEsUTDuXl0sJIBeUJQFjLC71DTAg+6MOZmcwBA6zHS8WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgiYBnFOfyOX6936DEXSdbt9ToaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvOWE4NjVmNjgtMDEzYi0z OWMyLTgxZGItZjg3MzFiZWJkMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzjAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtKan1VaZ2sNh/y0wlDFqC11/aXtxEoLzSq69/yzsPLeukzqWmG2cr1 vEtZEZ6MorxUmvITli0DVmmlTTkCf03iRsJitMezPkdOnQObRyXyYZ8DQyWEYg0m yT1NAT7aek4F2/aDfLsxZx5mm695y/cPt7MV+J4uCZiqnLxgXZb/FO4L2UGcjm90 OH8/Wkfp2to2GMhMHQTWhyraAhDTZX2/QvpHuIuR/BMgNMFe72y9GOS+htzJ+S4H GNt4ADhOELSAab0p5o/JBuwnoT4ZBdLEwft7Nynk3Zp7mH/4hW+c4OyGIuy3E9qz HR8qXHZNJ4/xorVoIzINkCkDfpUYWLc= -----END CERTIFICATE-----Generated at Mon Apr 7 02:19:57 2025 by rpki-client