$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/52d0dfb0-f716-3523-9842-7e8666069752.roa File: 52d0dfb0-f716-3523-9842-7e8666069752.roa (raw, json) Hash identifier: nt2K8yG8xPAnnoi+dCxxOL/T1ccinPE7OyGB/H/KegU= Subject key identifier: 73:7E:C5:19:50:EE:56:05:6B:BE:45:07:A1:77:9C:74:C2:F1:25:F5 Certificate issuer: /CN=a2d891cb-6de8-4437-8155-3741bf9d4144 Certificate serial: 010D0C9F432858494733FBB22421D8A4911B1700 Authority key identifier: 35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/52d0dfb0-f716-3523-9842-7e8666069752.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 6079 IP address blocks: 206.183.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:fb:b2:24:21:d8:a4:91:1b:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d891cb-6de8-4437-8155-3741bf9d4144 Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=5b98b61e-053c-4496-8b59-4d9b1383f353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:59:38:d3:07:11:88:bd:6b:2c:d7:28:1a:4a: e5:84:cc:79:23:f0:e0:58:a6:7a:e7:91:a2:03:7b: 77:41:f2:8e:04:4a:ef:3f:21:49:42:2d:83:f3:08: 08:30:20:2c:0b:3b:16:6b:4d:9d:48:e9:e5:bc:1e: 76:50:12:e5:0f:ea:1b:a5:2d:89:0d:8e:28:2a:29: 15:eb:d7:8e:0c:9d:1f:9d:65:02:26:7e:4e:e6:ff: 3c:24:3b:a1:b1:ca:58:82:45:94:f2:25:11:39:ec: 92:a4:42:de:11:52:ca:fb:b0:72:55:f6:07:45:07: 0b:41:04:ea:12:ee:4b:65:a1:e4:29:c5:0b:ec:6f: 53:64:49:a8:cf:2b:0a:14:11:47:ea:25:9d:6b:03: 5e:f8:c8:f1:f8:6b:97:d8:a3:eb:be:1a:7e:18:f0: e8:52:e4:23:0e:01:10:f8:1a:62:dc:f1:cd:6c:b1: 34:83:69:6d:cb:21:49:41:23:2d:49:88:11:55:f1: a3:5d:3d:5f:eb:fc:ae:83:29:be:ac:4b:fa:a8:3e: 11:0c:7b:24:20:80:8c:be:96:f8:3a:3e:f4:83:11: 20:38:66:ea:7a:e1:34:f2:c0:a5:12:2e:98:62:cf: 9e:5e:db:fa:ed:34:51:d1:9d:54:cb:2a:1f:aa:c8: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7E:C5:19:50:EE:56:05:6B:BE:45:07:A1:77:9C:74:C2:F1:25:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/52d0dfb0-f716-3523-9842-7e8666069752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144/a2d891cb-6de8-4437-8155-3741bf9d4144.crl X509v3 Authority Key Identifier: keyid:35:18:CE:6D:B2:C6:46:71:A0:E5:1A:1A:37:BE:E2:69:AB:CC:0C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a2d891cb-6de8-4437-8155-3741bf9d4144.cer sbgp-ipAddrBlock: critical IPv4: 206.183.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:5a:a4:14:8c:f4:1d:f7:58:16:61:34:0e:d7:4e:51:cc:44: 63:9d:ba:c1:a3:24:de:29:92:f7:6f:ab:79:6d:82:3e:a7:88: 05:b1:48:95:45:56:db:b9:2d:fa:bc:a5:b2:ae:f9:f0:50:fd: 87:58:4b:3b:99:01:5e:51:d4:16:90:1c:34:5b:90:12:c2:7c: 00:ec:15:56:16:7c:96:df:b8:17:5d:9b:50:58:51:72:a1:90: 41:ab:18:f0:0e:79:a3:42:a9:45:77:94:ac:10:f3:97:89:9d: 85:4a:8c:16:34:28:6f:7d:2b:44:15:38:35:0b:04:98:2b:ef: 1d:77:3e:c3:91:23:59:57:72:0d:14:01:03:01:c5:c1:35:ec: 4a:90:8c:44:54:7d:c7:3d:5f:c0:01:42:c1:b4:98:31:a3:ef: 40:17:96:7a:c6:e5:f2:33:5f:37:33:3e:6e:9f:a9:98:0f:97: 3b:01:b6:26:36:5d:45:38:ff:fc:fb:b8:1f:f2:75:f5:1c:3f: af:32:06:2a:3c:1c:15:4f:75:1b:5d:5c:0b:2e:a2:1d:60:c6: 91:4a:5e:a0:9b:16:f8:4d:3a:d8:d5:cf:ac:c8:82:33:f8:ad: f4:e6:34:de:f9:77:cf:52:df:84:b6:f4:8a:2a:78:a4:d6:df: b5:7b:49:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM/uyJCHYpJEbFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJkODkxY2ItNmRlOC00NDM3LTgxNTUtMzc0MWJmOWQ0 MTQ0MB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NWI5OGI2MWUtMDUzYy00NDk2LThiNTktNGQ5YjEzODNmMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFk40wcRiL1rLNcoGkrlhMx5I/DgWKZ655Gi A3t3QfKOBErvPyFJQi2D8wgIMCAsCzsWa02dSOnlvB52UBLlD+obpS2JDY4oKikV 69eODJ0fnWUCJn5O5v88JDuhscpYgkWU8iUROeySpELeEVLK+7ByVfYHRQcLQQTq Eu5LZaHkKcUL7G9TZEmozysKFBFH6iWdawNe+Mjx+GuX2KPrvhp+GPDoUuQjDgEQ +Bpi3PHNbLE0g2ltyyFJQSMtSYgRVfGjXT1f6/yugym+rEv6qD4RDHskIICMvpb4 Oj70gxEgOGbqeuE08sClEi6YYs+eXtv67TRR0Z1Uyyofqsh54wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN+xRlQ7lYFa75FB6F3nHTC8SX1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hMmQ4 OTFjYi02ZGU4LTQ0MzctODE1NS0zNzQxYmY5ZDQxNDQvNTJkMGRmYjAtZjcxNi0z NTIzLTk4NDItN2U4NjY2MDY5NzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYTJkODkxY2ItNmRlOC00NDM3LTgx NTUtMzc0MWJmOWQ0MTQ0L2EyZDg5MWNiLTZkZTgtNDQzNy04MTU1LTM3NDFiZjlk NDE0NC5jcmwwHwYDVR0jBBgwFoAUNRjObbLGRnGg5RoaN77iaavMDJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hMmQ4OTFjYi02ZGU4LTQ0MzctODE1NS0zNzQx YmY5ZDQxNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzreQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFapBSM9B33WBZhNA7XTlHMRGOdusGjJN4pkvdvq3ltgj6niAWxSJVF Vtu5Lfq8pbKu+fBQ/YdYSzuZAV5R1BaQHDRbkBLCfADsFVYWfJbfuBddm1BYUXKh kEGrGPAOeaNCqUV3lKwQ85eJnYVKjBY0KG99K0QVODULBJgr7x13PsORI1lXcg0U AQMBxcE17EqQjERUfcc9X8ABQsG0mDGj70AXlnrG5fIzXzczPm6fqZgPlzsBtiY2 XUU4//z7uB/ydfUcP68yBio8HBVPdRtdXAsuoh1gxpFKXqCbFvhNOtjVz6zIgjP4 rfTmNN75d89S34S29IoqeKTW37V7Sdg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:36:47 2025 by rpki-client