$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/6bf74d92-eb74-3f2e-be3c-2e7f0b3e71ec.roa File: 6bf74d92-eb74-3f2e-be3c-2e7f0b3e71ec.roa (raw, json) Hash identifier: Hwmjjpt8PMY57aXwqHGozkJwjkGbDqtWnfN2UsRUExY= Subject key identifier: E8:FE:8D:96:F9:C9:08:32:ED:8A:5C:BA:10:44:66:54:38:32:A1:78 Certificate issuer: /CN=f65e9b5c-056e-45d3-89b2-63cb62b84210 Certificate serial: 010D0C9F43285848090FBE9D59DB5C12F49B35C0 Authority key identifier: A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/6bf74d92-eb74-3f2e-be3c-2e7f0b3e71ec.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 206.201.168.0/24 maxlen: 24 206.201.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:be:9d:59:db:5c:12:f4:9b:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65e9b5c-056e-45d3-89b2-63cb62b84210 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=2dc52cb0-fe57-4d6b-bba2-fe24096e682e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:fe:da:f0:5e:26:53:c6:90:31:62:0b:1a: 41:5e:2d:0d:97:94:92:dd:77:48:fd:88:ca:d0:9c: 48:9f:aa:25:23:ff:20:ac:f4:66:58:2e:fe:ef:3b: 3c:f8:30:6a:6b:a7:c1:fb:15:42:18:3f:d4:52:19: af:0d:39:3a:34:57:bd:eb:62:76:9d:1d:85:95:a8: c9:02:c8:d4:36:a5:3f:c3:0b:c3:d0:d5:9d:17:66: 8d:59:3f:5f:d3:85:b1:1f:41:4f:12:c7:d9:77:77: ee:b6:f0:b1:83:11:6c:cc:d0:7f:90:13:3c:86:c3: 5b:ae:18:49:6d:5b:2f:85:a0:aa:66:d7:05:7c:62: 64:74:7f:3c:e2:44:ec:cc:65:f7:47:3f:e2:db:cf: 2e:00:99:a7:27:d2:65:a4:46:43:f6:49:71:fb:36: 69:ef:7d:ae:df:e8:38:a8:46:4a:15:1d:58:87:bc: a1:30:81:e4:1d:5e:da:98:5d:6e:dc:53:5d:03:67: c7:a2:92:b7:c3:de:91:c1:28:5d:0b:26:02:5f:45: 12:a0:c9:ee:81:44:9b:23:38:df:7d:e3:d4:b4:19: e1:ca:f2:68:bc:ab:09:f6:e0:e6:79:90:d1:ea:dd: db:4a:79:72:78:08:83:dd:40:85:7f:7f:9c:39:a8: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FE:8D:96:F9:C9:08:32:ED:8A:5C:BA:10:44:66:54:38:32:A1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/6bf74d92-eb74-3f2e-be3c-2e7f0b3e71ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210/f65e9b5c-056e-45d3-89b2-63cb62b84210.crl X509v3 Authority Key Identifier: keyid:A3:9A:53:08:DA:4E:E2:85:35:66:F0:EA:8D:B4:BA:18:E7:B4:66:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f65e9b5c-056e-45d3-89b2-63cb62b84210.cer sbgp-ipAddrBlock: critical IPv4: 206.201.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7c:b6:3a:8e:a3:a5:d9:d3:59:a4:b9:22:e6:17:6f:f0:93: 03:1f:6d:6d:f5:2f:fe:e3:64:d8:79:c2:6c:83:44:4c:69:df: 88:9c:1a:60:6a:cf:bc:29:79:1f:e9:8b:41:57:4f:2c:aa:04: 00:f2:de:54:0d:fa:c5:22:c8:53:80:86:a8:8f:01:6b:cb:bf: 35:98:f6:c6:d0:d3:d4:38:07:5a:46:26:f2:ef:d3:8f:af:43: 95:1f:ec:6c:1c:03:82:b1:8c:02:52:ff:91:14:4b:3d:ca:cc: 73:cf:72:4a:f5:11:e3:36:14:f8:82:ed:8e:34:d6:fe:61:9e: 37:5c:7b:6b:39:dd:c9:4e:b1:8f:51:05:dd:df:21:81:87:e4: 69:8f:ec:d6:da:b1:69:90:cb:9e:f7:4e:f4:e9:87:71:f1:26: d1:b5:86:7e:a5:df:72:12:dd:0a:f8:55:6c:cb:02:a1:3b:51: c0:91:b8:0f:4f:28:67:1d:bb:d2:cc:0d:d5:4a:74:2d:05:d6: 37:07:c1:d3:7b:e9:36:ee:d0:42:e9:dc:8d:b6:88:cb:b8:0c: 04:17:29:a6:d8:f3:67:d6:83:b3:47:4a:07:1a:3f:e6:4a:00: 02:b0:80:8f:64:d2:b1:04:48:14:44:56:5e:28:d2:32:a5:0d: c0:11:1b:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD76dWdtcEvSbNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY1ZTliNWMtMDU2ZS00NWQzLTg5YjItNjNjYjYyYjg0 MjEwMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk MmRjNTJjYjAtZmU1Ny00ZDZiLWJiYTItZmUyNDA5NmU2ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje/+2vBeJlPGkDFiCxpBXi0Nl5SS3XdI/YjK 0JxIn6olI/8grPRmWC7+7zs8+DBqa6fB+xVCGD/UUhmvDTk6NFe962J2nR2FlajJ AsjUNqU/wwvD0NWdF2aNWT9f04WxH0FPEsfZd3futvCxgxFszNB/kBM8hsNbrhhJ bVsvhaCqZtcFfGJkdH884kTszGX3Rz/i288uAJmnJ9JlpEZD9klx+zZp732u3+g4 qEZKFR1Yh7yhMIHkHV7amF1u3FNdA2fHopK3w96RwShdCyYCX0USoMnugUSbIzjf fePUtBnhyvJovKsJ9uDmeZDR6t3bSnlyeAiD3UCFf3+cOahsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOj+jZb5yQgy7YpcuhBEZlQ4MqF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mNjVl OWI1Yy0wNTZlLTQ1ZDMtODliMi02M2NiNjJiODQyMTAvNmJmNzRkOTItZWI3NC0z ZjJlLWJlM2MtMmU3ZjBiM2U3MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjY1ZTliNWMtMDU2ZS00NWQzLTg5 YjItNjNjYjYyYjg0MjEwL2Y2NWU5YjVjLTA1NmUtNDVkMy04OWIyLTYzY2I2MmI4 NDIxMC5jcmwwHwYDVR0jBBgwFoAUo5pTCNpO4oU1ZvDqjbS6GOe0ZkIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mNjVlOWI1Yy0wNTZlLTQ1ZDMtODliMi02M2Ni NjJiODQyMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsmoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN8tjqOo6XZ01mkuSLmF2/wkwMfbW31L/7jZNh5wmyDRExp34icGmBq z7wpeR/pi0FXTyyqBADy3lQN+sUiyFOAhqiPAWvLvzWY9sbQ09Q4B1pGJvLv04+v Q5Uf7GwcA4KxjAJS/5EUSz3KzHPPckr1EeM2FPiC7Y401v5hnjdce2s53clOsY9R Bd3fIYGH5GmP7NbasWmQy573TvTph3HxJtG1hn6l33IS3Qr4VWzLAqE7UcCRuA9P KGcdu9LMDdVKdC0F1jcHwdN76Tbu0ELp3I22iMu4DAQXKabY82fWg7NHSgcaP+ZK AAKwgI9k0rEESBREVl4o0jKlDcARG/c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:43 2025 by rpki-client