$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/39513945-055b-3a6e-9469-b137911850c1.roa File: 39513945-055b-3a6e-9469-b137911850c1.roa (raw, json) Hash identifier: uhfGqd43brcqKgzgpqQ14pdXz5G/oDz5Wk4N1ZidiiY= Subject key identifier: 61:78:4B:FC:A3:C4:42:16:9E:93:8E:46:76:94:A6:38:D9:17:09:27 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285848C9B0DA53AAF73CE73BBF1388 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/39513945-055b-3a6e-9469-b137911850c1.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 398420 IP address blocks: 206.71.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:da:53:aa:f7:3c:e7:3b:bf:13:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=1515ab9f-5861-486d-ad3d-fcd41bce21bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:70:84:5a:77:ef:37:38:0d:8f:ef:1b:c3: 3b:87:c3:d2:74:33:db:42:d7:eb:b0:27:29:6a:83: 5a:6d:20:50:b9:1c:30:10:ac:9d:79:9d:30:94:a7: a5:1f:91:d6:4b:58:f9:85:6e:84:46:d4:4b:27:06: f4:34:52:42:f4:8c:a8:12:6e:f5:de:9f:2c:95:0a: 63:f9:dd:d4:f4:85:e9:f1:03:22:99:d4:70:b2:7e: 6c:5a:29:a0:20:ac:d5:e7:c7:f5:9b:e9:99:d3:14: 3e:36:13:13:1e:28:31:a3:4e:6b:db:67:d1:86:10: 94:18:cc:cc:33:af:09:94:4d:ab:92:a9:53:63:ba: 9b:52:51:e1:8e:66:b0:e0:7b:62:a4:e7:c0:bb:09: 19:88:fd:40:b1:53:07:9a:23:c2:11:a0:de:f2:b6: 75:7e:02:be:ab:8d:47:45:ed:85:b8:1f:6f:5f:9c: 74:cf:63:74:81:d1:3b:34:58:e1:fe:5f:2f:df:e3: 48:a0:62:d5:4a:42:cf:b3:1b:97:35:0a:16:72:90: 55:33:5a:44:d5:f5:43:af:ab:ba:40:c3:2f:e0:71: 0e:89:c3:8f:e8:81:47:82:2b:12:60:d9:de:42:6f: 54:9a:4c:04:f6:b5:c1:87:dc:6f:bf:2e:2f:44:cc: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:78:4B:FC:A3:C4:42:16:9E:93:8E:46:76:94:A6:38:D9:17:09:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/39513945-055b-3a6e-9469-b137911850c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 206.71.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:14:46:6a:dd:00:f4:9e:6c:c0:ac:a6:33:6b:15:df:ff:d0: 6e:0b:dd:fd:69:3c:3f:74:7f:7c:8a:63:d8:e5:05:71:c3:14: d3:15:d1:f8:1c:8a:6f:e7:f3:57:bd:9f:d4:02:5c:98:ce:16: 7a:50:ab:f4:79:3a:6a:91:d0:06:23:e4:9f:a0:7e:13:12:ce: 1b:a9:db:68:48:ef:69:a8:0f:ae:53:43:a8:37:63:90:74:9e: ed:aa:7a:e0:63:15:d2:e2:c5:1d:49:99:8b:07:b4:b2:5b:59: e4:05:4f:9e:09:db:06:81:da:e0:5c:3f:8c:71:73:87:15:e7: c3:5f:50:e5:3e:20:21:a4:c5:18:9b:a8:24:e6:19:95:78:6e: 3a:ed:c5:02:a0:48:c9:65:52:26:a5:34:eb:69:3d:88:d4:6d: b1:dc:e1:a9:d8:29:a1:5d:38:83:05:71:b0:f3:77:b1:6e:c8: 6b:40:1c:5f:cf:f7:fd:98:ff:c1:c7:c4:4b:28:d4:d5:02:aa: 8b:4a:49:93:dd:e3:6e:9c:7d:83:88:5a:98:88:3c:8e:3e:08: 02:9b:9d:72:c6:e0:da:f6:c7:77:21:53:f5:77:89:88:90:da: b0:1f:bf:6d:97:33:82:c5:96:3c:16:77:9e:20:87:b0:f1:6f: d5:e8:8d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjJsNpTqvc85zu/E4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk MTUxNWFiOWYtNTg2MS00ODZkLWFkM2QtZmNkNDFiY2UyMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFpwhFp37zc4DY/vG8M7h8PSdDPbQtfrsCcp aoNabSBQuRwwEKydeZ0wlKelH5HWS1j5hW6ERtRLJwb0NFJC9IyoEm713p8slQpj +d3U9IXp8QMimdRwsn5sWimgIKzV58f1m+mZ0xQ+NhMTHigxo05r22fRhhCUGMzM M68JlE2rkqlTY7qbUlHhjmaw4HtipOfAuwkZiP1AsVMHmiPCEaDe8rZ1fgK+q41H Re2FuB9vX5x0z2N0gdE7NFjh/l8v3+NIoGLVSkLPsxuXNQoWcpBVM1pE1fVDr6u6 QMMv4HEOicOP6IFHgisSYNneQm9UmkwE9rXBh9xvvy4vRMyZ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF4S/yjxEIWnpOORnaUpjjZFwknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMzk1MTM5NDUtMDU1Yi0z YTZlLTk0NjktYjEzNzkxMTg1MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUURmrdAPSebMCspjNrFd//0G4L3f1pPD90f3yKY9jlBXHDFNMV0fgc im/n81e9n9QCXJjOFnpQq/R5OmqR0AYj5J+gfhMSzhup22hI72moD65TQ6g3Y5B0 nu2qeuBjFdLixR1JmYsHtLJbWeQFT54J2waB2uBcP4xxc4cV58NfUOU+ICGkxRib qCTmGZV4bjrtxQKgSMllUialNOtpPYjUbbHc4anYKaFdOIMFcbDzd7FuyGtAHF/P 9/2Y/8HHxEso1NUCqotKSZPd426cfYOIWpiIPI4+CAKbnXLG4Nr2x3chU/V3iYiQ 2rAfv22XM4LFljwWd54gh7Dxb9XojaM= -----END CERTIFICATE-----Generated at Sat Apr 12 00:30:43 2025 by rpki-client