$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e87ae6c-7b9a-3a46-bfc6-2d047d86cf19.roa File: 0e87ae6c-7b9a-3a46-bfc6-2d047d86cf19.roa (raw, json) Hash identifier: JsHJSYKGKBduceujk2WLImx5BbWdJAj+fZ+ywJrLRh8= Subject key identifier: 06:65:27:6B:17:00:F5:82:1B:6E:E2:19:93:83:57:92:01:78:AE:45 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F43285848EB310A1F8231DFC9970AA900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e87ae6c-7b9a-3a46-bfc6-2d047d86cf19.roa Signing time: Tue 18 Feb 2025 02:00:38 +0000 ROA not before: Tue 18 Feb 2025 02:00:38 +0000 ROA not after: Mon 19 May 2025 01:00:38 +0000 asID: 53356 IP address blocks: 206.123.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:31:0a:1f:82:31:df:c9:97:0a:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Feb 18 02:00:38 2025 GMT Not After : May 19 01:00:38 2025 GMT Subject: CN=f3a87e6a-d87f-49e2-a14a-4702d738e7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:14:92:87:6a:8c:3e:ad:af:5c:8b:d6:ef:eb: f2:c8:10:74:19:63:98:0f:65:48:20:dc:e6:5a:c7: 04:0b:da:84:d4:db:31:f4:ef:c7:11:b6:c5:0c:2a: 2b:ba:d4:38:12:eb:5e:b7:f4:55:dc:8b:3e:c6:99: 6c:0a:cb:b4:b1:99:3e:53:eb:3c:0c:84:ca:d9:eb: e4:c8:4f:d9:2b:c0:8f:f5:6e:65:c1:08:b5:11:fe: bf:f8:90:97:9c:37:bc:ea:5f:1a:ba:47:1b:1e:0a: dd:16:64:9d:2e:34:d1:cd:4f:ff:18:44:8b:68:68: 08:e0:d8:57:21:10:a0:8f:59:2d:80:74:c8:67:b0: bf:b8:0a:e8:53:81:a4:ac:17:21:20:64:bc:f5:d1: 29:69:a4:99:78:75:98:a4:4d:0e:61:0f:88:fa:2d: 8a:e1:09:6d:01:b6:05:1c:d3:34:6d:4a:d3:3b:77: 66:e8:8c:d7:cf:93:5e:97:67:b6:89:05:4e:9d:33: 31:d8:86:ee:fe:ff:26:45:d1:9b:9c:34:fe:32:91: 22:2d:a2:ff:ba:f4:10:e5:e4:28:67:d3:f5:46:e4: b5:b4:27:5f:19:89:49:04:a4:34:6e:69:c0:e9:b3: c7:aa:6b:6e:0d:d3:d7:75:25:8a:32:b2:41:c7:59: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:65:27:6B:17:00:F5:82:1B:6E:E2:19:93:83:57:92:01:78:AE:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0e87ae6c-7b9a-3a46-bfc6-2d047d86cf19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 206.123.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ad:27:db:65:51:83:3e:7f:6c:b1:9a:d5:3a:5d:69:7e:58: 63:5e:33:00:95:f0:15:f3:46:8a:96:85:81:00:67:c7:59:8d: 0f:5d:08:1f:86:6a:79:d6:fb:ce:b9:75:45:4f:25:1d:61:5c: 26:77:e9:42:d7:71:9f:c5:a2:bb:2a:14:70:18:4c:0d:8a:c0: c1:30:fd:12:64:ae:12:6c:8a:6a:bd:35:57:8d:58:79:4b:df: 7d:c3:33:63:63:ca:18:b2:ec:49:ab:4a:4a:3e:2c:89:98:92: d2:0a:43:76:d9:01:68:7c:d2:6f:05:9f:45:c9:51:a0:9a:0d: 82:22:26:9c:38:4d:0b:6a:62:a9:9f:7a:4d:f9:81:0b:cb:08: 2e:97:9c:be:bb:1d:c9:f7:9a:ae:72:1c:a1:78:30:86:10:d3: 00:32:13:a7:d4:5a:d4:45:49:eb:ae:a0:4b:7e:c7:e0:a8:25: 18:9f:24:53:78:fd:99:d5:32:08:ca:36:22:c6:ac:e9:3e:7b: fc:d6:02:f4:47:f6:c0:0b:0b:b5:96:87:f5:b8:78:65:e9:61: 18:45:65:29:b1:d1:65:29:14:c7:18:11:82:89:18:15:4e:69: 81:1d:b7:85:29:e0:33:e0:3e:22:68:e4:19:34:35:f3:c7:2e: 87:79:95:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjrMQofgjHfyZcKqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDIxODAyMDAzOFoXDTI1MDUxOTAxMDAzOFowLzEtMCsGA1UEAxMk ZjNhODdlNmEtZDg3Zi00OWUyLWExNGEtNDcwMmQ3MzhlN2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRSSh2qMPq2vXIvW7+vyyBB0GWOYD2VIINzm WscEC9qE1Nsx9O/HEbbFDCorutQ4Eutet/RV3Is+xplsCsu0sZk+U+s8DITK2evk yE/ZK8CP9W5lwQi1Ef6/+JCXnDe86l8aukcbHgrdFmSdLjTRzU//GESLaGgI4NhX IRCgj1ktgHTIZ7C/uAroU4GkrBchIGS89dEpaaSZeHWYpE0OYQ+I+i2K4QltAbYF HNM0bUrTO3dm6IzXz5Nel2e2iQVOnTMx2Ibu/v8mRdGbnDT+MpEiLaL/uvQQ5eQo Z9P1RuS1tCdfGYlJBKQ0bmnA6bPHqmtuDdPXdSWKMrJBx1karQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZlJ2sXAPWCG27iGZODV5IBeK5FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGU4N2FlNmMtN2I5YS0z YTQ2LWJmYzYtMmQwNDdkODZjZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznuOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHytJ9tlUYM+f2yxmtU6XWl+WGNeMwCV8BXzRoqWhYEAZ8dZjQ9dCB+G annW+865dUVPJR1hXCZ36ULXcZ/ForsqFHAYTA2KwMEw/RJkrhJsimq9NVeNWHlL 333DM2Njyhiy7EmrSko+LImYktIKQ3bZAWh80m8Fn0XJUaCaDYIiJpw4TQtqYqmf ek35gQvLCC6XnL67Hcn3mq5yHKF4MIYQ0wAyE6fUWtRFSeuuoEt+x+CoJRifJFN4 /ZnVMgjKNiLGrOk+e/zWAvRH9sALC7WWh/W4eGXpYRhFZSmx0WUpFMcYEYKJGBVO aYEdt4Up4DPgPiJo5Bk0NfPHLod5lYo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:55:06 2025 by rpki-client