$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa File: 69cdef79-d280-3419-8f19-f2ec48165ccc.roa (raw, json) Hash identifier: G5MUovTaYCNMitJfnq2pY2oZEGmFPVfb714nuS9fSCk= Subject key identifier: 40:97:BA:CC:BC:9F:31:23:19:64:F5:80:1D:23:9A:FD:8B:DE:CB:24 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584917DC02BBB3246DA7347DC460 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 33211 IP address blocks: 206.41.112.0/20 maxlen: 20 206.41.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:02:bb:b3:24:6d:a7:34:7d:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=d035d1cf-4f8a-432e-b137-7f07bd39516f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:05:9f:ff:d0:d4:28:51:08:a1:09:55:dd:d2: ea:a6:d4:ca:c4:3d:fd:f9:68:a8:83:3a:a6:57:52: b3:8a:80:d5:5b:18:de:17:6b:1e:7f:5c:6e:e0:a0: 8c:8a:09:f6:16:b2:ff:66:e3:c1:a8:8f:1c:04:b2: a6:e8:d9:de:c0:a2:3e:50:83:96:7b:3f:18:41:34: 8d:32:c1:61:4a:f4:f0:a1:e5:84:09:de:15:8b:03: 4d:48:e6:9f:b9:09:78:53:3f:50:94:61:69:93:c9: 8a:3c:97:32:64:46:ec:c3:93:4d:11:a9:7c:77:1d: 57:f2:21:ad:03:d0:96:3d:9f:dc:1c:7d:a6:be:66: 9d:df:65:b2:14:96:cc:c3:5e:69:97:b7:ca:0a:69: 69:29:ac:03:c3:0a:89:1b:ba:34:07:a8:39:c8:54: 6b:0f:9f:d3:4b:0e:30:6b:c7:26:db:1e:c2:92:65: 04:64:aa:ca:4d:76:d9:a1:be:43:00:40:cb:93:4f: e4:1f:b1:79:ad:5f:1b:62:63:f1:59:5f:b3:b7:58: 24:26:6c:44:26:31:bb:b7:84:40:36:05:9a:75:5d: a8:27:da:eb:72:fe:28:f7:d8:8c:fc:f1:4c:ef:27: 4d:0d:44:6d:fc:c2:f8:0f:1c:08:4d:c4:08:ac:62: 92:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:97:BA:CC:BC:9F:31:23:19:64:F5:80:1D:23:9A:FD:8B:DE:CB:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/69cdef79-d280-3419-8f19-f2ec48165ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:32:b6:ae:d3:c7:3a:dc:9e:00:c3:20:d8:1c:1d:6b:9a:7e: 33:d1:b1:14:20:4d:3f:97:e0:3d:a7:49:3c:9d:10:fd:23:8c: 67:0b:3b:c1:4f:37:66:53:66:f7:25:f8:95:b7:68:4d:64:ca: 3c:cd:0b:79:27:ce:3d:05:e5:7f:8f:41:ac:cc:3d:19:f3:12: 0b:b2:86:18:7f:b2:be:c6:41:ca:5c:86:5b:66:61:41:a3:14: 4f:13:85:be:4d:f9:09:62:0f:10:b9:d6:89:85:d4:92:1d:c3: bc:8e:2e:73:26:18:61:63:b2:4a:55:74:54:d2:27:5a:e7:a3: 20:d3:d2:7a:f9:d7:98:b4:a1:f2:93:1d:fb:43:dd:06:c5:53: 09:7a:db:a2:8b:4c:03:27:30:71:90:5e:48:e5:44:d3:16:36: 66:be:47:69:a4:1c:94:c2:ff:67:1a:43:61:35:16:79:0b:6f: 52:65:55:5f:f4:82:97:d8:47:92:9e:39:b0:7d:bc:32:3a:6b: a3:5e:3c:3c:b2:9d:18:1b:0f:43:bf:3d:fb:8a:88:5f:21:45: ae:d9:1a:47:6b:e4:34:78:e5:3a:25:02:f7:6f:28:54:fa:38: f7:60:32:6c:8b:7f:be:63:7e:ed:77:af:aa:f1:ae:9b:e6:4f: bf:25:b8:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AK7syRtpzR9xGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk ZDAzNWQxY2YtNGY4YS00MzJlLWIxMzctN2YwN2JkMzk1MTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwWf/9DUKFEIoQlV3dLqptTKxD39+Wiogzqm V1KzioDVWxjeF2sef1xu4KCMign2FrL/ZuPBqI8cBLKm6NnewKI+UIOWez8YQTSN MsFhSvTwoeWECd4ViwNNSOafuQl4Uz9QlGFpk8mKPJcyZEbsw5NNEal8dx1X8iGt A9CWPZ/cHH2mvmad32WyFJbMw15pl7fKCmlpKawDwwqJG7o0B6g5yFRrD5/TSw4w a8cm2x7CkmUEZKrKTXbZob5DAEDLk0/kH7F5rV8bYmPxWV+zt1gkJmxEJjG7t4RA NgWadV2oJ9rrcv4o99iM/PFM7ydNDURt/ML4DxwITcQIrGKSTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECXusy8nzEjGWT1gB0jmv2L3sskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvNjljZGVmNzktZDI4MC0z NDE5LThmMTktZjJlYzQ4MTY1Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzilwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALgytq7TxzrcngDDINgcHWuafjPRsRQgTT+X4D2nSTydEP0jjGcLO8FP N2ZTZvcl+JW3aE1kyjzNC3knzj0F5X+PQazMPRnzEguyhhh/sr7GQcpchltmYUGj FE8Thb5N+QliDxC51omF1JIdw7yOLnMmGGFjskpVdFTSJ1rnoyDT0nr515i0ofKT HftD3QbFUwl626KLTAMnMHGQXkjlRNMWNma+R2mkHJTC/2caQ2E1FnkLb1JlVV/0 gpfYR5KeObB9vDI6a6NePDyynRgbD0O/PfuKiF8hRa7ZGkdr5DR45TolAvdvKFT6 OPdgMmyLf75jfu13r6rxrpvmT78luPI= -----END CERTIFICATE-----Generated at Sat Apr 5 13:29:58 2025 by rpki-client