$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa File: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (raw, json) Hash identifier: 5/YyolRZ+OIYxnW/kEtYqy2nr3w1kQe86Lfm8aVvyTA= Subject key identifier: B8:E9:BD:02:D7:CE:D0:45:8A:9C:2E:66:61:5D:68:72:78:6D:7A:3F Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F43285848B8F0CC51610D49A9EA899980 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 398419 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:cc:51:61:0d:49:a9:ea:89:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=e1860580-e89f-4c92-b9dd-52b61bfc8ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:d3:59:78:e1:a9:9f:56:83:0c:9c:91:11: 75:c8:75:65:49:98:c4:2d:c6:6b:9e:65:3a:81:6d: 00:2f:b7:c5:15:ea:54:1e:d7:4c:0e:d2:83:47:6e: 49:24:ed:d0:79:9a:13:ed:1a:f7:99:9b:91:fa:96: 8e:80:46:b4:d5:21:72:e4:69:43:5f:9e:bc:05:8e: 8d:89:00:56:6f:78:33:15:81:b9:c8:f7:dc:65:f2: 63:30:6f:a9:05:2d:5d:c9:5f:82:63:d3:a1:11:62: 4c:2e:56:74:df:27:33:32:2b:cb:4a:b8:d3:0e:5d: 0f:0b:b9:ba:b2:16:29:98:61:22:bb:76:51:a9:46: 5f:b4:6f:d2:90:e2:b5:3b:2e:0a:ae:eb:1f:fd:e3: 5e:01:92:49:49:97:8b:16:71:bf:81:fa:0f:d7:3a: 4c:47:a7:2c:a0:d3:0d:09:69:21:12:95:dc:5a:51: 37:bc:be:09:eb:28:be:b4:cb:bd:0e:a6:7d:69:d0: 2d:87:78:4b:6d:24:7d:39:b5:a8:4a:42:16:ce:7f: 0b:77:ee:a6:74:8d:dc:ed:b3:30:d9:d1:a2:8c:64: df:ba:f9:76:54:a7:c8:a4:50:1d:99:20:39:2d:ff: bd:69:f2:0c:24:2c:3d:49:0d:91:22:3c:c0:5d:78: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E9:BD:02:D7:CE:D0:45:8A:9C:2E:66:61:5D:68:72:78:6D:7A:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:79:05:77:76:fa:d3:82:72:54:a4:44:35:45:28:4a:0c:91: c4:1c:60:1b:2a:f3:4b:2e:ca:70:6e:f9:25:0f:a9:a0:e9:29: fc:8b:13:1c:13:2f:b2:95:bb:fe:8e:14:06:da:2e:20:14:a2: 46:59:c6:52:b8:38:53:8f:cd:d2:67:8a:2f:ac:37:31:0e:23: 18:e7:4e:04:47:df:76:0a:d5:8f:fe:a1:24:0d:16:3d:63:f1: 1c:f7:33:42:85:35:56:a7:6a:d3:c0:ce:5f:f1:0a:b2:ed:5d: 76:25:87:68:80:37:f9:7b:46:da:91:ff:7f:62:1b:d8:ac:4e: 11:1e:0c:19:b8:52:c0:b7:39:20:d5:8f:f1:07:1e:f8:9a:e5: 43:24:5e:74:7e:be:71:eb:e9:00:6c:8b:5b:24:4d:f7:53:b5: 2d:c0:34:5a:3d:56:09:9e:b6:e9:bc:21:c8:73:0c:94:7f:ff: c0:0e:8e:74:0e:cb:9c:00:9c:16:35:ba:4b:d7:b3:50:e6:87: 7d:06:cf:89:81:d3:4f:ca:43:6c:3f:36:90:8a:31:65:c6:dd: 0c:26:77:36:b1:11:ae:f5:f5:c3:6f:df:a3:e1:db:87:fc:f8: 25:09:8b:39:1d:cd:54:fe:7d:26:6b:f3:1c:0a:89:d3:d6:da: 8b:73:bb:db -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEi48MxRYQ1JqeqJmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTE4NjA1ODAtZTg5Zi00YzkyLWI5ZGQtNTJiNjFiZmM4Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYjTWXjhqZ9WgwyckRF1yHVlSZjELcZrnmU6 gW0AL7fFFepUHtdMDtKDR25JJO3QeZoT7Rr3mZuR+paOgEa01SFy5GlDX568BY6N iQBWb3gzFYG5yPfcZfJjMG+pBS1dyV+CY9OhEWJMLlZ03yczMivLSrjTDl0PC7m6 shYpmGEiu3ZRqUZftG/SkOK1Oy4Krusf/eNeAZJJSZeLFnG/gfoP1zpMR6csoNMN CWkhEpXcWlE3vL4J6yi+tMu9DqZ9adAth3hLbSR9ObWoSkIWzn8Ld+6mdI3c7bMw 2dGijGTfuvl2VKfIpFAdmSA5Lf+9afIMJCw9SQ2RIjzAXXglBwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLjpvQLXztBFipwuZmFdaHJ4bXo/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmQzNTMwZmMtYWJhNC0z MGFhLWI1ZWUtNGNiNjdiNGU1MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKeQV3dvrTgnJUpEQ1RShKDJHEHGAbKvNL LspwbvklD6mg6Sn8ixMcEy+ylbv+jhQG2i4gFKJGWcZSuDhTj83SZ4ovrDcxDiMY 504ER992CtWP/qEkDRY9Y/Ec9zNChTVWp2rTwM5f8Qqy7V12JYdogDf5e0bakf9/ YhvYrE4RHgwZuFLAtzkg1Y/xBx74muVDJF50fr5x6+kAbItbJE33U7UtwDRaPVYJ nrbpvCHIcwyUf//ADo50DsucAJwWNbpL17NQ5od9Bs+JgdNPykNsPzaQijFlxt0M Jnc2sRGu9fXDb9+j4duH/PglCYs5Hc1U/n0ma/McConT1tqLc7vb -----END CERTIFICATE-----Generated at Sun Feb 16 20:34:21 2025 by rpki-client