$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa File: bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa (raw, json) Hash identifier: e2kineqLPvR75EtI8SoOq4yy68h8cceuuHk7myCixL4= Subject key identifier: 68:45:8D:0E:1B:3A:EE:91:32:9E:86:D5:06:DA:4D:C9:35:C0:24:F6 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F43285848B8F0C87BA3F661194FFC8200 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 400679 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c8:7b:a3:f6:61:19:4f:fc:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=30e56c23-5a5a-4d40-aa4b-950260fb516d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:24:96:da:73:80:f2:29:3f:04:72:1c:e0: c7:f0:32:03:70:f2:80:a5:82:e8:ce:68:93:97:8c: 47:01:e9:27:f9:ad:99:ff:ae:7f:96:e4:f8:26:56: 59:f9:9b:75:31:ed:e6:3e:98:fb:f8:72:69:94:c5: 57:12:a8:37:74:72:43:e1:51:ef:b6:02:f9:d5:62: 5f:0c:16:ad:b3:c5:be:7c:11:af:c9:d5:18:08:8a: 1a:e3:c3:e2:b4:61:ba:61:ec:c3:5d:5c:1d:5b:71: bc:27:ac:6c:6a:36:f8:dc:29:ab:d1:94:10:17:2e: 83:84:d1:57:8d:a5:5c:19:ec:65:ae:3a:38:e1:fd: 2e:99:d7:45:98:db:7f:88:bc:78:b3:66:29:f6:51: f4:c6:aa:bb:5e:c1:91:ab:91:93:65:e6:f3:5c:75: 2a:77:44:cf:1c:59:f1:de:45:8e:f2:1f:b8:3b:81: b4:9f:c0:5e:fc:a9:4e:1b:f8:44:22:bf:a1:ae:5d: 1d:ff:74:80:f0:3d:47:d5:50:b6:56:71:7c:7b:f8: f5:6e:23:1d:8b:ed:62:3d:58:46:1e:96:47:b6:64: 0b:5e:95:1e:42:6e:a8:35:77:3f:e5:8b:7b:eb:32: 48:a3:e4:42:1d:94:0d:eb:2c:03:4a:36:93:3f:c8: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:45:8D:0E:1B:3A:EE:91:32:9E:86:D5:06:DA:4D:C9:35:C0:24:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bf1ea0d0-c6c3-3bdf-a20c-a8a939551a91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:65:d9:1a:a2:1d:4e:1b:12:d2:b9:29:f9:94:e2:05:71:e3: b4:26:d0:0c:34:a5:46:f2:87:26:e5:7d:3f:82:70:76:04:10: d4:aa:a9:85:cd:6d:c5:af:79:4c:42:e9:4b:1a:5d:f2:39:ba: e6:59:5d:a8:db:7f:e8:5f:12:07:1e:f8:6d:4b:5a:6e:1c:4b: 98:59:2a:9f:2f:d4:3d:6d:1d:61:b9:7c:56:70:ff:f3:ae:9e: 53:9c:eb:08:af:43:5c:c9:38:62:fc:55:c3:b6:07:77:93:3c: 13:a8:00:60:2c:91:dd:c6:24:6c:fe:fe:7f:ab:ff:24:47:7b: f0:b6:1c:d4:96:50:03:f4:91:e2:ae:9f:0c:8d:2e:a2:ac:af: 7d:41:a0:c5:78:c3:50:2a:7e:e1:8d:f0:dd:e6:3b:56:4f:73: 5d:9f:22:a8:51:d6:1c:da:9e:1f:e9:64:b6:fa:83:12:6e:73: e1:ac:e4:ac:9b:92:f2:d1:25:10:10:35:28:9f:55:8a:42:71: 6c:63:5b:14:24:7d:45:7b:74:22:25:c7:ee:22:de:b7:ef:f6: 49:51:22:ae:ec:66:12:fb:24:76:5e:91:8b:94:02:36:f7:1a: 0b:8f:43:6a:d4:ca:7a:77:12:4f:69:5f:c1:f3:f2:2a:20:93: f0:cc:95:00 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEi48Mh7o/ZhGU/8ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk MzBlNTZjMjMtNWE1YS00ZDQwLWFhNGItOTUwMjYwZmI1MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSYkltpzgPIpPwRyHODH8DIDcPKApYLozmiT l4xHAekn+a2Z/65/luT4JlZZ+Zt1Me3mPpj7+HJplMVXEqg3dHJD4VHvtgL51WJf DBats8W+fBGvydUYCIoa48PitGG6YezDXVwdW3G8J6xsajb43Cmr0ZQQFy6DhNFX jaVcGexlrjo44f0umddFmNt/iLx4s2Yp9lH0xqq7XsGRq5GTZebzXHUqd0TPHFnx 3kWO8h+4O4G0n8Be/KlOG/hEIr+hrl0d/3SA8D1H1VC2VnF8e/j1biMdi+1iPVhG HpZHtmQLXpUeQm6oNXc/5Yt76zJIo+RCHZQN6ywDSjaTP8hJ+QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGhFjQ4bOu6RMp6G1QbaTck1wCT2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmYxZWEwZDAtYzZjMy0z YmRmLWEyMGMtYThhOTM5NTUxYTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+Zdkaoh1OGxLSuSn5lOIFceO0JtAMNKVG 8ocm5X0/gnB2BBDUqqmFzW3Fr3lMQulLGl3yObrmWV2o23/oXxIHHvhtS1puHEuY WSqfL9Q9bR1huXxWcP/zrp5TnOsIr0NcyThi/FXDtgd3kzwTqABgLJHdxiRs/v5/ q/8kR3vwthzUllAD9JHirp8MjS6irK99QaDFeMNQKn7hjfDd5jtWT3NdnyKoUdYc 2p4f6WS2+oMSbnPhrOSsm5Ly0SUQEDUon1WKQnFsY1sUJH1Fe3QiJcfuIt637/ZJ USKu7GYS+yR2XpGLlAI29xoLj0Nq1Mp6dxJPaV/B8/IqIJPwzJUA -----END CERTIFICATE-----Generated at Sun Feb 16 20:23:49 2025 by rpki-client