$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/1de8ce08-3710-361b-8c99-fd785aea8a0c.roa File: 1de8ce08-3710-361b-8c99-fd785aea8a0c.roa (raw, json) Hash identifier: qMKH6SBg3WziTz1jctVBVCeTuYmTWExWa2e6U8qYuqY= Subject key identifier: 04:C8:5F:13:4B:07:0C:EB:9E:8F:9B:DD:EC:D7:69:67:DE:36:EB:0B Certificate issuer: /CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Certificate serial: 010D0C9F43285849350EA7FD863DFA26BBE4A400 Authority key identifier: CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/1de8ce08-3710-361b-8c99-fd785aea8a0c.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 11736 IP address blocks: 206.176.0.0/20 maxlen: 24 206.176.57.0/24 maxlen: 24 206.176.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a7:fd:86:3d:fa:26:bb:e4:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7937b76-1401-4a19-86ef-2351fd0198a6 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=db94357f-ab7b-441a-b526-c0a8f24d9bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:73:fe:e8:15:43:04:e0:e9:36:76:f3:07:b3: f8:17:cd:57:33:2f:cc:42:81:d4:3e:31:d8:6d:2d: d3:67:e4:e4:89:e0:00:f1:6b:84:33:ce:80:e6:88: 25:0f:6f:9d:0f:b5:1d:82:b8:49:6d:11:30:ea:b9: a1:d5:b2:3c:2f:9f:35:c9:18:7b:36:ff:5e:9b:12: cb:e6:ac:9c:61:fe:37:90:a0:18:2b:5c:06:d1:85: 5b:80:a2:0e:87:84:c1:9b:20:12:62:6c:7b:06:74: 31:40:f9:38:1a:2c:f2:bb:17:c4:96:e7:77:bd:1b: 74:e0:e3:fc:04:4d:64:fc:c3:a9:fa:9d:ff:d7:f6: d5:cd:ad:25:d0:90:10:25:c9:95:94:29:e0:6e:1b: 92:62:32:87:e2:60:37:e4:3a:c6:2c:8c:7b:d3:d3: 21:88:3f:67:73:c5:8a:39:db:16:fb:93:90:c7:a6: 7d:3e:7f:e3:18:28:1f:6c:eb:98:cc:f4:53:ee:e3: e5:88:6a:1b:4e:be:8c:48:60:0c:85:2d:57:47:be: 0d:33:35:4f:e9:d5:f5:16:99:c6:7b:9d:55:77:00: 3a:69:28:fa:b4:82:c0:a1:10:60:30:b9:dc:78:11: b1:61:98:83:ff:22:14:88:0a:88:d8:39:49:5f:63: bc:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C8:5F:13:4B:07:0C:EB:9E:8F:9B:DD:EC:D7:69:67:DE:36:EB:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/1de8ce08-3710-361b-8c99-fd785aea8a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6/d7937b76-1401-4a19-86ef-2351fd0198a6.crl X509v3 Authority Key Identifier: keyid:CC:29:98:03:99:C6:45:C4:E0:A5:4F:46:59:49:0C:A5:8F:E7:CF:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7937b76-1401-4a19-86ef-2351fd0198a6.cer sbgp-ipAddrBlock: critical IPv4: 206.176.0.0/20 206.176.57.0-206.176.58.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:80:15:a2:fd:91:63:ce:c1:b5:b1:d7:7d:2b:de:4e:0d:c8: 4f:7d:f7:28:b6:74:ea:e2:0f:9b:ba:18:de:1e:f9:1f:ce:62: 31:14:5b:26:6b:39:f1:62:d2:7c:66:79:51:34:18:39:8c:a5: 1d:77:8e:d3:eb:56:00:b1:58:e2:53:01:5b:87:24:c7:56:1d: c0:dc:36:74:e0:ce:c2:b7:63:c5:f2:bd:ec:1f:1c:3d:4a:1a: 7d:2f:84:5e:fc:b2:d8:4f:2c:2c:06:a9:fe:2b:83:ca:69:f1: c8:2f:22:67:8e:ca:6e:52:ef:71:8a:1b:10:24:01:54:31:32: d4:d7:63:f9:8e:44:c4:38:0f:6c:c5:f9:16:aa:cc:ab:06:ee: fe:c8:0c:c4:ed:05:b0:80:26:d2:09:05:1a:46:b8:10:e0:f1: bd:11:60:d8:7c:69:ff:2e:68:22:3d:47:a2:63:03:fd:63:31: 4d:fa:e5:66:52:18:7f:d9:1e:16:50:3b:67:b9:d7:98:eb:16: 29:1e:28:78:77:ab:35:35:03:6f:42:1c:9d:2e:bc:e8:39:67: 53:a9:63:5d:84:16:3f:9e:97:d0:86:15:90:49:3b:12:d2:e1: c0:03:44:bc:51:41:e3:9e:b8:d9:09:ea:5f:94:20:da:8d:12: 7e:ee:cf:55 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEk1Dqf9hj36JrvkpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc5MzdiNzYtMTQwMS00YTE5LTg2ZWYtMjM1MWZkMDE5 OGE2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZGI5NDM1N2YtYWI3Yi00NDFhLWI1MjYtYzBhOGYyNGQ5YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnP+6BVDBODpNnbzB7P4F81XMy/MQoHUPjHY bS3TZ+TkieAA8WuEM86A5oglD2+dD7UdgrhJbREw6rmh1bI8L581yRh7Nv9emxLL 5qycYf43kKAYK1wG0YVbgKIOh4TBmyASYmx7BnQxQPk4GizyuxfElud3vRt04OP8 BE1k/MOp+p3/1/bVza0l0JAQJcmVlCngbhuSYjKH4mA35DrGLIx709MhiD9nc8WK OdsW+5OQx6Z9Pn/jGCgfbOuYzPRT7uPliGobTr6MSGAMhS1XR74NMzVP6dX1FpnG e51VdwA6aSj6tILAoRBgMLnceBGxYZiD/yIUiAqI2DlJX2O8zQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFATIXxNLBwzrno+b3ezXaWfeNusLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkz N2I3Ni0xNDAxLTRhMTktODZlZi0yMzUxZmQwMTk4YTYvMWRlOGNlMDgtMzcxMC0z NjFiLThjOTktZmQ3ODVhZWE4YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDc5MzdiNzYtMTQwMS00YTE5LTg2 ZWYtMjM1MWZkMDE5OGE2L2Q3OTM3Yjc2LTE0MDEtNGExOS04NmVmLTIzNTFmZDAx OThhNi5jcmwwHwYDVR0jBBgwFoAUzCmYA5nGRcTgpU9GWUkMpY/nz8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNzkzN2I3Ni0xNDAxLTRhMTktODZlZi0yMzUx ZmQwMTk4YTYuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEzrAAMAwD BADOsDkDBADOsDowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAEYAVov2RY87BtbHXfSveTg3IT333KLZ06uIP m7oY3h75H85iMRRbJms58WLSfGZ5UTQYOYylHXeO0+tWALFY4lMBW4ckx1YdwNw2 dODOwrdjxfK97B8cPUoafS+EXvyy2E8sLAap/iuDymnxyC8iZ47KblLvcYobECQB VDEy1Ndj+Y5ExDgPbMX5FqrMqwbu/sgMxO0FsIAm0gkFGka4EODxvRFg2Hxp/y5o Ij1HomMD/WMxTfrlZlIYf9keFlA7Z7nXmOsWKR4oeHerNTUDb0IcnS686DlnU6lj XYQWP56X0IYVkEk7EtLhwANEvFFB45642QnqX5Qg2o0Sfu7PVQ== -----END CERTIFICATE-----Generated at Sat Apr 12 16:08:05 2025 by rpki-client