$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa File: ced604c6-99bb-30aa-8483-52ecd57799da.roa (raw, json) Hash identifier: Z8lDTHptVPYmRvBsK4GnGamjpBlIeI5k2Y6ztn2Xwps= Subject key identifier: 39:52:EC:FD:3A:27:6E:D5:2E:4E:DE:48:03:F0:4D:EA:4D:C6:CC:F2 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584871C0742871EB2B982D731160 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa Signing time: Sun 05 Jan 2025 14:00:52 +0000 ROA not before: Sun 05 Jan 2025 14:00:52 +0000 ROA not after: Sat 05 Apr 2025 13:00:52 +0000 asID: 16276 IP address blocks: 206.168.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:71:c0:74:28:71:eb:2b:98:2d:73:11:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Jan 5 14:00:52 2025 GMT Not After : Apr 5 13:00:52 2025 GMT Subject: CN=2e4c594a-1ea4-4fe0-aec1-c2607c3e1041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:72:34:36:e5:6f:02:e0:a3:c8:77:dc:ab:9c: e7:3c:2c:96:2f:76:64:51:31:79:ca:df:41:6b:de: 20:12:db:61:48:7f:ac:6d:74:78:ae:69:a8:f9:b5: e7:f8:05:6f:39:a9:fa:98:00:fd:c0:da:54:11:1b: 37:8e:d4:0e:c8:58:af:88:5f:04:74:b7:d4:af:95: d1:f9:bc:4b:85:67:b9:4c:9b:25:b4:67:b7:2c:14: a8:5a:16:a5:e6:51:26:d4:06:b0:aa:5d:53:f8:81: 75:69:40:22:75:1b:ab:2b:d8:bb:d0:0f:f2:9f:a2: 7a:fc:6a:3b:61:21:44:87:28:88:7b:b4:f1:cc:20: 8c:8e:26:4b:2a:42:95:10:f0:2b:cf:5b:bc:b4:35: bb:99:1f:48:f6:b1:f7:4d:f4:5d:c5:ad:03:ea:7f: 5c:aa:37:9d:3f:1c:e9:cd:ae:48:95:22:b0:88:dc: ae:c3:f7:b9:09:b1:e4:ba:e6:9c:4d:06:3d:82:04: e7:a6:cf:02:e9:5f:87:f1:f9:b2:f2:cb:7c:9d:01: 15:1e:59:e3:e9:e7:3a:d7:10:27:4b:f3:cb:44:f8: eb:6e:f0:dc:77:d3:e2:c3:9d:72:8c:3a:42:8f:4e: 0c:7f:fa:81:e9:c6:31:7e:d7:8a:a2:e1:33:61:54: e3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:52:EC:FD:3A:27:6E:D5:2E:4E:DE:48:03:F0:4D:EA:4D:C6:CC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 206.168.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c2:df:c2:be:e0:f9:09:c6:6f:da:e3:23:bb:d1:58:1d:49: 14:9e:7b:95:87:61:ba:b6:07:14:b9:32:15:08:a6:f1:87:bc: e0:2c:85:4d:36:9b:7c:3d:e0:f4:87:ac:ad:f0:f0:d6:53:36: 0e:38:ed:b7:e4:da:f4:f8:93:67:52:95:0f:e6:00:8e:8d:8b: 15:4b:9e:25:43:9a:3b:0b:cf:de:cf:6c:2e:2c:8d:fe:f3:96: ed:dd:3d:3c:4b:82:ec:85:0d:7c:ec:fc:e8:48:b4:82:c2:45: a6:5c:1c:e6:45:d6:7d:ff:f4:ca:78:62:f0:82:bf:83:24:26: 20:f3:89:97:fe:fa:23:b5:07:f1:28:d8:c2:d8:18:8c:7d:8e: 73:59:39:a7:d3:2f:9f:24:e2:e1:68:bf:9b:59:0d:cb:89:03: 67:27:e7:36:f5:93:65:aa:1e:34:ee:30:e4:b8:3f:81:1e:94: cf:51:13:b0:b1:a6:cc:c2:ec:ea:d4:57:ad:8f:af:18:48:65: de:a7:47:45:a4:05:45:c3:a6:53:a1:1c:d5:ad:8c:3e:50:ec: f5:cd:e7:5d:39:16:d2:be:3a:f2:6d:82:20:c0:66:9a:f2:27: a4:94:0a:a5:42:a0:a7:f9:2c:8c:1f:7c:8b:56:6f:71:f4:f9: 6c:8b:40:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwHQocesrmC1zEWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmU0YzU5NGEtMWVhNC00ZmUwLWFlYzEtYzI2MDdjM2UxMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHI0NuVvAuCjyHfcq5znPCyWL3ZkUTF5yt9B a94gEtthSH+sbXR4rmmo+bXn+AVvOan6mAD9wNpUERs3jtQOyFiviF8EdLfUr5XR +bxLhWe5TJsltGe3LBSoWhal5lEm1Aawql1T+IF1aUAidRurK9i70A/yn6J6/Go7 YSFEhyiIe7TxzCCMjiZLKkKVEPArz1u8tDW7mR9I9rH3TfRdxa0D6n9cqjedPxzp za5IlSKwiNyuw/e5CbHkuuacTQY9ggTnps8C6V+H8fmy8st8nQEVHlnj6ec61xAn S/PLRPjrbvDcd9Piw51yjDpCj04Mf/qB6cYxfteKouEzYVTjcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlS7P06J27VLk7eSAPwTepNxszyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvY2VkNjA0YzYtOTliYi0z MGFhLTg0ODMtNTJlY2Q1Nzc5OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqivMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnC38K+4PkJxm/a4yO70VgdSRSee5WHYbq2BxS5MhUIpvGHvOAshU02 m3w94PSHrK3w8NZTNg447bfk2vT4k2dSlQ/mAI6NixVLniVDmjsLz97PbC4sjf7z lu3dPTxLguyFDXzs/OhItILCRaZcHOZF1n3/9Mp4YvCCv4MkJiDziZf++iO1B/Eo 2MLYGIx9jnNZOafTL58k4uFov5tZDcuJA2cn5zb1k2WqHjTuMOS4P4EelM9RE7Cx pszC7OrUV62PrxhIZd6nR0WkBUXDplOhHNWtjD5Q7PXN5105FtK+OvJtgiDAZpry J6SUCqVCoKf5LIwffItWb3H0+WyLQME= -----END CERTIFICATE-----Generated at Fri Mar 14 11:06:52 2025 by rpki-client