$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3631451c-499a-316e-8a60-064b30097352.roa File: 3631451c-499a-316e-8a60-064b30097352.roa (raw, json) Hash identifier: JlxZzd0O1J1ILgXdEzZtPjKk/TiLzZkKRS7niJbLsxo= Subject key identifier: 0B:B3:52:51:08:BE:0E:A0:4E:BE:68:95:29:5D:B8:A5:21:95:AC:C3 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F43285849287E54FFCFDE27BDB3E333C0 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3631451c-499a-316e-8a60-064b30097352.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 26545 IP address blocks: 206.123.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:54:ff:cf:de:27:bd:b3:e3:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=f52f9aec-a554-4837-8db3-286d47231711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3d:53:19:d2:8a:94:e5:db:66:48:31:7b:44: eb:14:15:66:26:62:a1:64:f2:08:89:23:c0:94:74: 66:9b:78:d6:02:e3:77:48:a7:db:8e:c5:29:26:f8: 76:fe:5e:cd:f7:78:0d:21:f8:4a:a6:d4:a4:c3:d8: a8:bb:ea:67:84:4c:ca:d4:05:9c:14:38:29:5e:af: a8:9e:41:32:6f:c3:66:b6:8f:0a:a5:85:eb:0f:c0: 44:39:31:37:df:35:e1:12:27:b1:50:f0:4a:6e:84: 97:06:56:f5:2d:2e:25:5e:80:1a:b1:10:52:de:8f: a0:a4:80:2b:c7:17:5c:c9:78:b2:ae:63:08:8a:d4: 66:f1:b1:a7:9c:6f:cc:67:14:7b:6b:bf:31:61:07: a2:03:fc:9d:76:c4:6a:ca:1d:8f:84:d0:4d:68:d1: e8:25:f9:94:7e:d3:df:d4:38:89:46:ef:13:5e:b2: 09:f0:51:a5:4b:f7:5e:76:5a:f9:85:22:88:1b:98: 4e:6b:df:05:8e:d2:86:ca:6b:51:eb:7e:ad:9f:dc: de:99:82:2b:14:8c:03:c8:86:e0:de:9c:c7:8a:57: bf:51:6f:71:9b:ac:78:11:8e:ad:aa:1d:0b:16:6a: de:75:aa:05:83:d8:6e:46:88:25:ff:3c:d3:50:3e: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B3:52:51:08:BE:0E:A0:4E:BE:68:95:29:5D:B8:A5:21:95:AC:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/3631451c-499a-316e-8a60-064b30097352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 206.123.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:04:f8:8f:f0:7f:02:f4:75:1a:1f:18:a1:f1:63:07:1c:d7: fa:1c:b1:38:1e:61:84:20:43:a9:ba:a5:30:e1:48:b1:fd:1a: 7f:69:8b:f5:07:78:bf:30:fb:9b:43:e3:e4:8b:79:5b:7c:d3: 5f:36:e7:04:41:72:1c:fc:81:79:80:0c:3d:15:66:70:a0:77: 97:79:15:e8:f9:20:bf:7b:a0:f7:4b:9a:ce:c9:46:4d:a9:3d: f0:30:64:d0:7f:3c:ab:ab:00:58:f6:28:57:2b:90:55:89:e6: 11:ee:61:66:0d:cc:1b:fd:6b:6e:4e:61:5b:1d:ad:22:6a:9e: f8:a1:ec:5b:00:d8:d7:45:00:d6:19:65:13:4a:82:58:9c:6d: dc:14:d7:14:fe:95:c5:a8:40:64:6a:9c:28:69:25:d7:5d:74: 10:8a:cf:de:08:2e:78:de:3a:3a:7e:6a:d1:49:28:ac:a3:42: 1c:76:29:85:d3:b7:21:8b:06:76:d6:f7:94:e3:82:70:f7:0f: e0:36:39:41:d9:09:30:76:ed:07:a8:53:01:1e:63:10:e9:b8: 13:0f:ae:64:0e:59:49:06:13:08:54:1e:9e:a9:e7:b7:a4:d6: f6:73:e4:00:11:a8:9f:73:a1:c6:c6:24:ab:38:66:1a:2c:3a: 78:23:07:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkoflT/z94nvbPjM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjUyZjlhZWMtYTU1NC00ODM3LThkYjMtMjg2ZDQ3MjMxNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz1TGdKKlOXbZkgxe0TrFBVmJmKhZPIIiSPA lHRmm3jWAuN3SKfbjsUpJvh2/l7N93gNIfhKptSkw9iou+pnhEzK1AWcFDgpXq+o nkEyb8Nmto8KpYXrD8BEOTE33zXhEiexUPBKboSXBlb1LS4lXoAasRBS3o+gpIAr xxdcyXiyrmMIitRm8bGnnG/MZxR7a78xYQeiA/yddsRqyh2PhNBNaNHoJfmUftPf 1DiJRu8TXrIJ8FGlS/dedlr5hSKIG5hOa98FjtKGymtR636tn9zemYIrFIwDyIbg 3pzHile/UW9xm6x4EY6tqh0LFmredaoFg9huRogl/zzTUD5/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuzUlEIvg6gTr5olSlduKUhlazDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvMzYzMTQ1MWMtNDk5YS0z MTZlLThhNjAtMDY0YjMwMDk3MzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzntaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoE+I/wfwL0dRofGKHxYwcc1/ocsTgeYYQgQ6m6pTDhSLH9Gn9pi/UH eL8w+5tD4+SLeVt801825wRBchz8gXmADD0VZnCgd5d5Fej5IL97oPdLms7JRk2p PfAwZNB/PKurAFj2KFcrkFWJ5hHuYWYNzBv9a25OYVsdrSJqnvih7FsA2NdFANYZ ZRNKglicbdwU1xT+lcWoQGRqnChpJddddBCKz94ILnjeOjp+atFJKKyjQhx2KYXT tyGLBnbW95TjgnD3D+A2OUHZCTB27QeoUwEeYxDpuBMPrmQOWUkGEwhUHp6p57ek 1vZz5AARqJ9zocbGJKs4ZhosOngjB3Q= -----END CERTIFICATE-----Generated at Sun Apr 6 06:04:52 2025 by rpki-client