$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/e389b2bd-b87e-3e7a-8537-72af1d063d52.roa File: e389b2bd-b87e-3e7a-8537-72af1d063d52.roa (raw, json) Hash identifier: X/0kYcYxUUun9BMn4Ajnj8/bmJVXMXoVcdLJDFrXh8w= Subject key identifier: 71:34:D6:87:A0:C8:C2:39:89:05:D1:19:CF:D4:4C:B8:F9:A4:BD:D4 Certificate issuer: /CN=447fba4c-60a0-499e-8d5b-087545c981b7 Certificate serial: 010D0C9F432858493243E152F5F6894BB8878280 Authority key identifier: EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/e389b2bd-b87e-3e7a-8537-72af1d063d52.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 394510 IP address blocks: 206.168.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e1:52:f5:f6:89:4b:b8:87:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447fba4c-60a0-499e-8d5b-087545c981b7 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=a79ea385-f978-4306-a887-7e83e8c8b460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:41:88:c3:86:80:0f:94:06:ec:93:a9:2a: e0:78:c7:7d:38:e4:ea:30:35:ad:59:34:04:90:de: 1e:4e:98:6b:ad:07:e2:40:b0:ef:cf:bd:14:4b:65: d2:dc:2a:67:1a:77:b5:9c:c4:e3:0c:03:88:c8:22: 07:5c:4e:6b:7c:d6:3d:ec:81:ae:26:30:be:19:d0: 9c:cf:96:13:12:12:6e:f6:78:64:9e:0d:8a:5f:33: c3:f3:a1:79:08:41:39:f1:ca:62:c7:12:c8:60:c2: 76:d3:73:6c:95:18:a4:8d:83:32:a3:c3:ed:ab:6c: b9:1d:34:64:b4:44:b9:72:85:4a:ee:cb:70:06:ce: 4e:9c:33:74:b9:e2:77:b2:09:16:9f:5c:2b:c6:cd: f9:e2:4d:cd:71:b4:95:12:e4:4b:44:c0:68:e3:42: 15:12:24:06:3f:3f:9d:0f:54:0f:58:84:1f:c5:d7: 77:b9:94:95:28:e5:29:96:f7:3e:c9:53:6a:ce:36: a8:5b:96:29:5d:32:63:6f:bd:80:16:a7:10:55:28: a0:67:8d:3a:87:cb:2b:39:bf:7b:63:2b:dc:94:ba: 87:01:c7:1f:de:14:fe:86:7e:f3:2b:bd:b6:bc:56: a6:ba:9f:84:04:5b:80:5e:bc:4d:39:8c:90:39:06: d1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:34:D6:87:A0:C8:C2:39:89:05:D1:19:CF:D4:4C:B8:F9:A4:BD:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/e389b2bd-b87e-3e7a-8537-72af1d063d52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7/447fba4c-60a0-499e-8d5b-087545c981b7.crl X509v3 Authority Key Identifier: keyid:EE:19:B8:5F:E1:49:1F:BB:27:E1:4B:09:95:0F:35:36:91:30:16:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/447fba4c-60a0-499e-8d5b-087545c981b7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:aa:0d:51:22:54:6e:c2:82:48:59:04:28:dd:36:0e:23:41: 45:25:f6:c4:34:8b:85:7d:f3:ef:0b:af:c3:24:41:24:14:cb: e3:45:d6:fa:6e:44:93:73:4b:a1:86:2c:73:91:c3:7f:3f:de: 93:ad:d4:51:21:17:84:b9:8a:4e:0b:38:14:69:0e:ed:cc:b5: 3d:88:94:1e:16:12:d7:f5:20:22:a5:af:2e:d1:c5:4e:a4:02: 0a:d3:7a:b8:17:42:4e:5b:36:ab:3d:ca:08:19:7a:46:3c:35: a3:93:41:54:ad:a1:39:66:f9:d2:6e:20:59:44:3e:bd:5c:1f: 9a:c3:f4:03:9a:36:6d:e1:be:83:54:dc:1f:a0:6c:54:82:aa: 3c:f1:59:99:df:56:c3:41:ec:0e:9b:d1:3d:c1:28:43:e6:67: d2:c0:40:bf:6d:99:67:ae:99:78:be:e5:8e:2a:e0:a0:28:b8: 41:6a:04:78:97:9a:11:d8:12:3d:7f:db:64:41:8e:81:c6:3f: a3:f1:5c:97:43:3f:0c:30:bb:ba:96:22:21:fa:a3:83:44:d0: 8e:26:a1:6c:bc:48:93:f3:ed:b8:ce:81:dc:2b:0d:91:ad:9c: 4c:ad:d1:91:b9:96:66:a6:17:bd:59:8c:82:a4:bf:ea:0a:d6: 47:8c:38:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ+FS9faJS7iHgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ3ZmJhNGMtNjBhMC00OTllLThkNWItMDg3NTQ1Yzk4 MWI3MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk YTc5ZWEzODUtZjk3OC00MzA2LWE4ODctN2U4M2U4YzhiNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO1BiMOGgA+UBuyTqSrgeMd9OOTqMDWtWTQE kN4eTphrrQfiQLDvz70US2XS3CpnGne1nMTjDAOIyCIHXE5rfNY97IGuJjC+GdCc z5YTEhJu9nhkng2KXzPD86F5CEE58cpixxLIYMJ203NslRikjYMyo8Ptq2y5HTRk tES5coVK7stwBs5OnDN0ueJ3sgkWn1wrxs354k3NcbSVEuRLRMBo40IVEiQGPz+d D1QPWIQfxdd3uZSVKOUplvc+yVNqzjaoW5YpXTJjb72AFqcQVSigZ406h8srOb97 YyvclLqHAccf3hT+hn7zK722vFamup+EBFuAXrxNOYyQOQbRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE01oegyMI5iQXRGc/UTLj5pL3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NDdm YmE0Yy02MGEwLTQ5OWUtOGQ1Yi0wODc1NDVjOTgxYjcvZTM4OWIyYmQtYjg3ZS0z ZTdhLTg1MzctNzJhZjFkMDYzZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDQ3ZmJhNGMtNjBhMC00OTllLThk NWItMDg3NTQ1Yzk4MWI3LzQ0N2ZiYTRjLTYwYTAtNDk5ZS04ZDViLTA4NzU0NWM5 ODFiNy5jcmwwHwYDVR0jBBgwFoAU7hm4X+FJH7sn4UsJlQ81NpEwFo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NDdmYmE0Yy02MGEwLTQ5OWUtOGQ1Yi0wODc1 NDVjOTgxYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqgCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWqDVEiVG7CgkhZBCjdNg4jQUUl9sQ0i4V98+8Lr8MkQSQUy+NF1vpu RJNzS6GGLHORw38/3pOt1FEhF4S5ik4LOBRpDu3MtT2IlB4WEtf1ICKlry7RxU6k AgrTergXQk5bNqs9yggZekY8NaOTQVStoTlm+dJuIFlEPr1cH5rD9AOaNm3hvoNU 3B+gbFSCqjzxWZnfVsNB7A6b0T3BKEPmZ9LAQL9tmWeumXi+5Y4q4KAouEFqBHiX mhHYEj1/22RBjoHGP6PxXJdDPwwwu7qWIiH6o4NE0I4moWy8SJPz7bjOgdwrDZGt nEyt0ZG5lmamF71ZjIKkv+oK1keMOKM= -----END CERTIFICATE-----Generated at Sat Apr 12 14:56:16 2025 by rpki-client