$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa File: b2e5432e-486a-3195-a8c7-b69e19b4f706.roa (raw, json) Hash identifier: RSfChnG+9hxa5mZu+IQSOIYNCVuUf+90lmpsT5mLJV8= Subject key identifier: AE:97:4E:49:BD:29:70:D4:37:1B:BE:DA:1A:67:F2:1E:27:27:8F:4F Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F43285848E0064EADEEBA98AC5BF0A100 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 376 IP address blocks: 206.167.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:4e:ad:ee:ba:98:ac:5b:f0:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=b7f15008-b96d-438a-84cd-d3f85c970079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:48:66:38:20:c7:13:6e:36:d3:61:38:a8: 00:db:5f:f7:84:d1:6c:83:be:63:c9:a2:d7:07:58: 71:82:0b:74:c8:b1:66:25:3c:9e:7a:be:6e:73:82: b4:44:8c:48:8f:51:0b:2c:bf:2a:f1:ec:0a:63:2e: 90:e8:07:b6:ce:43:9d:6b:c9:c1:89:b9:2d:b8:14: a6:72:c3:31:5b:91:cd:e0:57:1d:e3:8f:ba:c5:13: 9d:73:76:50:19:c9:49:48:df:0b:4f:00:1d:7c:ef: 22:87:d6:a5:8a:5d:40:34:f5:44:fa:59:75:40:64: d9:ad:94:95:a0:12:33:7f:34:24:22:8d:92:bf:7e: de:b8:0b:ac:75:53:25:bf:3f:df:bc:53:99:9e:bb: fd:ec:b9:21:4a:be:1f:da:06:38:2e:18:dd:99:fa: ef:cc:88:ce:75:b0:f8:93:07:4b:00:c3:ca:53:46: 57:ff:59:1e:d9:22:65:cc:da:c5:5a:72:4b:8c:40: b0:07:55:0f:88:6c:32:23:71:fc:5b:44:04:a0:65: 78:79:30:c1:12:2f:d5:78:17:89:41:51:db:53:f5: 7c:80:c1:62:d4:9b:eb:73:d9:0c:fb:11:f7:ee:aa: e0:8b:c4:09:ea:64:63:6d:46:02:48:24:61:08:57: 59:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:97:4E:49:BD:29:70:D4:37:1B:BE:DA:1A:67:F2:1E:27:27:8F:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b2e5432e-486a-3195-a8c7-b69e19b4f706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b8:22:77:5e:0a:74:b3:92:36:97:43:1e:ea:2f:83:44:b7: 9a:44:1e:f7:53:0b:00:69:d3:29:39:3b:32:88:eb:50:ba:bf: 89:88:1a:4f:4b:c8:e7:e7:a5:1d:13:dd:b3:98:21:cf:1d:1e: d5:d6:4d:12:c2:66:0b:46:06:e8:10:a9:dd:fb:cd:9a:bf:2e: a7:bb:8d:2b:eb:14:cc:38:1b:10:11:39:3d:06:f4:8f:5c:6d: 9e:99:65:f6:48:c0:94:06:96:14:c5:11:80:f6:87:c0:67:67: 3f:99:35:0f:be:65:63:04:6e:f3:d0:c9:cb:45:9e:98:b5:70: c5:ce:70:7e:94:62:1c:ad:26:89:3a:65:a1:d1:5d:73:25:4d: d1:64:4e:7c:74:77:e2:24:16:ca:cb:04:bf:60:64:41:98:8f: 6d:e0:c3:da:a7:dc:30:61:c3:e2:8a:fb:b8:1b:a3:f3:dc:62: 92:f3:ff:bf:85:b2:90:26:4e:79:6d:2a:95:fa:6f:71:32:55: 20:02:b6:c1:6a:43:45:6a:07:d9:e0:fc:a6:60:b3:80:aa:be: 3c:c6:18:d5:d3:b6:b2:16:45:a6:3a:be:a8:73:92:52:c9:c6: da:9c:f2:e1:2d:06:0a:e4:26:53:ce:e7:95:9a:ae:3d:24:87: a3:44:c5:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBk6t7rqYrFvwoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk YjdmMTUwMDgtYjk2ZC00MzhhLTg0Y2QtZDNmODVjOTcwMDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfhIZjggxxNuNtNhOKgA21/3hNFsg75jyaLX B1hxggt0yLFmJTyeer5uc4K0RIxIj1ELLL8q8ewKYy6Q6Ae2zkOda8nBibktuBSm csMxW5HN4Fcd44+6xROdc3ZQGclJSN8LTwAdfO8ih9alil1ANPVE+ll1QGTZrZSV oBIzfzQkIo2Sv37euAusdVMlvz/fvFOZnrv97LkhSr4f2gY4LhjdmfrvzIjOdbD4 kwdLAMPKU0ZX/1ke2SJlzNrFWnJLjECwB1UPiGwyI3H8W0QEoGV4eTDBEi/VeBeJ QVHbU/V8gMFi1Jvrc9kM+xH37qrgi8QJ6mRjbUYCSCRhCFdZlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6XTkm9KXDUNxu+2hpn8h4nJ49PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYjJlNTQzMmUtNDg2YS0z MTk1LWE4YzctYjY5ZTE5YjRmNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqeEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABe4IndeCnSzkjaXQx7qL4NEt5pEHvdTCwBp0yk5OzKI61C6v4mIGk9L yOfnpR0T3bOYIc8dHtXWTRLCZgtGBugQqd37zZq/Lqe7jSvrFMw4GxAROT0G9I9c bZ6ZZfZIwJQGlhTFEYD2h8BnZz+ZNQ++ZWMEbvPQyctFnpi1cMXOcH6UYhytJok6 ZaHRXXMlTdFkTnx0d+IkFsrLBL9gZEGYj23gw9qn3DBhw+KK+7gbo/PcYpLz/7+F spAmTnltKpX6b3EyVSACtsFqQ0VqB9ng/KZgs4CqvjzGGNXTtrIWRaY6vqhzklLJ xtqc8uEtBgrkJlPO55Warj0kh6NExT8= -----END CERTIFICATE-----Generated at Sun Apr 6 10:44:47 2025 by rpki-client