$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa File: bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa (raw, json) Hash identifier: p6U5NdDy2g9jghDyY41rOmEG5cJm6Ec3/Dz3T1Ic5tY= Subject key identifier: 34:2B:BE:97:50:D4:92:E3:21:EC:7B:51:13:B5:1F:C5:E0:E8:62:F6 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F43285848D7A644B24E9280AC1F005760 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 376 IP address blocks: 206.167.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:44:b2:4e:92:80:ac:1f:00:57:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=904c5196-8ae3-4f28-a03c-c07f168bd79a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ea:ce:b8:ff:24:f8:43:8b:48:11:40:0d:85: 37:81:88:ee:f7:77:2b:46:51:a9:25:c7:94:2e:e9: 4c:77:61:43:2e:7f:d9:97:88:a4:f9:2d:14:a9:df: bc:cc:1c:6f:be:76:c1:36:ae:94:e2:9c:dc:b3:c8: fe:f0:db:98:34:15:87:48:9e:6a:f9:9b:33:d4:ed: 90:a8:a0:68:6b:97:5a:b3:ec:72:9d:2f:e3:83:90: a0:6b:d6:b7:47:9d:03:e4:c2:29:b1:c9:84:39:1a: e4:e5:95:99:59:af:0d:14:25:b7:25:8c:a6:73:2a: 21:50:9c:21:cd:11:ee:f3:6a:ec:26:0e:68:33:cb: 5a:f0:bc:f7:e3:eb:f4:54:7f:69:e7:f7:4e:26:f0: 46:71:ff:12:30:ae:e2:29:32:dc:3d:10:e8:1b:f8: 43:2c:11:f5:14:70:6c:23:7c:d9:eb:b8:7d:4b:cd: a8:8c:33:a6:3e:71:98:0f:98:0d:a7:3c:a7:cf:0a: 6c:ca:3b:6a:ef:a8:93:0f:ef:32:28:ea:68:b8:37: f5:61:65:a5:64:9b:3e:35:96:8a:b3:a0:b3:42:c3: 23:30:da:db:65:f9:7e:f7:7a:71:2a:a6:ef:fb:54: f3:c3:dd:85:5d:81:37:0c:94:93:8a:b7:28:72:69: 11:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2B:BE:97:50:D4:92:E3:21:EC:7B:51:13:B5:1F:C5:E0:E8:62:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:05:2a:6b:e4:33:ab:f1:f1:b6:f8:7a:9b:64:e5:38:6e:2e: 18:c0:26:58:15:b2:7a:f6:b4:6e:87:e3:15:f9:29:92:45:64: 37:5a:32:e3:6c:7e:85:81:0c:c1:f5:27:73:7c:84:b8:82:eb: 8c:ba:5f:71:fc:01:dc:dc:58:3c:e0:ed:4d:03:2a:ed:5c:ea: 1d:f6:5c:8f:18:6f:1d:58:7a:0d:6b:d9:3d:3b:43:e1:d7:b4: b2:f3:f5:78:19:99:c0:6c:08:7e:de:ef:b6:56:b2:b6:9a:1b: f4:db:dc:b5:08:ca:e7:9c:30:c2:92:3b:f6:58:19:4d:83:bb: 7c:fb:b9:ae:b2:04:f8:26:44:cd:92:e2:a5:79:ab:04:e9:c6: c9:78:95:e2:4e:71:e6:2a:c4:1d:94:2a:d7:35:fd:d2:5a:8e: ef:d0:a3:21:3a:17:26:0b:dc:99:35:58:70:42:c5:ba:2c:60: f8:eb:fe:b1:90:ce:1f:65:86:33:22:09:d1:01:1a:b0:6e:a6: 51:c7:03:a1:00:26:da:e5:82:60:cb:b5:71:4f:41:a8:43:6d: e7:c7:6b:09:9d:86:2b:6c:b6:04:1c:1f:df:19:fc:ba:35:21: f7:4e:7f:4d:2f:f2:f5:80:24:2f:d3:3d:1b:51:19:1f:9d:4d: 6a:27:c0:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkSyTpKArB8AV2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk OTA0YzUxOTYtOGFlMy00ZjI4LWEwM2MtYzA3ZjE2OGJkNzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+rOuP8k+EOLSBFADYU3gYju93crRlGpJceU LulMd2FDLn/Zl4ik+S0Uqd+8zBxvvnbBNq6U4pzcs8j+8NuYNBWHSJ5q+Zsz1O2Q qKBoa5das+xynS/jg5Cga9a3R50D5MIpscmEORrk5ZWZWa8NFCW3JYymcyohUJwh zRHu82rsJg5oM8ta8Lz34+v0VH9p5/dOJvBGcf8SMK7iKTLcPRDoG/hDLBH1FHBs I3zZ67h9S82ojDOmPnGYD5gNpzynzwpsyjtq76iTD+8yKOpouDf1YWWlZJs+NZaK s6CzQsMjMNrbZfl+93pxKqbv+1Tzw92FXYE3DJSTircocmkRLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQrvpdQ1JLjIex7URO1H8Xg6GL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYmIzZGIxMWMtNmRjOS0z ZGMxLWFhZDktNzBjZDUyNDFlMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0FKmvkM6vx8bb4eptk5ThuLhjAJlgVsnr2tG6H4xX5KZJFZDdaMuNs foWBDMH1J3N8hLiC64y6X3H8AdzcWDzg7U0DKu1c6h32XI8Ybx1Yeg1r2T07Q+HX tLLz9XgZmcBsCH7e77ZWsraaG/Tb3LUIyuecMMKSO/ZYGU2Du3z7ua6yBPgmRM2S 4qV5qwTpxsl4leJOceYqxB2UKtc1/dJaju/QoyE6FyYL3Jk1WHBCxbosYPjr/rGQ zh9lhjMiCdEBGrBuplHHA6EAJtrlgmDLtXFPQahDbefHawmdhitstgQcH98Z/Lo1 IfdOf00v8vWAJC/TPRtRGR+dTWonwMg= -----END CERTIFICATE-----Generated at Sun Apr 6 08:21:11 2025 by rpki-client