$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/edab00ac-6d27-3d4b-96a7-8c472359c5f1.roa File: edab00ac-6d27-3d4b-96a7-8c472359c5f1.roa (raw, json) Hash identifier: KbN6Gr0YUA6DAef8ZlCZ7PgXRgj/oZMDeV8P91Gvl5k= Subject key identifier: 99:DA:3A:E5:08:E6:97:B1:51:EF:71:AE:B4:90:8E:20:30:E0:03:46 Certificate issuer: /CN=eac71b30-0394-4c6c-ba2c-e133113ae123 Certificate serial: 010D0C9F432858492184060774771961D8E68500 Authority key identifier: 17:86:A0:47:40:A5:F7:EC:D9:8C:50:52:51:0A:95:C4:AE:A5:A9:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/edab00ac-6d27-3d4b-96a7-8c472359c5f1.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 40173 IP address blocks: 206.168.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/eac71b30-0394-4c6c-ba2c-e133113ae123.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/eac71b30-0394-4c6c-ba2c-e133113ae123.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:06:07:74:77:19:61:d8:e6:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eac71b30-0394-4c6c-ba2c-e133113ae123 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=c14351aa-1b8e-4841-9600-a299cd082d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:62:d2:6e:7b:30:e5:df:b9:f0:c7:c7:df:af: 77:50:06:c1:4a:70:fd:ef:44:51:c1:92:04:65:5a: 59:ed:1d:0c:44:48:d2:bf:1d:5d:8d:99:a9:ad:fb: 83:39:ec:77:fa:e8:82:9c:59:33:4c:15:05:f4:45: d0:69:00:fa:9a:3d:09:9b:1b:15:98:f5:d2:51:70: 79:ab:1f:ac:60:99:e8:1b:e1:ee:15:b8:3f:d6:16: 54:72:4a:ea:cd:ca:e9:93:17:11:01:e6:f5:7e:94: a3:d6:40:4e:d9:5c:7c:5c:9d:f6:21:17:3a:03:5a: f9:cc:46:71:3d:23:6f:a6:d0:70:c3:0d:29:e5:da: f1:4d:88:63:bb:7d:a6:ed:11:1d:9a:52:77:44:4e: 52:02:26:6b:f2:9b:22:41:38:1b:d2:c8:72:ad:61: 7a:de:b6:62:d1:ee:94:8d:aa:39:0f:a0:72:36:a4: 5b:9d:70:8c:f9:55:f9:bf:77:1c:78:59:11:a2:84: 32:10:b1:81:8c:8c:7e:6d:62:f9:d3:46:cd:b8:9b: 48:7c:45:5e:ce:7d:a9:84:d0:8b:64:99:0f:e7:53: d4:db:dd:e4:f2:10:b5:be:af:5d:fc:23:a3:e5:6b: a8:67:9a:ae:5a:d3:62:2d:a1:b6:2f:b8:ac:1a:9b: bf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DA:3A:E5:08:E6:97:B1:51:EF:71:AE:B4:90:8E:20:30:E0:03:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/edab00ac-6d27-3d4b-96a7-8c472359c5f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123/eac71b30-0394-4c6c-ba2c-e133113ae123.crl X509v3 Authority Key Identifier: keyid:17:86:A0:47:40:A5:F7:EC:D9:8C:50:52:51:0A:95:C4:AE:A5:A9:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/eac71b30-0394-4c6c-ba2c-e133113ae123.cer sbgp-ipAddrBlock: critical IPv4: 206.168.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:64:6d:13:58:7b:1b:6f:d4:6a:4e:42:2b:58:2a:7d:3f:de: 7b:fe:71:d6:2b:45:05:52:85:a1:46:d4:65:8e:87:14:d8:fa: 53:c0:6f:fe:f5:b0:f7:ca:a8:35:dc:68:cc:40:6b:3f:6d:0f: 8f:9a:a5:58:a7:12:31:98:88:bd:30:b0:76:23:03:22:ff:7f: ff:1c:e2:74:5b:8a:7d:55:7e:3c:c1:95:78:4b:21:8f:40:9f: 2a:4a:10:d1:ce:53:9e:a9:52:41:3b:fc:e2:c7:23:9d:d2:3c: 32:83:32:22:ef:e8:05:ce:2a:c1:11:38:a4:6e:52:9f:72:5c: c0:1c:3e:02:5a:a6:ee:9a:ae:5e:ee:ad:a9:8f:8c:42:96:68: 56:52:34:81:55:dc:b2:3f:9e:e8:9c:07:63:26:3e:7e:bb:70: 2d:6e:92:22:71:19:d2:85:4e:ec:22:19:13:34:07:dc:06:60: 6a:9c:0f:69:ad:7d:bd:44:12:e7:5f:71:57:aa:48:1c:d6:1e: 05:bc:2f:31:de:ad:75:49:2a:ef:08:18:0b:38:28:76:03:29: 7f:f5:fe:c2:ee:bc:00:4a:5e:17:e1:44:67:ee:39:57:03:cf: 97:23:f3:6c:8e:05:58:f0:fa:a4:eb:4d:08:19:8d:91:01:9a: fc:df:f4:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAYHdHcZYdjmhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFjNzFiMzAtMDM5NC00YzZjLWJhMmMtZTEzMzExM2Fl MTIzMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YzE0MzUxYWEtMWI4ZS00ODQxLTk2MDAtYTI5OWNkMDgyZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomLSbnsw5d+58MfH3693UAbBSnD970RRwZIE ZVpZ7R0MREjSvx1djZmprfuDOex3+uiCnFkzTBUF9EXQaQD6mj0JmxsVmPXSUXB5 qx+sYJnoG+HuFbg/1hZUckrqzcrpkxcRAeb1fpSj1kBO2Vx8XJ32IRc6A1r5zEZx PSNvptBwww0p5drxTYhju32m7REdmlJ3RE5SAiZr8psiQTgb0shyrWF63rZi0e6U jao5D6ByNqRbnXCM+VX5v3cceFkRooQyELGBjIx+bWL500bNuJtIfEVezn2phNCL ZJkP51PU293k8hC1vq9d/COj5WuoZ5quWtNiLaG2L7isGpu/AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnaOuUI5pexUe9xrrSQjiAw4ANGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lYWM3 MWIzMC0wMzk0LTRjNmMtYmEyYy1lMTMzMTEzYWUxMjMvZWRhYjAwYWMtNmQyNy0z ZDRiLTk2YTctOGM0NzIzNTljNWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWFjNzFiMzAtMDM5NC00YzZjLWJh MmMtZTEzMzExM2FlMTIzL2VhYzcxYjMwLTAzOTQtNGM2Yy1iYTJjLWUxMzMxMTNh ZTEyMy5jcmwwHwYDVR0jBBgwFoAUF4agR0Cl9+zZjFBSUQqVxK6lqQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9lYWM3MWIzMC0wMzk0LTRjNmMtYmEyYy1lMTMz MTEzYWUxMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqh2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJkbRNYextv1GpOQitYKn0/3nv+cdYrRQVShaFG1GWOhxTY+lPAb/71 sPfKqDXcaMxAaz9tD4+apVinEjGYiL0wsHYjAyL/f/8c4nRbin1VfjzBlXhLIY9A nypKENHOU56pUkE7/OLHI53SPDKDMiLv6AXOKsEROKRuUp9yXMAcPgJapu6arl7u ramPjEKWaFZSNIFV3LI/nuicB2MmPn67cC1ukiJxGdKFTuwiGRM0B9wGYGqcD2mt fb1EEudfcVeqSBzWHgW8LzHerXVJKu8IGAs4KHYDKX/1/sLuvABKXhfhRGfuOVcD z5cj82yOBVjw+qTrTQgZjZEBmvzf9FY= -----END CERTIFICATE-----Generated at Sun Apr 6 22:33:00 2025 by rpki-client