$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/8d2b4036-50c7-3b92-8783-15727eaa6402.roa File: 8d2b4036-50c7-3b92-8783-15727eaa6402.roa (raw, json) Hash identifier: vkJZ1mGeAJNIPf0r2LV+ym0Xlcd3qTo5JgvndkUEpj8= Subject key identifier: 07:43:9D:E3:02:D4:60:69:B6:A5:67:F6:FC:01:17:9A:CD:8F:69:35 Certificate issuer: /CN=6b4ca847-900e-44ba-84e4-460bf2f5df18 Certificate serial: 010D0C9F4328584960541C65AA249B35BD39F88C Authority key identifier: C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/8d2b4036-50c7-3b92-8783-15727eaa6402.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 11766 IP address blocks: 206.127.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:1c:65:aa:24:9b:35:bd:39:f8:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4ca847-900e-44ba-84e4-460bf2f5df18 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=ba33997a-e4c0-4c69-bbd4-61533291ad47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:1a:69:61:8f:eb:19:b8:27:ed:0c:f5:68: 28:5c:5f:f4:92:e0:1e:3d:8b:ac:48:26:80:20:e4: 8d:7b:52:2d:b3:52:20:1f:f5:a6:40:85:07:a8:35: 5d:c0:f6:50:90:d2:6d:47:fe:f9:e5:c1:78:aa:b3: 17:f8:7e:70:a8:3f:51:e8:bb:61:2b:ff:11:2c:b8: bb:ec:cf:99:65:25:89:db:e6:fa:8c:5b:93:2a:a0: e6:44:d6:70:4b:82:cb:34:25:50:3c:84:b7:bd:eb: 65:3a:22:9d:12:e5:1f:94:fe:a4:19:1f:79:8d:fd: 8a:02:97:86:cb:f5:f8:4b:42:27:2e:a7:81:de:84: f3:16:25:d4:80:e2:1d:8a:4f:88:ea:d4:f6:71:01: 17:e0:6d:52:db:e0:a8:9f:c1:93:45:d9:a7:b6:5f: a2:26:fb:3f:2f:66:53:39:a9:07:1c:8f:9c:23:f4: f4:03:3a:cf:28:0b:b4:19:a2:3f:8a:ba:c7:f0:e5: 2b:54:6f:b2:eb:19:2d:c1:7e:57:7f:fb:6c:ed:9d: 68:7f:af:a9:5d:bc:d2:78:37:b6:d4:de:ae:1f:5a: c0:15:a5:6f:cd:cf:5d:00:02:e3:2f:1d:fc:e7:0b: 9c:cf:e4:9a:02:ae:e5:ba:bb:11:47:17:f0:16:15: 68:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:43:9D:E3:02:D4:60:69:B6:A5:67:F6:FC:01:17:9A:CD:8F:69:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/8d2b4036-50c7-3b92-8783-15727eaa6402.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18/6b4ca847-900e-44ba-84e4-460bf2f5df18.crl X509v3 Authority Key Identifier: keyid:C5:58:A6:7F:C0:61:C2:EA:CD:31:69:1D:3A:8D:5B:3F:26:74:E1:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6b4ca847-900e-44ba-84e4-460bf2f5df18.cer sbgp-ipAddrBlock: critical IPv4: 206.127.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:90:f7:37:f3:09:56:df:6f:b0:1a:5e:e5:3b:f8:7a:fa:88: 4f:17:b3:08:83:46:b2:42:eb:60:3c:29:9f:f6:6f:d9:54:84: e5:24:7a:46:ba:f3:04:59:f7:1d:9d:89:ac:23:e7:90:bf:fa: b1:56:ee:f8:88:8c:30:4c:b6:6c:8b:3f:21:7d:62:2e:25:45: de:9c:30:81:c4:e5:09:9e:00:aa:7a:47:96:89:bb:09:6b:86: b6:c4:bc:f7:6e:e1:19:ac:8b:e3:5b:84:74:e2:de:51:ba:18: ec:4e:78:14:73:3b:7e:a9:ec:fa:5f:67:a4:0a:35:d1:12:06: 94:22:5e:ea:11:3e:47:b1:27:46:ff:ed:ce:82:25:fd:ca:0e: 74:4a:10:26:3c:93:44:c2:d8:fb:46:de:4b:d8:56:f6:c5:79: 79:b3:35:1d:2a:3f:e5:2a:d1:9e:33:1b:4f:07:f1:a4:4b:08: 64:48:a5:51:18:9d:49:52:d5:f2:81:65:2e:d1:03:27:ba:f8: c1:c7:30:1b:58:10:f5:e8:bd:d3:c8:9b:12:8d:3a:55:cd:86: de:11:6e:92:c4:42:17:ba:21:4c:e9:9d:e1:19:3e:58:a9:ce: c9:6d:bd:eb:99:c1:6a:d5:86:57:d5:9a:aa:85:1c:a2:37:0d: f2:c5:9b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBxlqiSbNb05+IwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmI0Y2E4NDctOTAwZS00NGJhLTg0ZTQtNDYwYmYyZjVk ZjE4MB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk YmEzMzk5N2EtZTRjMC00YzY5LWJiZDQtNjE1MzMyOTFhZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSEaaWGP6xm4J+0M9WgoXF/0kuAePYusSCaA IOSNe1Its1IgH/WmQIUHqDVdwPZQkNJtR/755cF4qrMX+H5wqD9R6LthK/8RLLi7 7M+ZZSWJ2+b6jFuTKqDmRNZwS4LLNCVQPIS3vetlOiKdEuUflP6kGR95jf2KApeG y/X4S0InLqeB3oTzFiXUgOIdik+I6tT2cQEX4G1S2+Con8GTRdmntl+iJvs/L2ZT OakHHI+cI/T0AzrPKAu0GaI/irrH8OUrVG+y6xktwX5Xf/ts7Z1of6+pXbzSeDe2 1N6uH1rAFaVvzc9dAALjLx385wucz+SaAq7lursRRxfwFhVo9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdDneMC1GBptqVn9vwBF5rNj2k1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82YjRj YTg0Ny05MDBlLTQ0YmEtODRlNC00NjBiZjJmNWRmMTgvOGQyYjQwMzYtNTBjNy0z YjkyLTg3ODMtMTU3MjdlYWE2NDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmI0Y2E4NDctOTAwZS00NGJhLTg0 ZTQtNDYwYmYyZjVkZjE4LzZiNGNhODQ3LTkwMGUtNDRiYS04NGU0LTQ2MGJmMmY1 ZGYxOC5jcmwwHwYDVR0jBBgwFoAUxVimf8BhwurNMWkdOo1bPyZ04SEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82YjRjYTg0Ny05MDBlLTQ0YmEtODRlNC00NjBi ZjJmNWRmMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzn+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiQ9zfzCVbfb7AaXuU7+Hr6iE8XswiDRrJC62A8KZ/2b9lUhOUkeka6 8wRZ9x2diawj55C/+rFW7viIjDBMtmyLPyF9Yi4lRd6cMIHE5QmeAKp6R5aJuwlr hrbEvPdu4Rmsi+NbhHTi3lG6GOxOeBRzO36p7PpfZ6QKNdESBpQiXuoRPkexJ0b/ 7c6CJf3KDnRKECY8k0TC2PtG3kvYVvbFeXmzNR0qP+Uq0Z4zG08H8aRLCGRIpVEY nUlS1fKBZS7RAye6+MHHMBtYEPXovdPImxKNOlXNht4RbpLEQhe6IUzpneEZPlip zsltveuZwWrVhlfVmqqFHKI3DfLFm5A= -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:25 2025 by rpki-client