$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa File: 67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa (raw, json) Hash identifier: 9FA5BNLK4bBBzCY6yGs9FkhdviZiMBWAUjSQdkI8mfs= Subject key identifier: FC:8A:6E:55:EB:0C:7E:C9:4C:AA:D1:07:DB:AA:E7:8E:D3:DC:C7:0C Certificate issuer: /CN=a3073e85-2b7a-45f5-809d-4c36116cd85c Certificate serial: 010D0C9F432858495D896B5ED95DF7BFE985C300 Authority key identifier: 16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 401245 IP address blocks: 206.225.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:6b:5e:d9:5d:f7:bf:e9:85:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3073e85-2b7a-45f5-809d-4c36116cd85c Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=57cfd6f8-da16-4d22-b23d-b563596771b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:ca:d6:d6:dd:b2:05:4a:3d:6c:fb:07:95: 44:4a:d3:14:ed:93:40:76:dc:af:0f:e1:70:b1:83: 5f:a8:ff:04:57:58:e2:18:44:43:2f:27:6f:71:28: 98:fe:a2:a8:d0:f1:84:78:3c:3c:99:8d:61:e9:e9: fc:41:be:ae:29:3a:42:c4:5e:f6:c8:69:47:e5:9d: cd:cb:f2:f0:77:f6:67:7f:f6:df:5b:68:71:af:89: 0f:ed:89:50:59:8c:6a:2a:0e:6e:fe:17:6d:36:d3: c3:81:cf:11:a0:61:4e:d8:33:7f:23:08:71:ec:a0: 7e:17:7c:bb:33:b2:ef:12:24:29:b0:8a:ce:79:0c: 1f:8a:84:19:48:20:35:6a:07:4f:0c:90:de:6b:4b: 18:31:48:b8:0c:9b:83:c4:4b:17:91:19:97:a1:71: 6e:3b:fa:d8:59:1d:be:b8:28:93:69:2b:1e:1d:3c: ce:ca:32:0e:f2:3e:44:5e:97:15:66:a4:dc:98:fe: ec:bd:4d:b0:d6:4a:4f:f6:69:b1:34:a3:ac:43:6a: 95:1b:2f:17:12:b3:b3:c7:63:dd:94:8b:7a:ff:62: 84:14:4a:f0:84:34:a9:42:ae:28:55:c5:4b:18:0f: 78:76:4b:b9:b6:b5:b4:fa:9d:fa:2f:94:00:18:0a: ba:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8A:6E:55:EB:0C:7E:C9:4C:AA:D1:07:DB:AA:E7:8E:D3:DC:C7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/67ba44aa-ad5d-3f58-a6d3-9047e43bc64d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c/a3073e85-2b7a-45f5-809d-4c36116cd85c.crl X509v3 Authority Key Identifier: keyid:16:D4:A2:91:CE:45:6E:BA:43:DB:81:7F:C1:DF:C0:86:2B:8A:F9:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a3073e85-2b7a-45f5-809d-4c36116cd85c.cer sbgp-ipAddrBlock: critical IPv4: 206.225.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1c:38:3b:6f:84:c2:5d:a5:19:a9:4d:da:b5:d3:64:0b:02: 9f:af:2e:10:64:b8:7d:2b:d2:b5:5e:29:e9:4f:ab:e7:1a:5a: 90:48:d1:57:78:1a:37:d4:44:1c:60:47:3b:1a:c5:1a:98:23: 5c:a4:31:76:86:13:8b:38:bd:18:68:d0:fd:fa:1a:8c:6a:8b: 25:03:9b:d0:54:19:d6:aa:83:e8:f5:de:3d:38:bb:4c:33:12: 27:d9:90:4a:70:42:1a:61:46:7b:41:7c:ea:1f:67:5e:c8:f4: 43:20:66:e9:2d:ba:03:9c:35:98:04:e0:50:a9:e3:1e:ee:d4: 30:82:04:13:fd:a4:a2:2a:1c:a1:ce:05:cf:f1:6f:8a:e1:ce: 08:21:27:bd:8a:3a:02:24:0d:de:77:c2:c5:ef:21:e2:9b:98: 17:14:1d:9f:07:31:02:d6:42:5d:f2:20:db:d4:06:14:e2:15: 29:30:e5:5c:7f:37:75:73:58:62:dc:c7:cf:7d:0a:93:23:ff: 44:ec:78:fc:0a:28:2e:42:1d:4f:88:e5:f5:12:c2:29:4b:97: 9c:ba:70:e3:11:34:0b:19:fd:8d:7f:bf:ad:b2:32:f7:a5:78: 1c:56:de:31:bd:41:35:aa:67:70:01:53:55:78:da:f8:9c:a4: cd:82:21:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWte2V33v+mFwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwNzNlODUtMmI3YS00NWY1LTgwOWQtNGMzNjExNmNk ODVjMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTdjZmQ2ZjgtZGExNi00ZDIyLWIyM2QtYjU2MzU5Njc3MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmjK1tbdsgVKPWz7B5VEStMU7ZNAdtyvD+Fw sYNfqP8EV1jiGERDLydvcSiY/qKo0PGEeDw8mY1h6en8Qb6uKTpCxF72yGlH5Z3N y/Lwd/Znf/bfW2hxr4kP7YlQWYxqKg5u/hdtNtPDgc8RoGFO2DN/Iwhx7KB+F3y7 M7LvEiQpsIrOeQwfioQZSCA1agdPDJDea0sYMUi4DJuDxEsXkRmXoXFuO/rYWR2+ uCiTaSseHTzOyjIO8j5EXpcVZqTcmP7svU2w1kpP9mmxNKOsQ2qVGy8XErOzx2Pd lIt6/2KEFErwhDSpQq4oVcVLGA94dku5trW0+p36L5QAGAq6cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyKblXrDH7JTKrRB9uq547T3McMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMzA3 M2U4NS0yYjdhLTQ1ZjUtODA5ZC00YzM2MTE2Y2Q4NWMvNjdiYTQ0YWEtYWQ1ZC0z ZjU4LWE2ZDMtOTA0N2U0M2JjNjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTMwNzNlODUtMmI3YS00NWY1LTgw OWQtNGMzNjExNmNkODVjL2EzMDczZTg1LTJiN2EtNDVmNS04MDlkLTRjMzYxMTZj ZDg1Yy5jcmwwHwYDVR0jBBgwFoAUFtSikc5FbrpD24F/wd/AhiuK+VwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMzA3M2U4NS0yYjdhLTQ1ZjUtODA5ZC00YzM2 MTE2Y2Q4NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzuEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgcODtvhMJdpRmpTdq102QLAp+vLhBkuH0r0rVeKelPq+caWpBI0Vd4 GjfURBxgRzsaxRqYI1ykMXaGE4s4vRho0P36GoxqiyUDm9BUGdaqg+j13j04u0wz EifZkEpwQhphRntBfOofZ17I9EMgZuktugOcNZgE4FCp4x7u1DCCBBP9pKIqHKHO Bc/xb4rhzgghJ72KOgIkDd53wsXvIeKbmBcUHZ8HMQLWQl3yINvUBhTiFSkw5Vx/ N3VzWGLcx899CpMj/0TsePwKKC5CHU+I5fUSwilLl5y6cOMRNAsZ/Y1/v62yMvel eBxW3jG9QTWqZ3ABU1V42vicpM2CIV4= -----END CERTIFICATE-----Generated at Fri Apr 11 21:15:47 2025 by rpki-client