$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/4f190fed-f368-3ddd-9bc9-1813543ae5b1.roa File: 4f190fed-f368-3ddd-9bc9-1813543ae5b1.roa (raw, json) Hash identifier: GfbD4NoVEewd7iriOCrzf+k6oqe4FZNreaLRMmQPoNg= Subject key identifier: 95:FC:0A:46:D1:12:3E:54:93:42:9E:03:8A:3D:5D:4C:A3:C5:6E:5C Certificate issuer: /CN=55cd10d0-11de-4ef5-82b5-f314d130fdba Certificate serial: 010D0C9F432858491D71889ED183B87D9234C500 Authority key identifier: F3:86:72:87:EA:71:2A:64:7A:19:46:AA:B1:2E:FA:F8:E3:DA:BE:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/4f190fed-f368-3ddd-9bc9-1813543ae5b1.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 36295 IP address blocks: 206.208.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/55cd10d0-11de-4ef5-82b5-f314d130fdba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/55cd10d0-11de-4ef5-82b5-f314d130fdba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:88:9e:d1:83:b8:7d:92:34:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55cd10d0-11de-4ef5-82b5-f314d130fdba Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=c7a8f369-6cf7-4d45-931b-e8fca9f008e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0c:88:77:84:11:40:98:f9:c9:db:0c:26:ff: a9:87:3c:be:d6:4a:ab:22:da:6a:8a:15:47:fa:97: d9:c8:03:c7:f2:5e:87:32:5d:1d:54:c0:10:6d:0c: 0c:18:89:ca:38:63:01:c9:21:12:11:ff:7c:fb:31: 89:b3:c5:21:49:26:73:2d:59:66:21:a4:33:24:34: 5c:e7:bb:dd:43:9f:dc:78:56:c4:6c:8e:29:ce:83: b6:c0:e8:46:dc:1b:9a:1a:fc:1b:9e:49:86:c6:3b: 13:96:61:48:f8:a5:63:e0:b6:eb:84:67:34:91:45: 9f:dd:46:e8:f9:d4:57:47:cf:32:72:86:6c:24:4d: f7:de:94:8c:12:1d:75:2d:53:d2:e8:13:b8:0b:25: f2:af:d6:60:63:6b:80:92:07:f3:2c:85:8c:90:52: 1b:91:6f:20:40:27:2d:93:41:c5:70:20:ab:01:4b: 1b:6f:dd:c8:04:6e:d6:4c:1b:f1:8a:8f:6c:e3:63: be:65:d5:9f:67:a6:08:99:f1:ea:34:9c:7b:d6:fb: 6f:4a:1f:eb:2f:98:cf:63:a6:e4:3c:43:d4:f3:9d: 99:6a:d1:7e:93:e9:28:33:16:42:44:dc:e5:91:6b: 4f:e3:15:cc:4a:f0:f6:82:17:1c:9c:f5:21:71:3a: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FC:0A:46:D1:12:3E:54:93:42:9E:03:8A:3D:5D:4C:A3:C5:6E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/4f190fed-f368-3ddd-9bc9-1813543ae5b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba/55cd10d0-11de-4ef5-82b5-f314d130fdba.crl X509v3 Authority Key Identifier: keyid:F3:86:72:87:EA:71:2A:64:7A:19:46:AA:B1:2E:FA:F8:E3:DA:BE:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/55cd10d0-11de-4ef5-82b5-f314d130fdba.cer sbgp-ipAddrBlock: critical IPv4: 206.208.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:de:ac:75:c8:81:99:c1:cf:73:fb:4f:68:3c:d4:a5:f0:d9: 8c:1d:cb:b4:e4:45:ed:a5:4a:c2:58:a4:74:24:81:44:0b:6a: 24:cf:2c:75:54:42:e8:19:0c:f4:c4:7e:fa:63:52:60:22:83: 67:29:66:9e:36:14:17:52:35:17:47:c5:fa:3c:09:c7:59:0d: e4:e1:4e:db:5d:0f:4d:ac:13:1b:95:ad:aa:6f:df:86:c7:fa: f7:af:9b:c9:b0:f7:e3:75:91:0b:92:19:b9:7b:99:44:ab:db: 35:af:fa:fe:4e:9f:ad:cb:85:2b:8f:62:57:9e:a1:11:05:24: c4:03:2c:fc:dc:8b:0b:69:f4:7a:5d:b1:d1:11:ba:c9:86:00: e5:82:8e:a3:0e:6f:71:96:6c:bf:b4:7f:cf:d6:cc:db:5e:02: 78:b6:a6:51:8a:1e:ce:1d:d7:c0:a7:da:84:fa:25:ae:a0:69: b9:40:2f:8c:d3:5a:b5:d7:30:d8:99:06:c7:49:ca:5e:3c:7e: 05:0f:55:0f:1b:c7:c9:df:f2:b5:76:41:b1:86:06:f3:d9:32: 9b:dc:62:17:ec:f3:69:b7:8c:3a:a7:40:c2:90:b8:b2:cd:3c: cb:4b:03:64:6e:23:1a:0f:c7:37:6c:ce:e0:cf:39:1b:a2:26: fe:ea:05:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYie0YO4fZI0xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTVjZDEwZDAtMTFkZS00ZWY1LTgyYjUtZjMxNGQxMzBm ZGJhMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YzdhOGYzNjktNmNmNy00ZDQ1LTkzMWItZThmY2E5ZjAwOGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQyId4QRQJj5ydsMJv+phzy+1kqrItpqihVH +pfZyAPH8l6HMl0dVMAQbQwMGInKOGMBySESEf98+zGJs8UhSSZzLVlmIaQzJDRc 57vdQ5/ceFbEbI4pzoO2wOhG3BuaGvwbnkmGxjsTlmFI+KVj4LbrhGc0kUWf3Ubo +dRXR88ycoZsJE333pSMEh11LVPS6BO4CyXyr9ZgY2uAkgfzLIWMkFIbkW8gQCct k0HFcCCrAUsbb93IBG7WTBvxio9s42O+ZdWfZ6YImfHqNJx71vtvSh/rL5jPY6bk PEPU852ZatF+k+koMxZCRNzlkWtP4xXMSvD2ghccnPUhcTpojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJX8CkbREj5Uk0KeA4o9XUyjxW5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81NWNk MTBkMC0xMWRlLTRlZjUtODJiNS1mMzE0ZDEzMGZkYmEvNGYxOTBmZWQtZjM2OC0z ZGRkLTliYzktMTgxMzU0M2FlNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTVjZDEwZDAtMTFkZS00ZWY1LTgy YjUtZjMxNGQxMzBmZGJhLzU1Y2QxMGQwLTExZGUtNGVmNS04MmI1LWYzMTRkMTMw ZmRiYS5jcmwwHwYDVR0jBBgwFoAU84Zyh+pxKmR6GUaqsS76+OPavr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81NWNkMTBkMC0xMWRlLTRlZjUtODJiNS1mMzE0 ZDEzMGZkYmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDztA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDerHXIgZnBz3P7T2g81KXw2Ywdy7TkRe2lSsJYpHQkgUQLaiTPLHVU QugZDPTEfvpjUmAig2cpZp42FBdSNRdHxfo8CcdZDeThTttdD02sExuVrapv34bH +vevm8mw9+N1kQuSGbl7mUSr2zWv+v5On63LhSuPYleeoREFJMQDLPzciwtp9Hpd sdERusmGAOWCjqMOb3GWbL+0f8/WzNteAni2plGKHs4d18Cn2oT6Ja6gablAL4zT WrXXMNiZBsdJyl48fgUPVQ8bx8nf8rV2QbGGBvPZMpvcYhfs82m3jDqnQMKQuLLN PMtLA2RuIxoPxzdszuDPORuiJv7qBRg= -----END CERTIFICATE-----Generated at Sat Apr 12 13:07:10 2025 by rpki-client