$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/3829f42c-17b7-3f18-bae5-171e7fa5c74e.roa File: 3829f42c-17b7-3f18-bae5-171e7fa5c74e.roa (raw, json) Hash identifier: 1D00e+PyyW+xwrlooZr11nqbVJitZQEQV4bW6C26WfY= Subject key identifier: F9:FE:06:8A:5A:3E:D4:6F:30:37:FE:5A:93:46:94:01:5B:F8:29:D2 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F43285848AAFB6BE1BE516F3EC8DD1A20 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/3829f42c-17b7-3f18-bae5-171e7fa5c74e.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 399575 IP address blocks: 206.204.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:6b:e1:be:51:6f:3e:c8:dd:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=bbac5a4c-6f43-4d8b-aa14-c1874c1d29d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:85:1c:0e:69:fa:e4:bd:b2:a4:60:18:de: 62:78:a4:3e:5f:cc:9a:5c:ff:a2:01:0c:86:5b:ec: 6f:e9:33:6d:b3:b2:71:c5:b2:74:4c:05:99:ee:4f: 94:fb:6b:ee:2e:6a:e9:cb:c7:cc:c7:68:6b:63:ac: cf:86:79:15:49:ef:b4:ed:14:cc:5a:eb:d4:b6:98: 34:6f:94:7f:1f:1b:65:11:cb:36:61:a2:01:5b:b3: 13:7b:c4:0b:3d:51:f0:ed:ad:00:50:a0:07:a0:f3: cf:7c:48:6f:86:1a:23:a5:70:d9:5f:ce:3b:d3:f6: 5e:6f:2c:7c:07:3b:0f:1f:01:cc:52:10:24:9f:83: 34:66:b0:91:4c:bd:74:c6:ae:64:82:fb:38:f7:d0: d4:0e:2c:d6:15:92:a7:7f:b3:3e:1f:5e:ff:4c:0e: 89:0c:40:41:78:e5:00:d4:87:94:74:06:b4:ed:d3: 38:19:6b:de:6c:68:b8:4f:4e:db:b1:a7:24:ab:24: ca:b1:36:29:3a:39:6e:65:c7:0d:35:64:32:37:84: 37:5c:47:99:b4:6e:18:11:9a:dd:6e:0d:84:b3:21: 5d:9a:1a:6a:bb:5e:6b:52:6a:78:cb:d6:bf:9b:98: d5:88:01:f5:2f:bb:9a:01:c8:7d:25:1e:24:07:b5: 0d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FE:06:8A:5A:3E:D4:6F:30:37:FE:5A:93:46:94:01:5B:F8:29:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/3829f42c-17b7-3f18-bae5-171e7fa5c74e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 206.204.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4d:34:ef:e9:43:81:25:d3:a9:10:b4:68:dd:e8:3d:0f:5a: 6f:b1:c6:83:d7:3e:c5:d7:2a:4b:bd:fe:80:7d:a0:cd:72:9a: a7:b4:e3:5f:b2:26:06:ba:a9:e8:4a:f3:47:02:de:8b:e9:fe: d1:db:5a:2f:43:91:99:59:24:3d:d3:08:55:a8:c1:3b:9c:99: d4:1f:4c:43:12:05:6e:48:e4:60:a4:43:fb:a2:62:bd:c8:52: c5:30:50:06:05:ef:f0:37:4c:c8:e8:66:e5:26:c4:32:9e:03: bb:56:b5:de:c4:c7:16:ea:29:8e:1f:57:75:d3:bc:70:ee:c4: 0c:4b:37:f9:21:d5:d3:01:3e:c1:b7:12:b0:2c:30:c0:63:ac: ab:49:0c:52:93:30:52:3b:ac:b0:4b:12:2f:46:5d:fb:21:b5: 48:94:1d:71:ec:a6:48:15:de:3d:20:1d:dc:c8:de:68:75:07: 70:15:65:ac:0c:5b:da:09:4c:73:86:a1:af:1c:e6:1e:14:cb: 71:1a:f1:03:43:b0:c3:42:00:a7:b9:57:b7:e8:41:30:28:aa: e7:4f:21:20:f3:f6:39:e7:36:97:51:f1:49:8c:2b:4f:e3:84: e2:50:01:c1:55:83:dd:37:60:46:d2:af:9b:90:63:3e:4e:18: f6:d6:59:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+2vhvlFvPsjdGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk YmJhYzVhNGMtNmY0My00ZDhiLWFhMTQtYzE4NzRjMWQyOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaeFHA5p+uS9sqRgGN5ieKQ+X8yaXP+iAQyG W+xv6TNts7JxxbJ0TAWZ7k+U+2vuLmrpy8fMx2hrY6zPhnkVSe+07RTMWuvUtpg0 b5R/HxtlEcs2YaIBW7MTe8QLPVHw7a0AUKAHoPPPfEhvhhojpXDZX8470/Zebyx8 BzsPHwHMUhAkn4M0ZrCRTL10xq5kgvs499DUDizWFZKnf7M+H17/TA6JDEBBeOUA 1IeUdAa07dM4GWvebGi4T07bsackqyTKsTYpOjluZccNNWQyN4Q3XEeZtG4YEZrd bg2EsyFdmhpqu15rUmp4y9a/m5jViAH1L7uaAch9JR4kB7UNvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn+BopaPtRvMDf+WpNGlAFb+CnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMzgyOWY0MmMtMTdiNy0z ZjE4LWJhZTUtMTcxZTdmYTVjNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsziMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElNNO/pQ4El06kQtGjd6D0PWm+xxoPXPsXXKku9/oB9oM1ymqe041+y Jga6qehK80cC3ovp/tHbWi9DkZlZJD3TCFWowTucmdQfTEMSBW5I5GCkQ/uiYr3I UsUwUAYF7/A3TMjoZuUmxDKeA7tWtd7ExxbqKY4fV3XTvHDuxAxLN/kh1dMBPsG3 ErAsMMBjrKtJDFKTMFI7rLBLEi9GXfshtUiUHXHspkgV3j0gHdzI3mh1B3AVZawM W9oJTHOGoa8c5h4Uy3Ea8QNDsMNCAKe5V7foQTAoqudPISDz9jnnNpdR8UmMK0/j hOJQAcFVg903YEbSr5uQYz5OGPbWWZo= -----END CERTIFICATE-----Generated at Fri Apr 11 21:09:10 2025 by rpki-client