$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/67379256-b2cb-38cd-af15-f5e21e776b07.roa File: 67379256-b2cb-38cd-af15-f5e21e776b07.roa (raw, json) Hash identifier: DpjRFYJGcEptn5QxA69vAL2LZNZeOTegXZkFh/klkQU= Subject key identifier: FD:AC:6B:2D:A8:E6:01:72:13:E1:A5:1D:88:16:96:68:F8:18:C5:19 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584865303FDAE894958ACF07E000 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/67379256-b2cb-38cd-af15-f5e21e776b07.roa Signing time: Wed 01 Jan 2025 02:00:40 +0000 ROA not before: Wed 01 Jan 2025 02:00:40 +0000 ROA not after: Tue 01 Apr 2025 01:00:40 +0000 asID: 4922 IP address blocks: 204.111.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:30:3f:da:e8:94:95:8a:cf:07:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Jan 1 02:00:40 2025 GMT Not After : Apr 1 01:00:40 2025 GMT Subject: CN=5f2dfffb-4f49-4b50-ab69-14cd77b933a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:19:98:92:ee:34:d9:97:ff:45:3b:be:49: d1:cf:65:d3:1c:ad:2f:24:63:d0:d5:0b:0a:28:43: 55:75:d7:9b:27:19:7d:b0:33:1d:dd:ad:a4:b5:03: 7c:43:a0:d8:b9:46:6d:a5:50:bb:d9:db:5b:c7:bf: f5:a9:5c:87:a0:5d:32:a7:b3:62:a5:dc:b6:b1:c4: 9c:37:71:54:ea:73:72:8d:13:91:28:bf:96:37:97: ce:81:36:47:e3:d3:fb:ce:44:ab:52:9e:8b:fa:fc: ea:cc:b9:81:de:04:37:ca:d4:a3:05:83:21:7e:19: e2:56:e9:fe:8c:fc:7a:ce:5e:80:bf:a0:57:17:e9: e7:99:67:a0:8e:f1:52:d6:88:25:e8:d4:56:c8:9e: 8d:48:07:00:ec:8f:e4:c0:c2:84:71:03:b2:cd:e1: f1:1b:8f:64:7e:be:61:ae:d0:ac:77:19:9c:3b:89: 4a:2f:21:30:4c:57:26:c1:53:ff:2b:b8:9c:61:0d: b9:14:0b:a6:2a:e8:d2:00:ac:68:1b:98:01:5c:4b: a1:83:32:05:8a:e3:b4:86:07:e4:7e:79:56:24:82: ca:51:3c:64:8b:3b:62:b8:40:93:bc:70:01:0b:8f: 40:2b:0b:b1:bf:6e:03:37:5b:94:5c:4d:99:f4:02: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AC:6B:2D:A8:E6:01:72:13:E1:A5:1D:88:16:96:68:F8:18:C5:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/67379256-b2cb-38cd-af15-f5e21e776b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 204.111.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c6:38:58:14:41:33:14:a2:72:fa:27:ff:8d:e1:bc:83:ba: 10:5c:44:c4:c1:24:54:a0:4d:fe:2e:68:88:35:1f:d4:06:ec: a5:87:0b:58:2c:0d:03:5b:24:8a:09:81:cf:6e:a0:9b:cb:e3: 48:3e:1f:3f:9c:a5:52:ed:c7:4b:56:dd:3e:5d:7a:7a:0c:b0: 6a:e5:b4:85:b5:ab:42:7a:41:f5:50:8d:75:dd:b6:1d:d3:41: 91:08:c1:9c:c3:d8:24:fa:c1:61:b7:17:b7:5a:5d:f6:75:4f: a1:c4:07:28:49:45:e9:0c:ad:d5:40:5b:94:ff:9e:3e:56:c3: e4:29:17:ed:4d:a0:f7:87:f0:56:e8:6a:78:3b:96:a4:0d:ab: c9:2a:29:ff:4a:55:97:3e:a3:0a:96:84:5a:51:1e:ce:fe:78: 1c:13:fc:62:08:61:5b:5b:59:8a:40:ae:50:da:40:85:c5:aa: 42:54:f7:5f:61:96:aa:f2:32:84:17:5d:90:94:07:dd:48:97: 66:10:e7:89:25:74:45:59:04:a2:78:2a:58:4e:3d:3c:30:3a: 9c:0c:3b:ea:42:c0:c1:64:34:a4:9b:5c:16:fe:ab:c7:97:07: 1a:a9:b7:1a:8a:ed:df:78:f0:d8:15:90:3b:1e:56:81:28:55: 5d:98:fd:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMD/a6JSVis8H4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk NWYyZGZmZmItNGY0OS00YjUwLWFiNjktMTRjZDc3YjkzM2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKoZmJLuNNmX/0U7vknRz2XTHK0vJGPQ1QsK KENVddebJxl9sDMd3a2ktQN8Q6DYuUZtpVC72dtbx7/1qVyHoF0yp7Nipdy2scSc N3FU6nNyjRORKL+WN5fOgTZH49P7zkSrUp6L+vzqzLmB3gQ3ytSjBYMhfhniVun+ jPx6zl6Av6BXF+nnmWegjvFS1ogl6NRWyJ6NSAcA7I/kwMKEcQOyzeHxG49kfr5h rtCsdxmcO4lKLyEwTFcmwVP/K7icYQ25FAumKujSAKxoG5gBXEuhgzIFiuO0hgfk fnlWJILKUTxkiztiuECTvHABC49AKwuxv24DN1uUXE2Z9AKFpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2say2o5gFyE+GlHYgWlmj4GMUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvNjczNzkyNTYtYjJjYi0z OGNkLWFmMTUtZjVlMjFlNzc2YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzG9EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/GOFgUQTMUonL6J/+N4byDuhBcRMTBJFSgTf4uaIg1H9QG7KWHC1gs DQNbJIoJgc9uoJvL40g+Hz+cpVLtx0tW3T5denoMsGrltIW1q0J6QfVQjXXdth3T QZEIwZzD2CT6wWG3F7daXfZ1T6HEByhJRekMrdVAW5T/nj5Ww+QpF+1NoPeH8Fbo ang7lqQNq8kqKf9KVZc+owqWhFpRHs7+eBwT/GIIYVtbWYpArlDaQIXFqkJU919h lqryMoQXXZCUB91Il2YQ54kldEVZBKJ4KlhOPTwwOpwMO+pCwMFkNKSbXBb+q8eX BxqptxqK7d948NgVkDseVoEoVV2Y/d4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:32:11 2025 by rpki-client