$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa File: 23f9a47e-4a54-3594-b2ad-43440c42e86e.roa (raw, json) Hash identifier: 66oWu7AAMhOK+4uvxt0HDAxPxz2vUshM8hX9H+SYZXY= Subject key identifier: D2:0C:C5:F9:47:AE:4D:C9:33:13:AD:45:5B:F0:28:C9:A6:C1:29:B9 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584900214C8D11B9696255E87700 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 396982 IP address blocks: 206.201.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:4c:8d:11:b9:69:62:55:e8:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=2280f36a-82db-46a6-8da0-0426aa240962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c4:0f:ad:e4:05:fb:28:42:4c:f7:66:e6:74: b0:b5:ba:00:90:e5:37:38:9b:52:5e:fe:6c:f4:17: 82:57:72:d7:c2:c9:0f:6b:4e:6d:24:2c:73:89:b9: b2:7b:2f:e6:80:46:77:cb:d8:8f:1a:27:50:53:a9: c5:c9:e1:d7:4a:7d:1c:b6:7b:1c:aa:49:9b:9c:48: d5:d6:b0:ed:d4:37:96:8e:59:0f:42:d5:e6:00:d9: 00:bc:99:a8:20:6f:5f:c4:f4:a4:b1:4f:8a:5e:88: 42:0d:6e:c8:5d:08:22:21:b7:b7:0a:5c:fe:b9:50: de:28:15:09:4f:7e:a3:2b:0b:22:63:5e:58:98:19: ac:78:bf:62:11:ec:70:e2:97:61:ae:9e:ee:06:31: 49:ce:ad:27:3b:2a:73:2e:b0:06:78:88:3e:0c:e6: db:c8:f9:e7:07:2a:28:71:a1:84:5e:65:e2:66:09: f5:c8:7d:68:85:ae:fe:ea:1a:7d:71:4f:b5:1f:dd: 3e:ba:a4:1b:ee:c2:9c:1f:d8:20:14:2d:57:d5:14: 6c:0e:e3:e6:ca:5e:a0:7e:0f:f7:34:ee:04:8a:2d: f3:2d:6e:d4:92:6a:c7:90:9c:d6:83:64:07:34:63: 51:33:69:68:06:6f:71:2c:87:72:22:6f:e2:02:51: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0C:C5:F9:47:AE:4D:C9:33:13:AD:45:5B:F0:28:C9:A6:C1:29:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 206.201.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:0f:91:9c:09:22:a2:b2:2e:21:06:ef:7c:07:1c:5c:ae:f4: 71:e6:34:03:1a:70:d3:06:de:8c:cb:e3:1c:13:f5:43:ce:fb: c7:2b:35:e4:f0:a5:59:d3:80:b5:df:29:1d:05:a4:d2:16:e5: e3:13:8a:ce:09:c9:ae:9c:98:a1:58:9c:c3:67:38:ed:db:18: 41:93:62:d4:77:f4:bf:58:08:a4:25:93:f8:6c:df:d4:a7:aa: 75:c9:04:7a:db:eb:a9:90:3e:96:4f:88:c1:b1:04:9f:dd:db: a7:17:8f:07:71:6a:d5:22:84:1e:b6:be:e9:9c:93:39:e8:6c: ac:8b:76:c3:65:ed:81:19:57:92:ed:b4:fe:9c:4c:40:46:34: 4e:ef:80:83:a3:8b:43:45:0f:37:54:e3:c9:93:c9:60:aa:81: eb:d3:32:ab:0d:e6:db:a4:ae:27:bb:ac:06:31:e3:3f:09:3c: e3:31:e9:0d:c6:e8:62:06:bb:82:d3:69:f7:53:bb:49:a7:8e: 06:e2:f8:a2:15:d1:07:f3:1b:70:5c:75:d0:c4:86:ab:0e:90: cf:a8:e2:59:ce:d4:f0:a8:ee:8d:94:37:d8:5f:ba:01:b6:9b: e1:c0:fd:f6:f5:b9:01:4f:6a:3b:be:ee:e7:d0:bb:70:42:6f: 73:a2:9a:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIUyNEblpYlXodwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MjI4MGYzNmEtODJkYi00NmE2LThkYTAtMDQyNmFhMjQwOTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsQPreQF+yhCTPdm5nSwtboAkOU3OJtSXv5s 9BeCV3LXwskPa05tJCxzibmyey/mgEZ3y9iPGidQU6nFyeHXSn0ctnscqkmbnEjV 1rDt1DeWjlkPQtXmANkAvJmoIG9fxPSksU+KXohCDW7IXQgiIbe3Clz+uVDeKBUJ T36jKwsiY15YmBmseL9iEexw4pdhrp7uBjFJzq0nOypzLrAGeIg+DObbyPnnByoo caGEXmXiZgn1yH1oha7+6hp9cU+1H90+uqQb7sKcH9ggFC1X1RRsDuPmyl6gfg/3 NO4Eii3zLW7UkmrHkJzWg2QHNGNRM2loBm9xLIdyIm/iAlF+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIMxflHrk3JMxOtRVvwKMmmwSm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMjNmOWE0N2UtNGE1NC0z NTk0LWIyYWQtNDM0NDBjNDJlODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAPkZwJIqKyLiEG73wHHFyu9HHmNAMacNMG3ozL4xwT9UPO+8crNeTw pVnTgLXfKR0FpNIW5eMTis4Jya6cmKFYnMNnOO3bGEGTYtR39L9YCKQlk/hs39Sn qnXJBHrb66mQPpZPiMGxBJ/d26cXjwdxatUihB62vumckznobKyLdsNl7YEZV5Lt tP6cTEBGNE7vgIOji0NFDzdU48mTyWCqgevTMqsN5tukrie7rAYx4z8JPOMx6Q3G 6GIGu4LTafdTu0mnjgbi+KIV0QfzG3BcddDEhqsOkM+o4lnO1PCo7o2UN9hfugG2 m+HA/fb1uQFPaju+7ufQu3BCb3Oimlw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:59:06 2025 by rpki-client