$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/268da158-9a66-391f-9373-38ce0074d565.roa File: 268da158-9a66-391f-9373-38ce0074d565.roa (raw, json) Hash identifier: 57ucC/5+rtvpPVOhwkmdA2KZWCZWVB/FjgUTsJ5QdRc= Subject key identifier: F3:DA:D5:3C:2C:66:D7:DE:25:C5:D9:C6:90:F2:E7:BB:B1:62:A5:AC Certificate issuer: /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b Certificate serial: 010D0C9F4328584961B9A42393D7A052ACAB7540 Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/268da158-9a66-391f-9373-38ce0074d565.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 14333 IP address blocks: 206.168.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a4:23:93:d7:a0:52:ac:ab:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=d6daa894-ddfe-4698-b435-7b12e8f645df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8c:2d:44:dc:95:02:28:4e:f0:0e:7e:28:6a: 31:27:d2:98:77:19:da:a5:e5:82:95:96:4f:12:63: a6:89:9f:5f:85:eb:3f:43:66:b0:43:2f:ed:c6:22: 6e:41:ae:6e:94:dc:61:33:f6:f8:fb:68:53:4a:e3: d5:cc:74:17:ee:97:90:64:86:a5:3f:72:24:4f:65: ec:a3:fc:8a:2d:be:cb:01:0e:f6:20:f6:37:e1:b1: 9b:bc:f5:06:64:99:d0:fb:c5:93:dd:fb:29:e8:da: bf:42:87:2c:ba:a3:d0:cc:e9:04:05:af:e7:65:51: 65:df:ee:c9:5e:89:46:db:3c:b8:81:97:6c:5c:39: b0:f8:91:a1:84:db:1e:68:97:c4:a7:8a:6a:86:63: 7a:21:1c:b7:e9:1a:d7:ba:bd:44:d0:76:3c:1f:76: 55:3a:f3:c1:5b:ef:79:c8:8c:37:bd:e2:c9:e9:23: 03:ae:3d:c5:a9:1b:b6:47:0e:c4:b6:fc:93:30:21: 59:b5:45:a4:48:99:df:0f:b1:da:8e:97:34:7a:31: d1:6a:bb:61:c7:94:f7:97:37:68:bf:48:e5:e2:ba: 5e:66:05:0a:93:33:99:c6:8b:0c:83:72:81:ab:6e: 4d:05:fa:79:91:a1:7d:f6:01:38:77:02:30:f6:85: 13:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DA:D5:3C:2C:66:D7:DE:25:C5:D9:C6:90:F2:E7:BB:B1:62:A5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/268da158-9a66-391f-9373-38ce0074d565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl X509v3 Authority Key Identifier: keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer sbgp-ipAddrBlock: critical IPv4: 206.168.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:8d:84:49:6d:e3:75:b6:f6:bc:bd:3b:bf:2b:61:d6:28:57: f0:5f:be:77:9e:43:48:10:9b:7c:0b:5e:41:6a:7d:e8:3b:2e: 15:91:ab:61:a3:fc:57:9c:15:40:d4:80:30:78:f6:5f:9e:40: a3:4b:8f:55:fc:50:83:81:29:5d:0c:02:65:98:06:c2:63:36: 07:f2:4a:ad:b9:f2:cc:81:d7:da:f4:07:7b:94:0f:ed:76:7b: 21:0a:88:ac:28:d2:53:61:89:40:10:e5:a7:e7:8b:ed:64:f0: 57:1e:8d:51:b1:00:cf:37:3e:95:1a:ab:b2:90:7d:53:b8:c7: 9d:07:26:4b:3c:5d:1b:5e:da:6a:eb:2f:c4:85:27:81:71:4f: 61:83:e1:ac:3c:68:78:80:de:20:55:ec:fd:17:35:ad:da:3f: 4d:b2:ef:f4:1b:e1:c3:de:04:c4:f2:67:e8:13:57:57:84:d2: 0d:59:b6:38:6f:96:0f:13:33:60:a9:95:63:b2:4d:dd:8b:eb: e0:ee:8a:89:7c:05:e2:88:55:10:9f:4c:38:e1:2e:ec:9b:8f: 47:58:f2:67:4e:9b:fd:72:cb:1a:91:f1:d6:34:85:aa:e1:60: 97:14:42:32:3b:da:01:eb:ad:15:4a:b5:15:cb:66:a4:13:de: a9:2a:35:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaQjk9egUqyrdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYyN2M5MzQtZWJjNi00NGE0LWJiYTAtYTAzY2M0NjUz MzRiMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDZkYWE4OTQtZGRmZS00Njk4LWI0MzUtN2IxMmU4ZjY0NWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYwtRNyVAihO8A5+KGoxJ9KYdxnapeWClZZP EmOmiZ9fhes/Q2awQy/txiJuQa5ulNxhM/b4+2hTSuPVzHQX7peQZIalP3IkT2Xs o/yKLb7LAQ72IPY34bGbvPUGZJnQ+8WT3fsp6Nq/QocsuqPQzOkEBa/nZVFl3+7J XolG2zy4gZdsXDmw+JGhhNseaJfEp4pqhmN6IRy36RrXur1E0HY8H3ZVOvPBW+95 yIw3veLJ6SMDrj3FqRu2Rw7EtvyTMCFZtUWkSJnfD7Hajpc0ejHRarthx5T3lzdo v0jl4rpeZgUKkzOZxosMg3KBq25NBfp5kaF99gE4dwIw9oUT6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPa1TwsZtfeJcXZxpDy57uxYqWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3 YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNjYzQ2NTMzNGIvMjY4ZGExNTgtOWE2Ni0z OTFmLTkzNzMtMzhjZTAwNzRkNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGYyN2M5MzQtZWJjNi00NGE0LWJi YTAtYTAzY2M0NjUzMzRiLzhmMjdjOTM0LWViYzYtNDRhNC1iYmEwLWEwM2NjNDY1 MzM0Yi5jcmwwHwYDVR0jBBgwFoAU4bkaPPumXs0F9g4Sq6n1oxOo8WkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84ZjI3YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNj YzQ2NTMzNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKONhElt43W29ry9O78rYdYoV/BfvneeQ0gQm3wLXkFqfeg7LhWRq2Gj /FecFUDUgDB49l+eQKNLj1X8UIOBKV0MAmWYBsJjNgfySq258syB19r0B3uUD+12 eyEKiKwo0lNhiUAQ5afni+1k8FcejVGxAM83PpUaq7KQfVO4x50HJks8XRte2mrr L8SFJ4FxT2GD4aw8aHiA3iBV7P0XNa3aP02y7/Qb4cPeBMTyZ+gTV1eE0g1Ztjhv lg8TM2CplWOyTd2L6+Duiol8BeKIVRCfTDjhLuybj0dY8mdOm/1yyxqR8dY0harh YJcUQjI72gHrrRVKtRXLZqQT3qkqNag= -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:55 2025 by rpki-client