$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa File: e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa (raw, json) Hash identifier: 7zH8CTNzE6Z5FKGM25g6PdS8VQGp4QNNXHsGnzvEUXY= Subject key identifier: 07:EA:A2:57:7A:AD:DB:6A:F3:5D:C0:0A:E5:3A:46:5D:C1:D3:9B:1E Certificate issuer: /CN=911afcc4-db22-4282-acca-e1e676a5ae20 Certificate serial: 010D0C9F4328584882808B71B2F0176F1CD83040 Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa Signing time: Sat 11 Jan 2025 14:00:52 +0000 ROA not before: Sat 11 Jan 2025 14:00:52 +0000 ROA not after: Fri 11 Apr 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.206.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:82:80:8b:71:b2:f0:17:6f:1c:d8:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20 Validity Not Before: Jan 11 14:00:52 2025 GMT Not After : Apr 11 13:00:52 2025 GMT Subject: CN=2085af9a-5aa0-42b2-8750-ce311b47a02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:1c:32:59:4a:85:cb:09:df:20:a3:7e:55:f2: 45:73:db:a1:0b:86:13:2a:a7:3d:6c:df:76:67:80: b9:e7:5b:4a:74:5c:9b:6a:82:28:f2:74:d1:4a:b5: 42:33:92:72:7d:26:2b:9e:a7:3b:27:d2:ca:6f:00: 71:56:ee:76:01:a8:09:e8:c0:a7:ea:84:55:ba:e8: 35:3a:fa:22:5b:94:67:87:b5:14:a1:d0:33:cb:aa: c2:24:46:5a:65:b7:f5:cf:e6:5a:39:c9:1c:3b:e9: 65:0a:54:66:e9:b1:57:dd:18:50:cb:7d:53:de:70: 20:97:7a:01:dc:ee:27:16:ff:97:d7:89:32:10:08: 11:94:79:01:fb:39:f8:8a:19:4c:52:83:44:f4:61: b3:c5:5c:b0:75:18:4d:7c:dc:be:87:64:f3:88:83: c4:10:88:e0:6e:10:4f:05:09:2f:8c:75:0e:af:31: 0b:fa:31:2c:54:a6:76:fa:c4:11:c4:52:70:2d:e6: 0f:fe:b1:52:50:b9:19:d1:c7:4c:c5:36:57:cc:1e: b2:4e:04:9c:e8:ca:84:70:21:9d:60:70:cf:00:2a: 7b:d5:e8:b8:6c:5f:b5:7d:3d:24:11:1e:9c:ef:0d: 1b:c4:4e:a4:86:5a:16:0a:a4:89:94:1d:f7:bb:31: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EA:A2:57:7A:AD:DB:6A:F3:5D:C0:0A:E5:3A:46:5D:C1:D3:9B:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl X509v3 Authority Key Identifier: keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer sbgp-ipAddrBlock: critical IPv4: 192.206.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:f4:33:03:65:2a:34:bd:bb:6d:ea:b5:ee:2f:a8:66:63:54: 40:ba:22:6d:4d:41:8b:fc:2b:96:57:a8:7e:5f:e5:ed:bd:82: fa:86:2f:0e:ed:49:53:b7:1f:66:e1:52:d6:33:28:e8:21:c1: a2:cb:8a:f7:df:d7:83:cd:26:eb:74:9a:09:da:ba:37:d6:e3: 1a:ad:89:be:38:b6:92:ac:97:a1:46:80:3e:58:d1:56:ab:74: e5:7a:86:a6:65:d1:42:9f:5c:74:7d:18:9b:61:1e:b7:1c:3b: 57:e7:bf:b2:4c:9b:ed:f4:dd:bc:36:49:ba:9d:45:4c:21:f4: d7:4e:b0:42:bb:43:22:cc:7a:67:52:f0:12:da:1a:b5:2a:6b: 27:bb:1a:f8:a0:97:f4:89:39:f6:eb:8c:b1:e9:04:8f:ba:e5: 5d:26:9d:6d:74:fc:f2:88:90:de:73:0c:ff:8c:bb:5a:d9:70: 9f:ee:5b:fc:0d:aa:8a:21:5b:04:44:d4:21:08:7e:8e:0b:60: b0:84:17:d3:86:c0:9b:d2:9b:92:19:0e:54:00:7f:72:7d:04: 3e:a9:68:de:a8:0e:4e:5e:fa:18:f1:ed:a4:d8:6a:20:80:ef: c1:a3:ef:0b:a6:d4:ee:ac:32:b8:5e:53:15:cb:66:1c:6a:e5: 63:43:85:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiCgItxsvAXbxzYMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTExYWZjYzQtZGIyMi00MjgyLWFjY2EtZTFlNjc2YTVh ZTIwMB4XDTI1MDExMTE0MDA1MloXDTI1MDQxMTEzMDA1MlowLzEtMCsGA1UEAxMk MjA4NWFmOWEtNWFhMC00MmIyLTg3NTAtY2UzMTFiNDdhMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBwyWUqFywnfIKN+VfJFc9uhC4YTKqc9bN92 Z4C551tKdFybaoIo8nTRSrVCM5JyfSYrnqc7J9LKbwBxVu52AagJ6MCn6oRVuug1 OvoiW5Rnh7UUodAzy6rCJEZaZbf1z+ZaOckcO+llClRm6bFX3RhQy31T3nAgl3oB 3O4nFv+X14kyEAgRlHkB+zn4ihlMUoNE9GGzxVywdRhNfNy+h2TziIPEEIjgbhBP BQkvjHUOrzEL+jEsVKZ2+sQRxFJwLeYP/rFSULkZ0cdMxTZXzB6yTgSc6MqEcCGd YHDPACp71ei4bF+1fT0kER6c7w0bxE6khloWCqSJlB33uzE36QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfqold6rdtq813ACuU6Rl3B05seMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MTFh ZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2NzZhNWFlMjAvZTUxOGZhOWYtZTFlYi0z MGFmLThlYWEtYjFlZmE4YzMyNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTExYWZjYzQtZGIyMi00MjgyLWFj Y2EtZTFlNjc2YTVhZTIwLzkxMWFmY2M0LWRiMjItNDI4Mi1hY2NhLWUxZTY3NmE1 YWUyMC5jcmwwHwYDVR0jBBgwFoAUaRq26D5nlEY54u/RTNXkdWk2kOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MTFhZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2 NzZhNWFlMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM7OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEz0MwNlKjS9u23qte4vqGZjVEC6Im1NQYv8K5ZXqH5f5e29gvqGLw7t SVO3H2bhUtYzKOghwaLLivff14PNJut0mgnaujfW4xqtib44tpKsl6FGgD5Y0Var dOV6hqZl0UKfXHR9GJthHrccO1fnv7JMm+303bw2SbqdRUwh9NdOsEK7QyLMemdS 8BLaGrUqaye7Gvigl/SJOfbrjLHpBI+65V0mnW10/PKIkN5zDP+Mu1rZcJ/uW/wN qoohWwRE1CEIfo4LYLCEF9OGwJvSm5IZDlQAf3J9BD6paN6oDk5e+hjx7aTYaiCA 78Gj7wum1O6sMrheUxXLZhxq5WNDhVA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:35 2025 by rpki-client