$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/8f3479d0-38ac-387d-8616-8904e91d5abe.roa File: 8f3479d0-38ac-387d-8616-8904e91d5abe.roa (raw, json) Hash identifier: tTOr7PxG/EdPaRijnlbQJHLRMcWaqEo09GwLxwsYUAs= Subject key identifier: 8C:F4:92:1B:5F:84:F7:51:F4:D5:26:E5:CE:B7:1A:B8:79:79:D5:2C Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584964844A0FA0D6A435C649AF40 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/8f3479d0-38ac-387d-8616-8904e91d5abe.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 46562 IP address blocks: 206.130.120.0/24 maxlen: 24 206.130.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:4a:0f:a0:d6:a4:35:c6:49:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=1449402c-efcf-4799-a0b5-7b563e1ca305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e8:1e:22:b0:aa:c0:19:f1:ec:86:fc:cc:a1: 28:5c:9c:80:e4:b5:d0:4d:17:db:fd:74:69:65:33: d6:72:ab:65:3e:8a:c7:19:c4:25:5b:e1:6e:3d:b0: 16:01:7f:32:f9:b9:bd:06:fd:bd:fd:54:25:96:50: b0:d4:11:5d:fd:5c:01:7e:db:d8:17:a9:66:8c:3e: da:6a:1c:3c:5f:0c:20:5b:ad:0a:bb:9e:1a:8e:e9: b0:88:e3:e7:54:16:12:b4:9d:e5:6a:1c:28:7d:a9: 2f:29:1d:1c:10:44:e8:09:15:28:fd:cd:69:f7:34: c1:b1:a0:50:e1:4d:2e:60:1c:77:c2:05:7a:70:de: 39:ec:a5:34:f0:74:20:8f:a2:b5:8c:eb:49:9f:6d: aa:5b:22:79:80:76:d5:93:ba:0f:3d:47:de:c2:b8: 1f:b2:20:26:37:6e:f0:85:5a:4a:11:6b:df:36:a1: 7e:7d:23:fd:64:90:d4:10:c7:a5:7d:ed:e8:dd:39: 08:9f:64:4d:f5:93:d0:e5:16:f6:c7:7b:8e:c0:86: eb:77:64:f4:e3:e9:b3:68:b4:06:e8:78:aa:12:47: 60:4f:26:24:80:4a:48:bd:f1:99:f6:f7:42:cd:24: 39:f8:79:e4:de:12:82:da:e1:04:49:88:ed:fc:0f: 24:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F4:92:1B:5F:84:F7:51:F4:D5:26:E5:CE:B7:1A:B8:79:79:D5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/8f3479d0-38ac-387d-8616-8904e91d5abe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 206.130.120.0/24 206.130.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a3:b3:2f:a5:1f:f0:59:67:26:8f:e9:8b:c0:20:8f:b7:41: 6e:7d:d7:d9:41:bc:24:e5:f0:51:eb:7d:6b:77:f6:f1:b8:10: 7a:51:02:f2:b7:77:bd:ad:d9:62:09:4d:5a:6c:f4:b1:ac:cd: 48:6d:7b:6e:c4:4d:28:e7:26:56:f4:33:e5:37:ec:a6:ba:52: 29:5d:da:b4:ad:2f:7c:a9:4d:d9:f4:d6:ad:06:cd:65:e0:9e: 81:e3:b6:e7:25:04:4d:ad:5f:43:09:b3:96:8e:96:58:76:14: 4c:ea:96:9f:6a:81:aa:75:62:85:b2:55:e2:fb:6b:40:f3:05: 80:5b:c9:23:67:a5:c3:03:1d:81:d9:0a:88:c2:ec:58:c1:ad: aa:50:c6:46:b8:ef:9f:ab:46:b7:24:32:81:77:ac:d9:6c:b7: d4:82:9c:bc:1e:49:03:13:09:6c:ad:88:af:d5:d0:72:bc:1b: eb:89:d8:a3:bd:ac:15:c8:4a:95:a7:bd:df:75:f1:9f:1d:2a: 94:29:1f:1c:8d:58:c9:ff:8b:7b:65:20:50:c1:11:50:9c:91: 99:f3:80:ac:ed:93:0f:1a:57:04:39:26:b0:91:f4:56:30:ca: a2:6f:fa:cf:bc:45:9e:ad:94:fa:f5:62:62:f3:f8:46:18:78: 91:0b:7b:68 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElkhEoPoNakNcZJr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MTQ0OTQwMmMtZWZjZi00Nzk5LWEwYjUtN2I1NjNlMWNhMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OgeIrCqwBnx7Ib8zKEoXJyA5LXQTRfb/XRp ZTPWcqtlPorHGcQlW+FuPbAWAX8y+bm9Bv29/VQlllCw1BFd/VwBftvYF6lmjD7a ahw8XwwgW60Ku54ajumwiOPnVBYStJ3lahwofakvKR0cEEToCRUo/c1p9zTBsaBQ 4U0uYBx3wgV6cN457KU08HQgj6K1jOtJn22qWyJ5gHbVk7oPPUfewrgfsiAmN27w hVpKEWvfNqF+fSP9ZJDUEMelfe3o3TkIn2RN9ZPQ5Rb2x3uOwIbrd2T04+mzaLQG 6HiqEkdgTyYkgEpIvfGZ9vdCzSQ5+Hnk3hKC2uEESYjt/A8kSQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIz0khtfhPdR9NUm5c63Grh5edUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvOGYzNDc5ZDAtMzhhYy0z ODdkLTg2MTYtODkwNGU5MWQ1YWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzoJ4AwQA zoJ/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJmjsy+lH/BZZyaP6YvAII+3QW5919lBvCTl8FHrfWt39vG4 EHpRAvK3d72t2WIJTVps9LGszUhte27ETSjnJlb0M+U37Ka6Uild2rStL3ypTdn0 1q0GzWXgnoHjtuclBE2tX0MJs5aOllh2FEzqlp9qgap1YoWyVeL7a0DzBYBbySNn pcMDHYHZCojC7FjBrapQxka475+rRrckMoF3rNlst9SCnLweSQMTCWytiK/V0HK8 G+uJ2KO9rBXISpWnvd918Z8dKpQpHxyNWMn/i3tlIFDBEVCckZnzgKztkw8aVwQ5 JrCR9FYwyqJv+s+8RZ6tlPr1YmLz+EYYeJELe2g= -----END CERTIFICATE-----Generated at Thu Apr 17 05:32:37 2025 by rpki-client