$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa File: 520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa (raw, json) Hash identifier: 4t+Woo1UuHTQrtofPlGetEAwv1NbHSYQL8DJe4XiOMU= Subject key identifier: 47:FA:47:9E:C6:D1:3B:D0:84:D1:CD:1A:00:C8:C7:74:B5:C2:C7:39 Certificate issuer: /CN=bc6884d6-b11e-4280-9c4c-8177287d9869 Certificate serial: 010D0C9F432858496E49891E9263F1F3FD25E0C4 Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 398324 IP address blocks: 206.168.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:89:1e:92:63:f1:f3:fd:25:e0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=d1dd9a99-24a6-40f8-a353-f9a7403065d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8b:f4:d9:b5:fe:dc:66:d6:7c:09:8f:63:bf: ac:42:cd:e6:dc:5f:c8:e7:7a:4e:61:6d:ef:a3:2a: 6d:c0:16:18:b4:68:b3:db:db:d6:da:13:78:21:30: 48:35:62:76:65:80:fd:a8:42:bd:2a:5c:3d:eb:ff: d0:fa:8e:e0:4d:43:a2:3d:e6:06:2d:d3:e3:8e:ed: 97:a2:06:95:08:78:64:88:ce:ba:96:03:26:7a:12: ff:76:44:93:f1:c8:66:ac:10:7b:be:20:3a:a0:7c: ec:89:9b:ce:d0:19:f3:11:6a:a4:1e:b9:25:b1:33: 88:89:29:0b:0f:a8:69:8a:ae:cd:74:c7:ff:81:9a: 2d:90:01:41:e1:3a:9c:f6:e4:61:02:9a:f9:84:57: 4e:db:8e:8b:2f:e6:52:c6:ce:99:14:22:c1:4b:0a: a1:cc:21:be:41:ec:dd:be:06:d4:a6:8b:e4:54:ed: 60:0e:6f:08:bb:49:02:d8:14:f2:8c:50:43:10:50: df:6a:37:e8:94:34:9c:04:99:2a:a0:e6:d5:55:a4: 42:57:63:9b:a8:42:5b:e6:07:f9:f7:c9:5a:29:ee: 85:95:f4:78:6e:52:2d:d9:bd:88:b7:1f:8c:f9:df: 58:ea:39:dc:03:48:3a:e0:8a:ff:ad:04:43:d5:3d: 55:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FA:47:9E:C6:D1:3B:D0:84:D1:CD:1A:00:C8:C7:74:B5:C2:C7:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/520c8bf1-7f7b-32e8-a201-2a5aa8d6fff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl X509v3 Authority Key Identifier: keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer sbgp-ipAddrBlock: critical IPv4: 206.168.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ed:dc:91:7d:99:6d:16:bc:ba:cd:51:94:6c:92:67:db:8f: cf:8e:3d:c1:f4:e6:6c:7a:42:41:e7:1a:c5:a9:ff:e2:f5:3c: 48:3b:79:45:38:6e:7d:ad:7b:ff:a2:82:af:60:23:6e:2b:6a: ae:be:aa:1a:e7:b1:09:2e:d6:66:9e:5f:66:41:de:cd:a9:bc: 7d:e8:42:9e:cc:42:8c:ea:05:50:ac:df:a4:ec:91:88:ce:cc: 9b:92:e8:03:fe:b0:5a:e1:f9:1d:af:3f:0a:c5:da:b1:03:e2: 4a:79:7a:12:31:59:a6:4e:6b:c0:4f:e8:26:9f:a7:e7:ae:d0: a7:a2:35:5a:08:9e:27:1c:6a:a4:03:6d:bd:a1:b4:e1:a5:33: 7e:62:0f:51:ae:f3:a4:c8:4e:03:03:4d:d2:1e:a9:5c:55:dc: b0:fb:4c:65:9f:42:5c:a9:db:60:4f:0d:a9:13:91:3d:79:59: d0:24:80:52:37:dc:87:b0:e9:f3:66:c1:81:cc:c4:d2:13:96: 1a:b0:47:66:d2:d8:d6:bf:8c:1f:c2:c6:1e:bb:e4:be:d7:62: 89:d4:b8:71:27:d1:07:a7:6d:2d:36:07:0e:bb:91:9b:da:42: a1:dc:ab:ca:cb:6c:3d:5c:87:a8:a0:90:87:99:bd:59:1d:93: 9a:e5:4b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYkekmPx8/0l4MQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM2ODg0ZDYtYjExZS00MjgwLTljNGMtODE3NzI4N2Q5 ODY5MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk ZDFkZDlhOTktMjRhNi00MGY4LWEzNTMtZjlhNzQwMzA2NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yv02bX+3GbWfAmPY7+sQs3m3F/I53pOYW3v oyptwBYYtGiz29vW2hN4ITBINWJ2ZYD9qEK9Klw96//Q+o7gTUOiPeYGLdPjju2X ogaVCHhkiM66lgMmehL/dkST8chmrBB7viA6oHzsiZvO0BnzEWqkHrklsTOIiSkL D6hpiq7NdMf/gZotkAFB4Tqc9uRhApr5hFdO246LL+ZSxs6ZFCLBSwqhzCG+Qezd vgbUpovkVO1gDm8Iu0kC2BTyjFBDEFDfajfolDScBJkqoObVVaRCV2ObqEJb5gf5 98laKe6FlfR4blIt2b2Itx+M+d9Y6jncA0g64Ir/rQRD1T1V1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf6R57G0TvQhNHNGgDIx3S1wsc5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4 ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3Mjg3ZDk4NjkvNTIwYzhiZjEtN2Y3Yi0z MmU4LWEyMDEtMmE1YWE4ZDZmZmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmM2ODg0ZDYtYjExZS00MjgwLTlj NGMtODE3NzI4N2Q5ODY5L2JjNjg4NGQ2LWIxMWUtNDI4MC05YzRjLTgxNzcyODdk OTg2OS5jcmwwHwYDVR0jBBgwFoAUFcjuvBdfaxDD3HrPV9TR85APDocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYzY4ODRkNi1iMTFlLTQyODAtOWM0Yy04MTc3 Mjg3ZDk4NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqgjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbt3JF9mW0WvLrNUZRskmfbj8+OPcH05mx6QkHnGsWp/+L1PEg7eUU4 bn2te/+igq9gI24raq6+qhrnsQku1maeX2ZB3s2pvH3oQp7MQozqBVCs36TskYjO zJuS6AP+sFrh+R2vPwrF2rED4kp5ehIxWaZOa8BP6Cafp+eu0KeiNVoIniccaqQD bb2htOGlM35iD1Gu86TITgMDTdIeqVxV3LD7TGWfQlyp22BPDakTkT15WdAkgFI3 3Iew6fNmwYHMxNITlhqwR2bS2Na/jB/Cxh675L7XYonUuHEn0QenbS02Bw67kZva QqHcq8rLbD1ch6igkIeZvVkdk5rlS9s= -----END CERTIFICATE-----Generated at Sun Apr 13 00:31:18 2025 by rpki-client