$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2bb00c34-0435-3722-b647-544ad735c1e4.roa File: 2bb00c34-0435-3722-b647-544ad735c1e4.roa (raw, json) Hash identifier: 8gl7oLYMbrukxRILtkh2LpTQEAg5+jlyx/3Pl38rbXU= Subject key identifier: 9F:BD:D6:38:63:19:85:BC:24:E8:43:4E:D5:24:2A:5D:02:07:46:63 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584930DE6BDD92F0868D19ED8100 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2bb00c34-0435-3722-b647-544ad735c1e4.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 35758 IP address blocks: 206.127.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6b:dd:92:f0:86:8d:19:ed:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=2a5e5d59-03b9-459e-9747-ea67745d0d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:92:c8:ad:b0:a7:29:f5:e2:e5:7b:d9:fb: 14:8d:2f:4d:f7:d7:23:91:1c:1c:31:40:56:4f:e0: c7:82:38:68:ab:43:8c:a8:e7:fb:ff:de:cf:c6:3d: bd:3f:87:25:48:48:fa:7c:d4:70:9f:9c:6b:8d:37: b5:5e:a2:7d:45:96:da:75:5f:19:25:b3:d9:78:4b: 12:d3:e5:7a:4f:28:3c:be:99:76:7e:78:72:6d:6e: 3a:49:10:db:1f:41:d3:f6:bf:66:8f:1b:0f:08:35: 8d:6d:26:d1:ad:9b:aa:9a:c1:20:d8:bf:40:94:d6: d8:b7:94:1d:1b:e2:14:e6:94:c3:0d:09:c9:0c:1e: d8:86:30:0a:84:32:0c:05:98:17:65:97:aa:03:3c: 62:6d:c3:e8:2e:ad:7c:d8:71:dd:f8:e3:72:67:29: 71:81:af:82:b8:d5:7f:5c:5c:59:f5:a5:f5:1e:c0: 0e:bb:26:3c:d4:96:dc:05:81:53:48:86:37:94:7c: ec:06:83:67:b4:8d:49:40:3d:80:65:eb:2a:8b:cb: 24:63:59:20:50:2a:d1:5c:48:22:2a:e1:ad:4e:b2: 47:63:00:4a:83:f0:22:60:46:f5:2e:86:5f:25:7e: 28:a3:23:87:a7:05:41:4a:b5:95:94:d1:e1:08:52: c5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BD:D6:38:63:19:85:BC:24:E8:43:4E:D5:24:2A:5D:02:07:46:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/2bb00c34-0435-3722-b647-544ad735c1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 206.127.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:68:47:af:a7:8a:4c:ff:0a:78:ca:65:a3:f3:20:b4:c9:be: 9d:07:f6:66:54:3b:08:00:36:50:c4:39:f8:c8:0b:84:ce:e5: aa:39:8c:fe:e7:8d:04:8c:18:bc:97:9a:61:a3:2f:c3:60:af: 8c:64:55:7a:6e:20:32:94:be:cb:eb:69:6e:ce:63:90:f1:c9: c1:b4:39:ab:fe:0b:87:32:92:f2:4c:d6:bd:3a:cf:04:d4:58: 15:f8:58:c0:5a:b2:34:e8:94:85:b7:b1:9f:e0:f7:2f:77:d4: e1:e9:8b:ae:65:d3:50:d2:6f:b1:ab:31:8d:5b:67:30:fb:f3: ec:bd:ae:2f:f3:e3:dd:f1:e8:6f:3e:55:6d:69:32:f4:b6:56: 8e:34:09:d9:76:1e:bd:b7:da:44:5d:36:56:74:86:a1:ba:5e: b0:a1:f4:83:77:3c:a2:e9:de:71:cb:3f:68:2a:dd:da:4f:22: ea:ac:d3:ac:bf:6f:77:b7:3a:3d:e9:d6:b4:97:32:83:65:28: da:93:01:67:2b:b7:87:24:b0:a3:d3:bc:27:2f:61:a8:44:15: f3:36:d6:89:48:fa:1d:1d:39:a5:11:23:7d:9d:bf:d6:de:26: 90:60:79:f4:d1:84:01:8e:5e:36:e6:1c:26:32:63:9d:b6:b6: 90:c5:a9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mvdkvCGjRntgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MmE1ZTVkNTktMDNiOS00NTllLTk3NDctZWE2Nzc0NWQwZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVGSyK2wpyn14uV72fsUjS9N99cjkRwcMUBW T+DHgjhoq0OMqOf7/97Pxj29P4clSEj6fNRwn5xrjTe1XqJ9RZbadV8ZJbPZeEsS 0+V6Tyg8vpl2fnhybW46SRDbH0HT9r9mjxsPCDWNbSbRrZuqmsEg2L9AlNbYt5Qd G+IU5pTDDQnJDB7YhjAKhDIMBZgXZZeqAzxibcPoLq182HHd+ONyZylxga+CuNV/ XFxZ9aX1HsAOuyY81JbcBYFTSIY3lHzsBoNntI1JQD2AZesqi8skY1kgUCrRXEgi KuGtTrJHYwBKg/AiYEb1LoZfJX4ooyOHpwVBSrWVlNHhCFLFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+91jhjGYW8JOhDTtUkKl0CB0ZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMmJiMDBjMzQtMDQzNS0z NzIyLWI2NDctNTQ0YWQ3MzVjMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBoR6+nikz/CnjKZaPzILTJvp0H9mZUOwgANlDEOfjIC4TO5ao5jP7n jQSMGLyXmmGjL8Ngr4xkVXpuIDKUvsvraW7OY5DxycG0Oav+C4cykvJM1r06zwTU WBX4WMBasjTolIW3sZ/g9y931OHpi65l01DSb7GrMY1bZzD78+y9ri/z493x6G8+ VW1pMvS2Vo40Cdl2Hr232kRdNlZ0hqG6XrCh9IN3PKLp3nHLP2gq3dpPIuqs06y/ b3e3Oj3p1rSXMoNlKNqTAWcrt4cksKPTvCcvYahEFfM21olI+h0dOaURI32dv9be JpBgefTRhAGOXjbmHCYyY522tpDFqak= -----END CERTIFICATE-----Generated at Wed Apr 9 07:54:08 2025 by rpki-client