$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa File: 7285b1a1-ccbc-3639-a962-652ca4939af8.roa (raw, json) Hash identifier: 8kiUfOED2dRCgsishllwrl4fEpsfNuFF+Y4RvyTxHhw= Subject key identifier: D5:69:1B:54:EC:98:21:28:1D:49:EC:85:EE:90:25:CD:D8:3D:E2:AD Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584930DE6BCF74330D7EA93F7940 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 46261 IP address blocks: 206.127.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6b:cf:74:33:0d:7e:a9:3f:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=6bfb85f2-6320-4baf-a309-c5138f17cc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:95:3a:71:42:62:d8:6e:b1:82:32:7f:30:bd: 37:62:6a:6f:71:db:fd:b9:90:9c:ce:3b:db:d9:6e: 81:a1:81:8a:e5:54:d2:b6:f9:10:b4:9e:c0:77:63: a6:a7:5b:2f:53:66:53:ff:9b:fc:31:cb:94:dc:e1: b4:e3:23:41:d1:c7:d9:5f:36:ee:64:5c:f7:8d:05: 72:f5:77:e6:44:24:ba:4b:ea:f1:44:70:a7:47:cb: 66:cc:fe:16:20:43:c6:a2:81:3a:4f:eb:89:44:8b: 10:64:7c:49:fb:dc:c0:fe:0c:10:37:b9:a4:78:bb: e7:40:b2:b0:37:99:d2:4d:31:5c:a2:be:fb:81:00: f9:79:30:cf:0f:3f:7c:be:ea:97:bb:2c:70:63:3e: e5:c4:6b:93:10:8f:1b:18:c6:9b:78:7b:d8:ea:ce: 5e:a3:49:a9:8e:f8:66:1a:f6:b1:80:aa:ad:8c:c7: 00:06:e9:4f:3d:c3:91:c8:6a:cb:83:3a:a7:5b:ab: 7b:d7:ef:f5:74:b6:f1:a5:ff:6d:05:c2:13:c2:ad: 9a:d4:3d:3e:04:64:c8:e0:2e:cb:b4:e0:43:77:08: cc:ac:bf:05:08:05:17:ec:c6:e6:92:5e:10:bb:5b: fb:bf:80:08:45:e1:96:d1:a3:1a:f9:69:53:84:2b: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:69:1B:54:EC:98:21:28:1D:49:EC:85:EE:90:25:CD:D8:3D:E2:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 206.127.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ec:ae:e8:0c:1d:64:09:86:0b:f7:5a:c0:f9:4a:02:4b:14: 8b:93:df:a5:86:5e:97:4f:27:52:32:97:f0:62:a7:0e:18:d6: 4c:a1:14:5e:95:8d:03:68:4d:c4:f7:97:27:12:4c:31:50:e3: 97:03:f7:82:26:d5:01:3f:03:16:3c:df:92:e9:e9:6a:f6:92: dd:9e:f9:99:cd:ca:57:42:c0:ff:33:15:d6:03:32:b2:ff:a3: 0d:e1:bc:48:fa:dd:cf:d1:f6:b3:9c:dc:40:d9:e4:fb:49:25: e2:ea:d2:8b:4a:52:c4:65:62:d1:dd:61:b2:de:ce:0e:84:64: 01:1b:c6:21:95:f7:36:63:69:95:79:44:b2:58:12:bf:b8:01: 7e:f8:3d:e6:e9:6a:55:63:3e:1c:53:8e:47:4b:99:83:98:ac: 75:87:84:8c:c7:6c:b4:8c:bd:0d:ff:32:db:6d:b8:cb:93:fe: 1c:0f:b3:e4:90:21:b7:5c:ec:d0:ba:a0:30:2b:e1:3d:0c:19: 04:53:b7:ad:0d:9f:9e:88:5e:2c:85:ba:cb:60:66:e3:26:2c: e6:98:24:f9:01:50:a3:3a:f8:e2:8c:bd:ba:15:fc:1b:d1:88: 06:c1:42:34:fd:89:ca:b7:0c:41:6e:71:f1:ac:cd:f3:47:9d: e7:2b:2e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mvPdDMNfqk/eUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NmJmYjg1ZjItNjMyMC00YmFmLWEzMDktYzUxMzhmMTdjYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpU6cUJi2G6xgjJ/ML03Ympvcdv9uZCczjvb 2W6BoYGK5VTStvkQtJ7Ad2Omp1svU2ZT/5v8McuU3OG04yNB0cfZXzbuZFz3jQVy 9XfmRCS6S+rxRHCnR8tmzP4WIEPGooE6T+uJRIsQZHxJ+9zA/gwQN7mkeLvnQLKw N5nSTTFcor77gQD5eTDPDz98vuqXuyxwYz7lxGuTEI8bGMabeHvY6s5eo0mpjvhm GvaxgKqtjMcABulPPcORyGrLgzqnW6t71+/1dLbxpf9tBcITwq2a1D0+BGTI4C7L tOBDdwjMrL8FCAUX7Mbmkl4Qu1v7v4AIReGW0aMa+WlThCuEjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVpG1TsmCEoHUnshe6QJc3YPeKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzI4NWIxYTEtY2NiYy0z NjM5LWE5NjItNjUyY2E0OTM5YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzsrugMHWQJhgv3WsD5SgJLFIuT36WGXpdPJ1Iyl/Bipw4Y1kyhFF6V jQNoTcT3lycSTDFQ45cD94Im1QE/AxY835Lp6Wr2kt2e+ZnNyldCwP8zFdYDMrL/ ow3hvEj63c/R9rOc3EDZ5PtJJeLq0otKUsRlYtHdYbLezg6EZAEbxiGV9zZjaZV5 RLJYEr+4AX74PebpalVjPhxTjkdLmYOYrHWHhIzHbLSMvQ3/MtttuMuT/hwPs+SQ Ibdc7NC6oDAr4T0MGQRTt60Nn56IXiyFustgZuMmLOaYJPkBUKM6+OKMvboV/BvR iAbBQjT9icq3DEFucfGszfNHnecrLnc= -----END CERTIFICATE-----Generated at Sun Apr 6 09:37:48 2025 by rpki-client