$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa File: a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa (raw, json) Hash identifier: BPWsR1Df1oAkZguBpLnycyjXMiAGfAJlEEhXQcPBXcs= Subject key identifier: D7:73:86:22:4B:56:9D:B4:93:D0:E0:DF:27:82:95:ED:0F:47:DB:A6 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858491D717716C52C998F20906F00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 61317 IP address blocks: 206.127.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:77:16:c5:2c:99:8f:20:90:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=ba5fd211-e5b7-47d7-9df1-fdeeb0f11c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2a:e1:2b:f6:a2:70:06:de:04:70:f5:8f:0f: 60:81:23:65:68:87:9f:ca:87:95:2f:f4:e0:f2:76: ce:e9:c7:50:54:6d:e7:4a:f5:e2:1f:60:e4:73:cc: fe:cb:87:29:7e:4f:3b:bf:68:ec:df:8a:76:53:a0: 9b:ed:54:64:43:9c:10:54:80:89:af:04:0e:f1:8c: d8:0c:17:26:6e:20:9f:a8:4a:cf:cf:82:1a:04:d2: a1:85:b8:68:9c:0b:2b:d8:5d:9a:92:24:1f:d1:7b: 97:00:ec:81:f0:61:a9:53:2e:c4:39:fe:81:bf:bc: 9b:12:d1:c9:f2:34:34:73:43:2f:51:1a:47:12:dc: 41:1b:8b:34:35:e2:d0:fb:14:d6:02:96:f3:84:81: 96:4d:b7:88:5e:b1:97:32:5b:60:0c:8e:af:ae:83: 47:21:3c:76:82:db:8a:08:a9:34:7f:5a:7a:14:77: 94:ef:d2:60:9b:51:0a:b9:88:6d:bb:b9:a5:ed:f2: 77:55:49:c5:77:b8:e0:f4:24:a5:11:a5:7a:a7:a6: 47:71:2a:29:9e:6c:ba:82:0a:44:f1:84:aa:a4:10: 9f:17:a8:57:fc:bd:00:2b:ec:ba:36:1c:93:f7:8a: e5:29:33:a6:7a:41:25:18:4d:3c:c7:1a:36:dc:a5: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:73:86:22:4B:56:9D:B4:93:D0:E0:DF:27:82:95:ED:0F:47:DB:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a19dd2c4-66d7-31ed-bda4-131b5cb91893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 206.127.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:c7:16:13:aa:1e:15:66:7c:3b:27:2c:70:dd:5f:4f:91:f8: e2:41:15:90:67:c4:db:1d:60:ee:ab:8f:eb:57:06:23:03:42: 18:12:fa:08:69:de:9f:ba:b1:fc:7b:31:38:4b:22:db:85:3e: 23:fe:85:44:8a:7c:ff:13:38:78:62:4a:d3:6a:9f:b1:2b:82: c4:90:4f:20:be:b0:b7:ba:6d:ab:cb:c5:c6:df:35:53:31:ac: 25:3a:a1:d8:87:8e:76:9a:eb:e1:54:00:65:c0:4a:a1:1c:a4: 55:ab:c7:c1:b7:9a:0d:8d:46:dc:f4:e5:f6:eb:78:29:d7:66: f6:58:73:1c:e5:c8:52:f6:b9:71:dd:64:35:ad:3e:31:66:99: 18:90:0b:46:0d:4b:d6:63:cf:0c:69:50:17:b9:f0:45:44:c3: 21:bc:da:1c:5d:3a:f3:0f:21:7e:78:7a:f7:fc:07:29:4b:7d: 3a:fa:9e:ca:9b:eb:6f:b7:b6:34:63:3c:72:8e:19:91:ca:c1: f9:f1:09:4f:29:bd:97:a6:7d:dc:33:a3:9b:d3:6e:4f:8c:39: fc:c0:af:b0:57:99:02:1a:d4:45:d9:67:5d:f6:f0:6d:a0:3e: 3d:b2:10:de:6b:6e:3d:d6:f9:cd:a1:15:74:72:72:05:5e:d1: 70:85:14:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXcWxSyZjyCQbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YmE1ZmQyMTEtZTViNy00N2Q3LTlkZjEtZmRlZWIwZjExYzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yrhK/aicAbeBHD1jw9ggSNlaIefyoeVL/Tg 8nbO6cdQVG3nSvXiH2Dkc8z+y4cpfk87v2js34p2U6Cb7VRkQ5wQVICJrwQO8YzY DBcmbiCfqErPz4IaBNKhhbhonAsr2F2akiQf0XuXAOyB8GGpUy7EOf6Bv7ybEtHJ 8jQ0c0MvURpHEtxBG4s0NeLQ+xTWApbzhIGWTbeIXrGXMltgDI6vroNHITx2gtuK CKk0f1p6FHeU79Jgm1EKuYhtu7ml7fJ3VUnFd7jg9CSlEaV6p6ZHcSopnmy6ggpE 8YSqpBCfF6hX/L0AK+y6NhyT94rlKTOmekElGE08xxo23KWQZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdzhiJLVp20k9Dg3yeCle0PR9umMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTE5ZGQyYzQtNjZkNy0z MWVkLWJkYTQtMTMxYjVjYjkxODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILHFhOqHhVmfDsnLHDdX0+R+OJBFZBnxNsdYO6rj+tXBiMDQhgS+ghp 3p+6sfx7MThLItuFPiP+hUSKfP8TOHhiStNqn7ErgsSQTyC+sLe6bavLxcbfNVMx rCU6odiHjnaa6+FUAGXASqEcpFWrx8G3mg2NRtz05fbreCnXZvZYcxzlyFL2uXHd ZDWtPjFmmRiQC0YNS9ZjzwxpUBe58EVEwyG82hxdOvMPIX54evf8BylLfTr6nsqb 62+3tjRjPHKOGZHKwfnxCU8pvZemfdwzo5vTbk+MOfzAr7BXmQIa1EXZZ1328G2g Pj2yEN5rbj3W+c2hFXRycgVe0XCFFMs= -----END CERTIFICATE-----Generated at Fri Apr 4 19:00:37 2025 by rpki-client