$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/869dc589-2ba1-3cb1-83c5-a394b639843e.roa File: 869dc589-2ba1-3cb1-83c5-a394b639843e.roa (raw, json) Hash identifier: dvNjths6achbVBMhPIUO4kj4JYgLn0uqiN5WF8pcLT0= Subject key identifier: F8:2C:81:0D:5D:81:4B:81:E1:36:C9:5A:08:3A:5D:7F:82:9D:36:2C Certificate issuer: /CN=b5df7c19-240b-4a12-a886-6df8618d66ad Certificate serial: 010D0C9F4328584968B423E34125930CD1073200 Authority key identifier: 60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/869dc589-2ba1-3cb1-83c5-a394b639843e.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 20073 IP address blocks: 206.168.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:23:e3:41:25:93:0c:d1:07:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5df7c19-240b-4a12-a886-6df8618d66ad Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=0f0b1cbc-b622-451d-b205-5dcec7ef366b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:27:5f:83:2b:2b:e3:70:22:dc:e0:27:99: 55:b2:22:82:23:c8:6f:af:c1:da:0f:f0:5f:19:d7: 54:7f:8a:ce:b8:a6:7e:f1:e0:5a:e6:3b:51:df:19: ae:ae:1c:b9:c4:44:1c:04:d0:59:ce:54:99:24:03: 43:45:db:56:de:15:76:19:43:0d:92:a6:53:43:77: dd:7c:f4:9e:bb:f5:00:7b:b9:1a:ab:ff:d8:94:f7: 57:32:fc:7b:89:94:ff:16:eb:bf:15:3d:f0:63:61: 3c:08:8d:c7:88:fe:49:d2:23:a4:af:92:f5:93:33: 36:4b:e2:f9:eb:0f:c8:bf:63:26:b8:f3:ea:b9:11: 08:2f:d6:b4:6c:e1:80:a8:2e:8e:0a:3f:26:57:e2: 82:eb:cd:dc:9b:12:4e:51:ac:65:ff:b4:00:3d:fe: 3f:52:9a:12:85:a8:84:c7:26:34:81:76:5a:5f:bc: 47:3d:e1:df:bc:aa:e8:80:43:12:fa:fb:0f:5f:d4: 2b:dc:cf:31:0a:c8:83:37:d2:6d:1a:df:54:93:86: 8c:4b:59:28:50:11:dc:be:c1:96:9c:14:ed:ce:2a: 4a:f5:b0:93:63:8a:80:46:dc:29:98:f9:e8:d3:9f: 68:42:cd:de:8b:82:24:49:fd:c4:14:a5:89:a3:24: 4f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2C:81:0D:5D:81:4B:81:E1:36:C9:5A:08:3A:5D:7F:82:9D:36:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/869dc589-2ba1-3cb1-83c5-a394b639843e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad/b5df7c19-240b-4a12-a886-6df8618d66ad.crl X509v3 Authority Key Identifier: keyid:60:0C:21:01:B9:E8:9D:F8:22:A4:1F:0C:2A:41:BE:6A:F0:36:A6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b5df7c19-240b-4a12-a886-6df8618d66ad.cer sbgp-ipAddrBlock: critical IPv4: 206.168.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:53:80:63:74:80:d2:0d:d4:e3:16:65:b3:81:cb:4e:8f:68: 50:07:66:e8:6a:fa:9d:f9:06:b6:42:ae:5c:fb:b9:3d:8b:85: b1:f8:de:4e:6b:20:93:23:f7:1f:1d:bd:7d:26:06:33:d9:19: 68:dc:45:31:65:0a:68:21:2b:b9:6d:47:e4:59:0b:9a:b5:11: 1b:cc:21:ee:1d:74:ec:36:08:67:37:da:24:b4:21:c2:ad:25: 56:87:f3:b8:c1:f6:49:ad:33:6f:4e:71:27:fa:ab:09:7e:50: 7e:39:55:30:9e:cb:9b:7b:40:11:8c:ea:0e:cb:b1:71:2a:9e: b3:b9:48:82:b6:eb:09:56:43:59:16:e1:35:1c:c0:d8:0e:6b: aa:1b:35:57:e2:9e:36:cb:c3:be:88:43:03:f4:bf:ea:26:f3: 59:52:ba:be:9a:74:75:6f:29:73:00:4a:19:4f:18:3e:4d:0b: 7d:04:eb:69:53:9c:9c:6a:39:d0:ca:57:70:88:7a:a2:08:32: 01:44:57:69:1b:8a:d1:37:16:15:c6:97:36:0b:91:75:12:6d: 20:1a:71:0f:9c:5e:ac:38:56:3b:2c:8d:c4:35:2d:24:13:9b: fa:80:2e:0d:c1:14:52:0a:81:c9:6b:22:77:4e:05:7c:d4:57: 4f:24:41:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCPjQSWTDNEHMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVkZjdjMTktMjQwYi00YTEyLWE4ODYtNmRmODYxOGQ2 NmFkMB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk MGYwYjFjYmMtYjYyMi00NTFkLWIyMDUtNWRjZWM3ZWYzNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApacnX4MrK+NwItzgJ5lVsiKCI8hvr8HaD/Bf GddUf4rOuKZ+8eBa5jtR3xmurhy5xEQcBNBZzlSZJANDRdtW3hV2GUMNkqZTQ3fd fPSeu/UAe7kaq//YlPdXMvx7iZT/Fuu/FT3wY2E8CI3HiP5J0iOkr5L1kzM2S+L5 6w/Iv2MmuPPquREIL9a0bOGAqC6OCj8mV+KC683cmxJOUaxl/7QAPf4/UpoShaiE xyY0gXZaX7xHPeHfvKrogEMS+vsPX9Qr3M8xCsiDN9JtGt9Uk4aMS1koUBHcvsGW nBTtzipK9bCTY4qARtwpmPno059oQs3ei4IkSf3EFKWJoyRPrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgsgQ1dgUuB4TbJWgg6XX+CnTYsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNWRm N2MxOS0yNDBiLTRhMTItYTg4Ni02ZGY4NjE4ZDY2YWQvODY5ZGM1ODktMmJhMS0z Y2IxLTgzYzUtYTM5NGI2Mzk4NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjVkZjdjMTktMjQwYi00YTEyLWE4 ODYtNmRmODYxOGQ2NmFkL2I1ZGY3YzE5LTI0MGItNGExMi1hODg2LTZkZjg2MThk NjZhZC5jcmwwHwYDVR0jBBgwFoAUYAwhAbnonfgipB8MKkG+avA2plwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNWRmN2MxOS0yNDBiLTRhMTItYTg4Ni02ZGY4 NjE4ZDY2YWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqioMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9TgGN0gNIN1OMWZbOBy06PaFAHZuhq+p35BrZCrlz7uT2LhbH43k5r IJMj9x8dvX0mBjPZGWjcRTFlCmghK7ltR+RZC5q1ERvMIe4ddOw2CGc32iS0IcKt JVaH87jB9kmtM29OcSf6qwl+UH45VTCey5t7QBGM6g7LsXEqnrO5SIK26wlWQ1kW 4TUcwNgOa6obNVfinjbLw76IQwP0v+om81lSur6adHVvKXMAShlPGD5NC30E62lT nJxqOdDKV3CIeqIIMgFEV2kbitE3FhXGlzYLkXUSbSAacQ+cXqw4VjssjcQ1LSQT m/qALg3BFFIKgclrIndOBXzUV08kQfQ= -----END CERTIFICATE-----Generated at Fri Apr 4 19:12:30 2025 by rpki-client