$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/6592908e-c9e2-3896-83a6-25a183a7b461.roa File: 6592908e-c9e2-3896-83a6-25a183a7b461.roa (raw, json) Hash identifier: 3XKLYwd8MmGgW21GPwFAZq0kn0ezDU1vBxJUh9kwzDg= Subject key identifier: 11:3B:9A:AB:43:A4:86:2C:49:C0:5A:82:7D:44:F1:55:93:78:77:B7 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F432858489D05E97E9DC5D3AECDE997C0 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/6592908e-c9e2-3896-83a6-25a183a7b461.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 16532 IP address blocks: 205.233.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:e9:7e:9d:c5:d3:ae:cd:e9:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=44d266c8-cc37-4641-85fe-ec06adae1dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:63:85:c3:12:fa:b1:83:29:ca:77:6a:de: 9c:8d:34:f0:44:60:82:63:f9:f0:dd:87:87:ec:e5: 7b:85:7d:c6:c6:7f:96:f4:e2:bb:63:12:13:27:98: ad:21:1c:9a:ed:bf:09:f5:d8:34:8a:aa:a1:27:fe: b0:0c:ba:a3:25:25:a1:0b:10:5a:d2:eb:ef:c7:81: ab:f8:a2:5d:82:30:7c:09:f9:d1:94:39:0e:3a:4e: 9d:f7:04:9f:4d:74:04:cf:b6:b3:3c:a7:54:71:fd: 34:c0:2c:d4:d4:5c:13:5a:3b:b8:00:4f:3a:db:0a: 8a:9e:ac:32:86:90:1c:32:5f:b4:69:b5:21:0b:7e: a3:12:c4:d0:e2:e2:0a:7a:e9:6d:53:66:cc:9e:21: 61:66:5d:9b:c8:bd:72:1b:91:b3:78:ab:0a:92:c5: 2f:08:eb:6b:7d:79:49:0b:5c:0e:b0:90:05:3c:f2: b1:37:06:7d:f7:e8:cc:dd:df:c6:13:ee:3a:e9:6a: 9f:e1:d8:31:99:e3:13:bc:aa:c6:f0:09:f4:6e:d1: 9d:14:91:a8:e5:27:6b:63:73:e5:e1:84:f3:38:f4: c4:0d:f1:33:12:98:77:2c:66:e2:6b:0e:2d:f7:d2: 04:e6:e6:48:69:f7:8e:40:e9:5a:fc:e6:86:a5:42: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3B:9A:AB:43:A4:86:2C:49:C0:5A:82:7D:44:F1:55:93:78:77:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/6592908e-c9e2-3896-83a6-25a183a7b461.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 205.233.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:54:c0:02:bf:e8:7b:a8:28:35:ce:ba:c3:3a:92:ef:77:d1: fb:14:91:6b:5c:c6:33:2b:c0:74:9e:ef:fd:26:76:29:44:1a: 2c:43:42:ca:0c:80:88:a9:6f:11:8b:ea:36:80:da:8d:90:6f: a2:03:4d:cd:b9:63:a4:f1:23:b6:8e:c0:e8:a3:17:99:fb:03: 8e:1f:27:9d:47:ac:e9:48:5a:eb:0b:30:3b:a1:f2:9d:40:86: 2c:a3:3e:1e:10:24:5e:e3:94:ac:2f:f3:66:98:cf:d6:82:5c: 74:72:99:8d:01:63:d0:14:e3:6e:00:97:55:e2:c4:f9:a5:be: ff:a1:4c:63:d0:86:a6:f6:9e:43:92:b8:7d:b7:73:47:73:e8: a7:f6:c0:7a:d3:7d:3d:65:6a:44:c4:7a:89:95:ed:19:a5:ba: 83:02:96:05:21:2e:d4:5d:8e:c2:de:6b:ef:61:8b:8d:55:b6: 38:bf:f5:bb:4d:f5:8e:fc:51:50:98:e4:98:7a:3f:ec:ef:72: b5:f1:0f:1c:55:d5:46:6c:50:af:e3:fe:42:ce:f1:2d:eb:1c: 9e:85:5b:73:d8:ed:f6:16:2e:a0:0e:8c:66:ab:ed:ec:06:97: dd:45:af:83:4c:fd:e6:33:3a:f4:3a:dd:b4:48:82:c1:f3:66: 07:1b:89:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBel+ncXTrs3pl8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk NDRkMjY2YzgtY2MzNy00NjQxLTg1ZmUtZWMwNmFkYWUxZGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6djhcMS+rGDKcp3at6cjTTwRGCCY/nw3YeH 7OV7hX3Gxn+W9OK7YxITJ5itIRya7b8J9dg0iqqhJ/6wDLqjJSWhCxBa0uvvx4Gr +KJdgjB8CfnRlDkOOk6d9wSfTXQEz7azPKdUcf00wCzU1FwTWju4AE862wqKnqwy hpAcMl+0abUhC36jEsTQ4uIKeultU2bMniFhZl2byL1yG5GzeKsKksUvCOtrfXlJ C1wOsJAFPPKxNwZ99+jM3d/GE+466Wqf4dgxmeMTvKrG8An0btGdFJGo5SdrY3Pl 4YTzOPTEDfEzEph3LGbiaw4t99IE5uZIafeOQOla/OaGpUL8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE7mqtDpIYsScBagn1E8VWTeHe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvNjU5MjkwOGUtYzllMi0z ODk2LTgzYTYtMjVhMTgzYTdiNDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzel8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJUwAK/6HuoKDXOusM6ku930fsUkWtcxjMrwHSe7/0mdilEGixDQsoM gIipbxGL6jaA2o2Qb6IDTc25Y6TxI7aOwOijF5n7A44fJ51HrOlIWusLMDuh8p1A hiyjPh4QJF7jlKwv82aYz9aCXHRymY0BY9AU424Al1XixPmlvv+hTGPQhqb2nkOS uH23c0dz6Kf2wHrTfT1lakTEeomV7RmluoMClgUhLtRdjsLea+9hi41Vtji/9btN 9Y78UVCY5Jh6P+zvcrXxDxxV1UZsUK/j/kLO8S3rHJ6FW3PY7fYWLqAOjGar7ewG l91Fr4NM/eYzOvQ63bRIgsHzZgcbiS0= -----END CERTIFICATE-----Generated at Fri Apr 4 19:13:48 2025 by rpki-client