$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/f7262f57-ce99-39cb-b66b-7cc44160ea61.roa File: f7262f57-ce99-39cb-b66b-7cc44160ea61.roa (raw, json) Hash identifier: ktwhPOsuseHzAMXZKZl70BEE6svgL81T5PveuK5VR4E= Subject key identifier: A4:8A:85:95:76:D3:E2:F0:C5:3E:4A:84:38:11:49:C0:F5:5D:9E:7E Certificate issuer: /CN=b76a56d7-e03c-4adc-a642-166acb54d72b Certificate serial: 010D0C9F43285848D0ABB1FFF24640D063AE5A80 Authority key identifier: 67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/f7262f57-ce99-39cb-b66b-7cc44160ea61.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 32277 IP address blocks: 206.125.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b1:ff:f2:46:40:d0:63:ae:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76a56d7-e03c-4adc-a642-166acb54d72b Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=9b445359-af7d-455b-891c-c8b3cf57ab8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:75:6d:8b:55:69:38:b6:73:9f:f6:23:90:25: 0b:13:0b:2a:69:1c:e1:66:44:4b:54:35:44:79:a8: 5b:fb:bf:10:2e:43:09:2c:97:99:a5:a4:2a:0f:b4: 3f:f3:fd:29:dd:6c:0b:ce:78:98:a0:72:30:5b:48: aa:73:69:8d:d6:89:36:13:d8:df:a4:19:8f:eb:95: 3d:77:22:b2:ea:60:1b:47:b0:50:af:ee:57:90:7e: b0:49:fd:88:c1:15:3a:b5:1d:9f:80:b2:62:74:9b: 53:0f:e6:4b:cd:ab:78:99:2e:e7:c6:71:ba:9a:73: fc:e0:bb:8a:74:28:d0:f9:17:92:00:ac:cf:45:ca: ae:8e:51:67:f2:44:a8:5a:34:d8:bf:70:20:eb:b6: 11:c7:a0:1c:ee:fa:d5:8e:10:49:91:c7:7c:08:af: a1:35:fa:58:fc:3e:f9:be:2b:05:b0:10:81:4b:0c: ad:fe:05:2e:c6:43:e4:30:07:76:78:b0:02:fc:b8: 83:b0:1c:8f:c2:30:b2:2f:b1:53:59:69:db:50:a7: c8:0e:db:48:02:e8:b2:c5:2a:c9:1f:4e:5d:d3:b1: 60:22:d9:52:de:5c:43:e7:c9:d5:b8:3c:32:af:bb: 58:d3:7e:7a:75:00:d0:5e:28:b1:5f:b0:0c:c7:d9: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8A:85:95:76:D3:E2:F0:C5:3E:4A:84:38:11:49:C0:F5:5D:9E:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/f7262f57-ce99-39cb-b66b-7cc44160ea61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl X509v3 Authority Key Identifier: keyid:67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer sbgp-ipAddrBlock: critical IPv4: 206.125.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:e2:60:7c:fd:80:4f:90:3c:06:a6:63:40:4c:07:b5:d6:be: 00:76:f1:f4:ac:e3:1a:e5:9a:a7:1b:f9:16:be:f2:a3:5e:6d: 59:2e:d2:05:cb:31:ac:0e:13:10:d1:84:02:79:f7:5b:59:5c: 2a:a0:14:ba:51:5a:29:0b:28:a1:2e:bc:cc:2f:38:d3:00:df: 69:a3:1c:9e:60:52:c1:1d:b0:a0:33:b3:13:ab:15:c0:b4:5c: 36:87:2b:fc:75:5b:3c:65:9d:4e:66:c6:f3:fc:48:94:66:a1: 2b:78:a8:02:d1:38:48:b2:29:37:05:45:d2:4e:e5:ce:2f:c6: 44:87:06:0b:e2:03:4d:cc:21:15:56:4b:51:43:9b:8d:13:04: f2:d1:e9:ff:a8:6f:8d:f4:15:cc:bb:f2:b0:f3:bc:3d:bc:07: 73:2e:9c:99:ca:3f:b1:e6:a1:1d:fe:a1:46:bb:a7:d5:f9:f3: 89:4f:5c:77:73:a5:a8:b7:9e:5c:35:00:a8:39:f0:55:6b:42: 04:97:c3:ab:92:83:78:fc:ff:46:ff:3e:13:47:3d:6c:36:4e: 70:10:0f:f3:1a:46:00:bd:5f:32:05:3a:87:68:11:61:51:02: 7e:da:2e:4f:43:8e:23:1c:24:c1:63:d8:07:90:31:0a:4e:3c: e6:a1:b5:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7H/8kZA0GOuWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2YTU2ZDctZTAzYy00YWRjLWE2NDItMTY2YWNiNTRk NzJiMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk OWI0NDUzNTktYWY3ZC00NTViLTg5MWMtYzhiM2NmNTdhYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XVti1VpOLZzn/YjkCULEwsqaRzhZkRLVDVE eahb+78QLkMJLJeZpaQqD7Q/8/0p3WwLzniYoHIwW0iqc2mN1ok2E9jfpBmP65U9 dyKy6mAbR7BQr+5XkH6wSf2IwRU6tR2fgLJidJtTD+ZLzat4mS7nxnG6mnP84LuK dCjQ+ReSAKzPRcqujlFn8kSoWjTYv3Ag67YRx6Ac7vrVjhBJkcd8CK+hNfpY/D75 visFsBCBSwyt/gUuxkPkMAd2eLAC/LiDsByPwjCyL7FTWWnbUKfIDttIAuiyxSrJ H05d07FgItlS3lxD58nVuDwyr7tY0356dQDQXiixX7AMx9mlBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSKhZV20+LwxT5KhDgRScD1XZ5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZh NTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZhY2I1NGQ3MmIvZjcyNjJmNTctY2U5OS0z OWNiLWI2NmItN2NjNDQxNjBlYTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjc2YTU2ZDctZTAzYy00YWRjLWE2 NDItMTY2YWNiNTRkNzJiL2I3NmE1NmQ3LWUwM2MtNGFkYy1hNjQyLTE2NmFjYjU0 ZDcyYi5jcmwwHwYDVR0jBBgwFoAUZ2s+IQIFKGkxD9bQHKbhPruP6MswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZhNTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZh Y2I1NGQ3MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzn3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXiYHz9gE+QPAamY0BMB7XWvgB28fSs4xrlmqcb+Ra+8qNebVku0gXL MawOExDRhAJ591tZXCqgFLpRWikLKKEuvMwvONMA32mjHJ5gUsEdsKAzsxOrFcC0 XDaHK/x1WzxlnU5mxvP8SJRmoSt4qALROEiyKTcFRdJO5c4vxkSHBgviA03MIRVW S1FDm40TBPLR6f+ob430Fcy78rDzvD28B3MunJnKP7HmoR3+oUa7p9X584lPXHdz pai3nlw1AKg58FVrQgSXw6uSg3j8/0b/PhNHPWw2TnAQD/MaRgC9XzIFOodoEWFR An7aLk9DjiMcJMFj2AeQMQpOPOahtR8= -----END CERTIFICATE-----Generated at Fri Apr 4 15:58:24 2025 by rpki-client