$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa File: 0296df01-a208-3212-875e-64b1e80b1100.roa (raw, json) Hash identifier: 8RoB3szmNsQL7H9mrGw2AdIfrKdxy3bmVxDDGuPR7os= Subject key identifier: DC:57:F5:9D:80:83:E2:85:E4:17:7E:EB:57:DA:E2:FF:5A:D0:6C:F3 Certificate issuer: /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Certificate serial: 010D0C9F43285848A99631CD685C1219577C7820 Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 11718 IP address blocks: 206.57.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:31:cd:68:5c:12:19:57:7c:78:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=d270c718-af06-4aa5-968b-9ba8c62c93f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:04:9c:a3:2b:38:03:9b:a5:03:d1:f6:6e: 1b:62:50:1c:c9:09:f9:a6:d7:40:49:5e:df:43:b0: df:d4:38:c3:2c:06:e1:f4:c7:e3:3b:d2:53:50:9e: 3f:fb:d8:4c:4c:98:02:89:ed:17:6c:29:f8:e0:23: 45:2e:a9:28:fa:ac:2f:09:bc:3b:b0:bd:56:52:9a: 78:54:f0:88:e5:17:8e:4e:2e:ff:d9:38:67:aa:5f: db:d5:21:c2:a1:df:11:36:e8:70:c9:af:10:ca:70: a1:65:21:85:97:89:3b:64:74:36:96:01:96:34:7e: e6:28:c1:ac:22:2b:27:dc:a6:2b:b4:9a:c1:83:80: 24:5a:69:28:26:62:94:74:98:8a:32:79:08:52:25: 78:20:5f:c9:99:11:46:24:2c:0c:8e:14:92:f1:fc: bb:c5:71:5f:8c:ff:e2:ca:ed:c0:2c:d9:33:0c:39: 3c:af:86:c0:74:2e:c5:f1:37:e6:ff:94:41:59:76: af:95:fb:aa:1d:90:89:1c:13:8c:8a:98:1a:42:bd: f8:28:3e:ed:78:94:da:be:24:9a:e7:e7:d0:47:4a: 88:a5:b2:ac:c6:e4:9a:cc:94:6b:6c:62:d6:f8:72: 1e:b1:fe:3d:cd:75:1a:de:f2:30:47:01:ed:ad:06: ef:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:57:F5:9D:80:83:E2:85:E4:17:7E:EB:57:DA:E2:FF:5A:D0:6C:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/0296df01-a208-3212-875e-64b1e80b1100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl X509v3 Authority Key Identifier: keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer sbgp-ipAddrBlock: critical IPv4: 206.57.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7b:6b:cf:21:17:56:f4:8b:f4:8d:db:ff:9a:94:d3:76:36: 0b:7c:e8:82:c6:68:05:6c:bc:de:7c:a3:0b:dd:f3:7f:82:43: 32:b9:45:68:f8:66:a0:fb:45:7c:5d:52:96:d2:cb:3c:4f:1c: e7:01:df:2b:18:73:b0:07:ed:8d:a3:9b:cf:25:71:c9:2d:d8: 5a:5b:a8:bc:17:1c:66:be:1d:f8:f4:31:27:32:ec:aa:0b:d4: 4a:cc:28:aa:06:80:7a:f0:51:03:86:b1:19:b8:f1:60:62:c2: d2:60:0c:f5:59:e0:74:1a:46:af:30:ce:5d:eb:ed:a6:b2:98: 16:0a:4e:0c:52:50:9f:94:58:46:6d:0e:c3:11:a1:9c:a0:25: 86:e1:2a:1a:fc:35:a6:e4:8f:45:21:1f:58:94:66:44:d2:dd: 57:81:93:87:e2:f4:26:67:c3:a1:b5:d8:31:9d:b2:f2:ab:4c: 81:10:dc:29:46:bf:f3:a5:c5:fb:40:2d:18:2c:23:42:54:81: ad:62:60:87:be:ee:84:3f:fb:66:90:67:f2:8f:03:5e:16:a0: c1:c6:0e:d3:34:99:a7:b2:41:26:80:dd:80:98:14:91:48:1c: 9f:cb:19:b6:31:43:bc:c4:50:91:8f:e5:6a:5d:e4:c2:a9:67: ef:68:f2:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljHNaFwSGVd8eCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQy ZTI4MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDI3MGM3MTgtYWYwNi00YWE1LTk2OGItOWJhOGM2MmM5M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkUEnKMrOAObpQPR9m4bYlAcyQn5ptdASV7f Q7Df1DjDLAbh9MfjO9JTUJ4/+9hMTJgCie0XbCn44CNFLqko+qwvCbw7sL1WUpp4 VPCI5ReOTi7/2Thnql/b1SHCod8RNuhwya8QynChZSGFl4k7ZHQ2lgGWNH7mKMGs Iisn3KYrtJrBg4AkWmkoJmKUdJiKMnkIUiV4IF/JmRFGJCwMjhSS8fy7xXFfjP/i yu3ALNkzDDk8r4bAdC7F8Tfm/5RBWXavlfuqHZCJHBOMipgaQr34KD7teJTaviSa 5+fQR0qIpbKsxuSazJRrbGLW+HIesf49zXUa3vIwRwHtrQbvawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxX9Z2Ag+KF5Bd+61fa4v9a0GzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODg0 MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvMDI5NmRmMDEtYTIwOC0z MjEyLTg3NWUtNjRiMWU4MGIxMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDg4NDA0ZjgtODJmYi00MzMwLThh YzQtYWQxN2E4OGQyZTI4LzA4ODQwNGY4LTgyZmItNDMzMC04YWM0LWFkMTdhODhk MmUyOC5jcmwwHwYDVR0jBBgwFoAUaxY4lmCv1VKU2vJhn2NBujL55FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3 YTg4ZDJlMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzjmgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF7a88hF1b0i/SN2/+alNN2Ngt86ILGaAVsvN58owvd83+CQzK5RWj4 ZqD7RXxdUpbSyzxPHOcB3ysYc7AH7Y2jm88lcckt2FpbqLwXHGa+Hfj0MScy7KoL 1ErMKKoGgHrwUQOGsRm48WBiwtJgDPVZ4HQaRq8wzl3r7aaymBYKTgxSUJ+UWEZt DsMRoZygJYbhKhr8Nabkj0UhH1iUZkTS3VeBk4fi9CZnw6G12DGdsvKrTIEQ3ClG v/OlxftALRgsI0JUga1iYIe+7oQ/+2aQZ/KPA14WoMHGDtM0maeyQSaA3YCYFJFI HJ/LGbYxQ7zEUJGP5Wpd5MKpZ+9o8pc= -----END CERTIFICATE-----Generated at Sat Apr 12 12:55:19 2025 by rpki-client