$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa File: 685237db-c4d0-36bb-974d-c4141e668c5d.roa (raw, json) Hash identifier: ZilQRhB/1HL2AX8A8oTUYWnLiq1jjJQPutGt0HM2MB4= Subject key identifier: 6E:0A:4B:6C:16:F5:9C:E8:F8:32:49:FE:31:EA:CA:B4:C6:36:3D:FB Certificate issuer: /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Certificate serial: 010D0C9F43285848B8F0C837E292C35400113F80 Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 394141 IP address blocks: 206.57.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:c8:37:e2:92:c3:54:00:11:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=6531f2f9-781a-4669-aa88-1232674a8432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:a2:2b:dc:9d:a4:d9:a8:b6:4a:a7:bd:b8: bd:2b:27:f5:09:f0:c6:86:23:3f:9e:86:ff:13:0f: a5:84:c7:01:05:f2:15:83:bc:40:6c:be:dd:0d:bf: 41:38:31:53:df:d1:c5:67:90:d7:14:26:94:ad:a2: d9:d7:7a:c5:a6:3d:cf:2b:5f:ba:4c:bc:10:a1:db: 64:14:2c:71:af:45:12:b1:0b:4f:31:3a:52:a2:7b: fd:9b:ad:e5:94:56:9f:72:84:19:17:b5:5e:d6:e4: 38:b8:e2:09:4d:c4:05:c4:7e:6c:e9:76:74:cb:f5: 50:e7:4a:73:14:67:8f:67:8f:63:13:f4:59:52:3a: 36:d0:be:2f:1c:92:f3:3b:5c:27:d1:60:87:92:38: d4:66:b0:0d:cf:cd:29:ce:66:15:0a:7e:9f:2a:f9: 5e:37:98:32:ac:ec:6f:9f:c4:70:14:16:4a:ae:8e: df:62:02:f4:7d:a0:c5:20:18:11:73:d6:cd:32:f1: 5e:29:85:a6:f1:a6:f2:26:8d:7c:67:74:8b:bf:9d: 09:37:c2:bd:1f:8b:dc:0a:7b:e9:dc:9a:06:2c:81: 10:35:cf:78:4d:d1:c0:42:ab:1c:a9:8a:67:6e:58: 80:64:2c:0f:b3:ea:7c:17:8a:01:fe:b6:27:35:1e: a2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0A:4B:6C:16:F5:9C:E8:F8:32:49:FE:31:EA:CA:B4:C6:36:3D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl X509v3 Authority Key Identifier: keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer sbgp-ipAddrBlock: critical IPv4: 206.57.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:de:5c:67:dc:0e:77:4c:ef:af:25:0a:cb:a3:6c:b0:dc:81: 16:a7:c1:d2:02:4d:d4:bf:28:50:ce:1e:22:d2:f9:aa:62:93: 6e:4c:a6:8c:ca:73:d7:09:e6:26:41:db:13:6f:c5:73:97:43: 7d:6d:d0:e8:72:38:dc:ff:30:48:7a:bb:34:d4:86:de:34:aa: f6:e2:d9:5e:22:e1:4c:9d:3b:27:23:64:5f:63:71:f3:b8:26: 00:19:48:53:4d:73:df:37:58:f9:f3:00:e0:ec:d6:a1:59:69: dd:78:da:eb:cd:99:6a:88:50:36:83:4a:9e:e0:80:b1:c4:c8: 56:44:03:0d:25:04:3f:92:2b:f0:a2:b4:3a:aa:68:6a:74:d7: 6a:40:e2:e5:88:37:e9:f7:18:ee:e8:ef:ea:38:4c:ab:84:a4: 31:2d:fc:40:49:cc:b8:f2:2e:6d:01:e2:ae:04:50:07:d6:db: ed:cd:14:a1:01:a9:64:84:93:45:67:7e:28:53:ac:8f:28:99: 53:08:6d:00:c0:f1:e4:16:e1:28:fe:e7:0c:7d:9d:c7:eb:a8: a1:7c:a9:c2:23:f4:34:d1:00:2f:af:66:f1:c0:60:1d:ca:f0: 68:dd:a9:aa:3b:ca:ba:88:20:9d:f1:82:c0:45:d1:f6:c9:36: 5d:cb:1e:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48Mg34pLDVAARP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQy ZTI4MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk NjUzMWYyZjktNzgxYS00NjY5LWFhODgtMTIzMjY3NGE4NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnguiK9ydpNmotkqnvbi9Kyf1CfDGhiM/nob/ Ew+lhMcBBfIVg7xAbL7dDb9BODFT39HFZ5DXFCaUraLZ13rFpj3PK1+6TLwQodtk FCxxr0USsQtPMTpSonv9m63llFafcoQZF7Ve1uQ4uOIJTcQFxH5s6XZ0y/VQ50pz FGePZ49jE/RZUjo20L4vHJLzO1wn0WCHkjjUZrANz80pzmYVCn6fKvleN5gyrOxv n8RwFBZKro7fYgL0faDFIBgRc9bNMvFeKYWm8abyJo18Z3SLv50JN8K9H4vcCnvp 3JoGLIEQNc94TdHAQqscqYpnbliAZCwPs+p8F4oB/rYnNR6iBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4KS2wW9Zzo+DJJ/jHqyrTGNj37MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODg0 MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvNjg1MjM3ZGItYzRkMC0z NmJiLTk3NGQtYzQxNDFlNjY4YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDg4NDA0ZjgtODJmYi00MzMwLThh YzQtYWQxN2E4OGQyZTI4LzA4ODQwNGY4LTgyZmItNDMzMC04YWM0LWFkMTdhODhk MmUyOC5jcmwwHwYDVR0jBBgwFoAUaxY4lmCv1VKU2vJhn2NBujL55FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3 YTg4ZDJlMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbeXGfcDndM768lCsujbLDcgRanwdICTdS/KFDOHiLS+apik25MpozK c9cJ5iZB2xNvxXOXQ31t0OhyONz/MEh6uzTUht40qvbi2V4i4UydOycjZF9jcfO4 JgAZSFNNc983WPnzAODs1qFZad142uvNmWqIUDaDSp7ggLHEyFZEAw0lBD+SK/Ci tDqqaGp012pA4uWIN+n3GO7o7+o4TKuEpDEt/EBJzLjyLm0B4q4EUAfW2+3NFKEB qWSEk0VnfihTrI8omVMIbQDA8eQW4Sj+5wx9ncfrqKF8qcIj9DTRAC+vZvHAYB3K 8Gjdqao7yrqIIJ3xgsBF0fbJNl3LHlQ= -----END CERTIFICATE-----Generated at Sat Apr 12 14:49:42 2025 by rpki-client