$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/fa3f5ca8-e2a5-31b4-9112-786903fa06a3.roa File: fa3f5ca8-e2a5-31b4-9112-786903fa06a3.roa (raw, json) Hash identifier: 1YeenofT7UgzODsz4obllsBPr8FHdF9NpZwDI9H7/9k= Subject key identifier: 6B:BA:0A:5D:43:40:9F:22:1D:BA:59:E3:E3:E1:10:A0:B9:8D:3C:D8 Certificate issuer: /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Certificate serial: 010D0C9F43285848A9962160523DB1F74D6E5660 Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/fa3f5ca8-e2a5-31b4-9112-786903fa06a3.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 393581 IP address blocks: 206.57.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:21:60:52:3d:b1:f7:4d:6e:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=712fb7c1-8225-46a2-bee3-6414fdbbc4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:03:e9:e1:ce:78:ca:4f:69:c7:bc:7a:0d:99: 23:37:48:06:c5:ef:1b:cf:49:80:4e:8e:fd:54:44: 5c:97:d3:51:34:75:d3:80:5f:5a:cf:19:4c:f9:5a: 4a:55:ca:58:8b:5f:0a:d4:25:2f:dd:6c:ff:ed:bd: ab:6d:56:00:2b:b0:3d:60:97:a5:2c:5d:03:1c:39: 1d:02:f7:60:d7:7e:e1:54:3a:a0:4a:2d:5a:b4:59: 10:5b:7b:80:75:f0:8f:b2:d3:4f:3a:6c:fd:32:0f: 36:3a:70:3a:0f:59:69:a9:8e:53:01:f1:e8:72:a8: e2:6e:fe:f8:c0:1d:6c:74:7d:bc:44:2c:05:63:7f: ac:e0:78:09:ec:70:c9:2c:78:ae:f9:85:d4:89:ba: 08:f4:ac:23:14:08:b5:53:b0:d8:24:f3:6b:55:7d: ca:97:3f:65:83:2f:0a:5d:bb:39:04:2d:85:e3:13: b8:74:34:da:ee:e9:d8:4a:4c:92:76:34:50:8a:04: f7:1f:22:1b:dd:f9:af:71:89:13:cb:ff:1f:ab:4c: bf:a9:4e:68:14:90:a7:d1:de:53:6b:11:b9:21:56: a8:bd:1e:a0:e3:ff:5f:b4:84:20:92:d5:88:43:51: f8:3b:ba:2c:65:0d:01:45:b5:a0:84:68:78:86:da: 2f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BA:0A:5D:43:40:9F:22:1D:BA:59:E3:E3:E1:10:A0:B9:8D:3C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/fa3f5ca8-e2a5-31b4-9112-786903fa06a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl X509v3 Authority Key Identifier: keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer sbgp-ipAddrBlock: critical IPv4: 206.57.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c1:28:38:f2:50:89:e4:64:36:60:60:e2:5d:7b:c7:eb:12: da:2c:b9:cf:3a:ef:bc:03:96:6b:bd:90:24:95:68:3c:d5:c8: 3e:31:cd:2c:d6:0e:3d:b7:fa:e2:d5:f7:32:f3:fc:a2:64:f9: 86:ad:7c:50:a9:bb:fa:34:58:04:9a:7f:65:f4:2e:25:03:49: f4:20:86:46:b1:d3:4e:16:e4:30:7f:43:0e:9f:f4:f7:9e:c5: f8:36:27:44:e0:21:12:b5:0f:b3:97:fb:1c:9b:63:1f:f1:4c: 09:ac:8e:98:32:da:a2:f3:e6:ad:08:f8:1f:59:e7:0d:bb:76: 8d:ea:a6:ab:72:70:bf:63:17:9a:72:e6:7a:79:80:b0:79:b4: 0a:1c:38:0b:77:c9:d0:c6:51:1e:a7:e2:86:af:a0:8b:35:1e: 83:45:ce:9b:c0:fb:d6:42:ce:fd:bd:c1:21:ff:66:ed:cc:94: 5d:e9:b4:64:95:ff:99:8b:61:38:47:b6:77:90:7a:47:d8:2d: 03:24:38:10:0f:1e:e4:4a:b2:66:a6:f8:b5:a4:5b:b5:90:3c: 67:66:31:35:85:4c:7f:ea:c4:c7:d6:ad:f9:32:ff:5d:30:99: a1:d7:7b:7e:37:fa:ee:84:c6:d6:6d:be:d2:e3:2f:29:1f:62: e9:f2:fd:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliFgUj2x901uVmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQy ZTI4MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk NzEyZmI3YzEtODIyNS00NmEyLWJlZTMtNjQxNGZkYmJjNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwPp4c54yk9px7x6DZkjN0gGxe8bz0mATo79 VERcl9NRNHXTgF9azxlM+VpKVcpYi18K1CUv3Wz/7b2rbVYAK7A9YJelLF0DHDkd Avdg137hVDqgSi1atFkQW3uAdfCPstNPOmz9Mg82OnA6D1lpqY5TAfHocqjibv74 wB1sdH28RCwFY3+s4HgJ7HDJLHiu+YXUiboI9KwjFAi1U7DYJPNrVX3Klz9lgy8K Xbs5BC2F4xO4dDTa7unYSkySdjRQigT3HyIb3fmvcYkTy/8fq0y/qU5oFJCn0d5T axG5IVaovR6g4/9ftIQgktWIQ1H4O7osZQ0BRbWghGh4htovGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGu6Cl1DQJ8iHbpZ4+PhEKC5jTzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODg0 MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvZmEzZjVjYTgtZTJhNS0z MWI0LTkxMTItNzg2OTAzZmEwNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDg4NDA0ZjgtODJmYi00MzMwLThh YzQtYWQxN2E4OGQyZTI4LzA4ODQwNGY4LTgyZmItNDMzMC04YWM0LWFkMTdhODhk MmUyOC5jcmwwHwYDVR0jBBgwFoAUaxY4lmCv1VKU2vJhn2NBujL55FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3 YTg4ZDJlMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjmXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPBKDjyUInkZDZgYOJde8frEtosuc8677wDlmu9kCSVaDzVyD4xzSzW Dj23+uLV9zLz/KJk+YatfFCpu/o0WASaf2X0LiUDSfQghkax004W5DB/Qw6f9Pee xfg2J0TgIRK1D7OX+xybYx/xTAmsjpgy2qLz5q0I+B9Z5w27do3qpqtycL9jF5py 5np5gLB5tAocOAt3ydDGUR6n4oavoIs1HoNFzpvA+9ZCzv29wSH/Zu3MlF3ptGSV /5mLYThHtneQekfYLQMkOBAPHuRKsmam+LWkW7WQPGdmMTWFTH/qxMfWrfky/10w maHXe343+u6ExtZtvtLjLykfYuny/eA= -----END CERTIFICATE-----Generated at Sat Apr 12 14:53:08 2025 by rpki-client