$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa File: c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa (raw, json) Hash identifier: lJZBQiW6e2qT3lGoufs4SbwCCmLDe7Yo2P8MC7SvFjY= Subject key identifier: 00:D2:81:82:5A:D0:D6:B1:FC:B5:C5:A2:BF:FD:F8:3B:77:C0:A9:E1 Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F43285849244E86691EDE70BE193BE180 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 399103 IP address blocks: 206.168.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:86:69:1e:de:70:be:19:3b:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=e7424608-c5d3-4b70-bdb4-c1bbed72b9f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:26:b6:f7:84:7a:79:e1:4c:ab:56:b7:8e:30: 37:1c:39:59:6e:ce:21:af:fe:24:0f:58:68:ab:fd: c6:b1:ae:97:e2:da:f1:61:c9:64:d2:0e:37:31:d9: b8:4e:55:c4:6f:4a:84:2f:b3:17:3d:39:c2:6a:5e: 89:58:3c:1c:12:72:d8:99:b4:25:99:29:0f:fc:f8: d7:e4:22:13:81:13:2f:02:9b:78:d1:84:d7:ae:ad: a6:4a:24:83:95:06:12:eb:ec:d0:19:2c:9b:33:a0: e7:d7:3d:5a:1e:9e:3e:70:a0:e6:13:27:4b:a7:f7: 02:84:49:30:f8:a3:b2:45:5c:15:8e:e3:66:a0:47: cc:2f:3a:86:ec:9b:e2:66:cc:f1:03:44:34:40:9f: 66:ea:4f:a4:3e:26:3f:40:e7:da:aa:df:76:c1:23: 72:a3:b1:d8:06:69:15:9b:6b:2e:69:42:33:c6:00: 1a:d7:5a:1f:ca:6d:7d:bb:6f:d5:87:df:a1:61:14: 65:ca:34:03:fe:21:59:79:20:2b:d4:dc:b3:e0:b8: 84:97:c7:ff:fa:55:f5:89:93:05:01:94:2a:78:79: 2b:5b:65:14:da:5f:41:fa:9b:76:b3:4c:70:b2:1b: 72:5a:db:f0:3f:ac:4d:85:c2:00:50:c4:d1:c0:d3: a2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:D2:81:82:5A:D0:D6:B1:FC:B5:C5:A2:BF:FD:F8:3B:77:C0:A9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 206.168.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:4f:c7:2e:f0:6c:15:84:44:55:90:4d:72:ba:3a:65:dc:5b: 4e:7e:64:b5:2d:16:05:40:ee:9a:9c:96:a4:90:29:33:d8:c5: e1:00:0d:30:e5:65:3d:4c:9a:c5:36:e6:74:53:ae:bc:70:62: 48:98:30:8e:c8:e0:c1:57:7f:e5:81:7f:a5:3e:65:a7:4e:c8: 6f:c3:0e:f5:2a:2c:d5:85:87:9c:eb:f4:9e:54:7e:38:d0:43: 4b:2f:70:c8:6c:c6:30:41:15:6f:54:2e:f4:95:8c:bb:d1:69: af:87:81:b8:73:33:10:21:2f:09:f9:94:2f:0d:27:be:99:b3: a8:7c:4a:7d:fb:f9:a3:b2:28:66:79:f4:0b:97:3c:07:73:41: 05:3e:d1:e2:96:b9:f1:05:1d:17:1f:5e:c6:77:30:0a:89:cb: f5:11:4e:17:28:40:f6:eb:b1:63:2f:11:9f:c3:cf:a4:8e:d5: cf:17:1f:85:f6:5f:7d:6a:68:a1:f2:08:d8:68:22:89:72:11: 55:8b:c3:3c:88:5f:32:ea:02:66:22:fe:47:c0:a1:a8:6b:d9: 7a:f9:f2:4f:a8:ae:ed:33:88:70:63:ca:5d:07:40:35:64:08: a6:17:1c:29:72:52:02:50:d1:6d:c8:93:05:26:e7:c9:bf:b0: 3b:08:77:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkToZpHt5wvhk74YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZTc0MjQ2MDgtYzVkMy00YjcwLWJkYjQtYzFiYmVkNzJiOWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCa294R6eeFMq1a3jjA3HDlZbs4hr/4kD1ho q/3Gsa6X4trxYclk0g43Mdm4TlXEb0qEL7MXPTnCal6JWDwcEnLYmbQlmSkP/PjX 5CITgRMvApt40YTXrq2mSiSDlQYS6+zQGSybM6Dn1z1aHp4+cKDmEydLp/cChEkw +KOyRVwVjuNmoEfMLzqG7JviZszxA0Q0QJ9m6k+kPiY/QOfaqt92wSNyo7HYBmkV m2suaUIzxgAa11ofym19u2/Vh9+hYRRlyjQD/iFZeSAr1Nyz4LiEl8f/+lX1iZMF AZQqeHkrW2UU2l9B+pt2s0xwshtyWtvwP6xNhcIAUMTRwNOiKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADSgYJa0Nax/LXFor/9+Dt3wKnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYzZlYmE0ZDAtZTc4Yi0z MzgwLThhN2UtYzZmMjVhZWU2Y2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqiaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANlPxy7wbBWERFWQTXK6OmXcW05+ZLUtFgVA7pqclqSQKTPYxeEADTDl ZT1MmsU25nRTrrxwYkiYMI7I4MFXf+WBf6U+ZadOyG/DDvUqLNWFh5zr9J5UfjjQ Q0svcMhsxjBBFW9ULvSVjLvRaa+HgbhzMxAhLwn5lC8NJ76Zs6h8Sn37+aOyKGZ5 9AuXPAdzQQU+0eKWufEFHRcfXsZ3MAqJy/URThcoQPbrsWMvEZ/Dz6SO1c8XH4X2 X31qaKHyCNhoIolyEVWLwzyIXzLqAmYi/kfAoahr2Xr58k+oru0ziHBjyl0HQDVk CKYXHClyUgJQ0W3IkwUm58m/sDsIdwI= -----END CERTIFICATE-----Generated at Sat Apr 12 14:49:49 2025 by rpki-client