$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/e9d9d970-1f39-3568-ab41-92253b28db68.roa File: e9d9d970-1f39-3568-ab41-92253b28db68.roa (raw, json) Hash identifier: x7MN6hmBpo5y/E5lABDdcFBObC+x2C9cQPo36uWEbr4= Subject key identifier: B1:02:43:60:EB:77:20:A8:9B:DA:74:37:FF:CA:17:4C:2A:65:F5:37 Certificate issuer: /CN=66108100-1fc2-4d23-b89e-3e81cc652270 Certificate serial: 010D0C9F43285848EF6138E12DFA01A7AD3E7A80 Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/e9d9d970-1f39-3568-ab41-92253b28db68.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 13984 IP address blocks: 206.124.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:38:e1:2d:fa:01:a7:ad:3e:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=43915e1a-64fc-4b6d-bdf5-0613b03df6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:42:21:c1:c1:2c:23:3b:63:57:17:fe:0b:77: 27:12:ef:fc:66:c5:ba:7d:e4:14:4f:82:c1:23:b2: 62:71:98:d3:3f:0b:46:27:44:6f:fc:0d:7c:05:1f: 40:77:3f:bf:82:49:9d:cc:39:8a:d1:15:bd:59:70: 43:d3:42:e5:1d:48:93:35:74:3e:9d:fd:ce:7c:61: c8:c4:29:63:12:76:b8:8b:73:fe:56:c6:de:70:af: 4e:5b:14:b1:41:59:20:ca:39:75:41:f5:b6:18:8b: 65:98:ec:ae:19:97:4e:b2:79:37:3e:c4:d9:26:47: aa:a3:31:e7:9d:db:98:25:07:13:d5:ed:4f:31:52: bb:9c:d4:a5:38:86:09:93:76:62:7d:a3:97:58:56: 6e:27:1a:cf:9b:e3:68:80:cc:1b:be:73:df:fe:09: 04:aa:0b:dd:7e:1e:7d:f9:a7:67:43:76:1e:d2:6f: 47:e1:1e:9d:7d:2a:38:50:75:ed:8d:02:cc:78:b8: f9:bd:4e:b2:f4:3d:a7:cd:34:9b:eb:94:cb:38:ab: df:1e:6d:66:22:2e:3e:aa:b0:7f:07:95:a2:cc:a4: c5:b8:6b:64:16:be:d3:ab:68:ec:fe:c5:54:e3:16: 5f:0c:87:b0:11:60:b9:41:b1:e1:59:a4:61:e9:aa: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:02:43:60:EB:77:20:A8:9B:DA:74:37:FF:CA:17:4C:2A:65:F5:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/e9d9d970-1f39-3568-ab41-92253b28db68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl X509v3 Authority Key Identifier: keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer sbgp-ipAddrBlock: critical IPv4: 206.124.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:d1:54:ce:52:df:11:11:6d:46:42:73:7e:da:43:69:99:b2: c3:e2:6f:c6:62:5a:a8:17:69:8b:d4:b3:ae:90:9b:af:1e:0e: c5:45:1e:e1:3e:a5:b2:4e:1d:70:9f:4f:06:f0:f7:da:c6:0a: 7a:2d:01:bd:62:82:65:45:07:7e:ea:2a:a6:76:a8:d1:c3:aa: 65:4a:b6:5e:b1:e7:08:33:e8:d2:f7:db:f5:5c:48:46:ca:d6: df:2f:89:37:c6:3a:0d:28:42:f1:64:86:90:fc:89:ef:75:23: 52:3e:ea:59:e2:2c:f8:72:eb:2a:10:fc:d8:f4:b2:3c:3f:8f: 83:f9:b9:20:53:4f:22:c6:f9:80:5f:9f:8d:cb:31:2e:62:72: 51:7f:06:29:44:8d:e6:89:74:26:c1:e9:3f:c8:b3:a9:46:b2: 1f:82:1f:9e:31:ab:a1:7e:63:1d:be:8a:e5:50:5e:c8:7a:c6: 23:a4:aa:ea:9a:70:ec:3b:5c:b3:c4:99:4a:83:bc:f4:3b:27: 92:df:5a:a8:2c:a3:a7:57:ee:c4:ff:98:7b:8e:c8:d7:28:d5: 54:1d:0a:4a:67:fe:0d:20:27:9b:17:3b:94:b5:6d:2f:77:12: 1a:64:79:07:f1:40:11:1d:4e:98:6b:10:9a:f8:60:63:d8:7b: 89:52:03:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTjhLfoBp60+eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjYxMDgxMDAtMWZjMi00ZDIzLWI4OWUtM2U4MWNjNjUy MjcwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDM5MTVlMWEtNjRmYy00YjZkLWJkZjUtMDYxM2IwM2RmNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EIhwcEsIztjVxf+C3cnEu/8ZsW6feQUT4LB I7JicZjTPwtGJ0Rv/A18BR9Adz+/gkmdzDmK0RW9WXBD00LlHUiTNXQ+nf3OfGHI xCljEna4i3P+VsbecK9OWxSxQVkgyjl1QfW2GItlmOyuGZdOsnk3PsTZJkeqozHn nduYJQcT1e1PMVK7nNSlOIYJk3ZifaOXWFZuJxrPm+NogMwbvnPf/gkEqgvdfh59 +adnQ3Ye0m9H4R6dfSo4UHXtjQLMeLj5vU6y9D2nzTSb65TLOKvfHm1mIi4+qrB/ B5WizKTFuGtkFr7Tq2js/sVU4xZfDIewEWC5QbHhWaRh6aq7ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLECQ2DrdyCom9p0N//KF0wqZfU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NjEw ODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgxY2M2NTIyNzAvZTlkOWQ5NzAtMWYzOS0z NTY4LWFiNDEtOTIyNTNiMjhkYjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjYxMDgxMDAtMWZjMi00ZDIzLWI4 OWUtM2U4MWNjNjUyMjcwLzY2MTA4MTAwLTFmYzItNGQyMy1iODllLTNlODFjYzY1 MjI3MC5jcmwwHwYDVR0jBBgwFoAUS/ubJjcpjIkvFL3SC1nWsO5jAEcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NjEwODEwMC0xZmMyLTRkMjMtYjg5ZS0zZTgx Y2M2NTIyNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAznyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHRVM5S3xERbUZCc37aQ2mZssPib8ZiWqgXaYvUs66Qm68eDsVFHuE+ pbJOHXCfTwbw99rGCnotAb1igmVFB37qKqZ2qNHDqmVKtl6x5wgz6NL32/VcSEbK 1t8viTfGOg0oQvFkhpD8ie91I1I+6lniLPhy6yoQ/Nj0sjw/j4P5uSBTTyLG+YBf n43LMS5iclF/BilEjeaJdCbB6T/Is6lGsh+CH54xq6F+Yx2+iuVQXsh6xiOkquqa cOw7XLPEmUqDvPQ7J5LfWqgso6dX7sT/mHuOyNco1VQdCkpn/g0gJ5sXO5S1bS93 EhpkeQfxQBEdTphrEJr4YGPYe4lSA/Q= -----END CERTIFICATE-----Generated at Fri Apr 11 22:27:05 2025 by rpki-client