$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa File: d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa (raw, json) Hash identifier: hcjP/2zoixxekqb3vbBNgqLYt5cJl9Md05SaPDedvkw= Subject key identifier: 15:EF:78:83:48:38:76:FB:65:9F:AF:FC:D2:54:44:2E:4D:10:79:05 Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Certificate serial: 010D0C9F43285849071BE7598331F1E64125B6C0 Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 18914 IP address blocks: 206.168.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:e7:59:83:31:f1:e6:41:25:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=925784f7-99a6-4b4f-bbd8-861a70cebec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5b:69:f7:57:ed:1b:66:99:56:98:4a:19:8a: a1:7c:0e:6f:01:88:dc:a7:06:47:79:3f:3e:2d:5b: 4f:2e:9c:7f:60:a7:ab:62:23:ea:1e:5f:73:16:fa: 13:b7:7b:d0:6a:09:ee:87:5f:69:f7:b3:3f:0c:f3: 3e:f3:c2:e0:58:32:0f:cc:09:50:0e:38:4a:17:0c: ce:c7:fa:2c:b7:bf:d6:4a:b3:e9:bc:2d:cd:07:3c: 2f:a4:be:f7:72:3f:bb:47:fc:eb:c0:6d:a6:1b:6b: ab:b9:f0:dc:8e:3c:3a:6e:6b:01:e7:16:34:5b:5f: 31:a6:80:d6:8f:9c:f6:ec:27:da:ba:14:43:e2:5f: b6:26:10:75:57:9b:f0:07:43:da:4d:3a:f6:fd:6a: 4c:70:59:df:e0:d4:af:31:86:ef:87:21:8d:dc:b5: 51:9d:45:36:9f:ea:58:b9:4d:eb:48:51:e5:4a:76: 74:cc:3b:55:c5:38:da:09:6c:c1:4e:9a:66:5d:16: 3a:14:4d:12:68:26:a9:72:b6:29:7f:77:bc:ed:f1: 8b:da:48:b2:f6:1d:3f:9f:7e:37:b3:71:b4:61:02: a2:80:64:ac:57:5b:7a:0a:61:26:d9:dc:59:1e:22: 0b:ce:b9:d4:7e:4f:f0:d9:17:aa:6a:ae:74:dd:61: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EF:78:83:48:38:76:FB:65:9F:AF:FC:D2:54:44:2E:4D:10:79:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/d8a29e38-cbb0-3d29-8075-dc1fa9167ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl X509v3 Authority Key Identifier: keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer sbgp-ipAddrBlock: critical IPv4: 206.168.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:69:d0:60:94:1c:71:85:1e:7e:20:7d:21:24:5c:b1:3c:38: 51:f6:6d:60:30:09:36:bd:4c:8d:e0:98:e3:c4:cd:2c:39:1b: 2b:b7:e7:6a:1a:d1:59:64:0a:33:42:43:e9:d2:5c:66:58:44: 04:aa:ed:93:10:64:36:4d:b5:61:b6:19:4b:de:cb:5a:86:59: 3f:6c:6b:14:9a:ea:bf:f0:88:b0:2f:56:97:b4:5e:6b:8d:0b: b5:92:b8:0e:c3:45:91:4e:2d:f3:6c:b8:ba:fa:32:15:1d:7d: f8:b9:7c:e5:0f:9e:53:6d:b4:86:a1:e6:6a:db:37:46:43:3d: d9:a3:fd:c3:c9:60:19:7e:3a:e0:ff:cf:cb:95:2c:1e:1f:43: d3:28:cd:2b:45:77:e2:23:ab:4e:8c:d4:65:d1:2b:61:80:6f: 2d:2c:9c:59:18:12:80:ca:5a:a0:2f:98:2b:6a:d7:ee:56:44: 09:fd:b6:6c:59:28:29:c8:24:f8:6d:9b:22:87:b6:66:17:7b: e9:20:09:df:7f:b0:5a:1e:26:15:b0:86:4f:b4:7c:b5:0f:0e: 2e:e2:a0:0f:85:be:c3:18:f7:15:dc:00:32:f9:3e:b4:7f:3b: 44:fd:77:e7:1b:17:c9:06:56:83:fe:26:55:86:d7:5e:0f:77: 67:b6:d6:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+dZgzHx5kEltsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj NzJhMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk OTI1Nzg0ZjctOTlhNi00YjRmLWJiZDgtODYxYTcwY2ViZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVtp91ftG2aZVphKGYqhfA5vAYjcpwZHeT8+ LVtPLpx/YKerYiPqHl9zFvoTt3vQagnuh19p97M/DPM+88LgWDIPzAlQDjhKFwzO x/ost7/WSrPpvC3NBzwvpL73cj+7R/zrwG2mG2urufDcjjw6bmsB5xY0W18xpoDW j5z27CfauhRD4l+2JhB1V5vwB0PaTTr2/WpMcFnf4NSvMYbvhyGN3LVRnUU2n+pY uU3rSFHlSnZ0zDtVxTjaCWzBTppmXRY6FE0SaCapcrYpf3e87fGL2kiy9h0/n343 s3G0YQKigGSsV1t6CmEm2dxZHiILzrnUfk/w2Reqaq503WHZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXveINIOHb7ZZ+v/NJURC5NEHkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvZDhhMjllMzgtY2JiMC0z ZDI5LTgwNzUtZGMxZmE5MTY3ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5 ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1 NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqgOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1p0GCUHHGFHn4gfSEkXLE8OFH2bWAwCTa9TI3gmOPEzSw5Gyu352oa 0VlkCjNCQ+nSXGZYRASq7ZMQZDZNtWG2GUvey1qGWT9saxSa6r/wiLAvVpe0XmuN C7WSuA7DRZFOLfNsuLr6MhUdffi5fOUPnlNttIah5mrbN0ZDPdmj/cPJYBl+OuD/ z8uVLB4fQ9MozStFd+Ijq06M1GXRK2GAby0snFkYEoDKWqAvmCtq1+5WRAn9tmxZ KCnIJPhtmyKHtmYXe+kgCd9/sFoeJhWwhk+0fLUPDi7ioA+FvsMY9xXcADL5PrR/ O0T9d+cbF8kGVoP+JlWG114Pd2e21vk= -----END CERTIFICATE-----Generated at Fri Apr 11 21:39:41 2025 by rpki-client