$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa File: f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa (raw, json) Hash identifier: NYfHff+7R2sJB8KwnMue1jbuPBZzlEkB2oGHWJ/WLng= Subject key identifier: 26:31:04:CA:9C:D3:A2:5D:AD:33:04:F0:98:AB:94:8C:1F:D1:CC:66 Certificate issuer: /CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d Certificate serial: 010D0C9F43285848B6261A0C562D8DADCA4AC4E0 Authority key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 399240 IP address blocks: 206.168.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:1a:0c:56:2d:8d:ad:ca:4a:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=fa434e49-3afd-469e-ac5d-16e4eaf31f3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ba:e3:e3:5b:15:b8:fe:02:31:ed:4c:ee:c2: c8:7a:b0:4c:d2:2a:a4:a3:d9:b5:a3:29:10:d9:07: c3:6e:9d:0b:eb:28:75:08:aa:f5:f0:8b:6e:19:42: 26:69:71:24:8e:59:d5:59:47:08:ef:5b:f7:78:4a: a2:ca:c5:4e:13:00:de:28:bb:18:ea:25:b4:07:19: 5c:39:42:f7:b4:02:34:d9:e1:7b:bf:6d:4b:c6:31: 1a:2d:77:bf:fd:3a:59:71:78:e2:73:a7:9a:28:c8: 57:3e:45:32:9a:35:a0:3e:9a:50:44:33:a0:18:53: c2:bd:10:86:55:92:f1:4b:03:cc:fc:10:73:db:b7: 59:aa:5a:44:38:87:4d:f8:c8:bb:9c:fc:27:65:03: f4:0b:af:4e:56:f5:b1:7b:8b:ca:9d:28:f5:35:07: cc:0c:d5:af:b6:30:0c:45:0a:49:26:1c:d2:4b:07: a1:30:e8:61:0a:ef:30:0b:8d:d2:8f:71:db:dd:d7: 04:51:80:d5:f8:e8:22:f6:4f:b6:3e:1b:71:ec:16: 69:04:b0:5a:93:a1:6f:64:65:88:5c:f7:9c:90:16: 89:35:70:3b:d6:c6:e6:38:21:65:7e:b6:ab:5c:a7: 30:bd:58:15:fb:89:1e:44:ce:db:92:5c:17:11:39: c4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:31:04:CA:9C:D3:A2:5D:AD:33:04:F0:98:AB:94:8C:1F:D1:CC:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl X509v3 Authority Key Identifier: keyid:6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer sbgp-ipAddrBlock: critical IPv4: 206.168.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:92:42:23:78:55:d2:b8:1a:75:e6:62:c2:68:f0:e2:eb:6b: 37:4d:30:d9:10:43:49:f9:5f:01:37:20:d7:d6:b8:0d:51:eb: f6:d0:07:08:73:f4:30:bb:1f:b5:43:aa:ce:60:df:d0:1c:57: 1f:db:32:79:be:06:d7:26:e1:ae:67:58:6c:cf:96:ff:b3:99: 2d:85:de:40:d9:4a:8a:12:8b:9b:9f:ba:ab:7f:ef:7f:5b:9d: e6:dc:44:8c:66:1f:15:7f:33:cc:33:cf:c5:3a:46:f5:51:e6: bb:81:bd:01:1b:5c:89:6e:9f:c1:61:2e:4f:a1:da:e4:e7:85: b9:6a:5d:ca:d7:15:20:be:ce:bb:a9:15:04:67:61:13:21:fd: d2:87:9f:50:29:3e:6d:ee:19:27:f6:fb:eb:2f:9f:44:1a:1c: 4f:2e:ff:e4:b6:ef:b5:6f:62:d6:67:3f:c6:ab:37:5d:81:02: 39:2c:72:33:62:a6:f9:6b:19:d7:81:e6:db:0b:4c:48:a3:ad: 27:3a:1c:11:a3:4a:3c:c5:d4:f2:8e:89:1e:74:1c:5f:47:21: f7:19:95:8a:ed:0e:86:87:b4:b5:0b:77:3e:6c:8a:47:31:98: c1:99:28:15:0b:49:bc:2b:b2:52:28:ce:71:28:04:7f:8e:62: 27:e6:e5:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhoMVi2NrcpKxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI2MzZhMWMtYzE0Mi00MWVlLTlmNDMtOTlmNDVjYTJk YzFkMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk ZmE0MzRlNDktM2FmZC00NjllLWFjNWQtMTZlNGVhZjMxZjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7rj41sVuP4CMe1M7sLIerBM0iqko9m1oykQ 2QfDbp0L6yh1CKr18ItuGUImaXEkjlnVWUcI71v3eEqiysVOEwDeKLsY6iW0Bxlc OUL3tAI02eF7v21LxjEaLXe//TpZcXjic6eaKMhXPkUymjWgPppQRDOgGFPCvRCG VZLxSwPM/BBz27dZqlpEOIdN+Mi7nPwnZQP0C69OVvWxe4vKnSj1NQfMDNWvtjAM RQpJJhzSSwehMOhhCu8wC43Sj3Hb3dcEUYDV+Ogi9k+2Phtx7BZpBLBak6FvZGWI XPeckBaJNXA71sbmOCFlfrarXKcwvVgV+4keRM7bklwXETnE6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYxBMqc06JdrTME8JirlIwf0cxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMjYz NmExYy1jMTQyLTQxZWUtOWY0My05OWY0NWNhMmRjMWQvZjcwZmUzNzAtZmEwOC0z ZWIxLWI1MzctOWY4NWUxYzdjZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjI2MzZhMWMtYzE0Mi00MWVlLTlm NDMtOTlmNDVjYTJkYzFkL2YyNjM2YTFjLWMxNDItNDFlZS05ZjQzLTk5ZjQ1Y2Ey ZGMxZC5jcmwwHwYDVR0jBBgwFoAUanPt0X13vMGAikZJ/87Wtmj11XAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMjYzNmExYy1jMTQyLTQxZWUtOWY0My05OWY0 NWNhMmRjMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqSQiN4VdK4GnXmYsJo8OLrazdNMNkQQ0n5XwE3INfWuA1R6/bQBwhz 9DC7H7VDqs5g39AcVx/bMnm+Btcm4a5nWGzPlv+zmS2F3kDZSooSi5ufuqt/739b nebcRIxmHxV/M8wzz8U6RvVR5ruBvQEbXIlun8FhLk+h2uTnhblqXcrXFSC+zrup FQRnYRMh/dKHn1ApPm3uGSf2++svn0QaHE8u/+S277VvYtZnP8arN12BAjkscjNi pvlrGdeB5tsLTEijrSc6HBGjSjzF1PKOiR50HF9HIfcZlYrtDoaHtLULdz5sikcx mMGZKBULSbwrslIoznEoBH+OYifm5SM= -----END CERTIFICATE-----Generated at Sat Apr 12 09:28:21 2025 by rpki-client