$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/6210e133-eb91-305d-b703-1f4e8e26d25b.roa File: 6210e133-eb91-305d-b703-1f4e8e26d25b.roa (raw, json) Hash identifier: CPUHAw72o+Ps0pvjd+HGr6tVTWQ8jrWOd+lnmRYycOI= Subject key identifier: 40:CB:0B:6C:7B:63:3C:57:41:71:CF:D4:D6:CD:F0:16:13:0C:DA:7F Certificate issuer: /CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Certificate serial: 010D0C9F43285848A9961D09066FE73ED3982CC0 Authority key identifier: 5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/6210e133-eb91-305d-b703-1f4e8e26d25b.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397122 IP address blocks: 206.51.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:1d:09:06:6f:e7:3e:d3:98:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6414b99-bb9f-492a-a1ac-935a49935d9d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=ea289e4d-4553-4bbd-bbd1-73f5122a0b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:66:24:aa:c5:db:6a:25:06:ef:1a:bf:16: 65:71:e4:52:01:a5:5c:8e:95:24:18:7f:88:72:05: 52:90:57:46:0d:91:5b:ce:d1:98:1a:75:7a:30:73: 45:27:7e:99:21:ac:d1:71:4e:49:ab:0e:21:e6:15: a4:09:4b:60:87:0c:94:ac:93:37:bc:89:8d:ea:08: 8c:30:85:a9:e5:b0:07:2c:8a:ac:fc:e0:f7:ae:ea: 58:91:df:44:4d:2b:16:ad:93:0b:71:92:ac:7f:da: 71:07:9e:3e:dd:a4:d5:56:55:24:f0:2b:db:84:fa: 0b:63:05:c3:86:1c:b8:ae:db:97:5e:81:c7:3d:e0: ae:85:8d:55:4f:ad:0f:77:9e:f1:ee:38:37:f8:31: 67:a6:ba:dc:ca:ef:d1:2d:e9:6b:18:80:2a:98:6c: cc:1e:ab:f5:9f:bb:4b:e7:41:25:6d:07:ab:8f:94: 6b:83:ab:05:36:ff:fb:9a:8e:1e:39:9c:de:8c:32: 84:76:a9:3e:09:29:69:96:14:99:14:21:5c:ca:7a: 3f:c2:d6:68:0a:42:11:f1:ff:42:61:15:8b:65:17: 27:1b:f9:b6:a6:3f:8c:51:51:b5:ec:8b:ab:7b:12: 33:b2:57:ea:46:8b:2f:99:31:99:e4:79:a4:29:4d: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CB:0B:6C:7B:63:3C:57:41:71:CF:D4:D6:CD:F0:16:13:0C:DA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/6210e133-eb91-305d-b703-1f4e8e26d25b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d/f6414b99-bb9f-492a-a1ac-935a49935d9d.crl X509v3 Authority Key Identifier: keyid:5F:28:E0:AF:74:7D:2B:A5:14:85:04:6C:28:28:ED:ED:D7:F2:BD:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f6414b99-bb9f-492a-a1ac-935a49935d9d.cer sbgp-ipAddrBlock: critical IPv4: 206.51.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1f:76:70:f7:f0:10:92:cc:19:88:6a:40:d4:1b:43:f6:31: b6:34:9a:c1:28:cd:78:87:a8:06:01:6e:19:8f:8b:a2:74:b4: e0:fe:b5:a3:45:16:35:53:a7:d9:c2:1a:0a:ed:3b:70:d4:8f: 44:62:98:b1:d4:f4:d1:41:e6:8c:c8:87:46:58:4e:8e:71:77: 15:37:e7:d2:16:2c:7a:82:e5:c3:05:7f:5b:0a:29:a3:50:4e: 96:2b:b5:93:11:5a:2e:86:b0:1b:2e:78:2c:bf:d4:f3:27:ef: 8d:b6:1a:1f:af:8a:cc:76:50:a0:08:3b:21:64:7b:57:74:2b: c6:93:53:7c:fc:9a:15:e7:d5:06:4e:b6:93:5c:f2:60:f2:aa: b9:8c:64:77:d7:eb:29:4a:b1:8e:87:bf:a7:9a:9e:46:ff:67: 1d:20:81:dc:9c:4f:4b:b7:51:54:cc:85:66:2c:0f:e1:16:59: 54:17:39:3c:9c:a0:3d:a5:88:26:7c:b0:c1:70:15:ee:58:f2: c9:38:c6:f8:72:d7:7b:28:35:b4:c9:c1:52:c3:b9:35:dc:87: 0a:07:4c:c3:e9:e0:83:b9:9c:cf:07:62:56:8a:d1:0d:0b:38: 72:9e:b8:38:57:5c:92:b2:ca:74:bd:cc:91:09:00:86:28:66: 42:db:4d:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplh0JBm/nPtOYLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY0MTRiOTktYmI5Zi00OTJhLWExYWMtOTM1YTQ5OTM1 ZDlkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWEyODllNGQtNDU1My00YmJkLWJiZDEtNzNmNTEyMmEwYjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv9mJKrF22olBu8avxZlceRSAaVcjpUkGH+I cgVSkFdGDZFbztGYGnV6MHNFJ36ZIazRcU5Jqw4h5hWkCUtghwyUrJM3vImN6giM MIWp5bAHLIqs/OD3rupYkd9ETSsWrZMLcZKsf9pxB54+3aTVVlUk8CvbhPoLYwXD hhy4rtuXXoHHPeCuhY1VT60Pd57x7jg3+DFnprrcyu/RLelrGIAqmGzMHqv1n7tL 50ElbQerj5Rrg6sFNv/7mo4eOZzejDKEdqk+CSlplhSZFCFcyno/wtZoCkIR8f9C YRWLZRcnG/m2pj+MUVG17IurexIzslfqRosvmTGZ5HmkKU0igwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDLC2x7YzxXQXHP1NbN8BYTDNp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNjQx NGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVhNDk5MzVkOWQvNjIxMGUxMzMtZWI5MS0z MDVkLWI3MDMtMWY0ZThlMjZkMjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjY0MTRiOTktYmI5Zi00OTJhLWEx YWMtOTM1YTQ5OTM1ZDlkL2Y2NDE0Yjk5LWJiOWYtNDkyYS1hMWFjLTkzNWE0OTkz NWQ5ZC5jcmwwHwYDVR0jBBgwFoAUXyjgr3R9K6UUhQRsKCjt7dfyvZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mNjQxNGI5OS1iYjlmLTQ5MmEtYTFhYy05MzVh NDk5MzVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjMhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwfdnD38BCSzBmIakDUG0P2MbY0msEozXiHqAYBbhmPi6J0tOD+taNF FjVTp9nCGgrtO3DUj0RimLHU9NFB5ozIh0ZYTo5xdxU359IWLHqC5cMFf1sKKaNQ TpYrtZMRWi6GsBsueCy/1PMn7422Gh+visx2UKAIOyFke1d0K8aTU3z8mhXn1QZO tpNc8mDyqrmMZHfX6ylKsY6Hv6eankb/Zx0ggdycT0u3UVTMhWYsD+EWWVQXOTyc oD2liCZ8sMFwFe5Y8sk4xvhy13soNbTJwVLDuTXchwoHTMPp4IO5nM8HYlaK0Q0L OHKeuDhXXJKyynS9zJEJAIYoZkLbTdk= -----END CERTIFICATE-----Generated at Sat Apr 12 13:09:29 2025 by rpki-client