$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa File: 69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa (raw, json) Hash identifier: Hz6CbRtak6qlDBn/2rD2101tsY3j6LCGnzAyHeukfcw= Subject key identifier: CC:99:46:B1:46:A8:7A:A0:BC:27:C3:9A:52:BD:02:69:B2:20:06:5E Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F43285849061B20AAD99A6FC0DAA27480 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa Signing time: Thu 27 Feb 2025 17:23:20 +0000 ROA not before: Thu 27 Feb 2025 17:23:20 +0000 ROA not after: Wed 28 May 2025 16:23:20 +0000 asID: 7029 IP address blocks: 206.174.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:1b:20:aa:d9:9a:6f:c0:da:a2:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Feb 27 17:23:20 2025 GMT Not After : May 28 16:23:20 2025 GMT Subject: CN=5ce1eebe-5cfa-4576-88fd-df93618dfbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:ab:98:4d:9c:29:a9:91:db:b1:97:09:ba: 04:75:57:c4:bf:02:c7:c1:3c:58:c1:f6:8d:83:8e: b9:70:99:8b:82:86:b0:bb:04:0b:d8:97:57:42:f9: 05:8c:e4:1c:19:0d:e0:3f:75:01:04:29:88:47:47: e8:18:d1:7b:4d:b2:6e:8f:d2:53:f8:75:3c:e4:9c: 76:b8:d6:b7:16:92:81:63:df:e4:d5:1b:15:67:cb: fa:87:87:2a:3c:4f:76:94:96:19:bb:21:fb:ab:bd: 18:9c:d7:b1:52:f7:05:8f:a4:e4:e0:16:76:e4:d7: ff:58:11:2b:ed:dd:f3:27:48:1d:b0:35:9c:e3:26: 38:75:3d:c7:e1:24:ca:61:60:2f:1b:c2:e4:8d:7f: a5:23:88:ad:cb:0d:49:48:d4:3b:e4:5c:e7:ef:f7: 88:89:99:8f:06:b1:b8:1e:d8:05:4e:08:b0:82:38: b2:4d:25:10:1b:f9:8b:14:0b:0c:7b:57:dd:af:83: 52:70:ca:af:81:5d:95:21:07:f0:5f:36:26:6a:cd: 6f:b0:4b:8c:72:38:1f:4f:21:d6:ac:a5:cc:bf:43: 41:36:e2:df:16:d0:b8:df:3b:cb:9b:8c:23:87:f6: 81:69:6d:cc:1f:c7:b5:e0:72:ca:b7:e9:2b:6a:b3: fa:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:99:46:B1:46:A8:7A:A0:BC:27:C3:9A:52:BD:02:69:B2:20:06:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/69c7484d-2ed4-3b91-ba13-f1144dfc0657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c3:7c:7f:74:91:19:22:cd:53:63:06:9a:22:f5:4d:f6:ad: c8:48:ab:17:5b:9d:a4:99:0b:46:95:01:b1:1e:21:bc:1a:77: 20:70:d1:ec:78:a5:bc:33:a4:3c:d4:48:db:17:1d:1a:31:6a: 2b:7a:f4:6c:4d:dc:5a:e5:ec:e7:bb:25:48:21:a5:c3:e4:77: b1:7a:e2:e3:17:86:5d:c3:11:04:16:3d:3d:ed:c8:e8:e9:34: e8:1a:37:4c:fb:71:1f:5f:66:8b:46:b8:c2:2d:97:c1:3f:ef: a8:93:ff:c7:3d:a5:19:ab:04:81:ba:88:56:55:64:10:7d:22: a4:b0:b7:0f:a6:dc:66:e3:2c:0c:02:66:28:00:cb:f9:3f:5d: c3:2d:27:13:a4:5f:64:f6:e4:6f:aa:f8:ce:ed:e3:1f:47:4c: b6:15:2c:06:0e:a2:ac:57:77:e5:8e:7b:1e:bc:5c:4e:3d:18: a6:c6:a4:30:17:5a:2b:96:83:6a:8d:25:a3:c1:54:ca:9c:eb: da:d2:f2:29:a9:ca:32:23:e6:f3:36:eb:58:6e:fe:ab:97:f3: 60:67:61:13:76:9a:cc:6e:fd:6b:29:e9:08:c3:f7:21:79:14: 89:c5:0b:5b:d1:a9:31:21:f7:e8:96:e3:d7:eb:95:f5:7c:b4: da:0f:62:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGGyCq2ZpvwNqidIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MDIyNzE3MjMyMFoXDTI1MDUyODE2MjMyMFowLzEtMCsGA1UEAxMk NWNlMWVlYmUtNWNmYS00NTc2LTg4ZmQtZGY5MzYxOGRmYmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZyrmE2cKamR27GXCboEdVfEvwLHwTxYwfaN g465cJmLgoawuwQL2JdXQvkFjOQcGQ3gP3UBBCmIR0foGNF7TbJuj9JT+HU85Jx2 uNa3FpKBY9/k1RsVZ8v6h4cqPE92lJYZuyH7q70YnNexUvcFj6Tk4BZ25Nf/WBEr 7d3zJ0gdsDWc4yY4dT3H4STKYWAvG8LkjX+lI4ityw1JSNQ75Fzn7/eIiZmPBrG4 HtgFTgiwgjiyTSUQG/mLFAsMe1fdr4NScMqvgV2VIQfwXzYmas1vsEuMcjgfTyHW rKXMv0NBNuLfFtC43zvLm4wjh/aBaW3MH8e14HLKt+krarP6swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyZRrFGqHqgvCfDmlK9AmmyIAZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvNjljNzQ4NGQtMmVkNC0z YjkxLWJhMTMtZjExNDRkZmMwNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzq6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnDfH90kRkizVNjBpoi9U32rchIqxdbnaSZC0aVAbEeIbwadyBw0ex4 pbwzpDzUSNsXHRoxait69GxN3Frl7Oe7JUghpcPkd7F64uMXhl3DEQQWPT3tyOjp NOgaN0z7cR9fZotGuMItl8E/76iT/8c9pRmrBIG6iFZVZBB9IqSwtw+m3GbjLAwC ZigAy/k/XcMtJxOkX2T25G+q+M7t4x9HTLYVLAYOoqxXd+WOex68XE49GKbGpDAX WiuWg2qNJaPBVMqc69rS8impyjIj5vM261hu/quX82BnYRN2msxu/Wsp6QjD9yF5 FInFC1vRqTEh9+iW49frlfV8tNoPYuM= -----END CERTIFICATE-----Generated at Sat Apr 5 20:31:04 2025 by rpki-client