$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbd3d087-2d93-3b2e-ae98-712b83e21ebf.roa File: cbd3d087-2d93-3b2e-ae98-712b83e21ebf.roa (raw, json) Hash identifier: Y7PlQsmBCuNYu51xON1B+Bk0TNjpoqWCC5GH/R/1GD8= Subject key identifier: 64:6F:2B:B4:FC:E5:B6:48:7D:91:50:1D:12:ED:81:BC:52:A7:49:3D Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F65BDEBEA5C41A76713A25C0 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbd3d087-2d93-3b2e-ae98-712b83e21ebf.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 60144 IP address blocks: 206.161.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:de:be:a5:c4:1a:76:71:3a:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=fc77aaee-bad4-4218-8a34-565c75e1a201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:48:2c:ab:b8:b4:00:36:43:04:44:89:79:d8: d5:a1:86:8e:9f:32:bb:9e:24:aa:17:44:6b:35:b8: 37:09:6a:b8:2f:60:e8:d3:69:c7:da:38:75:33:11: d3:06:91:14:82:a3:64:f8:72:3c:e2:0a:18:ee:5a: c1:7d:1c:c6:30:55:3c:f5:71:01:5a:c7:2f:3a:94: fc:1a:b0:e5:38:6b:45:a0:86:1e:92:c6:96:7b:99: a9:5b:d6:53:ae:5a:fe:d7:34:83:46:92:aa:ed:23: b5:ad:1f:5f:2b:bf:f0:57:b2:7c:8a:07:69:21:a9: 5f:17:f1:a4:2e:01:58:1c:43:1c:02:31:76:aa:d8: e4:c7:43:e2:60:94:84:44:fb:a0:04:eb:6e:38:f6: 9b:d0:cb:25:bf:0b:bf:98:37:bb:fb:a3:6f:22:5b: 47:dc:9f:8b:18:43:72:4a:65:e8:7b:19:7b:5a:c1: a4:e4:bc:a6:a3:7c:db:48:f3:3b:b3:68:d2:da:dd: c2:60:77:56:c5:a7:f7:77:74:90:55:34:05:47:7d: 24:20:cd:0a:b8:d6:44:18:4e:2c:7a:94:71:1a:84: 34:3e:37:f1:60:84:95:3a:4c:d1:0e:11:c4:c1:2f: 4e:46:e1:39:42:23:5c:f8:67:1f:34:16:d1:b0:ab: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6F:2B:B4:FC:E5:B6:48:7D:91:50:1D:12:ED:81:BC:52:A7:49:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cbd3d087-2d93-3b2e-ae98-712b83e21ebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 206.161.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:77:c4:af:44:91:5b:60:a4:22:d7:9f:b6:c9:b2:f2:44:b5: 54:52:60:e7:47:e8:e4:eb:3f:7b:49:29:6a:5b:59:05:af:6c: 08:3b:a9:15:56:08:52:29:35:20:95:e7:00:ea:8c:93:d6:8f: 29:b1:83:67:1d:e3:8d:66:0b:35:6a:a9:a6:c9:2b:1b:78:85: 69:59:85:1d:0c:ce:a9:8f:a0:c2:1b:66:e4:cd:0d:0d:1c:ad: 2e:5b:bd:60:89:05:38:ae:25:0c:fc:3f:4a:c8:d1:a8:63:3e: a4:56:90:27:8e:5a:19:88:42:24:e7:c6:7a:94:99:be:cd:81: 16:d2:1f:f2:49:62:8b:fd:70:ab:76:63:5d:2b:cf:72:2e:78: 07:97:2c:dc:fa:8a:42:8c:b4:5b:4b:84:7d:d8:19:06:19:21: aa:c4:24:2b:80:89:15:05:cf:3f:05:f2:b0:b8:a9:f7:3a:2d: 4b:91:ee:cd:29:71:df:fa:ff:0f:e0:0d:b1:f9:eb:f6:c4:e0: 85:0f:e4:92:0b:c1:07:90:e1:3a:d3:20:b1:4e:f8:c8:cb:f2: e5:71:b4:36:f1:b6:17:26:dc:7a:18:a4:6f:cc:60:2c:c1:5b: 15:23:97:15:f8:42:c3:8d:40:7d:43:4f:03:e5:c2:c3:3e:ea: fb:93:3b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W96+pcQadnE6JcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZmM3N2FhZWUtYmFkNC00MjE4LThhMzQtNTY1Yzc1ZTFhMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUgsq7i0ADZDBESJedjVoYaOnzK7niSqF0Rr Nbg3CWq4L2Do02nH2jh1MxHTBpEUgqNk+HI84goY7lrBfRzGMFU89XEBWscvOpT8 GrDlOGtFoIYeksaWe5mpW9ZTrlr+1zSDRpKq7SO1rR9fK7/wV7J8igdpIalfF/Gk LgFYHEMcAjF2qtjkx0PiYJSERPugBOtuOPab0Mslvwu/mDe7+6NvIltH3J+LGENy SmXoexl7WsGk5Lymo3zbSPM7s2jS2t3CYHdWxaf3d3SQVTQFR30kIM0KuNZEGE4s epRxGoQ0PjfxYISVOkzRDhHEwS9ORuE5QiNc+GcfNBbRsKtzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRvK7T85bZIfZFQHRLtgbxSp0k9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvY2JkM2QwODctMmQ5My0z YjJlLWFlOTgtNzEyYjgzZTIxZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI53xK9EkVtgpCLXn7bJsvJEtVRSYOdH6OTrP3tJKWpbWQWvbAg7qRVW CFIpNSCV5wDqjJPWjymxg2cd441mCzVqqabJKxt4hWlZhR0MzqmPoMIbZuTNDQ0c rS5bvWCJBTiuJQz8P0rI0ahjPqRWkCeOWhmIQiTnxnqUmb7NgRbSH/JJYov9cKt2 Y10rz3IueAeXLNz6ikKMtFtLhH3YGQYZIarEJCuAiRUFzz8F8rC4qfc6LUuR7s0p cd/6/w/gDbH56/bE4IUP5JILwQeQ4TrTILFO+MjL8uVxtDbxthcm3HoYpG/MYCzB WxUjlxX4QsONQH1DTwPlwsM+6vuTO5A= -----END CERTIFICATE-----Generated at Sun Apr 6 08:14:59 2025 by rpki-client