$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa File: 2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa (raw, json) Hash identifier: wJ2GONyap80dEBNpFkiEFDjy2Tbqd6bqcjMYLYDoNsU= Subject key identifier: 8C:B0:F1:16:69:44:EB:83:F7:FA:26:65:9D:CF:1C:57:7A:93:12:C6 Certificate issuer: /CN=411f75d5-7410-4ca6-b23e-146e3726e630 Certificate serial: 010D0C9F43285849CE9A3CC68E060A928F6DEB00 Authority key identifier: C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 0 IP address blocks: 206.80.238.0/24 maxlen: 24 2001:504:91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:3c:c6:8e:06:0a:92:8f:6d:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411f75d5-7410-4ca6-b23e-146e3726e630 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=af1cd16f-ddd4-4fe7-953a-4b9949cf5146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3e:5b:60:ea:e4:bd:cd:70:6c:77:50:90:00: 41:d2:6e:9f:7d:a7:bb:db:56:55:d7:fe:0b:42:b7: a9:3d:6e:28:6e:65:6b:0a:cd:f2:4c:bd:97:48:16: 49:ef:e5:12:64:0f:35:bd:a4:f6:68:06:b2:6c:35: 26:4e:97:2e:cb:6b:44:c7:b0:07:48:78:2e:2e:18: 3a:8e:57:f9:e5:0b:a9:4b:b7:d6:c0:aa:3d:73:64: 6e:db:4d:f5:b1:c6:61:28:36:4e:b1:aa:ee:e8:36: f6:2b:50:ae:a9:dd:06:b5:32:e3:e7:77:b9:02:de: 3a:2b:7d:6c:00:31:5e:3c:50:1e:fa:48:4c:ec:6d: ca:49:f1:7e:d4:ba:4b:36:0e:69:10:73:66:78:45: 05:d8:f6:b4:76:a9:61:51:35:a0:ed:92:b4:0b:01: 43:e5:9d:c0:98:bf:9b:34:5f:ec:cc:ac:43:73:6f: d0:d7:ea:53:e9:0e:91:65:dd:ad:61:34:92:eb:6c: 2b:bb:3b:84:98:68:a4:1a:8a:f7:85:0d:6c:31:9a: 57:4b:45:0b:e1:3f:99:0b:8e:ba:98:68:99:0f:7e: e3:0e:40:ad:dc:89:cd:f4:f9:01:af:e6:de:4e:b4: 12:6b:a0:b2:67:49:27:38:03:47:ac:19:b7:bc:fc: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B0:F1:16:69:44:EB:83:F7:FA:26:65:9D:CF:1C:57:7A:93:12:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/2b4b8ac1-a157-3e21-9fb9-18652e74ee58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630/411f75d5-7410-4ca6-b23e-146e3726e630.crl X509v3 Authority Key Identifier: keyid:C9:43:90:18:2C:34:67:5A:E2:72:BB:62:46:E2:66:16:1E:4D:64:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/411f75d5-7410-4ca6-b23e-146e3726e630.cer sbgp-ipAddrBlock: critical IPv4: 206.80.238.0/24 IPv6: 2001:504:91::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5a:79:4f:b7:0e:32:35:cf:01:79:4f:b8:33:04:65:80:b3: 69:63:85:b8:81:c5:11:6c:ff:68:83:f8:e7:d3:6f:ef:c2:fa: ae:af:25:37:49:21:af:29:f3:7e:d3:1e:68:29:54:3b:62:c8: c5:0c:dc:fe:d7:58:12:10:4f:ad:b5:77:da:32:41:18:af:f7: 66:27:90:9c:f9:75:ff:ad:6f:62:e1:aa:9c:0c:fa:40:80:b7: b1:b1:35:68:81:84:8e:70:6f:19:b7:52:d9:3d:99:91:dd:d6: ac:f6:bd:ba:af:6c:46:1c:d0:af:9a:d5:42:b3:a4:d9:a1:00: 5d:ea:2a:74:5d:21:83:58:48:36:f7:75:b6:24:3e:96:68:c3: 4e:29:f3:3c:a9:5d:52:7e:10:35:05:cd:1c:a4:88:08:a7:a1: 8e:a6:17:86:23:89:8f:2c:27:90:3c:4a:1c:65:76:94:db:26: 40:be:f5:0c:bc:d6:e2:7e:e5:44:9f:ee:a1:a7:ed:51:2a:2a: cb:d7:30:75:ce:d3:bc:2e:7a:38:e5:61:6f:35:fc:27:cf:f2: 7b:df:c5:da:aa:fb:44:3c:a8:a7:62:e5:46:b7:16:82:29:4f: 58:cd:98:31:21:7a:56:31:6c:c9:cf:b9:fc:c2:59:76:22:a5: 10:f6:70:33 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEnOmjzGjgYKko9t6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDExZjc1ZDUtNzQxMC00Y2E2LWIyM2UtMTQ2ZTM3MjZl NjMwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YWYxY2QxNmYtZGRkNC00ZmU3LTk1M2EtNGI5OTQ5Y2Y1MTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj5bYOrkvc1wbHdQkABB0m6ffae721ZV1/4L QrepPW4obmVrCs3yTL2XSBZJ7+USZA81vaT2aAaybDUmTpcuy2tEx7AHSHguLhg6 jlf55QupS7fWwKo9c2Ru2031scZhKDZOsaru6Db2K1Cuqd0GtTLj53e5At46K31s ADFePFAe+khM7G3KSfF+1LpLNg5pEHNmeEUF2Pa0dqlhUTWg7ZK0CwFD5Z3AmL+b NF/szKxDc2/Q1+pT6Q6RZd2tYTSS62wruzuEmGikGor3hQ1sMZpXS0UL4T+ZC466 mGiZD37jDkCt3InN9PkBr+beTrQSa6CyZ0knOANHrBm3vPx6CwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIyw8RZpROuD9/omZZ3PHFd6kxLGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80MTFm NzVkNS03NDEwLTRjYTYtYjIzZS0xNDZlMzcyNmU2MzAvMmI0YjhhYzEtYTE1Ny0z ZTIxLTlmYjktMTg2NTJlNzRlZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDExZjc1ZDUtNzQxMC00Y2E2LWIy M2UtMTQ2ZTM3MjZlNjMwLzQxMWY3NWQ1LTc0MTAtNGNhNi1iMjNlLTE0NmUzNzI2 ZTYzMC5jcmwwHwYDVR0jBBgwFoAUyUOQGCw0Z1ricrtiRuJmFh5NZMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80MTFmNzVkNS03NDEwLTRjYTYtYjIzZS0xNDZl MzcyNmU2MzAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzlDuMA8E AgACMAkDBwAgAQUEAJEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAqlp5T7cOMjXPAXlPuDMEZYCzaWOFuIHF EWz/aIP459Nv78L6rq8lN0khrynzftMeaClUO2LIxQzc/tdYEhBPrbV32jJBGK/3 ZieQnPl1/61vYuGqnAz6QIC3sbE1aIGEjnBvGbdS2T2Zkd3WrPa9uq9sRhzQr5rV QrOk2aEAXeoqdF0hg1hINvd1tiQ+lmjDTinzPKldUn4QNQXNHKSICKehjqYXhiOJ jywnkDxKHGV2lNsmQL71DLzW4n7lRJ/uoaftUSoqy9cwdc7TvC56OOVhbzX8J8/y e9/F2qr7RDyop2LlRrcWgilPWM2YMSF6VjFsyc+5/MJZdiKlEPZwMw== -----END CERTIFICATE-----Generated at Sun Jun 1 03:09:41 2025 by rpki-client