$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa File: 2c227bfd-f08b-398c-9969-3fff99fa4025.roa (raw, json) Hash identifier: 7dwJszFcu+vpWoeQW0Lmp/ICVU6m3MHcMPoTeTDxMw0= Subject key identifier: 20:D5:42:52:6B:30:18:E8:C2:9D:51:D8:99:E5:BF:E0:E5:22:AE:D7 Certificate issuer: /CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Certificate serial: 010D0C9F43285848FD56B571039A91FDE08A3180 Authority key identifier: 2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 397444 IP address blocks: 208.68.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:b5:71:03:9a:91:fd:e0:8a:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0b484-94d2-490f-8a68-d7588d1f3683 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=bfb8c350-ab71-4baa-bd5f-a0e762523cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:29:0c:a1:cf:44:52:0e:d3:97:10:62:91: 86:57:f7:ef:81:d7:ed:92:e1:73:15:23:1d:69:5f: 72:22:19:4b:89:45:a4:11:f0:8b:94:92:ba:3d:f8: c0:5b:5d:c7:0b:cd:bd:25:f0:38:ad:6a:ec:c5:91: 64:7b:27:af:6c:d8:5b:59:2a:32:f0:60:b8:2e:8c: 65:b3:f3:8e:0b:46:4e:9f:ce:39:74:0b:36:65:33: 55:ee:dc:14:c3:a3:e2:b3:64:db:4a:18:12:be:e9: b0:01:bd:67:ae:17:1a:47:de:23:b8:63:68:bf:ef: 42:de:39:f2:6d:d5:03:5f:8a:28:81:1f:74:e9:48: cd:7a:e7:bb:01:ea:26:c7:0c:18:14:05:62:aa:73: e2:a9:b8:e1:4e:95:3d:78:52:2d:ec:97:30:fd:57: 93:97:a8:25:6d:30:ed:ac:6c:20:08:a3:1a:6e:a7: 14:87:8b:88:4f:be:cb:fb:b8:29:4d:c4:29:88:54: 9c:b4:ca:0e:76:65:a2:cf:cc:b0:29:b6:31:5b:a9: 13:59:46:02:08:7f:ed:2d:98:f2:b8:49:1a:64:28: 07:41:fc:7d:dc:5f:16:00:f1:05:8f:c6:6a:61:59: 2c:1b:13:5c:9e:32:63:ba:66:58:c1:89:30:9d:1f: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:42:52:6B:30:18:E8:C2:9D:51:D8:99:E5:BF:E0:E5:22:AE:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/2c227bfd-f08b-398c-9969-3fff99fa4025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683/6bf0b484-94d2-490f-8a68-d7588d1f3683.crl X509v3 Authority Key Identifier: keyid:2C:7F:1E:92:2A:96:B9:4C:13:5E:EB:5C:38:45:77:97:4A:C6:5E:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6bf0b484-94d2-490f-8a68-d7588d1f3683.cer sbgp-ipAddrBlock: critical IPv4: 208.68.6.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6a:ba:41:e4:e5:cc:0e:63:f7:3e:98:f4:10:05:bc:eb:12: cc:84:f5:e8:0f:63:1c:34:d3:0c:dd:73:01:db:e6:64:88:2d: 68:62:46:00:05:b3:f5:7f:be:95:e2:2a:72:58:c3:9c:d0:eb: 61:ae:48:04:5d:5e:b3:6b:a7:9e:6d:2d:89:d9:d2:5d:49:c0: 1b:c4:3c:ef:d6:ab:8a:19:3d:1d:a2:7d:f4:27:2c:1a:38:b8: 2d:25:3d:f8:41:0a:30:11:39:60:f6:58:24:58:30:d2:ad:79: 49:a8:94:74:9e:e4:33:21:d2:a7:a4:cb:68:33:00:28:34:0b: 4b:db:be:07:fc:f8:47:95:bc:e4:de:c0:ed:71:e4:c6:8c:b6: bf:01:2e:8f:d2:e3:b2:a4:f1:26:47:99:02:3e:2e:35:f9:b4: 19:07:37:cf:d0:d1:9c:23:17:b2:8b:97:12:78:fa:26:bf:d0: a1:1c:a1:a7:7e:0f:c6:11:ee:d3:7d:08:1c:95:d7:d3:c4:2a: fe:b6:84:a6:c3:ec:92:00:ab:83:08:9b:02:60:96:c3:37:a4: 0b:d6:f3:c7:3f:b1:d8:00:10:8a:ef:62:f9:ae:b5:47:62:1d: 44:b1:18:0c:76:be:53:2e:da:bc:a4:b5:97:03:cf:16:cb:1d: 5a:c8:fc:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrVxA5qR/eCKMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJmMGI0ODQtOTRkMi00OTBmLThhNjgtZDc1ODhkMWYz NjgzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YmZiOGMzNTAtYWI3MS00YmFhLWJkNWYtYTBlNzYyNTIzY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0YpDKHPRFIO05cQYpGGV/fvgdftkuFzFSMd aV9yIhlLiUWkEfCLlJK6PfjAW13HC829JfA4rWrsxZFkeyevbNhbWSoy8GC4Loxl s/OOC0ZOn845dAs2ZTNV7twUw6Pis2TbShgSvumwAb1nrhcaR94juGNov+9C3jny bdUDX4oogR906UjNeue7AeomxwwYFAViqnPiqbjhTpU9eFIt7Jcw/VeTl6glbTDt rGwgCKMabqcUh4uIT77L+7gpTcQpiFSctMoOdmWiz8ywKbYxW6kTWUYCCH/tLZjy uEkaZCgHQfx93F8WAPEFj8ZqYVksGxNcnjJjumZYwYkwnR/foQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDVQlJrMBjowp1R2Jnlv+DlIq7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82YmYw YjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4OGQxZjM2ODMvMmMyMjdiZmQtZjA4Yi0z OThjLTk5NjktM2ZmZjk5ZmE0MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmJmMGI0ODQtOTRkMi00OTBmLThh NjgtZDc1ODhkMWYzNjgzLzZiZjBiNDg0LTk0ZDItNDkwZi04YTY4LWQ3NTg4ZDFm MzY4My5jcmwwHwYDVR0jBBgwFoAULH8ekiqWuUwTXutcOEV3l0rGXlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82YmYwYjQ4NC05NGQyLTQ5MGYtOGE2OC1kNzU4 OGQxZjM2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EQGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFqukHk5cwOY/c+mPQQBbzrEsyE9egPYxw00wzdcwHb5mSILWhiRgAF s/V/vpXiKnJYw5zQ62GuSARdXrNrp55tLYnZ0l1JwBvEPO/Wq4oZPR2iffQnLBo4 uC0lPfhBCjAROWD2WCRYMNKteUmolHSe5DMh0qeky2gzACg0C0vbvgf8+EeVvOTe wO1x5MaMtr8BLo/S47Kk8SZHmQI+LjX5tBkHN8/Q0ZwjF7KLlxJ4+ia/0KEcoad+ D8YR7tN9CByV19PEKv62hKbD7JIAq4MImwJglsM3pAvW88c/sdgAEIrvYvmutUdi HUSxGAx2vlMu2ryktZcDzxbLHVrI/Dw= -----END CERTIFICATE-----Generated at Fri Apr 11 21:34:15 2025 by rpki-client