$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa File: 2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa (raw, json) Hash identifier: idKPKmVRQ/TOSWSGT2PH1KiQc3/TgFHvObgqtJg5/1Q= Subject key identifier: 6A:20:6B:8D:04:50:02:51:F2:D0:57:B9:AA:06:49:8C:B2:A2:91:D6 Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F43285849151156F3AB789C099FD7C6C0 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 400790 IP address blocks: 207.228.217.0/24 maxlen: 24 2606:f6c0:40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:56:f3:ab:78:9c:09:9f:d7:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=31c1175a-9aa9-4bcf-91e7-da8c0df21412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2e:88:b7:0a:04:20:b3:84:91:19:f6:2d:dd: a7:e6:91:d0:2f:4a:cb:90:18:6f:f5:f1:37:89:19: 16:28:27:2d:53:7b:f1:34:af:05:74:e0:58:1b:c9: e2:6e:e2:f4:66:e0:74:8a:9e:6f:c8:c7:81:ae:20: 5a:47:d0:e6:44:a4:76:cb:d9:b0:d7:b6:0a:5f:73: 17:8e:22:aa:e1:63:66:37:1e:e7:07:f3:c3:5d:5c: 07:12:ff:83:5e:c6:6b:b6:60:42:01:21:bd:6f:c4: fa:92:66:d7:39:c8:a6:62:b6:4e:ec:62:51:93:9d: 12:0f:89:5a:b5:d2:74:a5:db:df:a0:cd:1e:4a:ed: 5f:5b:a9:53:dc:4d:34:cb:d0:20:7d:51:f5:23:4e: d3:d9:76:67:b1:11:39:79:6d:4c:12:ea:11:b4:31: 7c:af:69:15:71:20:c1:95:00:97:ea:ce:67:99:c1: 42:22:43:74:e1:1f:ef:1b:4f:f6:a4:fd:31:fd:51: 8e:94:a1:1d:13:75:c1:7e:2d:c8:fa:ec:77:0d:35: 86:09:6f:d8:3b:70:c3:10:b9:bd:27:95:89:7c:82: 74:b2:52:d5:68:21:7a:0d:d5:05:d2:70:a3:2c:ca: 0d:d0:f2:38:3d:a0:89:e7:94:b8:88:85:a9:e5:4e: 96:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:20:6B:8D:04:50:02:51:F2:D0:57:B9:AA:06:49:8C:B2:A2:91:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2a1659dd-d59c-3990-9ca4-28f1c90ccdc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.217.0/24 IPv6: 2606:f6c0:40::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:8f:55:eb:2c:6e:f4:02:84:b3:4b:4e:1b:77:da:8d:61:7a: 4b:33:e3:8a:62:ce:84:72:1b:e1:91:cf:be:a6:54:1c:6b:7b: 58:ed:fa:89:4a:25:fd:92:b0:c2:97:cc:aa:c5:a5:69:a9:f2: a2:74:e0:bb:e6:ac:20:10:34:24:95:22:58:a8:c0:8a:09:1a: 91:72:52:1c:d2:6c:ce:75:86:f4:3d:af:9c:6a:64:e5:7d:e6: 1c:2e:f6:88:40:be:86:26:e2:ba:03:e0:f9:f5:a2:92:f3:8a: 18:4e:ed:c1:92:27:1f:aa:0b:1c:9b:a6:3f:b5:09:c3:12:73: 64:b5:11:cb:ec:e4:16:86:4e:66:ca:6d:87:64:6b:9f:16:0f: b0:d5:2b:08:f7:1b:97:b6:0e:1d:b3:71:92:26:9e:a8:cd:66: 39:5e:23:6b:18:ec:3b:bf:8e:50:d1:54:af:c3:e7:b5:93:00: 3b:13:b0:b9:31:bc:c2:21:e2:fe:39:59:d2:b6:a7:9a:02:ba: 63:a9:09:41:93:67:2c:f0:2e:97:e5:a5:1b:77:58:d7:34:54: 5e:92:33:a0:73:b9:01:2e:99:fb:ce:45:a3:18:57:c9:ca:2c: 1d:05:35:0f:00:3c:a9:96:bd:27:5d:aa:9b:86:b2:bd:b2:de: b6:25:4a:dd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkVEVbzq3icCZ/XxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk MzFjMTE3NWEtOWFhOS00YmNmLTkxZTctZGE4YzBkZjIxNDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky6ItwoEILOEkRn2Ld2n5pHQL0rLkBhv9fE3 iRkWKCctU3vxNK8FdOBYG8nibuL0ZuB0ip5vyMeBriBaR9DmRKR2y9mw17YKX3MX jiKq4WNmNx7nB/PDXVwHEv+DXsZrtmBCASG9b8T6kmbXOcimYrZO7GJRk50SD4la tdJ0pdvfoM0eSu1fW6lT3E00y9AgfVH1I07T2XZnsRE5eW1MEuoRtDF8r2kVcSDB lQCX6s5nmcFCIkN04R/vG0/2pP0x/VGOlKEdE3XBfi3I+ux3DTWGCW/YO3DDELm9 J5WJfIJ0slLVaCF6DdUF0nCjLMoN0PI4PaCJ55S4iIWp5U6W0QIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGoga40EUAJR8tBXuaoGSYyyopHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvMmExNjU5ZGQtZDU5Yy0z OTkwLTljYTQtMjhmMWM5MGNjZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TZMA8E AgACMAkDBwAmBvbAAEAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMo9V6yxu9AKEs0tOG3fajWF6SzPjimLO hHIb4ZHPvqZUHGt7WO36iUol/ZKwwpfMqsWlaanyonTgu+asIBA0JJUiWKjAigka kXJSHNJsznWG9D2vnGpk5X3mHC72iEC+hibiugPg+fWikvOKGE7twZInH6oLHJum P7UJwxJzZLURy+zkFoZOZspth2RrnxYPsNUrCPcbl7YOHbNxkiaeqM1mOV4jaxjs O7+OUNFUr8PntZMAOxOwuTG8wiHi/jlZ0ranmgK6Y6kJQZNnLPAul+WlG3dY1zRU XpIzoHO5AS6Z+85FoxhXycosHQU1DwA8qZa9J12qm4ayvbLetiVK3Q== -----END CERTIFICATE-----Generated at Mon Apr 28 09:23:19 2025 by rpki-client