$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa File: cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa (raw, json) Hash identifier: gXoqK1qR21hZXkdKYgJqYIJ5inc2EeYGn2vIBTKSOB8= Subject key identifier: AE:8F:35:8D:3A:31:94:EB:FA:10:F3:FD:A7:D9:DF:A4:D1:E1:51:7C Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F432858499AF48D9C057B36507E0D7600 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 400790 IP address blocks: 207.228.218.0/24 maxlen: 24 2606:f6c0:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:8d:9c:05:7b:36:50:7e:0d:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=b118f940-7ea6-4256-a2be-b8fb11d975f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:c4:9a:30:b6:9e:fa:6d:cd:33:18:86:6f: 87:5b:40:c2:c7:0d:74:2e:85:e5:8f:7e:63:c5:0b: 49:f0:3e:d2:85:d1:27:23:a0:70:44:25:f5:f0:41: 07:8c:50:0f:d5:f7:6a:37:70:03:f3:90:f8:44:ed: 25:ec:48:de:1f:76:c4:01:8e:28:78:58:bb:6b:3a: f9:3c:ec:93:d1:cb:e3:61:2a:24:07:ad:02:50:4f: 28:5d:5a:cc:59:66:79:e6:83:a5:e5:9f:2b:48:ce: 70:24:6a:8d:c0:f0:27:80:14:49:2e:af:f5:f8:cd: c6:8a:bc:d7:01:fd:56:a2:18:73:84:12:b4:f9:09: db:ce:b1:80:6a:70:9e:61:1d:ad:f7:b8:4d:cf:e7: 71:55:da:f3:df:5f:51:ab:89:88:b2:d8:e4:c6:47: 5b:3c:b3:fe:bc:0d:96:c7:0a:bc:30:08:4b:8c:f0: 71:ae:18:88:2c:b7:47:21:d0:2a:81:40:d6:7c:ea: 7e:a6:d3:62:71:e8:41:b4:af:c7:b1:34:11:c7:83: 52:fb:10:2d:78:47:b5:c9:5e:d6:71:b0:8d:41:bc: eb:28:a1:1d:c5:ec:89:a9:4d:90:2d:b3:5b:81:94: c8:50:f8:ac:dd:ed:bf:47:ea:f4:5e:63:21:d1:00: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8F:35:8D:3A:31:94:EB:FA:10:F3:FD:A7:D9:DF:A4:D1:E1:51:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/cf7b1268-ef8f-34ed-9a98-703dd560e2ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.218.0/24 IPv6: 2606:f6c0:c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:db:d7:ed:9f:52:f7:69:de:9d:22:03:af:48:39:95:a2:a1: f7:d2:84:92:c7:b2:e7:c7:78:df:b4:5e:78:49:e4:44:cd:57: db:8d:eb:a6:1d:85:fc:d9:c0:96:90:47:cc:1e:6c:7a:5b:37: 3f:fd:3a:75:69:b9:5c:7a:57:1b:b7:a9:12:b5:f5:12:a9:ed: 0d:8d:c9:88:09:c4:4c:7e:24:4b:ea:87:7e:51:a6:56:9f:f6: 11:54:ba:ac:76:b7:51:4a:eb:10:4a:bd:b2:d5:ce:12:03:19: 4c:f0:eb:ca:d1:6e:58:fa:b2:9a:ed:62:b9:43:26:54:58:e2: 7e:08:84:41:71:b4:98:bc:a0:e1:05:61:d1:f4:d4:76:43:26: c1:3b:1f:fb:27:11:ef:1e:66:0a:1b:91:b0:a9:bd:6a:45:ac: 04:26:a5:57:ff:14:f8:d1:dc:33:ad:36:51:1d:d4:af:f4:39: 38:6c:89:a6:4e:37:28:70:a5:56:f9:f2:01:3e:0c:11:05:93: 9c:41:47:8a:d4:d6:ce:9a:d1:cf:5f:e6:e2:8a:af:35:f3:0e: d3:72:f7:1d:71:87:0b:f9:d3:36:11:65:2d:63:f5:9e:12:28: af:9b:1a:a6:28:1d:b8:ee:ff:c3:22:e3:52:84:a1:98:48:80: 54:e6:a7:88 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEma9I2cBXs2UH4NdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk YjExOGY5NDAtN2VhNi00MjU2LWEyYmUtYjhmYjExZDk3NWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2I/EmjC2nvptzTMYhm+HW0DCxw10LoXlj35j xQtJ8D7ShdEnI6BwRCX18EEHjFAP1fdqN3AD85D4RO0l7EjeH3bEAY4oeFi7azr5 POyT0cvjYSokB60CUE8oXVrMWWZ55oOl5Z8rSM5wJGqNwPAngBRJLq/1+M3GirzX Af1WohhzhBK0+QnbzrGAanCeYR2t97hNz+dxVdrz319Rq4mIstjkxkdbPLP+vA2W xwq8MAhLjPBxrhiILLdHIdAqgUDWfOp+ptNicehBtK/HsTQRx4NS+xAteEe1yV7W cbCNQbzrKKEdxeyJqU2QLbNbgZTIUPis3e2/R+r0XmMh0QAwNQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFK6PNY06MZTr+hDz/afZ36TR4VF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvY2Y3YjEyNjgtZWY4Zi0z NGVkLTlhOTgtNzAzZGQ1NjBlMmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TaMA8E AgACMAkDBwAmBvbAAMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAA9vX7Z9S92nenSIDr0g5laKh99KEksey 58d437ReeEnkRM1X243rph2F/NnAlpBHzB5sels3P/06dWm5XHpXG7epErX1Eqnt DY3JiAnETH4kS+qHflGmVp/2EVS6rHa3UUrrEEq9stXOEgMZTPDrytFuWPqymu1i uUMmVFjifgiEQXG0mLyg4QVh0fTUdkMmwTsf+ycR7x5mChuRsKm9akWsBCalV/8U +NHcM602UR3Ur/Q5OGyJpk43KHClVvnyAT4MEQWTnEFHitTWzprRz1/m4oqvNfMO 03L3HXGHC/nTNhFlLWP1nhIor5sapigduO7/wyLjUoShmEiAVOaniA== -----END CERTIFICATE-----Generated at Mon Apr 28 19:55:34 2025 by rpki-client