$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/585d4a39-5934-3024-8706-f6af69baec72.roa File: 585d4a39-5934-3024-8706-f6af69baec72.roa (raw, json) Hash identifier: 0KawGALUGcU4PgeWLOUvFvIyaklCRJaQKupUcR2D22U= Subject key identifier: 28:E9:6B:87:92:92:CF:17:E3:B2:2D:6F:EC:A2:A3:B1:D7:C9:D2:3F Certificate issuer: /CN=ac04797e-f41e-4575-a76e-d3656d2d0da3 Certificate serial: 010D0C9F4328584957F3FE414B5B27F9430F3980 Authority key identifier: 00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/585d4a39-5934-3024-8706-f6af69baec72.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 206.252.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fe:41:4b:5b:27:f9:43:0f:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac04797e-f41e-4575-a76e-d3656d2d0da3 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=10481d27-7621-403c-8c19-6d403df6dd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:85:65:1e:b1:5e:48:c0:32:9f:a4:0c:da: 6f:2e:79:77:a2:0f:32:00:e8:86:89:34:52:8b:f0: 4f:f0:ca:c5:1b:02:e1:f4:3e:63:5d:e8:0a:d5:07: 80:f8:12:ef:e3:f8:01:9e:18:8f:fc:3a:d5:c0:39: c3:94:a1:a2:9e:06:99:83:f0:d0:e3:8c:60:0a:f0: ba:82:82:eb:9e:e4:ea:09:72:cf:b9:2e:a7:1e:65: 73:f3:30:18:2f:b1:03:90:c1:ad:3f:f0:90:da:dd: f6:29:1f:a3:04:3e:2e:4d:a5:3a:75:77:09:78:ec: 45:40:d7:4a:05:bb:c8:32:87:28:0f:6b:92:1c:c0: 7f:86:c1:ed:c7:8a:15:a3:ff:fa:1c:e3:f7:2c:cc: fd:f1:0f:ce:59:34:ae:49:af:f6:e6:f4:b2:aa:bb: 09:7e:36:3b:cb:29:92:86:26:ad:2e:c4:c5:54:7e: 5a:82:e3:23:83:25:9f:9e:c5:1f:72:41:10:4c:25: 2d:c5:08:e2:cc:a5:64:27:f9:5d:ca:54:c9:90:72: 97:49:8e:08:23:59:ef:99:28:24:60:1e:6b:93:c6: 20:45:0d:c7:b0:21:9f:72:75:ae:a4:0a:ea:48:65: 85:46:6f:bb:6b:c5:5a:cd:46:39:16:9e:f0:55:dd: be:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E9:6B:87:92:92:CF:17:E3:B2:2D:6F:EC:A2:A3:B1:D7:C9:D2:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/585d4a39-5934-3024-8706-f6af69baec72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3/ac04797e-f41e-4575-a76e-d3656d2d0da3.crl X509v3 Authority Key Identifier: keyid:00:07:26:10:0F:18:C6:93:C3:1D:4A:E3:AD:2C:56:A2:DD:12:6F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac04797e-f41e-4575-a76e-d3656d2d0da3.cer sbgp-ipAddrBlock: critical IPv4: 206.252.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:5e:2e:69:14:7d:b3:9d:41:2a:92:45:59:46:e1:d9:57:08: 85:bf:93:52:54:bb:67:60:15:61:57:51:80:a3:ae:ae:bf:19: a5:b1:d9:e7:6a:e9:de:99:db:30:6b:31:fb:de:90:83:10:eb: 92:e1:65:8b:c1:1a:0d:2c:26:0d:7a:48:40:45:3a:26:fa:40: de:a9:eb:3a:31:a6:56:8e:00:9a:63:a1:8f:e2:80:27:ec:5d: 9b:e4:af:35:73:19:d5:df:28:21:3a:6a:ca:60:aa:66:9c:c2: ae:7a:13:72:dc:10:99:0d:86:d3:f0:5e:9e:8f:8b:b6:af:cc: 34:c7:00:db:db:05:7a:28:03:ba:0e:60:a5:c7:66:f9:b0:b0: 27:ee:3b:76:90:21:40:32:61:1a:d9:b5:59:27:23:60:2b:42: 34:bc:97:9a:76:9f:87:99:56:59:35:2e:07:5f:60:c7:09:02: ea:bd:a6:c6:a9:96:cb:cd:65:f1:d7:44:ee:bf:19:ca:64:c0: 36:64:91:0c:54:d4:74:af:bf:64:d4:fc:c8:45:f6:bc:68:3d: 35:90:94:06:e5:99:87:5f:43:b5:d3:a7:50:d2:96:4c:4c:9f: 6f:23:c8:d8:1a:b1:d7:27:93:57:14:64:cf:f7:13:7a:72:b9: e6:3e:b2:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/5BS1sn+UMPOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMwNDc5N2UtZjQxZS00NTc1LWE3NmUtZDM2NTZkMmQw ZGEzMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MTA0ODFkMjctNzYyMS00MDNjLThjMTktNmQ0MDNkZjZkZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUGFZR6xXkjAMp+kDNpvLnl3og8yAOiGiTRS i/BP8MrFGwLh9D5jXegK1QeA+BLv4/gBnhiP/DrVwDnDlKGingaZg/DQ44xgCvC6 goLrnuTqCXLPuS6nHmVz8zAYL7EDkMGtP/CQ2t32KR+jBD4uTaU6dXcJeOxFQNdK BbvIMocoD2uSHMB/hsHtx4oVo//6HOP3LMz98Q/OWTSuSa/25vSyqrsJfjY7yymS hiatLsTFVH5aguMjgyWfnsUfckEQTCUtxQjizKVkJ/ldylTJkHKXSY4II1nvmSgk YB5rk8YgRQ3HsCGfcnWupArqSGWFRm+7a8VazUY5Fp7wVd2+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjpa4eSks8X47Itb+yio7HXydI/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzA0 Nzk3ZS1mNDFlLTQ1NzUtYTc2ZS1kMzY1NmQyZDBkYTMvNTg1ZDRhMzktNTkzNC0z MDI0LTg3MDYtZjZhZjY5YmFlYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMwNDc5N2UtZjQxZS00NTc1LWE3 NmUtZDM2NTZkMmQwZGEzL2FjMDQ3OTdlLWY0MWUtNDU3NS1hNzZlLWQzNjU2ZDJk MGRhMy5jcmwwHwYDVR0jBBgwFoAUAAcmEA8YxpPDHUrjrSxWot0Sb6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzA0Nzk3ZS1mNDFlLTQ1NzUtYTc2ZS1kMzY1 NmQyZDBkYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzvyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdeLmkUfbOdQSqSRVlG4dlXCIW/k1JUu2dgFWFXUYCjrq6/GaWx2edq 6d6Z2zBrMfvekIMQ65LhZYvBGg0sJg16SEBFOib6QN6p6zoxplaOAJpjoY/igCfs XZvkrzVzGdXfKCE6aspgqmacwq56E3LcEJkNhtPwXp6Pi7avzDTHANvbBXooA7oO YKXHZvmwsCfuO3aQIUAyYRrZtVknI2ArQjS8l5p2n4eZVlk1LgdfYMcJAuq9psap lsvNZfHXRO6/GcpkwDZkkQxU1HSvv2TU/MhF9rxoPTWQlAblmYdfQ7XTp1DSlkxM n28jyNgasdcnk1cUZM/3E3pyueY+sjI= -----END CERTIFICATE-----Generated at Sat Apr 26 16:37:12 2025 by rpki-client