$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cdee8dfc-1d31-3c7a-ace6-1390d23f6067.roa File: cdee8dfc-1d31-3c7a-ace6-1390d23f6067.roa (raw, json) Hash identifier: yzWAS0fdtaaK4730LIccuzo2X+7+O35SGdrIK83NDHY= Subject key identifier: 0F:A3:63:62:84:57:B8:7B:39:35:20:2E:26:FF:BD:47:B6:35:75:8A Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F43285849955F1E52376E4D72EED6CB00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cdee8dfc-1d31-3c7a-ace6-1390d23f6067.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 209 IP address blocks: 206.29.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:1e:52:37:6e:4d:72:ee:d6:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=312d8304-d3c1-4e11-bde2-dd2b1ab0189e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:0c:29:70:b6:30:0e:5e:64:77:8e:49:18: ff:2a:cf:b9:a9:3e:a9:e3:ec:c4:b5:64:90:5d:ab: 06:22:bd:bd:73:34:59:76:b7:18:4c:72:d0:e3:93: d5:52:8f:dc:7c:79:48:9b:20:4d:e0:e1:ad:0c:3d: 3d:27:66:ce:cf:f4:92:6f:d2:27:46:d8:f8:c4:61: de:8a:ae:cc:e8:f7:f9:05:24:05:24:20:ba:de:bf: cd:87:48:fb:ad:f4:33:f3:c8:20:72:af:7a:f7:e9: d7:2d:ca:00:8f:75:65:6b:fd:4a:d4:f5:3a:11:90: 50:af:a5:98:59:cd:9a:9d:29:a4:be:4a:05:45:9a: ab:64:8a:3a:4c:bd:9c:1c:83:f8:af:04:d3:1b:cf: 3a:d3:86:27:e0:a6:86:e5:d6:42:96:64:3f:1d:3f: 2f:48:31:3b:1b:2e:2a:64:45:0f:c3:dd:80:c4:7e: ff:75:23:0b:ac:a1:e8:52:06:bf:a4:75:e3:09:30: ce:51:aa:ef:58:60:9c:60:ae:4b:f7:eb:11:27:17: fa:56:92:ec:f0:79:94:8a:59:2f:88:33:38:dd:12: 75:90:93:26:18:19:4a:f5:31:79:38:93:e6:48:f3: b8:79:2e:d1:4d:d4:2c:d4:06:e5:8d:5a:d8:1a:87: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A3:63:62:84:57:B8:7B:39:35:20:2E:26:FF:BD:47:B6:35:75:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/cdee8dfc-1d31-3c7a-ace6-1390d23f6067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 206.29.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:41:71:89:0c:a1:a0:04:ac:04:5b:19:63:f6:af:3c:68:55: b7:fe:56:3b:08:9d:47:fe:70:1c:e6:d1:d6:7e:e9:c3:6e:9b: b8:07:d5:47:a7:e9:5d:43:07:26:49:1c:f0:7e:5c:42:0d:b0: 87:33:12:e8:53:55:4f:1e:fb:26:23:67:4a:8f:84:cb:c7:90: 7a:4d:ef:80:50:81:6e:c3:51:37:0d:72:6f:fe:cd:c3:08:aa: 6e:a7:7b:02:49:de:7a:0c:19:e9:c6:8f:d4:5e:5f:d1:53:78: 2c:0d:06:67:e2:af:3d:4b:1f:7c:57:f6:cf:35:da:aa:2f:2e: ff:6c:53:37:ba:af:65:a0:ce:40:41:0f:aa:b7:d7:f6:e8:1d: 40:77:82:18:00:04:8b:31:f8:39:98:56:19:b6:c9:14:53:94: de:06:5e:e5:c2:fd:87:8e:34:13:79:48:bc:46:09:ed:56:52: ea:e7:7b:4f:3c:a9:60:02:2b:67:68:c0:ff:ec:90:a5:45:ec: df:dd:0e:6d:4d:63:94:36:b6:c1:bf:58:cd:39:c2:4e:08:d2: 42:9f:11:5e:18:e2:06:d5:69:7e:e9:a6:fd:fb:cd:7a:7d:32: 85:7c:83:90:e6:3c:0d:a8:ce:ee:8b:d4:26:c0:ff:95:a7:22: 61:41:5b:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXx5SN25Ncu7WywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk MzEyZDgzMDQtZDNjMS00ZTExLWJkZTItZGQyYjFhYjAxODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjAMKXC2MA5eZHeOSRj/Ks+5qT6p4+zEtWSQ XasGIr29czRZdrcYTHLQ45PVUo/cfHlImyBN4OGtDD09J2bOz/SSb9InRtj4xGHe iq7M6Pf5BSQFJCC63r/Nh0j7rfQz88ggcq969+nXLcoAj3Vla/1K1PU6EZBQr6WY Wc2anSmkvkoFRZqrZIo6TL2cHIP4rwTTG88604Yn4KaG5dZClmQ/HT8vSDE7Gy4q ZEUPw92AxH7/dSMLrKHoUga/pHXjCTDOUarvWGCcYK5L9+sRJxf6VpLs8HmUilkv iDM43RJ1kJMmGBlK9TF5OJPmSPO4eS7RTdQs1AbljVrYGofTGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+jY2KEV7h7OTUgLib/vUe2NXWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvY2RlZThkZmMtMWQzMS0z YzdhLWFjZTYtMTM5MGQyM2Y2MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzh0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpBcYkMoaAErARbGWP2rzxoVbf+VjsInUf+cBzm0dZ+6cNum7gH1Uen 6V1DByZJHPB+XEINsIczEuhTVU8e+yYjZ0qPhMvHkHpN74BQgW7DUTcNcm/+zcMI qm6newJJ3noMGenGj9ReX9FTeCwNBmfirz1LH3xX9s812qovLv9sUze6r2WgzkBB D6q31/boHUB3ghgABIsx+DmYVhm2yRRTlN4GXuXC/YeONBN5SLxGCe1WUurne088 qWACK2dowP/skKVF7N/dDm1NY5Q2tsG/WM05wk4I0kKfEV4Y4gbVaX7ppv37zXp9 MoV8g5DmPA2ozu6L1CbA/5WnImFBW84= -----END CERTIFICATE-----Generated at Wed Apr 30 00:51:29 2025 by rpki-client