$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa File: 3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa (raw, json) Hash identifier: hGUtU66X0372/HUFeNLFPHTdsdS744T046N8E9TV36Q= Subject key identifier: 21:C9:65:3F:A4:23:47:E1:01:67:50:B4:D5:EA:E6:74:B7:9A:E9:F6 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F432858493ED3D0BA2E77898065A10B60 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 22808 IP address blocks: 206.49.107.64/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d0:ba:2e:77:89:80:65:a1:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=f16aee62-416a-48c7-8589-3c5c63bcd997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:d6:bf:40:97:a8:0c:28:65:c6:06:f1:7c: 87:3d:eb:bc:69:33:b2:64:fa:c7:e5:24:e8:5c:64: 0e:42:e2:7c:01:55:82:5e:98:32:c0:b8:aa:f3:4b: 9c:45:01:de:3f:c0:22:f9:77:8b:95:76:61:0d:f0: df:a1:bd:1f:f2:b9:3f:af:4c:b8:4d:5d:2f:ea:de: 07:2e:cb:1e:f4:4f:13:5a:5c:4f:82:9e:4b:a4:a2: b8:7d:ad:75:74:5d:25:34:b2:c0:f4:2d:89:2c:b1: 46:32:34:9d:2f:ff:12:e2:6a:e7:f1:f2:7e:95:06: 2d:83:8b:80:d4:08:07:2d:99:cb:ed:0c:5a:66:99: a9:15:a1:2a:0e:7f:17:1d:12:92:4a:b7:f4:4b:42: 5e:54:87:5d:b9:59:99:c5:47:61:f9:24:d9:6f:5f: f9:90:0b:76:81:46:4b:a1:bf:eb:e9:de:29:88:54: 32:9b:dd:80:97:7e:e6:01:bc:a1:20:b3:c3:f7:4e: 86:26:40:27:b6:33:09:ad:19:28:68:da:62:96:40: e9:91:69:ee:6b:3e:b0:26:c1:c6:71:1a:cf:0a:3e: d4:8e:98:e4:94:2e:f5:93:e6:3c:08:17:1a:58:c6: 60:e6:74:d1:2b:fd:b7:c5:f8:cc:be:62:e0:15:ef: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C9:65:3F:A4:23:47:E1:01:67:50:B4:D5:EA:E6:74:B7:9A:E9:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/3c424c5d-1d20-3685-9ac3-a16b0a28cebe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 206.49.107.64/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:4a:86:27:81:fd:75:fa:ec:66:0e:52:e7:af:e7:d9:57:89: b2:32:fd:c8:0d:6d:84:ce:b2:fe:1c:0b:39:5c:37:1f:30:3f: 36:86:cb:6b:67:8e:33:35:c2:27:8a:a5:b1:21:7e:fc:af:6e: 56:06:a1:26:5c:d7:7a:7d:ad:3d:fd:3b:ca:4f:cc:f6:1e:49: ca:b3:95:1f:42:12:43:34:4e:1e:63:a1:98:eb:8a:12:7a:ee: c9:17:fb:ff:8c:17:15:75:4b:fb:3c:bb:b6:0f:24:38:5a:87: 2d:ac:c5:45:43:fb:83:f4:70:2d:cc:8e:3f:34:ae:06:dd:98: 59:55:4a:ab:f0:a4:eb:13:16:c8:59:70:0b:98:93:16:85:60: 5d:d0:0b:87:43:f7:dd:e0:ae:c5:01:2c:83:b1:04:32:0e:64: 83:de:a1:d3:35:11:a7:89:95:82:27:34:65:29:b4:92:93:f1: d7:3d:19:de:45:69:df:36:4b:ec:d4:18:c9:4f:82:13:16:81: 58:fe:13:47:4e:51:77:f3:90:17:81:ed:ee:bb:2c:76:8a:40: a1:fa:bf:3a:e2:f2:0e:68:82:1e:73:11:5c:02:94:53:9e:61: d1:a4:01:08:a9:81:0f:bf:46:fc:c7:bc:a9:76:00:76:2c:f3: 21:58:50:38 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEk+09C6LneJgGWhC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk ZjE2YWVlNjItNDE2YS00OGM3LTg1ODktM2M1YzYzYmNkOTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EHWv0CXqAwoZcYG8XyHPeu8aTOyZPrH5STo XGQOQuJ8AVWCXpgywLiq80ucRQHeP8Ai+XeLlXZhDfDfob0f8rk/r0y4TV0v6t4H Lsse9E8TWlxPgp5LpKK4fa11dF0lNLLA9C2JLLFGMjSdL/8S4mrn8fJ+lQYtg4uA 1AgHLZnL7QxaZpmpFaEqDn8XHRKSSrf0S0JeVIdduVmZxUdh+STZb1/5kAt2gUZL ob/r6d4piFQym92Al37mAbyhILPD906GJkAntjMJrRkoaNpilkDpkWnuaz6wJsHG cRrPCj7UjpjklC71k+Y8CBcaWMZg5nTRK/23xfjMvmLgFe+QBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCHJZT+kI0fhAWdQtNXq5nS3mun2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvM2M0MjRjNWQtMWQyMC0z Njg1LTlhYzMtYTE2YjBhMjhjZWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzjFrQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiSoYngf11+uxmDlLnr+fZV4myMv3IDW2EzrL+HAs5XDcfMD82hstr Z44zNcIniqWxIX78r25WBqEmXNd6fa09/TvKT8z2HknKs5UfQhJDNE4eY6GY64oS eu7JF/v/jBcVdUv7PLu2DyQ4WoctrMVFQ/uD9HAtzI4/NK4G3ZhZVUqr8KTrExbI WXALmJMWhWBd0AuHQ/fd4K7FASyDsQQyDmSD3qHTNRGniZWCJzRlKbSSk/HXPRne RWnfNkvs1BjJT4ITFoFY/hNHTlF385AXge3uuyx2ikCh+r864vIOaIIecxFcApRT nmHRpAEIqYEPv0b8x7ypdgB2LPMhWFA4 -----END CERTIFICATE-----Generated at Mon Apr 28 07:18:51 2025 by rpki-client