$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa File: 6aa5ffe9-2c06-36ee-8129-d66c21390799.roa (raw, json) Hash identifier: GafDimOKvySLLUP54wz6eF3EO6ekYEkODdlczdC5JBU= Subject key identifier: 2D:B1:83:90:C4:15:74:51:0C:DB:2E:E8:38:EE:DA:6C:7C:95:0F:73 Certificate issuer: /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Certificate serial: 010D0C9F4328584917DC023175CB50ED39721066 Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 26461 IP address blocks: 208.91.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:02:31:75:cb:50:ed:39:72:10:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=1b464750-a95a-42ed-ab73-259031777baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:1d:57:5b:28:ca:37:df:78:82:dd:03:49: b7:ed:e1:06:1a:de:0c:49:9d:90:e9:53:9c:23:bc: 4b:89:ce:7b:bc:be:bc:1a:bd:b6:72:d7:e3:b0:ac: 8f:d2:fe:7d:18:76:06:9e:1e:64:b2:b5:da:d0:e6: 91:7f:c1:13:97:ec:79:fe:23:fc:80:29:32:28:2b: f6:ec:ba:04:8e:6a:05:51:b2:0b:3d:64:2f:fd:1e: 23:5d:6e:99:1d:25:69:77:cc:e9:7c:e9:0f:7b:4a: a3:e6:bf:13:fa:1e:76:f3:41:c4:77:94:fb:82:c9: 43:7f:af:ae:bb:71:5d:22:85:10:04:5d:c7:02:f2: a2:ae:39:ea:3f:30:43:77:2a:f6:7b:6e:97:28:1c: 84:83:34:af:74:c1:1d:0a:70:10:a9:3a:71:1e:7b: f4:18:d3:70:fc:af:aa:2f:a9:3b:73:39:1f:d5:2b: ff:0e:b7:0f:30:85:ce:59:e5:74:02:ba:25:c1:ec: 17:07:c8:8d:12:a3:b1:a8:1a:9e:4e:93:66:92:00: ff:44:e1:d3:77:d8:54:bf:1b:48:79:a4:70:9b:bf: 52:ac:f2:04:8c:58:ab:3f:39:a4:08:70:e4:08:51: 39:a5:a0:03:c2:03:16:55:bb:f8:79:69:b2:9b:5d: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B1:83:90:C4:15:74:51:0C:DB:2E:E8:38:EE:DA:6C:7C:95:0F:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/6aa5ffe9-2c06-36ee-8129-d66c21390799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl X509v3 Authority Key Identifier: keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer sbgp-ipAddrBlock: critical IPv4: 208.91.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3c:4c:a1:ae:8c:53:b1:61:d9:63:d8:49:a8:cb:38:fb:7b: b2:82:f7:25:d6:2e:e9:d4:87:b2:1d:db:d5:6d:aa:d3:f6:f6: 6a:63:93:1a:a0:41:77:b9:61:bd:70:34:8f:0a:28:87:81:63: a6:f5:91:cf:b2:72:58:55:3c:f0:37:2d:a7:1a:d7:a3:ee:1d: 03:c6:99:38:f5:2e:36:21:31:b6:01:a3:4a:c5:f7:88:c4:9d: 2f:b8:85:75:e7:19:44:43:78:71:2e:ec:4b:76:9a:53:ae:25: db:3c:4b:7f:67:01:76:48:0c:d9:81:3e:ee:ee:09:27:fd:71: 1e:f2:68:00:df:7f:b2:d4:f6:99:12:3a:fa:4c:bd:d9:8f:b3: 2e:95:ee:45:bf:15:c0:77:08:96:b5:99:ce:29:b2:7a:a8:91: 7d:ae:92:ae:45:e4:2e:74:6a:f9:e6:0a:fa:d7:91:df:42:f6: 50:d1:c4:69:3a:a8:9b:c8:9d:bb:a1:84:82:45:3a:23:a3:54: 3b:ba:ac:9b:38:3a:ac:56:2e:8d:2c:58:2b:06:0b:0d:1a:93: 9b:91:fc:da:ee:4a:36:c0:61:3a:c3:4c:5d:85:39:75:f3:1a: 12:94:a0:71:36:95:87:63:8f:ae:51:e6:0b:b9:70:34:e5:a6: 7c:cd:45:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3AIxdctQ7TlyEGYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlZTliMDAtN2Y5ZS00ZDJjLThlMTctNDk0ZGZmYTY2 OTAyMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MWI0NjQ3NTAtYTk1YS00MmVkLWFiNzMtMjU5MDMxNzc3YmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxwdV1soyjffeILdA0m37eEGGt4MSZ2Q6VOc I7xLic57vL68Gr22ctfjsKyP0v59GHYGnh5ksrXa0OaRf8ETl+x5/iP8gCkyKCv2 7LoEjmoFUbILPWQv/R4jXW6ZHSVpd8zpfOkPe0qj5r8T+h5280HEd5T7gslDf6+u u3FdIoUQBF3HAvKirjnqPzBDdyr2e26XKByEgzSvdMEdCnAQqTpxHnv0GNNw/K+q L6k7czkf1Sv/DrcPMIXOWeV0ArolwewXB8iNEqOxqBqeTpNmkgD/ROHTd9hUvxtI eaRwm79SrPIEjFirPzmkCHDkCFE5paADwgMWVbv4eWmym105NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2xg5DEFXRRDNsu6Dju2mx8lQ9zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGVl OWIwMC03ZjllLTRkMmMtOGUxNy00OTRkZmZhNjY5MDIvNmFhNWZmZTktMmMwNi0z NmVlLTgxMjktZDY2YzIxMzkwNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRlZTliMDAtN2Y5ZS00ZDJjLThl MTctNDk0ZGZmYTY2OTAyLzJkZWU5YjAwLTdmOWUtNGQyYy04ZTE3LTQ5NGRmZmE2 NjkwMi5jcmwwHwYDVR0jBBgwFoAUUW9nf41XwHp/1O/IOs/yMVPvGmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZGVlOWIwMC03ZjllLTRkMmMtOGUxNy00OTRk ZmZhNjY5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FvpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE8TKGujFOxYdlj2Emoyzj7e7KC9yXWLunUh7Id29VtqtP29mpjkxqg QXe5Yb1wNI8KKIeBY6b1kc+yclhVPPA3Laca16PuHQPGmTj1LjYhMbYBo0rF94jE nS+4hXXnGURDeHEu7Et2mlOuJds8S39nAXZIDNmBPu7uCSf9cR7yaADff7LU9pkS OvpMvdmPsy6V7kW/FcB3CJa1mc4psnqokX2ukq5F5C50avnmCvrXkd9C9lDRxGk6 qJvInbuhhIJFOiOjVDu6rJs4OqxWLo0sWCsGCw0ak5uR/NruSjbAYTrDTF2FOXXz GhKUoHE2lYdjj65R5gu5cDTlpnzNRRM= -----END CERTIFICATE-----Generated at Tue Apr 29 14:31:07 2025 by rpki-client