$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/39513945-055b-3a6e-9469-b137911850c1.roa File: 39513945-055b-3a6e-9469-b137911850c1.roa (raw, json) Hash identifier: V1Dwt/b9kZbKkgafv8RkF8QKF7JEvXedlAmiRfND6Ro= Subject key identifier: 2B:AE:C5:98:97:37:71:2F:38:E4:B8:E6:B1:09:3D:2E:F1:67:ED:C7 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285849A8E9E00F9CFF205E92FA6100 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/39513945-055b-3a6e-9469-b137911850c1.roa Signing time: Sun 27 Apr 2025 01:00:46 +0000 ROA not before: Sun 27 Apr 2025 01:00:46 +0000 ROA not after: Sat 26 Jul 2025 01:00:46 +0000 asID: 398420 IP address blocks: 206.71.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a8:e9:e0:0f:9c:ff:20:5e:92:fa:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 27 01:00:46 2025 GMT Not After : Jul 26 01:00:46 2025 GMT Subject: CN=9f625bd3-32a0-4c3e-9930-af3e2bcf47c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:cf:cf:af:82:fa:21:73:2c:ea:ab:eb:6a: d3:2a:c6:bd:32:6d:48:37:b6:b6:96:e4:94:88:ac: 89:88:64:8c:b5:2b:1e:ea:b3:59:5e:71:63:60:62: e0:21:bb:aa:fc:76:78:06:2a:16:7d:e3:45:46:ae: 7c:34:68:0f:c9:bc:ec:ad:68:f3:2e:5c:11:b2:83: 42:c2:de:13:a4:89:7d:de:52:34:5c:e7:56:bf:49: 45:d7:44:b8:3e:7c:e3:d9:7b:7f:be:69:30:1d:ca: 9a:86:40:89:16:a8:cf:61:16:96:fe:18:86:8a:56: 67:b5:46:b5:ad:d2:02:2f:60:e1:b5:f4:ff:f1:d8: 28:3c:86:0c:c2:fc:ba:9a:bc:2f:9f:90:a8:e2:04: 87:75:47:b6:ff:f5:a6:12:04:5b:7e:a7:7f:48:f8: c2:be:b4:cb:bd:80:0a:91:d6:50:20:83:c1:56:24: 25:70:b3:80:4e:84:f7:84:54:9c:f6:fe:c3:13:19: 04:a2:f5:c0:07:b9:e9:56:ba:8c:e3:11:02:e2:75: 6b:b1:08:37:93:90:46:2e:94:b1:78:7b:50:7d:f9: 8c:b3:1d:fd:2f:b6:dc:28:1f:1e:c2:b5:65:26:66: 79:de:d7:ce:04:16:5b:8c:94:98:9c:35:f8:ef:a3: 93:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AE:C5:98:97:37:71:2F:38:E4:B8:E6:B1:09:3D:2E:F1:67:ED:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/39513945-055b-3a6e-9469-b137911850c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 206.71.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:36:19:79:51:0c:ae:cc:73:8f:8c:cd:d2:88:aa:98:e2:d3: ed:d5:bb:53:d7:0b:39:b1:21:23:4d:98:c0:6f:c1:5b:da:28: 5e:05:e8:14:70:97:22:5f:3b:84:7d:33:3b:ab:a7:2b:fa:e6: f7:da:e4:62:45:b5:bb:b9:f3:d0:b8:66:cb:8a:55:b1:3e:b5: 6e:6e:12:df:85:6b:a0:33:f1:f6:f7:41:cf:e3:5a:e7:78:b9: 35:f6:8c:8d:48:9e:58:21:26:95:2c:a4:5a:ef:cf:5d:b6:98: ff:dd:e8:ac:d6:d7:73:e5:6a:bf:4f:61:ef:0b:d7:14:82:4f: a1:68:ef:02:aa:ee:00:44:d9:1e:05:43:8a:8e:d8:38:c7:ee: 3b:49:24:6d:67:a1:d4:82:f7:93:f1:a9:cd:18:e9:7a:0b:5a: 80:8b:07:1f:24:44:fe:b1:d8:45:42:22:2e:c3:23:e9:5f:f8: 30:fa:ce:52:36:a3:c5:33:9f:ce:a8:ad:13:35:33:17:bb:55: 7a:0a:82:71:16:86:4e:09:c2:4d:44:13:fd:d9:30:bd:9f:37: 73:c3:7c:65:e9:4e:0e:2f:38:6c:da:73:ad:8f:0c:30:0d:2f: 31:fd:dc:30:f7:d0:48:0c:50:52:4c:2c:0b:b8:e3:7e:4c:ee: d7:aa:a3:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmo6eAPnP8gXpL6YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQyNzAxMDA0NloXDTI1MDcyNjAxMDA0NlowLzEtMCsGA1UEAxMk OWY2MjViZDMtMzJhMC00YzNlLTk5MzAtYWYzZTJiY2Y0N2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt43Pz6+C+iFzLOqr62rTKsa9Mm1IN7a2luSU iKyJiGSMtSse6rNZXnFjYGLgIbuq/HZ4BioWfeNFRq58NGgPybzsrWjzLlwRsoNC wt4TpIl93lI0XOdWv0lF10S4Pnzj2Xt/vmkwHcqahkCJFqjPYRaW/hiGilZntUa1 rdICL2DhtfT/8dgoPIYMwvy6mrwvn5Co4gSHdUe2//WmEgRbfqd/SPjCvrTLvYAK kdZQIIPBViQlcLOAToT3hFSc9v7DExkEovXAB7npVrqM4xEC4nVrsQg3k5BGLpSx eHtQffmMsx39L7bcKB8ewrVlJmZ53tfOBBZbjJSYnDX476OTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuuxZiXN3EvOOS45rEJPS7xZ+3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMzk1MTM5NDUtMDU1Yi0z YTZlLTk0NjktYjEzNzkxMTg1MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH82GXlRDK7Mc4+MzdKIqpji0+3Vu1PXCzmxISNNmMBvwVvaKF4F6BRw lyJfO4R9Mzurpyv65vfa5GJFtbu589C4ZsuKVbE+tW5uEt+Fa6Az8fb3Qc/jWud4 uTX2jI1InlghJpUspFrvz122mP/d6KzW13Plar9PYe8L1xSCT6Fo7wKq7gBE2R4F Q4qO2DjH7jtJJG1nodSC95Pxqc0Y6XoLWoCLBx8kRP6x2EVCIi7DI+lf+DD6zlI2 o8Uzn86orRM1Mxe7VXoKgnEWhk4Jwk1EE/3ZML2fN3PDfGXpTg4vOGzac62PDDAN LzH93DD30EgMUFJMLAu4435M7teqowU= -----END CERTIFICATE-----Generated at Tue Apr 29 11:09:43 2025 by rpki-client