$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa File: c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa (raw, json) Hash identifier: spCZtpucIWc+6P5LfHPl8mNszCH6Ow8R4Aj82m5Hpqk= Subject key identifier: E2:7F:43:E0:F5:92:51:A7:35:2C:12:B0:D6:FA:A0:20:80:D9:96:7B Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F43285849711433160898DAB6D2D189B4 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa Signing time: Mon 07 Apr 2025 01:00:47 +0000 ROA not before: Mon 07 Apr 2025 01:00:47 +0000 ROA not after: Sun 06 Jul 2025 01:00:47 +0000 asID: 398420 IP address blocks: 206.71.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:14:33:16:08:98:da:b6:d2:d1:89:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Apr 7 01:00:47 2025 GMT Not After : Jul 6 01:00:47 2025 GMT Subject: CN=817a5696-934d-4f62-a132-98d44cdcd4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:af:f8:67:c0:91:17:d5:ec:4a:4c:4b:f7:58: 12:64:72:ab:86:b0:57:14:e1:4b:02:0b:29:58:20: bc:66:8d:0e:08:3e:60:a3:d8:84:a6:2b:43:75:9f: a6:0a:6d:e2:8c:c7:4e:cc:a0:0d:75:5a:b8:7f:c1: 48:bb:ad:26:bf:fc:0c:c4:7f:c9:82:1a:b7:20:81: 2e:70:78:02:4e:7b:3b:cb:68:5c:d3:45:5f:87:99: 8a:2c:3f:9d:a8:a8:cb:42:22:be:1c:c9:7b:97:65: e0:4b:6e:77:0d:82:01:8e:7e:16:22:1d:fb:d0:6f: 86:6f:6b:21:af:ab:81:a2:76:a9:c7:ae:0c:97:9d: 76:c0:24:44:bd:af:ec:59:7f:44:62:1d:99:43:78: f1:ac:ad:af:cb:af:39:94:60:93:ea:d7:b8:a6:60: 60:a9:c7:8c:5e:5d:3a:b0:40:c9:c0:e9:74:99:fe: ee:ac:2c:9f:aa:6d:9b:9e:68:fb:2c:1c:ba:06:84: 7a:fa:45:17:db:89:93:af:c8:44:f5:30:a3:b4:84: 7f:25:d2:00:f5:7b:6d:ff:d6:ac:17:8b:bd:cd:09: 76:65:6d:93:40:3a:a9:92:17:86:1e:ca:ef:f0:fd: 9d:4f:80:06:3f:a3:3c:f8:8f:ef:0f:80:01:13:c0: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7F:43:E0:F5:92:51:A7:35:2C:12:B0:D6:FA:A0:20:80:D9:96:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/c51ad4da-9bdd-3948-8789-1d194bb9f0be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 206.71.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:08:cc:aa:b1:07:48:da:e6:62:0a:40:53:fa:2d:26:1f:2a: 98:d4:0d:fc:11:8d:69:ef:48:dc:57:5b:2d:fc:63:1d:20:49: 76:88:c2:6c:e3:15:2f:15:67:b2:44:1a:b2:fc:81:1c:be:75: f8:97:69:24:d1:08:f1:43:c6:1d:50:36:4b:a3:b2:4f:b2:96: c1:a9:27:46:94:cb:36:8f:8e:e1:0c:bf:53:7c:c3:27:67:bb: db:6a:d9:92:7c:3d:aa:5c:ab:80:a7:e1:21:de:73:19:b1:b8: 56:34:11:08:c4:fe:57:5a:b3:5d:a8:95:75:7d:e9:e7:a8:16: de:d4:17:40:0c:41:8e:72:29:8d:9e:a6:ed:d2:6f:aa:dd:37: 84:1b:22:cd:31:e7:7a:94:16:8d:86:15:d9:9c:fc:f2:f7:06: fa:d8:2e:2b:41:07:a6:ea:23:e2:a2:ff:09:d7:5b:00:1b:86: 0d:e2:be:6b:e5:35:9e:8f:93:4f:bb:c9:e8:c1:3f:12:59:47: 86:0b:dc:89:1d:92:71:f7:c6:70:f8:49:a8:49:ed:b3:00:e2: 71:a4:97:ee:83:34:b3:17:d3:ef:07:a2:06:f6:d6:e1:a3:c3: 77:38:c5:d7:13:54:a7:27:ed:72:bc:46:4a:81:e1:8a:e0:36: 9e:c1:22:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFDMWCJjattLRibQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk ODE3YTU2OTYtOTM0ZC00ZjYyLWExMzItOThkNDRjZGNkNGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56/4Z8CRF9XsSkxL91gSZHKrhrBXFOFLAgsp WCC8Zo0OCD5go9iEpitDdZ+mCm3ijMdOzKANdVq4f8FIu60mv/wMxH/Jghq3IIEu cHgCTns7y2hc00Vfh5mKLD+dqKjLQiK+HMl7l2XgS253DYIBjn4WIh370G+Gb2sh r6uBonapx64Ml512wCREva/sWX9EYh2ZQ3jxrK2vy685lGCT6te4pmBgqceMXl06 sEDJwOl0mf7urCyfqm2bnmj7LBy6BoR6+kUX24mTr8hE9TCjtIR/JdIA9Xtt/9as F4u9zQl2ZW2TQDqpkheGHsrv8P2dT4AGP6M8+I/vD4ABE8C6GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ/Q+D1klGnNSwSsNb6oCCA2ZZ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYzUxYWQ0ZGEtOWJkZC0z OTQ4LTg3ODktMWQxOTRiYjlmMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzkeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoIzKqxB0ja5mIKQFP6LSYfKpjUDfwRjWnvSNxXWy38Yx0gSXaIwmzj FS8VZ7JEGrL8gRy+dfiXaSTRCPFDxh1QNkujsk+ylsGpJ0aUyzaPjuEMv1N8wydn u9tq2ZJ8Papcq4Cn4SHecxmxuFY0EQjE/ldas12olXV96eeoFt7UF0AMQY5yKY2e pu3Sb6rdN4QbIs0x53qUFo2GFdmc/PL3BvrYLitBB6bqI+Ki/wnXWwAbhg3ivmvl NZ6Pk0+7yejBPxJZR4YL3IkdknH3xnD4SahJ7bMA4nGkl+6DNLMX0+8Hogb21uGj w3c4xdcTVKcn7XK8RkqB4YrgNp7BInA= -----END CERTIFICATE-----Generated at Tue Apr 29 05:05:50 2025 by rpki-client