$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa File: 152d19fc-a4dd-3003-8922-b7d5efb068f1.roa (raw, json) Hash identifier: c+xSGG9RgTLIS74/J6uqAAsFmQsDlWvDLHBVcm8Kl7I= Subject key identifier: 3C:52:DF:A5:C3:E1:6E:57:5D:3D:23:2B:FD:3D:76:5A:00:59:5B:EE Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F432858493C093A18ADDD828C75D4FB80 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 21949 IP address blocks: 206.223.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3a:18:ad:dd:82:8c:75:d4:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=9fbafd23-1d5e-42e6-b8db-c624910f841f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:2b:2e:9b:64:3f:a5:e7:00:36:40:7d:2c: ab:c6:87:09:52:90:b9:de:84:e1:7d:e7:18:75:05: a9:bd:56:36:bd:b9:2a:91:8b:a7:3f:d4:72:cc:d2: 93:56:cd:e3:36:9d:6c:c7:51:e4:80:9b:33:a3:c1: 3c:9c:79:75:7d:34:0d:30:d6:e9:de:f7:6f:85:5c: cf:7c:38:9c:b3:6c:e2:94:3a:52:be:47:47:6e:f0: 44:d9:53:32:8f:c0:7b:d0:2e:45:89:e3:44:43:75: 85:ae:f9:ad:fe:55:a2:b3:0d:56:62:9d:2d:d8:8d: dc:db:89:45:28:ab:ca:7d:93:62:e5:47:13:fd:51: de:1b:46:26:1c:10:e9:8b:84:be:0c:78:15:aa:7d: fa:58:c3:ef:2c:aa:62:4d:a9:7e:41:df:21:06:82: ba:ca:7d:d4:d0:0a:94:41:1e:4f:a3:d9:ce:80:86: f3:5f:19:ae:c4:3c:4f:0f:bb:9d:74:75:c2:72:39: b1:37:f0:4d:42:63:f2:31:8e:ba:2b:ad:f9:ab:77: 79:3d:e6:90:e1:80:ee:ca:aa:3c:62:00:6a:cb:1a: 59:3c:c7:63:45:a0:21:39:c8:3a:77:d6:80:a9:67: f7:8b:84:5f:3c:be:bf:22:38:58:d5:85:2f:92:a9: 76:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:52:DF:A5:C3:E1:6E:57:5D:3D:23:2B:FD:3D:76:5A:00:59:5B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/152d19fc-a4dd-3003-8922-b7d5efb068f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 206.223.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d5:a4:19:2b:3b:cb:f6:f5:5c:c1:43:45:6a:e9:08:81:9d: b9:c9:ec:46:c9:b8:00:68:60:60:b1:5c:95:4f:40:f2:62:56: 2e:a6:d0:42:2a:10:0c:b7:21:95:34:56:02:25:11:85:32:97: 64:ef:6e:61:fd:e5:ac:ca:17:ea:6e:fc:70:5a:6b:e5:0d:02: 3d:34:ea:37:d7:2d:98:5d:33:b0:d2:46:59:40:c1:4d:58:34: 44:cb:43:08:68:dc:ac:d4:10:4f:f6:eb:70:4a:e0:a6:3e:0f: da:f0:8c:74:51:0a:8c:cd:a6:0f:30:f7:1c:b5:dc:e6:dd:69: cc:8a:f4:3d:9b:dd:a8:6b:ce:21:2a:7f:f2:33:8a:2c:08:27: 37:81:cd:c0:98:7d:60:07:4d:16:65:00:59:d7:4f:76:07:70: fd:46:2a:87:be:dc:87:26:4f:6a:14:e1:7c:48:83:cd:3a:64: c3:88:8b:f0:db:4f:68:4c:af:fd:f4:07:6d:a6:f6:c7:87:e1: 91:76:58:a4:5c:50:63:29:b1:06:3c:30:28:1d:c3:8c:6e:67: 76:c4:69:dd:0f:41:39:df:dc:8c:f5:cc:2d:7e:b1:cf:3d:41: 44:ed:a0:17:16:35:a7:e7:b2:99:43:d2:68:8e:49:67:93:95: 2f:e7:b6:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CToYrd2CjHXU+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk OWZiYWZkMjMtMWQ1ZS00MmU2LWI4ZGItYzYyNDkxMGY4NDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpYrLptkP6XnADZAfSyrxocJUpC53oThfecY dQWpvVY2vbkqkYunP9RyzNKTVs3jNp1sx1HkgJszo8E8nHl1fTQNMNbp3vdvhVzP fDics2zilDpSvkdHbvBE2VMyj8B70C5FieNEQ3WFrvmt/lWisw1WYp0t2I3c24lF KKvKfZNi5UcT/VHeG0YmHBDpi4S+DHgVqn36WMPvLKpiTal+Qd8hBoK6yn3U0AqU QR5Po9nOgIbzXxmuxDxPD7uddHXCcjmxN/BNQmPyMY66K635q3d5PeaQ4YDuyqo8 YgBqyxpZPMdjRaAhOcg6d9aAqWf3i4RfPL6/IjhY1YUvkql2twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxS36XD4W5XXT0jK/09dloAWVvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMTUyZDE5ZmMtYTRkZC0z MDAzLTg5MjItYjdkNWVmYjA2OGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzt+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjVpBkrO8v29VzBQ0Vq6QiBnbnJ7EbJuABoYGCxXJVPQPJiVi6m0EIq EAy3IZU0VgIlEYUyl2TvbmH95azKF+pu/HBaa+UNAj006jfXLZhdM7DSRllAwU1Y NETLQwho3KzUEE/263BK4KY+D9rwjHRRCozNpg8w9xy13ObdacyK9D2b3ahrziEq f/IziiwIJzeBzcCYfWAHTRZlAFnXT3YHcP1GKoe+3IcmT2oU4XxIg806ZMOIi/Db T2hMr/30B22m9seH4ZF2WKRcUGMpsQY8MCgdw4xuZ3bEad0PQTnf3Iz1zC1+sc89 QUTtoBcWNafnsplD0miOSWeTlS/nts4= -----END CERTIFICATE-----Generated at Sun Apr 27 16:29:37 2025 by rpki-client