$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa File: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (raw, json) Hash identifier: sJPWFMlQGsu5uPs9fc0/jkgdVSeEAbUSz3G1gWDMIcA= Subject key identifier: 6F:CF:3A:D1:22:11:8D:FD:CB:F0:63:82:4A:6D:9F:C5:45:1A:11:81 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F432858499829CDBEAF27CAA7F81E8100 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 398419 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:cd:be:af:27:ca:a7:f8:1e:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=ebd19fef-99ab-4e02-b39d-a8e0a9a0af75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c5:df:30:f3:50:82:e0:aa:36:cc:89:70:8f: f1:6d:98:87:d4:c9:27:4d:8c:b3:29:37:94:58:dc: 2b:4d:ee:80:55:78:4e:47:db:17:bc:0a:8d:2a:73: 86:e2:d6:5a:7c:fa:bd:37:4b:98:4c:7b:b7:01:7a: 93:0b:37:eb:68:d3:10:81:65:66:29:b7:fe:15:fe: d0:1d:b5:5a:84:f8:1f:eb:71:7a:71:3a:79:d9:7d: cd:5f:eb:60:fb:61:73:d7:0a:8e:58:af:20:36:c7: 5d:f4:c6:67:e7:db:c6:a6:12:d2:ba:78:9d:2e:c8: 18:d1:19:5b:34:88:80:a1:9d:38:b0:b8:20:20:ad: eb:8a:88:6e:31:b5:92:64:a9:a5:cf:f9:0d:da:e2: 4a:f0:3f:d8:9a:43:c3:4c:a7:b1:0f:0c:e0:0d:37: 0d:e8:19:ea:dc:02:1e:3d:5b:a9:e6:17:40:68:51: a7:da:1e:7a:e5:98:1d:e4:b2:57:ca:78:78:06:21: c1:fa:e5:0a:b1:ec:8d:42:e5:46:22:d9:a3:9b:32: 75:ff:32:b7:70:18:b5:18:c4:f1:a7:eb:6b:3e:1e: 92:bf:f1:67:89:07:57:88:14:c5:cb:f4:b7:41:26: 49:68:43:a0:1e:41:28:74:fb:8a:90:cf:56:d6:bc: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CF:3A:D1:22:11:8D:FD:CB:F0:63:82:4A:6D:9F:C5:45:1A:11:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9d:5b:c3:70:83:10:8d:d7:6f:93:3b:37:f9:e9:e9:d0:f0: a8:ee:02:95:dd:65:00:c2:e2:cf:3e:af:a6:13:35:00:d4:a3: 60:e3:ea:0a:15:ab:58:fa:f9:ca:ce:ae:1d:8f:ef:3d:67:36: ad:ef:91:6c:13:f8:6a:10:ab:6b:b3:a2:ed:0e:36:30:c0:b2: 62:21:b6:00:a0:7a:81:2c:43:08:ef:4f:9c:a6:63:b0:4b:05: 97:75:8f:b8:fc:7d:36:e1:be:23:83:8d:f1:0f:c9:d9:da:92: c9:b6:af:79:50:b3:d9:cf:15:ef:55:93:00:bc:ac:e9:67:f1: 43:95:3e:28:ae:6c:d2:45:54:7f:f2:d0:bb:ab:8b:23:8c:84: cd:23:72:f3:af:94:83:b7:f0:7a:49:54:21:6e:59:86:bc:32: a0:2a:2b:6b:1d:d8:df:39:05:4d:9d:ef:7f:bc:44:49:24:d1: bc:58:f3:63:d2:19:81:00:08:b6:6e:49:0d:6d:c5:8f:5c:48: da:1d:01:77:60:8c:cd:0e:32:e2:6c:49:c0:80:8c:2b:2e:a9: f6:9c:ed:65:6f:c8:0a:a6:1d:61:1f:ae:48:a1:75:c2:57:b5: ba:2b:aa:fe:2e:90:f0:ef:bf:73:c3:ba:ab:a5:e6:11:03:36: ee:8b:f0:c4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmYKc2+ryfKp/gegQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZWJkMTlmZWYtOTlhYi00ZTAyLWIzOWQtYThlMGE5YTBhZjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cXfMPNQguCqNsyJcI/xbZiH1MknTYyzKTeU WNwrTe6AVXhOR9sXvAqNKnOG4tZafPq9N0uYTHu3AXqTCzfraNMQgWVmKbf+Ff7Q HbVahPgf63F6cTp52X3NX+tg+2Fz1wqOWK8gNsdd9MZn59vGphLSunidLsgY0Rlb NIiAoZ04sLggIK3riohuMbWSZKmlz/kN2uJK8D/YmkPDTKexDwzgDTcN6Bnq3AIe PVup5hdAaFGn2h565Zgd5LJXynh4BiHB+uUKseyNQuVGItmjmzJ1/zK3cBi1GMTx p+trPh6Sv/FniQdXiBTFy/S3QSZJaEOgHkEodPuKkM9W1rxuvQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFG/POtEiEY39y/Bjgkptn8VFGhGBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmQzNTMwZmMtYWJhNC0z MGFhLWI1ZWUtNGNiNjdiNGU1MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTnVvDcIMQjddvkzs3+enp0PCo7gKV3WUA wuLPPq+mEzUA1KNg4+oKFatY+vnKzq4dj+89Zzat75FsE/hqEKtrs6LtDjYwwLJi IbYAoHqBLEMI70+cpmOwSwWXdY+4/H024b4jg43xD8nZ2pLJtq95ULPZzxXvVZMA vKzpZ/FDlT4ormzSRVR/8tC7q4sjjITNI3Lzr5SDt/B6SVQhblmGvDKgKitrHdjf OQVNne9/vERJJNG8WPNj0hmBAAi2bkkNbcWPXEjaHQF3YIzNDjLibEnAgIwrLqn2 nO1lb8gKph1hH65IoXXCV7W6K6r+LpDw779zw7qrpeYRAzbui/DE -----END CERTIFICATE-----Generated at Tue Apr 29 10:26:27 2025 by rpki-client