$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa File: f03a9443-1468-3e4e-9fac-80bb32418d00.roa (raw, json) Hash identifier: uim/cu4aoV2qNxwhFt6q2NIMpYbtzO6PGiOhEjerS3w= Subject key identifier: F1:47:DB:CE:1B:62:74:3A:2E:02:FA:94:A9:89:26:38:B5:2F:6E:6C Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F432858494B641AAD1FF873F651BE8E40 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 906 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:1a:ad:1f:f8:73:f6:51:be:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=ae3a8a81-6c31-4053-a3f3-7f6e131bf921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:44:38:7e:f8:e9:7d:4d:36:ed:89:80:a3: 87:98:2b:ed:e1:34:da:4d:8b:24:2d:ca:d7:69:df: 79:cc:c0:b5:82:03:fc:cc:ba:cd:8b:cc:0f:ab:cf: 4b:df:c7:87:f5:df:5c:58:1b:65:76:84:44:d1:9c: 73:91:d8:a5:09:84:3b:e0:ff:f5:3f:b3:b2:24:49: ce:ab:18:87:94:b5:0b:10:c2:75:7e:8e:27:b0:36: 17:fb:3f:06:7c:cf:50:9e:d7:fc:28:80:08:a9:ea: ce:9c:e4:02:8c:e7:b9:77:84:14:55:74:ab:40:c9: e9:47:d4:fd:4c:c5:f5:8e:b3:7d:d6:d8:b0:51:2a: c7:15:4e:17:82:a4:46:4b:da:df:0c:57:89:f1:12: d6:81:ff:7e:80:01:6c:4f:5e:04:74:3f:a5:31:d6: 99:f5:e6:06:a2:49:94:95:16:d3:35:71:9b:7b:5a: d0:16:2b:fd:1a:9f:3f:b2:16:43:72:23:0a:b1:46: 1c:2e:d6:ba:31:33:74:d1:6a:1f:5a:96:a8:67:b4: ed:3a:ec:73:91:e0:ef:8c:0d:55:92:78:88:b3:d7: 8c:9b:62:8c:14:5b:f4:8d:15:4a:ca:3f:00:7c:a4: f2:ce:6a:e1:ca:77:1f:7e:a2:34:45:b9:7d:5d:ce: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:47:DB:CE:1B:62:74:3A:2E:02:FA:94:A9:89:26:38:B5:2F:6E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/f03a9443-1468-3e4e-9fac-80bb32418d00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:33:d5:14:54:ba:82:40:7f:ec:70:c5:d8:72:3f:1e:3e:82: c7:d0:c9:a0:92:d5:4e:70:8b:89:1c:22:44:47:89:b9:73:7d: 9e:ba:03:88:8b:4d:53:2b:57:68:da:fe:a2:23:45:50:ca:c7: 90:6e:45:a4:61:b5:c5:bc:28:4f:7c:d3:a0:31:77:11:45:05: 1a:bd:c3:b2:65:71:84:b4:fc:79:10:6b:76:2b:9f:29:a8:92: 3c:00:bb:6e:a8:05:1a:f4:b4:ff:26:3e:bb:ba:b7:74:1e:6c: 2c:eb:20:04:f1:fd:f5:30:66:e4:1e:94:fb:00:63:8d:71:a2: ec:3e:5f:cb:c3:af:5c:20:2d:c6:8d:06:b4:2b:0b:6f:3a:86: 56:9f:f1:67:28:fe:c4:fd:e3:43:57:00:79:3b:9d:a1:ac:c9: 90:3a:d8:ad:f8:48:bd:6c:89:f3:6f:b5:9b:a0:c9:b2:d6:a4: 9c:02:cb:03:01:f5:4c:d0:d8:56:98:fd:9f:bf:2f:21:f4:7e: 9d:c9:44:06:9d:eb:76:07:8f:81:32:81:38:8b:85:d7:d8:f2: 0e:29:56:64:05:a0:e0:3d:fa:2f:fc:00:2c:f5:db:0b:c2:a1: aa:30:f9:16:37:43:0c:df:99:e1:cd:73:d2:c1:06:55:8a:b3: c2:bb:4e:72 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElLZBqtH/hz9lG+jkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk YWUzYThhODEtNmMzMS00MDUzLWEzZjMtN2Y2ZTEzMWJmOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo61EOH746X1NNu2JgKOHmCvt4TTaTYskLcrX ad95zMC1ggP8zLrNi8wPq89L38eH9d9cWBtldoRE0ZxzkdilCYQ74P/1P7OyJEnO qxiHlLULEMJ1fo4nsDYX+z8GfM9Qntf8KIAIqerOnOQCjOe5d4QUVXSrQMnpR9T9 TMX1jrN91tiwUSrHFU4XgqRGS9rfDFeJ8RLWgf9+gAFsT14EdD+lMdaZ9eYGokmU lRbTNXGbe1rQFiv9Gp8/shZDciMKsUYcLta6MTN00WofWpaoZ7TtOuxzkeDvjA1V kniIs9eMm2KMFFv0jRVKyj8AfKTyzmrhyncffqI0Rbl9Xc4xxwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPFH284bYnQ6LgL6lKmJJji1L25sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvZjAzYTk0NDMtMTQ2OC0z ZTRlLTlmYWMtODBiYjMyNDE4ZDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1M9UUVLqCQH/scMXYcj8ePoLH0MmgktVO cIuJHCJER4m5c32eugOIi01TK1do2v6iI0VQyseQbkWkYbXFvChPfNOgMXcRRQUa vcOyZXGEtPx5EGt2K58pqJI8ALtuqAUa9LT/Jj67urd0Hmws6yAE8f31MGbkHpT7 AGONcaLsPl/Lw69cIC3GjQa0KwtvOoZWn/FnKP7E/eNDVwB5O52hrMmQOtit+Ei9 bInzb7WboMmy1qScAssDAfVM0NhWmP2fvy8h9H6dyUQGnet2B4+BMoE4i4XX2PIO KVZkBaDgPfov/AAs9dsLwqGqMPkWN0MM35nhzXPSwQZVirPCu05y -----END CERTIFICATE-----Generated at Sun Apr 27 15:53:20 2025 by rpki-client