$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2b900845-48bd-3310-b9f7-31d947c5b00e.roa File: 2b900845-48bd-3310-b9f7-31d947c5b00e.roa (raw, json) Hash identifier: Db2RrzzMcZL3c/FmaD/AgZVveVMg27bReyBXCX0LVsk= Subject key identifier: 27:A4:A9:C6:89:12:15:A0:E0:6C:59:24:3B:0D:2A:A5:E1:A3:81:E0 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F43285849849EFD79E73F345F927A1978 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2b900845-48bd-3310-b9f7-31d947c5b00e.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 376 IP address blocks: 206.167.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:fd:79:e7:3f:34:5f:92:7a:19:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=1b3fd6b9-9a7f-4201-85f3-864412af057e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:42:0e:aa:b1:0f:10:cb:c7:70:bc:28:78:1f: 64:f5:32:d9:bf:30:d9:0e:49:54:cb:47:56:50:c8: 5a:07:80:ac:c9:73:b9:10:9a:db:1e:76:e6:83:8a: 24:ab:87:a7:4e:66:65:3c:01:d5:e9:67:5a:31:8d: f0:1c:9f:71:ff:32:2e:f7:28:9b:d9:7e:40:73:a0: 5a:2b:cf:70:13:cb:78:dc:ae:66:1b:e7:af:31:03: 34:7e:18:d3:f9:92:d5:10:56:f7:4f:e7:26:0a:bc: ef:a6:57:25:bf:cf:d9:86:c9:74:94:b7:e0:10:41: 94:e4:a0:e2:70:8d:97:92:b0:c7:1c:52:37:a0:e1: 63:ce:c7:60:05:2c:2c:81:6b:fb:cd:5a:d8:a5:29: d6:52:86:97:13:1b:fd:a3:e9:0e:ad:1b:d0:59:ec: c9:f1:b9:11:55:da:af:01:97:d6:67:5b:0f:52:fa: c8:d0:9f:22:30:90:ac:20:3e:26:84:54:ce:33:8d: 97:92:1c:f4:62:60:c8:9f:d3:a7:a0:2c:5b:3a:c8: 4f:d0:49:fd:dd:60:9f:04:b1:2d:d1:c1:0c:dc:bf: 5a:34:5f:1f:cb:01:43:b3:c8:b6:fa:33:18:57:ca: 93:17:52:fd:92:24:ee:79:7f:ef:90:f6:39:99:27: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A4:A9:C6:89:12:15:A0:E0:6C:59:24:3B:0D:2A:A5:E1:A3:81:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2b900845-48bd-3310-b9f7-31d947c5b00e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:01:18:c6:ef:fc:6c:c0:42:02:9b:7a:c6:90:fe:8f:c7:02: b2:bb:69:f6:76:5f:9a:41:2f:c3:f3:7b:9b:ad:9d:5a:1f:ed: 21:fb:4f:9e:de:b8:37:58:26:b7:d3:dc:49:45:d0:df:b8:b9: 10:df:0e:6e:0d:ac:e4:eb:af:1f:0b:f4:f2:d5:ef:fd:7b:27: 46:52:7d:c6:16:e4:b6:dd:74:61:e8:da:79:4e:17:50:78:f4: 43:e8:61:b9:c8:70:d5:36:27:06:af:db:3a:f7:d2:d1:93:b4: 97:90:bc:87:56:fd:35:a6:24:e9:29:66:38:90:e7:38:d3:f8: 3e:81:67:ea:cd:b3:1e:d5:90:03:f7:71:50:9b:2a:c4:f7:84: ed:0d:ff:97:51:bd:96:d3:23:45:62:48:55:1a:c7:4b:9d:fd: 10:50:b1:5c:a2:c8:df:52:4c:6e:05:5c:4d:29:62:c2:d1:03: 18:18:a5:f3:6c:94:4a:ef:48:88:3b:71:8c:d1:78:27:4e:cb: fb:24:02:e7:74:28:7c:5d:dc:72:02:ce:59:0b:59:e2:47:9b: c2:47:ec:e5:50:b2:a2:6d:c5:fa:14:a1:15:cc:d6:a0:94:e8: 91:6b:2e:6b:80:dd:70:9c:e5:39:85:91:f6:ea:66:f3:dc:86: a5:98:a8:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnv155z80X5J6GXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk MWIzZmQ2YjktOWE3Zi00MjAxLTg1ZjMtODY0NDEyYWYwNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0IOqrEPEMvHcLwoeB9k9TLZvzDZDklUy0dW UMhaB4CsyXO5EJrbHnbmg4okq4enTmZlPAHV6WdaMY3wHJ9x/zIu9yib2X5Ac6Ba K89wE8t43K5mG+evMQM0fhjT+ZLVEFb3T+cmCrzvplclv8/Zhsl0lLfgEEGU5KDi cI2XkrDHHFI3oOFjzsdgBSwsgWv7zVrYpSnWUoaXExv9o+kOrRvQWezJ8bkRVdqv AZfWZ1sPUvrI0J8iMJCsID4mhFTOM42Xkhz0YmDIn9OnoCxbOshP0En93WCfBLEt 0cEM3L9aNF8fywFDs8i2+jMYV8qTF1L9kiTueX/vkPY5mSdF7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCekqcaJEhWg4GxZJDsNKqXho4HgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvMmI5MDA4NDUtNDhiZC0z MzEwLWI5ZjctMzFkOTQ3YzViMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqdwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8BGMbv/GzAQgKbesaQ/o/HArK7afZ2X5pBL8Pze5utnVof7SH7T57e uDdYJrfT3ElF0N+4uRDfDm4NrOTrrx8L9PLV7/17J0ZSfcYW5LbddGHo2nlOF1B4 9EPoYbnIcNU2Jwav2zr30tGTtJeQvIdW/TWmJOkpZjiQ5zjT+D6BZ+rNsx7VkAP3 cVCbKsT3hO0N/5dRvZbTI0ViSFUax0ud/RBQsVyiyN9STG4FXE0pYsLRAxgYpfNs lErvSIg7cYzReCdOy/skAud0KHxd3HICzlkLWeJHm8JH7OVQsqJtxfoUoRXM1qCU 6JFrLmuA3XCc5TmFkfbqZvPchqWYqG4= -----END CERTIFICATE-----Generated at Mon Apr 28 00:45:22 2025 by rpki-client