$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa File: 845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa (raw, json) Hash identifier: Yw3R4MqmVpMYdYo+O5YXiC+y2frzDepjGZ9jDRNP+xs= Subject key identifier: 59:54:2B:4B:B1:4B:59:D4:C6:55:B1:00:66:76:0E:74:F1:A1:38:4A Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F432858499829E950465170B78DAFC7C0 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 376 IP address blocks: 206.167.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e9:50:46:51:70:b7:8d:af:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=f59d00fe-3b7d-4785-a4b1-a4eeab405df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8e:32:58:5a:c6:2f:4b:41:2a:7e:48:9b:96: 5c:ea:e4:73:59:44:14:2d:5e:db:9c:d6:7f:13:34: d7:6c:37:e7:6a:b8:e7:3f:67:09:ae:fb:d7:60:0c: 6c:db:c4:e6:d7:89:43:3b:8b:fd:9c:0d:9a:17:61: a1:ae:df:b9:76:fb:6b:5f:3e:87:52:49:b1:50:48: ef:51:01:66:64:71:14:ab:cb:b2:dd:ab:5f:1b:e6: da:df:df:ed:c6:f7:67:02:98:f5:5c:8b:90:a9:38: 09:9e:7c:b0:aa:24:95:10:ea:4a:98:bf:e7:51:fe: 4f:78:ff:55:5b:b9:3c:ef:a5:e7:a6:33:48:f6:82: e5:45:94:30:86:6b:0a:13:8a:a8:24:86:51:c6:32: 8d:85:26:89:38:ac:42:45:87:38:6e:22:dc:43:d3: d8:a1:b7:26:a3:0b:fd:1f:54:76:56:bf:80:be:d5: 63:77:8c:cd:4d:a0:5f:8b:4d:b6:e6:d7:03:93:6f: 80:b6:10:6c:18:92:95:ba:4d:b4:b9:3f:47:bd:8d: 8f:f1:6f:a2:8f:53:a1:01:76:70:5d:a4:bd:bf:94: 96:bd:59:d8:bd:e9:ae:08:e3:26:a5:4a:5e:94:ec: 46:58:fd:67:f1:cb:13:44:9b:03:ba:16:75:bc:dd: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:54:2B:4B:B1:4B:59:D4:C6:55:B1:00:66:76:0E:74:F1:A1:38:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/845f0f42-7f94-31b9-840b-d3af1efdbc7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:09:2e:15:12:d6:41:53:45:d7:cd:d8:a2:26:ec:81:e5:fc: 64:47:11:9c:4c:9c:37:3d:72:39:79:69:9a:a1:f2:db:13:d0: 3b:a6:4d:0f:06:31:1c:e9:ed:f1:1b:43:b9:0b:26:ea:31:b0: 20:67:e8:39:ed:7f:fb:ab:11:fa:84:9a:3b:01:5e:c5:9d:9b: 8a:db:ac:b2:f8:90:52:c4:aa:b9:18:fe:7d:ba:39:38:37:98: 46:f4:8f:3c:77:10:f0:02:dd:51:7a:ed:ca:89:35:6a:17:bb: a3:2b:95:b4:e3:95:43:db:64:78:7c:dd:0b:f8:12:3f:54:0e: 88:79:89:08:6a:c4:9e:d9:f6:af:e1:86:5b:4c:4c:f5:cf:02: 59:8c:be:d7:0b:60:40:fe:00:cc:de:2b:33:67:d5:58:50:84: db:7a:a6:fe:8f:fb:09:1f:9c:03:2e:6c:34:5f:a7:bb:06:0b: c2:ec:f6:e0:de:aa:85:d3:73:50:67:73:34:74:96:01:b8:f7: d5:3a:b3:b6:73:87:bf:6c:b7:16:09:30:77:08:3d:6a:26:3d: 1e:f9:50:cb:5d:0d:b2:75:74:de:27:72:1b:53:b2:5f:be:a4: 7d:db:3f:49:35:0f:dc:bd:17:6d:2f:57:3f:65:58:1b:b2:e7: 34:ca:77:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKelQRlFwt42vx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk ZjU5ZDAwZmUtM2I3ZC00Nzg1LWE0YjEtYTRlZWFiNDA1ZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y4yWFrGL0tBKn5Im5Zc6uRzWUQULV7bnNZ/ EzTXbDfnarjnP2cJrvvXYAxs28Tm14lDO4v9nA2aF2Ghrt+5dvtrXz6HUkmxUEjv UQFmZHEUq8uy3atfG+ba39/txvdnApj1XIuQqTgJnnywqiSVEOpKmL/nUf5PeP9V W7k876XnpjNI9oLlRZQwhmsKE4qoJIZRxjKNhSaJOKxCRYc4biLcQ9PYobcmowv9 H1R2Vr+AvtVjd4zNTaBfi0225tcDk2+AthBsGJKVuk20uT9HvY2P8W+ij1OhAXZw XaS9v5SWvVnYvemuCOMmpUpelOxGWP1n8csTRJsDuhZ1vN0+ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlUK0uxS1nUxlWxAGZ2DnTxoThKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvODQ1ZjBmNDItN2Y5NC0z MWI5LTg0MGItZDNhZjFlZmRiYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqd0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMJLhUS1kFTRdfN2KIm7IHl/GRHEZxMnDc9cjl5aZqh8tsT0DumTQ8G MRzp7fEbQ7kLJuoxsCBn6Dntf/urEfqEmjsBXsWdm4rbrLL4kFLEqrkY/n26OTg3 mEb0jzx3EPAC3VF67cqJNWoXu6MrlbTjlUPbZHh83Qv4Ej9UDoh5iQhqxJ7Z9q/h hltMTPXPAlmMvtcLYED+AMzeKzNn1VhQhNt6pv6P+wkfnAMubDRfp7sGC8Ls9uDe qoXTc1BnczR0lgG499U6s7Zzh79stxYJMHcIPWomPR75UMtdDbJ1dN4nchtTsl++ pH3bP0k1D9y9F20vVz9lWBuy5zTKd5w= -----END CERTIFICATE-----Generated at Mon Apr 28 00:51:06 2025 by rpki-client