$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/8aed6fa4-13a0-306a-a0dd-7749be3b0dd2.roa File: 8aed6fa4-13a0-306a-a0dd-7749be3b0dd2.roa (raw, json) Hash identifier: aZ5nwQPhkl8lk9IKg5fOAeTH+GMnBEC5Pna1VRA8W/E= Subject key identifier: 30:01:20:80:45:42:6C:74:08:D9:9D:41:46:35:64:1B:B2:70:73:E9 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F432858499829DF3192FA8F49112CA500 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/8aed6fa4-13a0-306a-a0dd-7749be3b0dd2.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 376 IP address blocks: 206.167.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:df:31:92:fa:8f:49:11:2c:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=bcd9f7c1-447f-4afb-b660-c4f322cd2196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:04:7c:6d:86:14:6a:03:a5:ea:0f:c0:87:2d: 7e:12:01:70:10:45:7a:f1:3d:e5:16:c2:6b:ed:76: 19:b8:5e:ca:08:8f:9a:01:0a:6b:d6:e6:6d:fa:f6: 23:69:f2:e6:04:67:d2:7d:e0:c6:6c:82:dd:eb:7e: b1:5c:66:e8:4c:e4:f4:36:bf:bb:00:80:8a:a8:0b: 0d:b8:91:b4:ed:95:e6:83:15:51:0a:ec:69:e7:df: 71:a5:e3:1b:f3:07:9f:23:82:fd:c8:42:09:ad:14: fd:7d:f1:02:f3:67:a5:ff:65:07:29:d7:b9:81:35: 87:40:5e:41:64:de:bc:12:2d:14:97:d1:fa:17:ce: 8c:b7:b5:09:cb:ab:0b:cb:9b:85:79:01:69:98:78: e2:9e:55:2e:6e:33:b2:6a:e8:dc:61:70:9e:16:df: 20:a8:ab:d5:10:d2:b2:d1:5a:26:c7:2a:d9:06:f0: 31:62:61:ff:59:d6:ca:3a:51:5f:0e:3b:38:28:7c: 43:7e:10:68:5c:7e:98:6d:d4:b4:7a:8c:36:ce:61: 98:e4:9e:7e:61:aa:58:9e:05:f3:15:bb:01:b2:21: aa:fa:04:0b:62:99:cf:23:6f:14:d2:58:c2:0a:88: a2:82:55:f7:1c:ee:0a:29:49:c3:7b:ff:43:97:fc: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:01:20:80:45:42:6C:74:08:D9:9D:41:46:35:64:1B:B2:70:73:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/8aed6fa4-13a0-306a-a0dd-7749be3b0dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5f:4e:48:3e:6c:b8:95:f5:c5:8e:a2:6d:b9:34:91:32:a3: ad:7d:00:a2:bd:36:ae:08:3f:ba:04:30:ce:9d:87:98:f7:ca: 38:5f:43:31:42:c5:38:5f:d2:c0:53:21:bf:21:10:3e:ec:40: 28:ad:f7:f5:8b:6d:fc:55:6c:48:d1:0a:db:9d:d4:44:59:ff: f7:09:69:c5:1e:6c:04:22:22:4c:d9:c7:99:0b:87:f7:e2:fb: ac:a1:a4:3f:fa:fd:1e:38:5a:0a:2e:d4:a0:1b:25:c0:e6:7f: dc:25:70:04:1f:fc:59:1c:07:b1:61:82:6b:bc:3a:07:99:a6: b3:99:99:59:df:29:40:4b:c5:1d:e6:8f:51:e7:e2:df:d9:ac: cc:de:03:0e:10:2e:0e:9e:38:c2:bd:81:15:fd:9c:f7:33:11: 70:35:69:88:0d:bb:e5:56:d4:7c:61:76:46:17:74:df:f2:7f: 4a:0f:00:a8:0b:4e:4a:69:e6:66:6d:6d:8c:0f:b5:3a:73:04: eb:52:08:5f:a3:7b:21:f5:6d:45:4e:cb:94:8f:e6:a0:be:74: 4d:84:c2:ff:dc:a9:1a:73:da:a4:2a:3b:8d:36:76:47:9e:56: d1:93:98:68:b1:56:83:aa:11:b4:14:98:86:54:25:33:b1:3d: 82:51:2c:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKd8xkvqPSREspQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk YmNkOWY3YzEtNDQ3Zi00YWZiLWI2NjAtYzRmMzIyY2QyMTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggR8bYYUagOl6g/Ahy1+EgFwEEV68T3lFsJr 7XYZuF7KCI+aAQpr1uZt+vYjafLmBGfSfeDGbILd636xXGboTOT0Nr+7AICKqAsN uJG07ZXmgxVRCuxp599xpeMb8wefI4L9yEIJrRT9ffEC82el/2UHKde5gTWHQF5B ZN68Ei0Ul9H6F86Mt7UJy6sLy5uFeQFpmHjinlUubjOyaujcYXCeFt8gqKvVENKy 0VomxyrZBvAxYmH/WdbKOlFfDjs4KHxDfhBoXH6YbdS0eow2zmGY5J5+YapYngXz FbsBsiGq+gQLYpnPI28U0ljCCoiiglX3HO4KKUnDe/9Dl/wXSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDABIIBFQmx0CNmdQUY1ZBuycHPpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvOGFlZDZmYTQtMTNhMC0z MDZhLWEwZGQtNzc0OWJlM2IwZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdfTkg+bLiV9cWOom25NJEyo619AKK9Nq4IP7oEMM6dh5j3yjhfQzFC xThf0sBTIb8hED7sQCit9/WLbfxVbEjRCtud1ERZ//cJacUebAQiIkzZx5kLh/fi +6yhpD/6/R44Wgou1KAbJcDmf9wlcAQf/FkcB7Fhgmu8OgeZprOZmVnfKUBLxR3m j1Hn4t/ZrMzeAw4QLg6eOMK9gRX9nPczEXA1aYgNu+VW1HxhdkYXdN/yf0oPAKgL Tkpp5mZtbYwPtTpzBOtSCF+jeyH1bUVOy5SP5qC+dE2Ewv/cqRpz2qQqO402dkee VtGTmGixVoOqEbQUmIZUJTOxPYJRLCQ= -----END CERTIFICATE-----Generated at Mon Apr 28 10:04:15 2025 by rpki-client