$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/e23be030-470c-3c12-b4e7-b4b9a0759547.roa File: e23be030-470c-3c12-b4e7-b4b9a0759547.roa (raw, json) Hash identifier: /VVp10aJdBNlMOkaqEXhKZMu66pMHN4XMvB598NmKuE= Subject key identifier: 8C:75:A0:86:9E:6E:BA:E2:23:89:0B:B2:C5:6D:71:DB:F2:FA:4F:82 Certificate issuer: /CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Certificate serial: 010D0C9F43285849244E677DEAC46BDA720C4780 Authority key identifier: 33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/e23be030-470c-3c12-b4e7-b4b9a0759547.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 64289 IP address blocks: 206.71.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:67:7d:ea:c4:6b:da:72:0c:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a23bc07d-54c6-415f-9dc1-c1a209f2d080 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=d8d8db43-0b10-4e10-8fd2-943fb83a0fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cf:3e:d0:0d:c0:c0:dc:e8:4d:09:12:dd:78: 36:80:0c:1f:f2:bc:a8:c1:36:0a:0c:61:b2:7b:5a: 10:30:b3:ef:82:34:8c:61:a0:9e:3f:cd:e6:38:79: 95:0f:1e:ba:01:5c:64:87:c9:ba:86:46:c2:6e:d2: bf:eb:72:fb:14:aa:ff:c0:f5:fc:60:c2:dc:0f:60: 9e:54:c7:56:a5:04:71:74:60:da:c9:ab:63:0b:94: 0e:d9:f4:c7:92:9d:b5:9c:2e:ca:20:6c:c0:be:7e: 2b:93:bf:39:3e:aa:13:0a:19:25:61:83:1e:b3:6f: 2b:e4:83:31:7d:3b:dc:6f:62:e9:24:e2:77:4b:07: 5b:09:3a:93:52:0a:70:b5:ac:d9:8e:5e:8d:16:60: af:f7:30:64:4c:1f:a9:2e:32:77:6e:07:c3:c3:1e: 1b:63:fd:57:a1:95:ee:7c:80:6a:5a:b2:ae:de:99: ca:43:f8:13:38:0a:e4:5f:15:d3:be:fc:f7:bc:29: d1:4c:a9:28:e5:77:18:8e:83:69:4d:ab:49:ba:c9: eb:36:02:55:fe:ff:77:f2:53:15:0d:f1:9f:5f:e6: 95:92:24:db:85:9f:38:3d:c7:18:b5:2e:41:3e:54: dd:0b:89:04:d2:7a:ad:13:c0:2c:d7:81:87:a7:6d: ad:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:75:A0:86:9E:6E:BA:E2:23:89:0B:B2:C5:6D:71:DB:F2:FA:4F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/e23be030-470c-3c12-b4e7-b4b9a0759547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080/a23bc07d-54c6-415f-9dc1-c1a209f2d080.crl X509v3 Authority Key Identifier: keyid:33:0D:D1:53:FE:35:12:07:DD:57:8A:29:1B:6B:E6:17:DB:1C:58:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a23bc07d-54c6-415f-9dc1-c1a209f2d080.cer sbgp-ipAddrBlock: critical IPv4: 206.71.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:2a:74:fe:25:dd:46:dc:4e:7c:22:6f:a3:e0:45:df:45:94: 46:7f:d3:88:01:64:51:0f:31:87:9c:47:d7:de:26:eb:9e:9f: 54:ab:f2:82:b0:98:92:9e:bb:26:a7:ed:68:6a:dd:0e:06:e1: 1f:90:01:af:80:b8:e6:fa:99:d6:b4:15:24:48:c5:94:81:e6: c9:cd:7f:c6:a9:cb:42:83:af:ff:6a:de:e9:30:fb:ab:bc:c2: 8d:18:d4:9c:69:51:2d:8b:6c:62:2a:e9:96:7d:a8:d6:5e:ae: 37:ce:ea:9e:a6:75:99:05:4e:ee:a2:a5:dd:f6:4d:2c:01:1c: 4c:ac:e1:eb:05:ca:df:b6:26:ab:d3:4b:82:9a:5e:04:ce:6f: f4:29:ba:f6:d3:58:f4:69:07:a4:e1:b2:25:cd:85:81:77:12: b1:a8:f7:dc:ed:c2:6e:42:39:c8:bd:ec:6a:5a:c3:8d:a4:c8: 14:d9:72:c2:60:17:2e:aa:8d:01:14:06:46:a9:a4:4a:11:5f: 1c:37:50:a4:87:b3:4f:8c:a5:57:a3:be:7b:20:64:bc:09:78: 95:a5:17:b1:a6:5a:50:a3:61:80:a0:ff:c2:d0:32:7f:21:25: b6:74:f2:fe:fb:08:db:ff:c4:11:1e:59:de:04:40:54:8d:7b: 78:cc:a9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTmd96sRr2nIMR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzYmMwN2QtNTRjNi00MTVmLTlkYzEtYzFhMjA5ZjJk MDgwMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk ZDhkOGRiNDMtMGIxMC00ZTEwLThmZDItOTQzZmI4M2EwZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s8+0A3AwNzoTQkS3Xg2gAwf8ryowTYKDGGy e1oQMLPvgjSMYaCeP83mOHmVDx66AVxkh8m6hkbCbtK/63L7FKr/wPX8YMLcD2Ce VMdWpQRxdGDayatjC5QO2fTHkp21nC7KIGzAvn4rk785PqoTChklYYMes28r5IMx fTvcb2LpJOJ3SwdbCTqTUgpwtazZjl6NFmCv9zBkTB+pLjJ3bgfDwx4bY/1XoZXu fIBqWrKu3pnKQ/gTOArkXxXTvvz3vCnRTKko5XcYjoNpTatJusnrNgJV/v938lMV DfGfX+aVkiTbhZ84PccYtS5BPlTdC4kE0nqtE8As14GHp22t2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx1oIaebrriI4kLssVtcdvy+k+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNi YzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEyMDlmMmQwODAvZTIzYmUwMzAtNDcwYy0z YzEyLWI0ZTctYjRiOWEwNzU5NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTIzYmMwN2QtNTRjNi00MTVmLTlk YzEtYzFhMjA5ZjJkMDgwL2EyM2JjMDdkLTU0YzYtNDE1Zi05ZGMxLWMxYTIwOWYy ZDA4MC5jcmwwHwYDVR0jBBgwFoAUMw3RU/41EgfdV4opG2vmF9scWPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMjNiYzA3ZC01NGM2LTQxNWYtOWRjMS1jMWEy MDlmMmQwODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4qdP4l3UbcTnwib6PgRd9FlEZ/04gBZFEPMYecR9feJuuen1Sr8oKw mJKeuyan7Whq3Q4G4R+QAa+AuOb6mda0FSRIxZSB5snNf8apy0KDr/9q3ukw+6u8 wo0Y1JxpUS2LbGIq6ZZ9qNZerjfO6p6mdZkFTu6ipd32TSwBHEys4esFyt+2JqvT S4KaXgTOb/QpuvbTWPRpB6ThsiXNhYF3ErGo99ztwm5COci97Gpaw42kyBTZcsJg Fy6qjQEUBkappEoRXxw3UKSHs0+MpVejvnsgZLwJeJWlF7GmWlCjYYCg/8LQMn8h JbZ08v77CNv/xBEeWd4EQFSNe3jMqRI= -----END CERTIFICATE-----Generated at Sun Apr 27 12:07:52 2025 by rpki-client