$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/0f1cf2d1-b304-3b6e-99d4-81663c98da1e.roa File: 0f1cf2d1-b304-3b6e-99d4-81663c98da1e.roa (raw, json) Hash identifier: HGgDFtgSeBSW1KRJDh5Z3ljavS3KW7QSz1Abnr8CnUk= Subject key identifier: CD:9F:F5:92:4C:3D:04:76:21:86:A3:57:7A:7D:DB:DD:34:EB:20:9C Certificate issuer: /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Certificate serial: 010D0C9F4328584973DEEA6A288D53E82FCDE9F0 Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/0f1cf2d1-b304-3b6e-99d4-81663c98da1e.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 396982 IP address blocks: 206.222.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:ea:6a:28:8d:53:e8:2f:cd:e9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=b4441ca0-5dcc-42dd-8b5e-9b541d60d854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:97:50:46:c5:63:9f:6b:16:f1:5a:8f:9c:1f: fa:40:66:da:da:a0:f0:c4:a9:ec:70:5d:20:93:00: 3f:8e:40:df:cf:2f:b9:3f:67:60:c0:04:6f:50:be: 25:61:a7:d3:9f:cd:63:4d:1d:94:1a:9b:35:c5:89: f0:49:fd:95:a7:32:a0:00:ef:94:fa:09:e7:61:c2: 50:fa:ba:41:be:af:7b:e4:b7:68:bb:7b:59:e1:58: 77:c5:5b:9a:d1:bc:d5:ed:e1:41:de:39:62:4e:c9: 5c:36:31:2e:b2:d1:63:79:e2:f8:1f:6f:9a:4e:11: db:bc:ac:3b:38:72:27:94:be:f5:5b:e5:88:2c:e4: cc:e4:fc:95:97:12:8d:a1:5f:79:f7:88:72:5a:85: 60:80:f9:82:3a:5b:95:01:42:8d:53:46:da:fa:57: 52:e9:97:5a:ac:e7:c2:44:3e:fe:7b:09:ec:6e:10: 01:b1:40:7d:a9:c7:72:90:f2:e9:d5:d5:39:1c:bf: d9:46:7a:70:ea:13:f3:d7:c5:e0:72:b4:1b:bc:9a: 45:23:75:95:51:3c:f4:63:bc:08:ae:a8:fd:b4:72: f4:ab:63:2b:d1:af:a1:82:d0:e0:24:94:14:ba:94: bb:dd:72:5f:6c:68:ab:71:9d:20:55:07:18:af:03: f5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9F:F5:92:4C:3D:04:76:21:86:A3:57:7A:7D:DB:DD:34:EB:20:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/0f1cf2d1-b304-3b6e-99d4-81663c98da1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl X509v3 Authority Key Identifier: keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer sbgp-ipAddrBlock: critical IPv4: 206.222.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1a:f1:52:c3:3a:77:fa:b7:27:67:d0:8c:34:5e:a9:37:f5: 45:1b:15:73:97:fd:2a:14:82:d0:c8:ae:9d:11:30:fb:b2:2a: 60:8e:0c:0d:11:46:6f:9c:dc:0e:2d:87:a8:c5:3f:ad:0e:3c: d3:c6:c5:ea:b3:d1:82:77:e2:92:0b:5e:71:93:a1:f1:1c:ac: 8d:a6:01:2f:52:de:0d:ba:98:8a:98:37:71:9b:ce:07:c4:82: 94:8b:4e:98:d9:5a:da:18:98:1d:80:c0:5a:df:c9:f5:20:28: 0f:e7:62:41:c9:01:e6:41:10:38:07:db:e8:69:eb:d6:4e:2b: b0:70:47:2d:3f:e7:af:65:5e:75:d3:4a:f8:01:53:2d:8e:b6: 5d:d1:45:4e:dd:03:5c:7f:16:b0:64:ca:71:10:2e:e4:cc:17: 4e:9a:1e:43:b6:1c:61:3a:3d:5f:3b:96:d0:11:6e:95:cb:01: 84:49:21:9e:73:a9:7d:a2:e5:e3:0d:2d:3c:f1:ee:9b:bc:55: d1:03:ac:47:45:8c:3f:49:72:5c:e2:ef:72:39:6e:86:38:54: 13:23:02:f2:8b:ac:1a:f4:9a:1e:97:e6:b0:b3:c2:be:56:20: 40:8a:d1:d9:57:63:f9:a1:cc:71:2d:f4:cf:25:63:c5:34:4e: b7:a4:9e:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3upqKI1T6C/N6fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIzNTgwY2EtMmZjMy00OGY1LWJkNjUtZGNjOWYwYjE5 NDgxMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YjQ0NDFjYTAtNWRjYy00MmRkLThiNWUtOWI1NDFkNjBkODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZdQRsVjn2sW8VqPnB/6QGba2qDwxKnscF0g kwA/jkDfzy+5P2dgwARvUL4lYafTn81jTR2UGps1xYnwSf2VpzKgAO+U+gnnYcJQ +rpBvq975Ldou3tZ4Vh3xVua0bzV7eFB3jliTslcNjEustFjeeL4H2+aThHbvKw7 OHInlL71W+WILOTM5PyVlxKNoV9594hyWoVggPmCOluVAUKNU0ba+ldS6ZdarOfC RD7+ewnsbhABsUB9qcdykPLp1dU5HL/ZRnpw6hPz18XgcrQbvJpFI3WVUTz0Y7wI rqj9tHL0q2Mr0a+hgtDgJJQUupS73XJfbGircZ0gVQcYrwP1yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2f9ZJMPQR2IYajV3p929006yCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1 ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5ZjBiMTk0ODEvMGYxY2YyZDEtYjMwNC0z YjZlLTk5ZDQtODE2NjNjOThkYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIzNTgwY2EtMmZjMy00OGY1LWJk NjUtZGNjOWYwYjE5NDgxLzFiMzU4MGNhLTJmYzMtNDhmNS1iZDY1LWRjYzlmMGIx OTQ4MS5jcmwwHwYDVR0jBBgwFoAUdhsmo+k9oZH15B4eSC33NoIS0XYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5 ZjBiMTk0ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzt7hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQa8VLDOnf6tydn0Iw0Xqk39UUbFXOX/SoUgtDIrp0RMPuyKmCODA0R Rm+c3A4th6jFP60OPNPGxeqz0YJ34pILXnGTofEcrI2mAS9S3g26mIqYN3GbzgfE gpSLTpjZWtoYmB2AwFrfyfUgKA/nYkHJAeZBEDgH2+hp69ZOK7BwRy0/569lXnXT SvgBUy2Otl3RRU7dA1x/FrBkynEQLuTMF06aHkO2HGE6PV87ltARbpXLAYRJIZ5z qX2i5eMNLTzx7pu8VdEDrEdFjD9Jclzi73I5boY4VBMjAvKLrBr0mh6X5rCzwr5W IECK0dlXY/mhzHEt9M8lY8U0Treknow= -----END CERTIFICATE-----Generated at Sat Apr 26 19:24:23 2025 by rpki-client