$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa File: 684c8408-e1d6-3109-9a08-0ec671566794.roa (raw, json) Hash identifier: FoNnKaEnWnriSCIynT1D0fdntBfe/v05F6qmWwvtiVg= Subject key identifier: D5:03:D8:B3:4E:44:7D:0B:34:12:2A:D2:CC:BB:A2:47:26:E9:4B:02 Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F432858499829C9BFBBC7B5669EAB0D80 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 399864 IP address blocks: 206.168.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:c9:bf:bb:c7:b5:66:9e:ab:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=76b6ceb5-d5ba-4ca6-b356-f741d7418a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:d8:54:ae:ac:37:4c:bc:e6:82:53:00:55: 62:c1:24:0c:dc:62:0d:5c:c5:93:43:2e:9c:bf:ff: 2e:25:47:44:3b:eb:3d:8e:7a:9d:46:d2:2a:ea:98: 21:2f:8b:19:0d:b7:05:dd:c5:25:c3:d4:c8:21:cb: ab:80:a7:16:57:f9:f7:16:a2:11:19:01:85:e3:fa: 93:1b:5b:b6:57:e7:a3:fd:1d:a3:5d:e9:77:9f:3a: 6b:ee:e9:8c:f9:51:e6:7d:1f:da:44:16:93:7f:ca: 25:1f:ba:b4:7d:33:8b:55:84:3b:b4:47:9b:e4:5f: 4d:af:9e:af:0a:c9:4e:e1:be:ab:82:30:84:cc:e8: 1f:46:13:1d:9e:8e:c1:97:58:56:d8:47:0a:0f:70: 02:e7:d5:ca:00:af:7c:80:eb:ca:de:49:b0:5c:13: ab:1c:6f:52:17:12:fb:65:f6:fb:38:5c:c6:2e:9b: ad:d9:a3:c6:bd:ab:48:f4:a9:60:09:31:47:bf:60: a4:64:26:59:c1:02:d4:ef:26:aa:cb:84:32:8d:6d: ca:1e:65:85:2b:83:1e:a1:d7:75:4b:a5:98:e2:d5: 7d:59:c4:5d:dc:12:f3:28:23:cf:20:ef:9a:5b:98: a1:6a:58:d9:97:fe:ca:01:03:6f:37:df:ec:32:37: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:03:D8:B3:4E:44:7D:0B:34:12:2A:D2:CC:BB:A2:47:26:E9:4B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 206.168.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e6:ea:fa:c8:12:c9:1d:9b:6d:11:c4:e1:09:17:d9:7d:cc: 36:ba:10:4b:f3:46:90:3e:bc:bb:79:95:19:b4:a3:f5:95:0e: 0d:1c:cb:c0:a6:c8:25:bc:6e:e6:23:58:e1:ef:42:f4:9e:5d: bd:7b:78:9e:90:bc:70:f4:77:38:e7:32:c1:9e:21:e7:d3:33: d9:fb:26:20:fc:5c:ed:90:d0:c5:89:db:42:6b:18:62:e4:28: a9:4b:58:65:68:1b:e1:1d:6c:4b:ba:3f:85:39:a7:da:9a:3c: d6:ec:03:41:18:58:df:90:a6:50:91:0d:02:8a:ea:9a:cc:6a: 10:f2:1c:74:71:af:9e:05:c0:5b:9b:a4:52:9f:95:01:34:0d: da:7a:f8:42:62:ec:53:45:04:a5:ed:e2:f0:c6:84:df:a5:6c: 19:4d:ef:19:27:42:34:0a:58:cc:01:59:ea:f6:5c:28:57:df: a0:e7:f1:05:d3:0f:db:1d:d0:90:3b:f7:17:f9:2c:ef:83:93: ab:bf:32:a8:bd:4b:4a:a2:df:55:d5:ce:92:33:12:2d:3c:8a: e6:3f:5f:ff:22:6c:a4:72:ac:db:7f:d7:35:14:d6:3a:d2:91: 26:78:f0:bb:8a:12:1b:91:96:37:41:75:d3:96:c1:c1:fc:c7: 26:63:07:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcm/u8e1Zp6rDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk NzZiNmNlYjUtZDViYS00Y2E2LWIzNTYtZjc0MWQ3NDE4YTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlubYVK6sN0y85oJTAFViwSQM3GINXMWTQy6c v/8uJUdEO+s9jnqdRtIq6pghL4sZDbcF3cUlw9TIIcurgKcWV/n3FqIRGQGF4/qT G1u2V+ej/R2jXel3nzpr7umM+VHmfR/aRBaTf8olH7q0fTOLVYQ7tEeb5F9Nr56v CslO4b6rgjCEzOgfRhMdno7Bl1hW2EcKD3AC59XKAK98gOvK3kmwXBOrHG9SFxL7 Zfb7OFzGLput2aPGvatI9KlgCTFHv2CkZCZZwQLU7yaqy4QyjW3KHmWFK4Meodd1 S6WY4tV9WcRd3BLzKCPPIO+aW5ihaljZl/7KAQNvN9/sMjfuKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUD2LNORH0LNBIq0sy7okcm6UsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvNjg0Yzg0MDgtZTFkNi0z MTA5LTlhMDgtMGVjNjcxNTY2Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrm6vrIEskdm20RxOEJF9l9zDa6EEvzRpA+vLt5lRm0o/WVDg0cy8Cm yCW8buYjWOHvQvSeXb17eJ6QvHD0dzjnMsGeIefTM9n7JiD8XO2Q0MWJ20JrGGLk KKlLWGVoG+EdbEu6P4U5p9qaPNbsA0EYWN+QplCRDQKK6prMahDyHHRxr54FwFub pFKflQE0Ddp6+EJi7FNFBKXt4vDGhN+lbBlN7xknQjQKWMwBWer2XChX36Dn8QXT D9sd0JA79xf5LO+Dk6u/Mqi9S0qi31XVzpIzEi08iuY/X/8ibKRyrNt/1zUU1jrS kSZ48LuKEhuRljdBddOWwcH8xyZjBxo= -----END CERTIFICATE-----Generated at Wed Apr 30 01:53:37 2025 by rpki-client