$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/324adb82-50f7-3f43-bf84-8fc0c66240a8.roa File: 324adb82-50f7-3f43-bf84-8fc0c66240a8.roa (raw, json) Hash identifier: lLXCx7Q181pHnH+AXKbUZw8OGd9hCNau/sjFhsBCUi0= Subject key identifier: F0:17:16:1D:37:85:E2:6C:53:46:7C:E2:B5:EC:A6:CB:F5:6C:9F:59 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF0CA1E881B36BA6F45400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/324adb82-50f7-3f43-bf84-8fc0c66240a8.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 6171 IP address blocks: 206.75.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0c:a1:e8:81:b3:6b:a6:f4:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=2d0b3dd4-e4d2-4944-aa59-2e07dc4581e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:f2:00:04:9e:f0:61:55:4e:f8:f8:08:4b: d1:3d:ed:14:b5:19:03:86:fa:f4:0c:c1:8a:fe:26: 23:12:2f:98:33:be:bd:eb:d4:d1:2f:f7:80:88:ea: 90:61:81:83:d5:6f:fb:a1:47:c4:0d:81:fa:fa:6a: ab:c0:c1:9b:b6:0f:4b:fe:bd:f6:3c:c1:9f:66:33: 31:ee:3f:64:09:60:5e:da:6b:9a:b3:e0:91:e2:24: 07:c2:4d:e4:d6:c3:a5:86:b2:0d:83:bf:12:d6:a7: 1f:e9:14:89:18:ba:9b:aa:a8:a1:ff:74:11:16:b7: 2e:cf:0c:63:45:a0:d7:35:e1:2d:a5:d9:39:92:e4: db:5c:77:85:05:7a:f2:61:f3:20:15:09:a7:b8:cc: 99:17:41:38:6d:e2:d4:e1:2b:26:85:84:89:52:58: a2:aa:36:2f:89:df:b9:80:ca:fb:4c:e9:a6:7b:57: 90:bb:e2:6d:87:8f:39:ab:bd:fd:56:c0:55:d8:3a: bf:28:d3:1a:0a:91:27:3c:13:f0:95:c2:6d:11:29: 39:86:d9:d5:55:50:ea:bd:00:31:57:3a:6d:12:31: 3e:33:d4:e3:84:1a:25:de:0a:ee:13:e9:59:09:4d: 74:d8:b1:56:6f:33:da:13:5f:00:2a:cc:a5:a6:07: ca:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:17:16:1D:37:85:E2:6C:53:46:7C:E2:B5:EC:A6:CB:F5:6C:9F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/324adb82-50f7-3f43-bf84-8fc0c66240a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 206.75.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:29:fc:45:ce:e3:6e:ad:69:3e:03:b4:64:77:6c:ff:1e:c2: 5d:43:44:73:0f:61:04:be:66:f8:7b:fd:9a:19:2c:12:85:be: ea:25:f4:33:aa:6d:2a:aa:e3:85:36:d2:c7:21:b3:e8:3c:c5: f6:ae:c7:87:4f:57:4e:29:b6:50:48:92:bc:66:88:4e:d5:39: 55:de:36:a7:0b:a6:ee:1a:ce:78:1b:77:49:5e:31:32:50:7c: 4c:0a:63:e1:bd:b2:a8:8a:68:0f:fc:a0:33:35:c7:de:de:3f: e1:72:04:4a:7a:9f:23:e7:44:17:24:28:8a:39:77:55:8e:cd: ca:c5:77:3e:e9:81:64:13:84:2f:b1:13:76:42:89:a8:1f:9a: 26:fd:34:64:90:18:71:d6:d0:30:95:b9:0d:07:98:4a:30:8f: 3b:b6:17:c4:c2:42:97:d1:99:32:1f:1e:9f:15:9b:5f:da:03: c5:43:ce:5f:2c:64:9f:62:ef:e3:47:dd:12:e9:d3:0c:18:36: c6:02:15:f7:37:73:95:12:c4:b7:41:71:94:bf:6b:23:4e:38: 29:5f:73:d1:8e:ae:b1:18:5a:12:ab:a4:2a:67:b5:eb:6e:11: bc:10:33:88:19:02:b6:a2:e5:74:04:2c:e1:9f:3c:4e:ac:ac: 8a:b7:45:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wyh6IGza6b0VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MmQwYjNkZDQtZTRkMi00OTQ0LWFhNTktMmUwN2RjNDU4MWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C/yAASe8GFVTvj4CEvRPe0UtRkDhvr0DMGK /iYjEi+YM76969TRL/eAiOqQYYGD1W/7oUfEDYH6+mqrwMGbtg9L/r32PMGfZjMx 7j9kCWBe2muas+CR4iQHwk3k1sOlhrINg78S1qcf6RSJGLqbqqih/3QRFrcuzwxj RaDXNeEtpdk5kuTbXHeFBXryYfMgFQmnuMyZF0E4beLU4SsmhYSJUliiqjYvid+5 gMr7TOmme1eQu+Jth485q739VsBV2Dq/KNMaCpEnPBPwlcJtESk5htnVVVDqvQAx VzptEjE+M9TjhBol3gruE+lZCU102LFWbzPaE18AKsylpgfKWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAXFh03heJsU0Z84rXspsv1bJ9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzI0YWRiODItNTBmNy0z ZjQzLWJmODQtOGZjMGM2NjI0MGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkvSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYp/EXO426taT4DtGR3bP8ewl1DRHMPYQS+Zvh7/ZoZLBKFvuol9DOq bSqq44U20schs+g8xfaux4dPV04ptlBIkrxmiE7VOVXeNqcLpu4azngbd0leMTJQ fEwKY+G9sqiKaA/8oDM1x97eP+FyBEp6nyPnRBckKIo5d1WOzcrFdz7pgWQThC+x E3ZCiagfmib9NGSQGHHW0DCVuQ0HmEowjzu2F8TCQpfRmTIfHp8Vm1/aA8VDzl8s ZJ9i7+NH3RLp0wwYNsYCFfc3c5USxLdBcZS/ayNOOClfc9GOrrEYWhKrpCpntetu EbwQM4gZArai5XQELOGfPE6srIq3RbM= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:44 2025 by rpki-client