$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa File: 487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa (raw, json) Hash identifier: KK74hvXK0VHPns9qpABDPN22fuB2xEZBk0eJ2ydpKB8= Subject key identifier: AF:6B:2E:27:FA:06:FF:25:A5:1C:CD:B6:43:A1:8F:A1:8B:9E:01:67 Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F43285848F22C65A97635C118E21792E0 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 6939 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:65:a9:76:35:c1:18:e2:17:92:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=60c1add6-624d-42c0-a83f-fdbe816b97f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:9c:eb:92:ff:23:6c:0d:fe:99:c4:3c:f3: ef:44:ad:77:70:98:cd:30:b4:b1:28:f2:aa:7e:4f: 6c:3d:81:e9:15:ea:9e:07:3a:25:6b:68:1d:cc:fe: 5a:6b:4d:57:5a:2d:07:51:64:e9:30:8b:0a:38:38: 99:41:c9:7b:05:d7:5f:39:2a:0e:bf:fd:2d:5e:f3: c6:e0:ee:18:2c:91:4d:62:13:ad:59:73:57:63:70: 6f:d9:c0:50:ac:4b:83:7b:f5:3e:be:80:39:0b:af: 57:3a:04:01:4a:7f:f4:c3:10:60:87:8c:15:00:f1: 08:49:d6:48:f1:0e:fd:30:f8:85:de:db:0c:d6:6a: 66:c2:fe:29:16:37:5d:f7:c2:43:c2:c0:08:8e:bb: 0c:e5:ce:3f:99:46:11:23:ab:06:89:eb:67:95:ab: cc:7d:2f:8f:85:06:0b:f5:44:a7:7a:cc:b3:f5:90: a0:cb:ba:42:3b:88:83:5e:d0:86:7e:e2:4f:d2:59: d6:61:07:cf:a1:d2:47:dd:01:93:26:d6:b9:88:64: 0a:a0:c9:1e:94:73:68:18:c4:74:ee:bb:8a:a1:aa: 08:1a:c8:ad:de:d1:ae:0f:4f:9c:6f:46:56:42:9d: bd:2d:b9:58:5b:e7:17:9a:9f:df:09:4e:ed:21:c7: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6B:2E:27:FA:06:FF:25:A5:1C:CD:B6:43:A1:8F:A1:8B:9E:01:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/487d0e32-0ca9-3533-b4e3-dfb4edc0154c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0f:f5:6f:f0:e3:44:dd:b0:cc:09:49:82:28:d8:df:41:3d: 51:7c:8d:92:db:60:55:4c:71:25:50:fd:c3:e0:a6:45:c4:9c: 72:de:ef:85:d4:3e:8c:21:73:a4:73:b5:cd:50:db:20:21:79: cf:af:f8:7e:21:6f:b5:ba:00:3b:a3:62:7b:13:f2:5d:0e:f3: f7:79:10:f9:13:23:ec:04:09:8f:5b:3b:3c:b2:ac:62:16:23: 5f:fb:97:5e:6e:f0:3a:42:3f:54:5a:10:f5:46:8d:fb:9e:c3: fc:9c:7c:67:c7:b0:b3:c4:48:5c:df:d4:29:d4:58:18:51:a9: 8c:4a:4a:0d:00:63:37:c4:b4:06:cc:f6:6f:14:1e:0e:03:08: 60:07:7e:b0:bf:0e:78:50:f4:93:dd:aa:40:87:20:13:eb:35: 36:8d:94:ce:3d:d1:02:8d:32:02:6e:92:20:1e:96:ad:d6:b3: a2:3a:19:42:89:e4:9c:e6:b9:a4:0a:bf:9d:89:7b:a8:3b:dd: c4:30:30:bb:a8:eb:4e:2b:1f:2f:21:c4:88:92:83:f2:72:e1: b1:b8:cb:dd:f8:c6:22:a6:d1:96:8c:d6:38:d4:a5:12:d5:7e: d5:27:4c:28:61:5c:8c:73:dc:d9:74:54:98:5f:5b:51:2f:ed: 2e:5e:e6:f3 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEjyLGWpdjXBGOIXkuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NjBjMWFkZDYtNjI0ZC00MmMwLWE4M2YtZmRiZTgxNmI5N2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxCc65L/I2wN/pnEPPPvRK13cJjNMLSxKPKq fk9sPYHpFeqeBzola2gdzP5aa01XWi0HUWTpMIsKODiZQcl7BddfOSoOv/0tXvPG 4O4YLJFNYhOtWXNXY3Bv2cBQrEuDe/U+voA5C69XOgQBSn/0wxBgh4wVAPEISdZI 8Q79MPiF3tsM1mpmwv4pFjdd98JDwsAIjrsM5c4/mUYRI6sGietnlavMfS+PhQYL 9USnesyz9ZCgy7pCO4iDXtCGfuJP0lnWYQfPodJH3QGTJta5iGQKoMkelHNoGMR0 7ruKoaoIGsit3tGuD0+cb0ZWQp29LblYW+cXmp/fCU7tIcfU9wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFK9rLif6Bv8lpRzNtkOhj6GLngFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvNDg3ZDBlMzItMGNhOS0z NTMzLWI0ZTMtZGZiNGVkYzAxNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHkP9W/w40TdsMwJSYIo2N9BPVF8 jZLbYFVMcSVQ/cPgpkXEnHLe74XUPowhc6Rztc1Q2yAhec+v+H4hb7W6ADujYnsT 8l0O8/d5EPkTI+wECY9bOzyyrGIWI1/7l15u8DpCP1RaEPVGjfuew/ycfGfHsLPE SFzf1CnUWBhRqYxKSg0AYzfEtAbM9m8UHg4DCGAHfrC/DnhQ9JPdqkCHIBPrNTaN lM490QKNMgJukiAelq3Ws6I6GUKJ5JzmuaQKv52Je6g73cQwMLuo604rHy8hxIiS g/Jy4bG4y934xiKm0ZaM1jjUpRLVftUnTChhXIxz3Nl0VJhfW1Ev7S5e5vM= -----END CERTIFICATE-----Generated at Sun Apr 27 11:32:05 2025 by rpki-client