$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa File: ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa (raw, json) Hash identifier: sQOpp6zlJx/SI1kxYo40mrWCMeXWLGGso4MrU1N8Ay0= Subject key identifier: 23:34:19:34:D4:C8:78:E7:54:32:81:C3:0C:B3:3D:87:2B:29:84:E8 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B642EE26D18C581D3C05380 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 206.55.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:2e:e2:6d:18:c5:81:d3:c0:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=39d1fb9f-26f0-4991-a3b0-9c7bf86094b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:7b:75:7c:2f:cf:73:8d:aa:b9:d4:1f:1c: b4:7c:86:e9:a6:bb:ad:2e:1c:56:d0:a4:33:ae:6e: 5f:42:38:55:25:61:3f:44:4e:11:44:d1:0c:4b:a7: 7b:ab:42:96:8b:4a:ad:0e:f6:31:f9:c0:03:76:e2: a4:52:53:79:77:cc:7c:d9:85:cd:7a:32:9b:e5:10: e9:13:99:e8:0b:de:29:88:c7:54:c6:57:b2:20:81: f5:67:8e:47:15:36:d8:29:62:02:c5:17:03:a8:55: 12:52:5f:72:79:f4:d2:03:45:78:7a:95:5c:89:1d: 76:cc:26:fb:8e:10:de:c0:34:95:9a:33:2b:0a:03: 13:86:81:ee:d5:96:6d:e8:e8:1e:cf:aa:ba:34:7a: d9:3f:ae:c7:e3:46:c4:ed:9b:33:5e:24:94:c6:80: d3:64:fb:83:29:30:44:6a:a4:9a:e6:4b:92:72:37: 43:27:0b:6d:6e:f3:a2:96:62:99:e1:35:47:17:3a: 8f:de:17:f6:a7:63:9b:41:99:18:ef:17:de:d4:bc: e7:c9:a7:66:f3:16:ef:33:59:79:c9:73:e3:0d:e3: 7b:0a:68:46:03:c3:a0:32:5b:dc:c0:05:38:57:9c: 45:3d:c7:a4:27:eb:36:f3:a0:87:55:14:d9:8c:89: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:34:19:34:D4:C8:78:E7:54:32:81:C3:0C:B3:3D:87:2B:29:84:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ea2de2e4-c8fd-3e47-8a0b-f553e25f3261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 206.55.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:dd:da:d9:f6:a5:17:28:b6:c7:42:37:a9:6b:a4:cd:5b:d5: 96:99:06:b7:de:81:b0:dd:31:5c:3f:5d:c5:22:9c:0a:fc:f4: ee:34:21:b4:e1:59:bc:57:5f:d2:3c:5a:0e:48:e1:de:66:b4: c3:e7:47:ab:42:2c:8f:42:ee:87:2c:f2:8f:58:ee:7a:33:49: 5f:d0:2a:ec:0c:45:11:52:8e:51:7e:d8:a4:d1:95:1c:65:ea: 7f:a0:97:40:22:de:82:df:8b:6a:03:05:7d:07:be:65:a2:56: f2:7f:25:60:94:30:0d:4b:e5:61:1d:64:db:ee:a6:49:18:41: 23:61:66:e4:bb:2f:c1:1a:50:b6:ed:7c:c6:34:ef:a6:23:80: 4e:2a:9a:6d:67:84:74:2d:2b:b7:05:32:68:a2:5d:a6:27:60: 6b:2a:03:dc:03:81:fa:cd:ef:54:e4:83:57:56:15:f3:e4:e8: fe:25:a0:e8:81:89:48:88:06:d9:c7:a0:3f:11:44:9e:35:58: 8b:09:b9:6d:03:9d:e3:92:70:d7:fd:76:04:25:99:6a:f9:63: 66:2d:7a:5a:c0:fb:98:db:b7:0b:84:72:15:21:d7:7a:41:ac: ae:26:f7:4a:72:65:2b:0f:fa:76:e9:34:f6:b0:37:2c:9d:e0: 6f:ad:13:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZC7ibRjFgdPAU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MzlkMWZiOWYtMjZmMC00OTkxLWEzYjAtOWM3YmY4NjA5NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWF7dXwvz3ONqrnUHxy0fIbpprutLhxW0KQz rm5fQjhVJWE/RE4RRNEMS6d7q0KWi0qtDvYx+cADduKkUlN5d8x82YXNejKb5RDp E5noC94piMdUxleyIIH1Z45HFTbYKWICxRcDqFUSUl9yefTSA0V4epVciR12zCb7 jhDewDSVmjMrCgMThoHu1ZZt6Ogez6q6NHrZP67H40bE7ZszXiSUxoDTZPuDKTBE aqSa5kuScjdDJwttbvOilmKZ4TVHFzqP3hf2p2ObQZkY7xfe1Lznyadm8xbvM1l5 yXPjDeN7CmhGA8OgMlvcwAU4V5xFPcekJ+s286CHVRTZjIlC/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM0GTTUyHjnVDKBwwyzPYcrKYToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZWEyZGUyZTQtYzhmZC0z ZTQ3LThhMGItZjU1M2UyNWYzMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzjesMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETd2tn2pRcotsdCN6lrpM1b1ZaZBrfegbDdMVw/XcUinAr89O40IbTh WbxXX9I8Wg5I4d5mtMPnR6tCLI9C7ocs8o9Y7nozSV/QKuwMRRFSjlF+2KTRlRxl 6n+gl0Ai3oLfi2oDBX0HvmWiVvJ/JWCUMA1L5WEdZNvupkkYQSNhZuS7L8EaULbt fMY076YjgE4qmm1nhHQtK7cFMmiiXaYnYGsqA9wDgfrN71Tkg1dWFfPk6P4loOiB iUiIBtnHoD8RRJ41WIsJuW0DneOScNf9dgQlmWr5Y2YtelrA+5jbtwuEchUh13pB rK4m90pyZSsP+nbpNPawNyyd4G+tE3s= -----END CERTIFICATE-----Generated at Sun Apr 27 03:05:41 2025 by rpki-client