$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa File: 81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa (raw, json) Hash identifier: 3Kzhr/pIFseaY9tIpDk61/H8wKkYGdK6PzuZBJLAzBI= Subject key identifier: 8B:51:8E:C3:C1:23:7A:0F:21:5F:06:EA:17:0D:E2:0E:B2:C9:15:C7 Certificate issuer: /CN=f4ef9ae2-f027-4028-a705-db1e3463a382 Certificate serial: 010D0C9F432858492184045906FA767747988880 Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 40339 IP address blocks: 206.71.154.0/23 maxlen: 24 208.78.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:04:59:06:fa:76:77:47:98:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382 Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=b9c1e545-a7ac-4589-a764-db28d6ddbf0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e2:ce:09:fb:1b:9d:eb:33:02:d6:11:e0:ae: 93:d7:59:37:8d:5a:82:a9:ce:c9:04:5e:aa:cd:26: 05:e2:a2:b2:99:32:59:7f:3f:ac:ef:33:58:4c:76: ff:fd:8e:99:ed:b5:68:11:86:3a:ab:90:62:fe:bb: 54:19:ec:e9:6b:9c:e8:84:e0:82:81:5b:a0:bc:fe: 77:48:86:f6:e9:7e:77:b9:b2:f3:f6:da:f1:1c:76: 26:7e:00:04:63:ec:81:9d:a4:9b:3f:be:89:41:79: 2c:10:c5:e4:d2:65:da:b7:4c:13:96:ec:06:67:2b: b8:63:01:83:28:f4:f7:f7:5c:47:8c:a5:b6:e0:ff: 98:65:a6:bf:b2:85:58:b4:2d:3e:d1:16:2b:b0:7a: 77:f1:13:60:e2:38:0a:63:b2:ec:4b:f4:e1:45:8a: c7:ac:2a:ff:4d:d9:5c:f6:d9:e4:d7:45:e0:c5:46: 0c:22:1b:96:73:2f:51:ed:30:9b:8a:f1:79:fb:2a: 34:76:59:ad:54:f4:4e:a2:32:8f:c7:64:a0:f1:07: 9e:03:9e:bb:11:46:76:db:99:21:cb:f9:bb:69:98: 75:11:e3:be:d2:67:6b:65:3e:32:09:8e:4e:08:08: 9d:e9:09:00:68:fe:43:22:90:cb:e8:85:0f:32:02: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:51:8E:C3:C1:23:7A:0F:21:5F:06:EA:17:0D:E2:0E:B2:C9:15:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl X509v3 Authority Key Identifier: keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer sbgp-ipAddrBlock: critical IPv4: 206.71.154.0/23 208.78.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5e:2a:9b:8e:49:05:fb:66:1e:02:6c:a8:c4:c4:ca:f8:c7: 43:a5:49:ec:87:f1:bc:8b:28:7c:87:58:47:fd:01:9d:70:83: 0c:c0:77:ab:38:c8:c6:16:fc:bc:a4:5a:88:04:a3:ed:72:b7: dd:5b:ac:94:12:b4:73:d4:f5:27:cf:8a:df:5a:c6:ca:24:83: f9:40:63:13:4e:04:9b:db:67:13:a7:57:22:02:41:bf:1f:ee: 7c:1c:37:de:7e:98:9c:0b:40:27:f5:86:83:aa:fa:6a:f1:e5: 24:bd:78:a3:35:12:73:9c:f5:fd:61:89:55:9a:73:a2:39:ad: f6:42:17:ac:2a:80:62:54:a1:13:5c:19:80:92:a1:d6:a0:fb: 28:88:47:d4:61:2e:af:a7:2d:68:51:23:32:fe:2c:4c:80:74: 58:e2:18:ce:61:fd:d3:75:dd:c2:f8:20:0f:a2:09:06:e5:93: a1:ac:81:5e:e1:02:54:70:b5:bf:9b:d8:12:14:f8:4c:ce:45: ef:aa:f1:01:99:e4:4a:4e:25:a8:13:a9:f1:8f:ff:0a:c6:d9: 77:b3:c4:ca:ff:63:6a:c7:d0:04:38:0c:94:c2:04:ad:b4:dd: d2:d9:15:58:dd:17:d6:27:71:45:8a:42:7d:fc:f4:37:fe:7e: e4:d3:b9:57 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkhhARZBvp2d0eYiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRlZjlhZTItZjAyNy00MDI4LWE3MDUtZGIxZTM0NjNh MzgyMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk YjljMWU1NDUtYTdhYy00NTg5LWE3NjQtZGIyOGQ2ZGRiZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+LOCfsbneszAtYR4K6T11k3jVqCqc7JBF6q zSYF4qKymTJZfz+s7zNYTHb//Y6Z7bVoEYY6q5Bi/rtUGezpa5zohOCCgVugvP53 SIb26X53ubLz9trxHHYmfgAEY+yBnaSbP76JQXksEMXk0mXat0wTluwGZyu4YwGD KPT391xHjKW24P+YZaa/soVYtC0+0RYrsHp38RNg4jgKY7LsS/ThRYrHrCr/Tdlc 9tnk10XgxUYMIhuWcy9R7TCbivF5+yo0dlmtVPROojKPx2Sg8QeeA567EUZ225kh y/m7aZh1EeO+0mdrZT4yCY5OCAid6QkAaP5DIpDL6IUPMgJlfQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFItRjsPBI3oPIV8G6hcN4g6yyRXHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVm OWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFlMzQ2M2EzODIvODFiMWRjYzYtMjRlNC0z YTZmLTgwZjMtNmU5YmNkN2ZhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjRlZjlhZTItZjAyNy00MDI4LWE3 MDUtZGIxZTM0NjNhMzgyL2Y0ZWY5YWUyLWYwMjctNDAyOC1hNzA1LWRiMWUzNDYz YTM4Mi5jcmwwHwYDVR0jBBgwFoAUeENjXzX3pbZuOXvTYhshzKLlkjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVmOWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFl MzQ2M2EzODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzkeaAwQD 0E7QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGVeKpuOSQX7Zh4CbKjExMr4x0OlSeyH8byLKHyHWEf9AZ1w gwzAd6s4yMYW/LykWogEo+1yt91brJQStHPU9SfPit9axsokg/lAYxNOBJvbZxOn VyICQb8f7nwcN95+mJwLQCf1hoOq+mrx5SS9eKM1EnOc9f1hiVWac6I5rfZCF6wq gGJUoRNcGYCSodag+yiIR9RhLq+nLWhRIzL+LEyAdFjiGM5h/dN13cL4IA+iCQbl k6GsgV7hAlRwtb+b2BIU+EzORe+q8QGZ5EpOJagTqfGP/wrG2XezxMr/Y2rH0AQ4 DJTCBK203dLZFVjdF9YncUWKQn389Df+fuTTuVc= -----END CERTIFICATE-----Generated at Mon Apr 28 15:21:04 2025 by rpki-client