$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/deb60b62-235a-3e60-9042-e2589cd32690.roa File: deb60b62-235a-3e60-9042-e2589cd32690.roa (raw, json) Hash identifier: hi3iNG++BdEtwquC42ZGfUPKa7MTj5U4RuaAARVXEh4= Subject key identifier: 87:E8:4D:59:1F:94:B3:AE:CB:7E:8B:A2:18:D2:CA:6B:C0:32:C3:15 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F43285848F926A84B06C9880305CB8A80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/deb60b62-235a-3e60-9042-e2589cd32690.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 271 IP address blocks: 206.12.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a8:4b:06:c9:88:03:05:cb:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=8a48f1f4-03d2-4ea0-8066-4dabff8a0aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:04:b6:3e:b6:bf:b9:ae:e9:db:97:a2:e0: cf:17:b5:f7:e1:5d:87:07:08:38:e8:31:0a:23:2b: 4d:2f:a2:a0:ac:19:6d:a3:cb:2e:10:a0:10:3e:a3: 81:53:da:b0:04:8c:1f:25:48:c3:f9:54:28:46:c3: 48:9a:a0:77:44:d2:42:1d:de:17:75:51:f7:65:8f: 93:fa:57:61:f9:a5:03:16:be:fa:84:cf:37:be:87: bc:65:09:c9:8f:a7:31:fb:e0:3c:56:36:00:97:27: f5:33:60:1b:d0:56:62:79:ef:5e:95:6a:21:3c:d2: 0e:be:a2:82:63:e6:2c:33:f8:57:5a:42:5a:4e:17: cf:3b:87:2b:db:2f:cb:40:26:fe:24:18:8f:fd:b7: f6:4f:ba:fe:62:38:9a:f0:17:66:1b:22:15:cb:a0: 13:73:b1:11:37:02:b8:0b:54:72:f1:e5:01:df:18: ec:6d:6f:6e:6c:70:87:f4:b2:94:36:04:27:3f:fd: 38:40:d1:7b:58:bf:dd:73:99:96:78:4e:01:ff:54: 47:47:17:b0:9b:cf:30:9f:d8:f0:08:bf:72:ed:b1: 9d:8f:95:65:b6:67:09:c3:0e:27:a5:1a:0e:fd:fc: 5b:09:8f:52:35:fd:a6:17:8e:61:3a:73:77:4d:95: 4b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E8:4D:59:1F:94:B3:AE:CB:7E:8B:A2:18:D2:CA:6B:C0:32:C3:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/deb60b62-235a-3e60-9042-e2589cd32690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9d:bf:96:b4:b7:55:0b:0d:6a:5e:8d:9b:44:05:97:2c:b1: d8:4a:56:88:37:96:ed:50:80:03:c4:2a:42:7b:b3:e3:a4:6d: 5d:6e:7b:5d:3c:fa:f6:85:9f:0c:25:0d:7d:e9:86:01:33:6e: 8b:e9:8c:6a:b1:a9:da:51:5a:eb:b3:6a:86:65:aa:f1:29:53: 35:d9:63:7b:1d:35:79:59:d5:22:c4:77:ef:38:22:ad:f7:29: 05:f1:87:82:4a:11:13:9b:e3:9a:70:69:30:61:24:bf:28:33: d0:18:b1:1f:79:36:a2:12:af:bf:86:aa:78:4a:78:17:66:cd: 9b:5e:76:b3:12:55:c9:7f:22:21:2d:e1:7e:5d:d9:df:a9:9b: 28:07:92:10:10:1d:55:2d:21:7f:85:4c:1a:9f:bc:af:02:9e: 7d:c5:5e:72:b6:4c:16:10:39:68:51:96:1e:5f:2c:cf:da:3f: e5:6a:95:93:dc:df:26:c4:12:2c:7b:a4:d0:b3:54:67:8c:ab: e2:88:43:d3:33:35:67:73:47:40:b6:38:19:4e:b1:90:01:03: 4c:a2:f2:ae:66:03:ba:dc:1a:b0:33:38:40:c0:4b:e4:26:cf: 6f:72:96:cb:0f:f0:6b:ed:d8:55:78:46:0e:5a:9e:40:6e:86: 00:f4:63:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqhLBsmIAwXLioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OGE0OGYxZjQtMDNkMi00ZWEwLTgwNjYtNGRhYmZmOGEwYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/EEtj62v7mu6duXouDPF7X34V2HBwg46DEK IytNL6KgrBlto8suEKAQPqOBU9qwBIwfJUjD+VQoRsNImqB3RNJCHd4XdVH3ZY+T +ldh+aUDFr76hM83voe8ZQnJj6cx++A8VjYAlyf1M2Ab0FZiee9elWohPNIOvqKC Y+YsM/hXWkJaThfPO4cr2y/LQCb+JBiP/bf2T7r+Yjia8BdmGyIVy6ATc7ERNwK4 C1Ry8eUB3xjsbW9ubHCH9LKUNgQnP/04QNF7WL/dc5mWeE4B/1RHRxewm88wn9jw CL9y7bGdj5VltmcJww4npRoO/fxbCY9SNf2mF45hOnN3TZVLswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfoTVkflLOuy36LohjSymvAMsMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZGViNjBiNjItMjM1YS0z ZTYwLTkwNDItZTI1ODljZDMyNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzgwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSdv5a0t1ULDWpejZtEBZcssdhKVog3lu1QgAPEKkJ7s+OkbV1ue108 +vaFnwwlDX3phgEzbovpjGqxqdpRWuuzaoZlqvEpUzXZY3sdNXlZ1SLEd+84Iq33 KQXxh4JKEROb45pwaTBhJL8oM9AYsR95NqISr7+GqnhKeBdmzZtedrMSVcl/IiEt 4X5d2d+pmygHkhAQHVUtIX+FTBqfvK8Cnn3FXnK2TBYQOWhRlh5fLM/aP+VqlZPc 3ybEEix7pNCzVGeMq+KIQ9MzNWdzR0C2OBlOsZABA0yi8q5mA7rcGrAzOEDAS+Qm z29ylssP8Gvt2FV4Rg5ankBuhgD0Y/M= -----END CERTIFICATE-----Generated at Mon Apr 28 06:08:26 2025 by rpki-client