$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa File: 0c95cc7e-347c-343b-9a60-43effbd437ce.roa (raw, json) Hash identifier: nZCmpFOv/p0BjnTrE8YRhXMTBoFY2uWtD91jW8qScGc= Subject key identifier: 96:19:91:19:61:54:D2:83:BD:10:11:4B:A6:F1:8B:06:60:92:82:F2 Certificate issuer: /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Certificate serial: 010D0C9F43285849806F2976EAB5E33F447EF040 Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 8075 IP address blocks: 206.209.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:29:76:ea:b5:e3:3f:44:7e:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=cc74ea27-2bef-410d-a5a1-cb907b0fe94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:57:75:cb:b6:07:bb:ba:40:d0:f7:cf:18:66: 05:ce:13:3f:79:cf:4e:39:76:ab:37:a6:2f:96:a3: 5c:ba:99:a8:d8:df:73:3a:4b:b9:4c:c9:18:97:cb: c1:c4:6d:ec:6d:6f:4f:7d:9c:17:cc:ad:3d:e5:ad: a7:ca:d7:ea:b1:c8:18:3e:74:7b:58:02:62:73:8e: 2f:51:34:0b:be:fb:ec:01:63:bc:77:55:69:bd:3d: bd:5c:20:92:51:13:db:c1:0e:cd:9d:01:26:ea:ea: d6:5d:06:07:d9:0f:2c:45:92:05:62:9b:5b:e9:35: 3f:87:cc:a1:14:14:af:44:64:10:1d:da:24:3a:bc: b6:de:c9:12:f2:c7:05:1a:58:17:df:6d:57:00:d7: 7e:5b:cd:81:d6:7a:f8:92:5d:ab:91:4e:96:df:84: df:4a:07:fb:f7:17:e9:d0:cd:32:5a:ce:fb:92:4a: 8d:0e:1c:f4:59:2d:06:c7:fb:21:6a:20:0f:88:38: 38:4f:28:cc:d7:41:f9:3f:69:a5:ee:15:d9:f7:54: a8:ba:b7:09:4c:e8:52:0d:e3:cc:f5:94:65:47:97: 6a:35:0c:de:f9:83:fd:f7:60:d9:07:42:4a:f4:9e: ae:fb:e0:76:e6:95:2a:63:93:64:bc:c5:49:a9:ac: 74:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:19:91:19:61:54:D2:83:BD:10:11:4B:A6:F1:8B:06:60:92:82:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl X509v3 Authority Key Identifier: keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer sbgp-ipAddrBlock: critical IPv4: 206.209.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f1:07:69:ac:0e:c8:d9:4d:b6:58:b6:17:c5:76:52:33:b0: ab:5f:c5:0b:33:45:a1:d4:3e:d5:84:10:57:34:09:5c:d3:20: a0:91:0c:13:ab:57:6f:76:8b:bc:15:1a:f1:46:29:67:e7:ed: 2f:01:2e:50:8c:fd:da:60:10:42:a9:10:52:49:84:7c:14:ab: 45:9e:b7:52:4d:4b:7e:61:e8:58:80:08:6b:ad:0f:27:e4:d2: d7:e6:09:28:19:19:34:fc:7f:29:a3:10:77:5e:b2:9e:65:2f: cd:4a:14:57:f6:a8:e8:5d:3c:87:92:bd:a3:05:b1:a7:dd:72: 49:38:66:0c:c3:28:82:ac:3a:dc:4b:80:7c:30:95:31:0c:06: 52:ab:f9:00:d8:11:61:4c:9e:30:82:29:64:dd:e6:c1:d2:b8: b5:61:38:8a:8d:19:68:73:b8:64:c2:de:52:55:40:6f:21:7c: ba:da:eb:9e:02:1d:96:89:39:14:b6:85:dd:45:7a:12:e9:a9: 80:7b:7c:23:1d:f6:57:73:73:ba:40:8d:77:e3:e4:50:66:59: 9f:82:f1:77:94:c3:e8:9c:1f:41:cd:85:75:b0:d9:7b:93:56: e4:71:be:4e:89:d8:ed:31:e1:83:5e:cf:70:0a:fa:df:0e:5e: 1e:f5:ed:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbyl26rXjP0R+8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmYTY3M2UtY2VlYi00MDQ4LWIyYWItOTNjYWQ0NTgx NGFjMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk Y2M3NGVhMjctMmJlZi00MTBkLWE1YTEtY2I5MDdiMGZlOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFd1y7YHu7pA0PfPGGYFzhM/ec9OOXarN6Yv lqNcupmo2N9zOku5TMkYl8vBxG3sbW9PfZwXzK095a2nytfqscgYPnR7WAJic44v UTQLvvvsAWO8d1VpvT29XCCSURPbwQ7NnQEm6urWXQYH2Q8sRZIFYptb6TU/h8yh FBSvRGQQHdokOry23skS8scFGlgX321XANd+W82B1nr4kl2rkU6W34TfSgf79xfp 0M0yWs77kkqNDhz0WS0Gx/shaiAPiDg4TyjM10H5P2ml7hXZ91SourcJTOhSDePM 9ZRlR5dqNQze+YP992DZB0JK9J6u++B25pUqY5NkvMVJqax0IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYZkRlhVNKDvRARS6bxiwZgkoLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWZh NjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1ODE0YWMvMGM5NWNjN2UtMzQ3Yy0z NDNiLTlhNjAtNDNlZmZiZDQzN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmYTY3M2UtY2VlYi00MDQ4LWIy YWItOTNjYWQ0NTgxNGFjLzBhZmE2NzNlLWNlZWItNDA0OC1iMmFiLTkzY2FkNDU4 MTRhYy5jcmwwHwYDVR0jBBgwFoAUvVEvSLcAjCwb2JozS3ZOtFgF2GcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2Nh ZDQ1ODE0YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnxB2msDsjZTbZYthfFdlIzsKtfxQszRaHUPtWEEFc0CVzTIKCRDBOr V292i7wVGvFGKWfn7S8BLlCM/dpgEEKpEFJJhHwUq0Wet1JNS35h6FiACGutDyfk 0tfmCSgZGTT8fymjEHdesp5lL81KFFf2qOhdPIeSvaMFsafdckk4ZgzDKIKsOtxL gHwwlTEMBlKr+QDYEWFMnjCCKWTd5sHSuLVhOIqNGWhzuGTC3lJVQG8hfLra654C HZaJORS2hd1FehLpqYB7fCMd9ldzc7pAjXfj5FBmWZ+C8XeUw+icH0HNhXWw2XuT VuRxvk6J2O0x4YNez3AK+t8OXh717Sk= -----END CERTIFICATE-----Generated at Mon Apr 28 01:12:24 2025 by rpki-client