$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa File: 0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa (raw, json) Hash identifier: 4DTbsB3Xho1a/CaM6tx3jrBaAs0lyeil2JtJ/tgfO6o= Subject key identifier: 84:8B:84:20:3D:E8:B8:F5:04:2A:FF:8A:0E:B3:A2:16:61:C3:6F:F7 Certificate issuer: /CN=b9304eb0-eda9-4524-affd-0a6aa181a658 Certificate serial: 010D0C9F4328584905B6B3E11A74D65CB77AC680 Authority key identifier: B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 397283 IP address blocks: 206.168.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b3:e1:1a:74:d6:5c:b7:7a:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9304eb0-eda9-4524-affd-0a6aa181a658 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=0a5e22f7-80fc-4756-afca-399ec2fd8ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:36:63:8b:00:c6:7e:3e:eb:98:ca:98:46: 2c:9e:e0:16:3a:9f:62:26:2f:3a:92:48:42:e7:65: fa:e2:07:70:84:d5:bd:2e:ee:92:60:6d:8d:35:76: e4:ef:21:ac:32:c5:ad:b3:71:76:32:eb:e1:9a:51: ae:91:7a:46:d2:c1:a9:12:b1:f3:ce:60:ff:2b:f9: ca:c1:f6:a3:5a:4a:97:89:f3:7c:9c:95:7c:50:e2: c0:a4:9e:e9:5f:d3:a2:d0:e1:cc:ed:24:20:ef:a0: eb:8f:d1:9a:c1:be:a7:b3:1a:e9:d6:ef:1a:3e:e4: 5f:6b:cb:2e:38:f3:fd:42:fa:8b:16:77:8b:35:4f: c3:07:09:31:dd:f9:14:c1:aa:60:42:79:bb:ed:65: 5c:14:eb:93:01:8c:e8:7e:a8:ac:8d:c4:f2:1a:c9: 9e:cf:7d:6f:4f:c5:51:e1:17:b0:00:25:0a:e1:23: 38:b4:77:a8:99:a2:d7:e2:ed:6f:de:dd:8e:a3:23: 7a:df:35:b4:13:1e:33:ad:a6:ed:a9:e9:7c:b5:6a: f8:8c:1f:5c:1c:49:7b:da:8e:8e:de:77:4c:d2:64: a4:27:46:90:7e:9a:a1:36:e5:1e:72:21:0c:b7:d6: e2:36:60:d6:f8:a4:3c:bd:a1:89:56:ff:f9:bd:2c: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8B:84:20:3D:E8:B8:F5:04:2A:FF:8A:0E:B3:A2:16:61:C3:6F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/0f27ebf8-d0aa-3b13-a977-43b5417b0f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658/b9304eb0-eda9-4524-affd-0a6aa181a658.crl X509v3 Authority Key Identifier: keyid:B9:4B:A5:8B:B9:79:8F:6E:40:C6:25:98:8C:46:F6:CA:44:15:E4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b9304eb0-eda9-4524-affd-0a6aa181a658.cer sbgp-ipAddrBlock: critical IPv4: 206.168.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e8:82:2f:04:57:68:fb:55:40:e4:77:aa:bd:ff:75:9c:2c: 98:dd:61:bb:23:20:4e:10:88:0e:de:a7:19:37:27:33:b0:30: 7b:d9:ff:6b:9d:52:13:ba:a4:d2:6e:55:0d:a4:b2:e3:d7:32: 8d:86:aa:4e:ed:aa:2f:59:0f:14:d6:23:31:c8:df:3f:c9:c3: 86:30:16:6a:6d:5a:1d:04:38:b1:3a:14:04:78:f0:8f:68:b1: ca:08:d7:14:97:aa:52:44:29:a4:67:59:ee:a4:65:65:0d:a0: c4:c6:12:64:21:8f:3c:05:19:e1:8f:d2:d6:9a:39:47:b4:0c: 33:f1:17:43:66:03:52:c3:1b:0a:44:c6:d2:ff:47:e5:62:7a: d5:38:70:a9:58:d1:b3:30:7b:84:9d:e9:dc:b8:db:80:20:2b: a1:d5:84:50:1f:ce:3c:d8:ce:4a:63:d7:77:40:74:9f:dc:52: dd:16:8e:63:d8:aa:92:50:95:65:97:d1:b3:78:d4:c5:32:fa: 38:ab:66:07:8d:1b:cc:12:16:86:b7:f4:0b:65:60:c1:de:2d: de:59:ab:9b:bd:09:c9:b1:92:b6:d1:0e:88:ae:72:ce:6e:8e: 18:f2:74:f9:26:b2:68:42:3c:c2:d2:f2:f7:de:c1:20:f1:1f: 74:52:3b:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrPhGnTWXLd6xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkzMDRlYjAtZWRhOS00NTI0LWFmZmQtMGE2YWExODFh NjU4MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MGE1ZTIyZjctODBmYy00NzU2LWFmY2EtMzk5ZWMyZmQ4YWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhk2Y4sAxn4+65jKmEYsnuAWOp9iJi86kkhC 52X64gdwhNW9Lu6SYG2NNXbk7yGsMsWts3F2MuvhmlGukXpG0sGpErHzzmD/K/nK wfajWkqXifN8nJV8UOLApJ7pX9Oi0OHM7SQg76Drj9Gawb6nsxrp1u8aPuRfa8su OPP9QvqLFneLNU/DBwkx3fkUwapgQnm77WVcFOuTAYzofqisjcTyGsmez31vT8VR 4RewACUK4SM4tHeomaLX4u1v3t2OoyN63zW0Ex4zrabtqel8tWr4jB9cHEl72o6O 3ndM0mSkJ0aQfpqhNuUeciEMt9biNmDW+KQ8vaGJVv/5vSy3UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISLhCA96Lj1BCr/ig6zohZhw2/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTMw NGViMC1lZGE5LTQ1MjQtYWZmZC0wYTZhYTE4MWE2NTgvMGYyN2ViZjgtZDBhYS0z YjEzLWE5NzctNDNiNTQxN2IwZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkzMDRlYjAtZWRhOS00NTI0LWFm ZmQtMGE2YWExODFhNjU4L2I5MzA0ZWIwLWVkYTktNDUyNC1hZmZkLTBhNmFhMTgx YTY1OC5jcmwwHwYDVR0jBBgwFoAUuUuli7l5j25AxiWYjEb2ykQV5CYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iOTMwNGViMC1lZGE5LTQ1MjQtYWZmZC0wYTZh YTE4MWE2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqitMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnogi8EV2j7VUDkd6q9/3WcLJjdYbsjIE4QiA7epxk3JzOwMHvZ/2ud UhO6pNJuVQ2ksuPXMo2Gqk7tqi9ZDxTWIzHI3z/Jw4YwFmptWh0EOLE6FAR48I9o scoI1xSXqlJEKaRnWe6kZWUNoMTGEmQhjzwFGeGP0taaOUe0DDPxF0NmA1LDGwpE xtL/R+VietU4cKlY0bMwe4Sd6dy424AgK6HVhFAfzjzYzkpj13dAdJ/cUt0WjmPY qpJQlWWX0bN41MUy+jirZgeNG8wSFoa39AtlYMHeLd5Zq5u9CcmxkrbRDoiucs5u jhjydPkmsmhCPMLS8vfewSDxH3RSO8Y= -----END CERTIFICATE-----Generated at Mon Apr 28 10:18:48 2025 by rpki-client