$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa File: d66d3dcb-2e94-38a7-9549-d369a5770717.roa (raw, json) Hash identifier: Y2pL5myI9uAvHtvAPfCVQpvTyXjxZZ456X8gwFx5WBU= Subject key identifier: 3B:5E:43:A6:4E:BB:C3:10:71:FB:22:42:F0:CB:68:1F:74:ED:D2:C7 Certificate issuer: /CN=325f62aa-b9c8-4315-87d2-409b60e8840d Certificate serial: 010D0C9F432858497A718D814624DA206077DD00 Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa Signing time: Thu 10 Apr 2025 09:31:14 +0000 ROA not before: Thu 10 Apr 2025 09:31:14 +0000 ROA not after: Wed 09 Jul 2025 09:31:14 +0000 asID: 400228 IP address blocks: 206.41.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:71:8d:81:46:24:da:20:60:77:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d Validity Not Before: Apr 10 09:31:14 2025 GMT Not After : Jul 9 09:31:14 2025 GMT Subject: CN=64a6f1f4-725f-4bed-8ea4-33ea27022c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:8f:0b:bf:90:fb:40:8d:e0:bb:aa:cc:d7: 8d:55:54:48:6a:83:e2:3f:cd:c5:8d:9d:7e:b1:93: 71:29:1e:c9:6e:9e:e8:6e:87:c3:35:e1:b9:14:16: df:b4:d1:da:1f:14:da:61:80:66:b4:fb:f5:22:f5: ab:7e:a8:fc:08:05:dd:87:37:b2:95:89:3b:b4:c1: 57:98:29:0b:08:af:0e:9d:c5:0f:03:7a:6b:61:eb: 45:0e:73:ea:80:7d:d6:94:ab:a2:59:07:30:b4:40: d0:48:af:2d:c4:3a:bc:6f:a4:ac:51:4a:61:a6:13: ef:ea:94:b6:50:74:55:4b:d0:d2:52:d8:b1:11:b0: 09:51:28:45:ea:12:c1:d2:7b:71:cd:0e:bf:0a:26: 4c:7c:78:8f:23:80:d3:95:fd:28:13:04:fb:fc:30: 95:bf:e4:0a:4b:9b:08:b5:9c:86:e3:69:4e:c9:12: c4:7f:7a:d3:50:c2:0f:7a:27:75:8b:88:ce:ac:d9: fc:f2:3c:83:d7:bb:a6:17:af:ae:08:88:70:ee:4b: 2c:77:c5:c5:7c:f3:3d:31:fe:f0:dc:c6:e8:17:5a: 35:55:1a:d5:ff:06:0a:c1:89:d9:95:b5:22:96:cd: 80:35:d1:7b:46:7f:4f:e8:fe:cf:8c:b8:fc:fa:2e: 58:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5E:43:A6:4E:BB:C3:10:71:FB:22:42:F0:CB:68:1F:74:ED:D2:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl X509v3 Authority Key Identifier: keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer sbgp-ipAddrBlock: critical IPv4: 206.41.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3d:e6:41:2a:6d:6b:72:41:3b:f9:98:67:b3:cc:a7:32:61: a2:25:34:38:7d:f6:00:2e:71:43:57:e6:54:e5:7b:b1:38:e1: f9:30:7e:2a:93:6e:12:17:ef:61:80:0d:c1:2b:f2:0e:b1:04: 4d:a5:a1:e8:75:e8:24:0d:09:de:7e:1b:73:c3:1a:84:bd:ae: f5:7f:72:0e:9b:66:95:62:36:24:4e:6e:4f:b0:84:36:9d:e9: 63:1e:96:15:67:d2:af:a4:4d:d3:24:71:7f:3a:98:2f:e2:04: b4:f3:d7:14:92:6b:60:9c:b2:88:8e:55:62:09:83:be:1d:36: ff:8f:6b:3c:f4:33:58:1f:f3:3e:56:0e:48:e3:a9:e9:55:b1: 19:ea:b7:04:3b:aa:83:a1:01:f5:3f:89:56:07:e6:4f:39:e2: dc:a1:37:be:9f:65:35:03:17:a4:cb:c5:c3:db:ac:bf:d1:fb: 54:97:ad:45:56:2d:4c:98:45:60:73:5b:4c:65:7c:e0:b0:7c: 8e:d6:f6:67:6e:5f:94:d7:cf:ed:bc:cb:37:25:be:a7:95:24: 45:bd:b0:e6:4d:22:74:56:50:f1:18:81:ea:83:f9:e6:6f:ac: dc:50:b7:8e:ff:a9:27:94:b9:cf:bf:60:01:43:87:51:43:2a: 14:d4:f8:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl6cY2BRiTaIGB33QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI1ZjYyYWEtYjljOC00MzE1LTg3ZDItNDA5YjYwZTg4 NDBkMB4XDTI1MDQxMDA5MzExNFoXDTI1MDcwOTA5MzExNFowLzEtMCsGA1UEAxMk NjRhNmYxZjQtNzI1Zi00YmVkLThlYTQtMzNlYTI3MDIyYzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOWPC7+Q+0CN4LuqzNeNVVRIaoPiP83FjZ1+ sZNxKR7Jbp7obofDNeG5FBbftNHaHxTaYYBmtPv1IvWrfqj8CAXdhzeylYk7tMFX mCkLCK8OncUPA3prYetFDnPqgH3WlKuiWQcwtEDQSK8txDq8b6SsUUphphPv6pS2 UHRVS9DSUtixEbAJUShF6hLB0ntxzQ6/CiZMfHiPI4DTlf0oEwT7/DCVv+QKS5sI tZyG42lOyRLEf3rTUMIPeid1i4jOrNn88jyD17umF6+uCIhw7kssd8XFfPM9Mf7w 3MboF1o1VRrV/wYKwYnZlbUils2ANdF7Rn9P6P7PjLj8+i5Y3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDteQ6ZOu8MQcfsiQvDLaB907dLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVm NjJhYS1iOWM4LTQzMTUtODdkMi00MDliNjBlODg0MGQvZDY2ZDNkY2ItMmU5NC0z OGE3LTk1NDktZDM2OWE1NzcwNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzI1ZjYyYWEtYjljOC00MzE1LTg3 ZDItNDA5YjYwZTg4NDBkLzMyNWY2MmFhLWI5YzgtNDMxNS04N2QyLTQwOWI2MGU4 ODQwZC5jcmwwHwYDVR0jBBgwFoAUU9KfcX1b5Y2z7lo0ZWsUMMgMD8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVmNjJhYS1iOWM4LTQzMTUtODdkMi00MDli NjBlODg0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzilvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG495kEqbWtyQTv5mGezzKcyYaIlNDh99gAucUNX5lTle7E44fkwfiqT bhIX72GADcEr8g6xBE2loeh16CQNCd5+G3PDGoS9rvV/cg6bZpViNiRObk+whDad 6WMelhVn0q+kTdMkcX86mC/iBLTz1xSSa2CcsoiOVWIJg74dNv+Pazz0M1gf8z5W DkjjqelVsRnqtwQ7qoOhAfU/iVYH5k854tyhN76fZTUDF6TLxcPbrL/R+1SXrUVW LUyYRWBzW0xlfOCwfI7W9mduX5TXz+28yzclvqeVJEW9sOZNInRWUPEYgeqD+eZv rNxQt47/qSeUuc+/YAFDh1FDKhTU+Kw= -----END CERTIFICATE-----Generated at Wed Apr 30 14:12:16 2025 by rpki-client