$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/07b3ee22-2816-31af-b0d7-09a3ffe72cf8.roa File: 07b3ee22-2816-31af-b0d7-09a3ffe72cf8.roa (raw, json) Hash identifier: h/W6u/JWkQ0GNEIFstXBA5LK6v9rof3PFbka/EMmagw= Subject key identifier: 43:00:E8:95:5B:00:17:4D:56:FC:17:69:11:26:C1:0B:DD:DB:1D:31 Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F43285849061AC6CDBA29903E7E178840 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/07b3ee22-2816-31af-b0d7-09a3ffe72cf8.roa Signing time: Thu 27 Feb 2025 17:22:38 +0000 ROA not before: Thu 27 Feb 2025 17:22:38 +0000 ROA not after: Wed 28 May 2025 16:22:38 +0000 asID: 5650 IP address blocks: 206.174.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:1a:c6:cd:ba:29:90:3e:7e:17:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Feb 27 17:22:38 2025 GMT Not After : May 28 16:22:38 2025 GMT Subject: CN=2eb2dff7-9d83-46e0-81c7-a71281664d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:67:2d:fa:ae:33:f7:97:70:0a:a5:e8:5d: c7:d5:92:da:a6:c3:4a:d2:99:76:7a:e0:f3:92:a0: 9e:ff:a3:31:0e:9f:95:c2:44:a8:e0:84:fd:e4:9d: 94:99:66:d0:84:94:b5:66:3b:89:0e:1a:86:6b:9f: 7e:cf:98:17:63:d3:48:f6:d1:a3:75:e3:1b:89:8f: b6:6e:aa:b7:98:6b:af:37:2e:2d:bf:74:7e:68:1a: 30:67:1a:47:7b:c1:55:96:86:54:58:22:6a:40:98: 3e:a5:99:a1:38:1e:0b:97:b2:44:23:4c:1d:ea:e3: c5:87:de:e3:8a:2b:ac:25:a4:51:89:bb:68:81:75: 64:2d:b4:f3:f5:dc:8a:d9:ea:17:d5:a1:34:18:38: c4:75:e4:f4:bb:61:00:f4:f6:55:8d:eb:71:80:f5: 34:cc:28:af:61:c6:0f:ad:43:3f:b4:34:66:26:31: 55:a5:b3:86:a1:a8:68:8e:fe:c8:c6:9c:7b:bf:f7: 33:0a:63:07:40:40:cb:80:43:bf:b7:8a:4f:59:91: f7:1a:73:a9:ad:2f:49:54:b5:af:3f:d4:ec:76:9f: 1f:0a:9c:ff:09:64:c4:2c:3f:62:d9:ad:e9:b8:82: 3a:c3:7b:b7:0b:37:43:3a:ac:65:e6:cb:23:65:a2: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:00:E8:95:5B:00:17:4D:56:FC:17:69:11:26:C1:0B:DD:DB:1D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/07b3ee22-2816-31af-b0d7-09a3ffe72cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:03:2c:93:0e:4f:98:6b:2f:09:32:b2:de:3c:a0:04:50:74: 20:88:f4:bf:cf:7e:63:1e:b3:c2:7b:54:cf:47:95:d6:7d:02: 9d:94:c4:ad:0c:fb:ce:98:e9:48:77:ea:58:17:12:86:8b:7b: 5a:cc:6f:3a:51:91:9a:0c:4c:51:2e:3e:d6:65:d0:2a:61:0a: 7b:a7:92:ea:a7:4c:fa:7a:8d:1e:85:53:d1:62:e5:59:fc:0e: 07:79:1c:c1:a4:3a:df:28:39:aa:70:b0:e1:bf:1d:a8:3e:fd: 17:d1:3d:c7:2a:22:65:69:de:d5:eb:f9:ec:5d:a0:dd:ff:ee: 86:86:6f:3b:8e:46:71:23:80:13:1b:15:b3:19:28:c2:54:1c: bb:e4:53:e9:b7:b5:64:28:73:d3:85:70:58:74:20:fa:fa:ad: d3:ac:a7:a7:2f:18:76:68:fa:f6:21:92:75:aa:64:17:94:71: aa:fe:0a:11:01:d3:4d:2b:13:dd:21:a1:19:0f:f4:11:c6:83: fa:c6:f9:d7:0e:ba:34:b5:2d:19:f3:e8:f2:94:c9:9d:00:e2: 80:11:c2:4c:05:5e:e6:87:d8:69:4c:c0:d9:52:72:d3:6a:a3: dd:42:41:5a:bd:26:c8:31:06:b2:ed:bd:45:a9:c2:39:2c:3c: c2:25:ea:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGGsbNuimQPn4XiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MDIyNzE3MjIzOFoXDTI1MDUyODE2MjIzOFowLzEtMCsGA1UEAxMk MmViMmRmZjctOWQ4My00NmUwLTgxYzctYTcxMjgxNjY0ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUJnLfquM/eXcAql6F3H1ZLapsNK0pl2euDz kqCe/6MxDp+VwkSo4IT95J2UmWbQhJS1ZjuJDhqGa59+z5gXY9NI9tGjdeMbiY+2 bqq3mGuvNy4tv3R+aBowZxpHe8FVloZUWCJqQJg+pZmhOB4Ll7JEI0wd6uPFh97j iiusJaRRibtogXVkLbTz9dyK2eoX1aE0GDjEdeT0u2EA9PZVjetxgPU0zCivYcYP rUM/tDRmJjFVpbOGoahojv7Ixpx7v/czCmMHQEDLgEO/t4pPWZH3GnOprS9JVLWv P9Tsdp8fCpz/CWTELD9i2a3puII6w3u3CzdDOqxl5ssjZaLYPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMA6JVbABdNVvwXaREmwQvd2x0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvMDdiM2VlMjItMjgxNi0z MWFmLWIwZDctMDlhM2ZmZTcyY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzq6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYDLJMOT5hrLwkyst48oARQdCCI9L/PfmMes8J7VM9HldZ9Ap2UxK0M +86Y6Uh36lgXEoaLe1rMbzpRkZoMTFEuPtZl0CphCnunkuqnTPp6jR6FU9Fi5Vn8 Dgd5HMGkOt8oOapwsOG/Hag+/RfRPccqImVp3tXr+exdoN3/7oaGbzuORnEjgBMb FbMZKMJUHLvkU+m3tWQoc9OFcFh0IPr6rdOsp6cvGHZo+vYhknWqZBeUcar+ChEB 000rE90hoRkP9BHGg/rG+dcOujS1LRnz6PKUyZ0A4oARwkwFXuaH2GlMwNlSctNq o91CQVq9JsgxBrLtvUWpwjksPMIl6lU= -----END CERTIFICATE-----Generated at Sun Apr 27 03:06:15 2025 by rpki-client