$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa File: 3ac695ae-0338-38d6-af38-2884b857a1a2.roa (raw, json) Hash identifier: TOTyMIZIIiLc07sEkYSciWbBVSSn2OUU/P7+cMMaiGA= Subject key identifier: D8:5D:14:38:B2:F3:80:55:7A:E2:E3:B2:08:CC:F4:A5:41:0C:87:6B Certificate issuer: /CN=7398f99d-b512-4640-b38b-2c84db430afb Certificate serial: 010D0C9F4328584996C485F6EE3CC4F5347F8980 Authority key identifier: 85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 206.204.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:85:f6:ee:3c:c4:f5:34:7f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7398f99d-b512-4640-b38b-2c84db430afb Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=5a3d2889-95e3-4b43-9c08-59faf864297b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:22:9e:ec:d0:bf:5f:b9:13:90:13:99:29:63: d7:ac:ca:08:d1:d1:00:f6:09:84:23:76:2a:0e:5e: 48:46:b4:8c:aa:86:78:51:fa:11:ad:26:12:c7:af: b1:83:ec:71:be:09:b1:a8:84:5f:7d:11:c1:e9:35: 9d:9b:ad:4c:1c:04:cb:4c:06:7e:ef:9f:f1:03:0b: 87:45:5f:7e:b9:13:78:34:81:a8:6b:ff:31:ca:96: 1f:d7:03:33:1f:20:1c:7a:50:7d:11:24:b7:cc:8e: 3b:a4:98:e3:70:30:50:9a:64:bc:be:79:76:b5:e0: 83:57:92:2e:a2:c6:16:6c:ac:43:f6:8e:92:4a:5b: c9:9e:2d:5a:80:20:46:19:a4:d3:35:c6:69:59:a3: 76:33:4e:bc:76:0b:76:9b:eb:c9:03:3b:f8:49:f6: 56:ba:1f:16:1a:57:20:d3:75:c8:b5:e8:ce:d6:11: 7c:34:45:7e:16:ee:10:ca:5c:77:b5:9a:c7:a2:5f: 80:3b:3a:ae:61:10:de:a3:b0:e6:cf:76:19:79:e5: cf:dc:3b:ba:d6:fb:b5:16:74:23:e2:9d:41:d7:52: c3:22:30:5a:57:8c:7a:db:da:51:ab:38:70:b1:69: 1f:b4:1a:c6:05:6f:5a:d8:18:8c:35:b2:f0:d4:a3: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5D:14:38:B2:F3:80:55:7A:E2:E3:B2:08:CC:F4:A5:41:0C:87:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/3ac695ae-0338-38d6-af38-2884b857a1a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl X509v3 Authority Key Identifier: keyid:85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer sbgp-ipAddrBlock: critical IPv4: 206.204.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:cd:9c:e8:dd:2f:59:78:28:51:17:f7:cd:35:cc:da:d3:d4: 47:05:d5:62:d7:34:48:98:b1:04:05:86:26:cf:dc:bc:a3:b9: 26:d2:a2:de:46:2f:69:28:59:54:bd:7d:7b:e2:37:0f:b2:6f: 40:00:a7:a1:e2:a2:da:9c:9d:8f:df:27:7b:c4:6e:0a:2b:90: ca:1d:1d:55:0b:67:e4:9a:86:57:26:b2:76:05:c8:4b:e3:b4: 38:e0:ac:df:93:2a:4c:1a:ff:cd:e1:44:b8:67:c6:a8:c6:86: 21:e9:6d:fd:3b:ec:25:85:8c:23:54:e4:e2:df:8f:92:c7:04: 2f:43:64:6e:66:f4:9d:de:b3:18:ba:f6:5c:f1:29:eb:bb:46: 9a:d7:17:89:d8:98:d7:a8:06:88:94:2b:00:3c:f1:71:fe:f8: 81:4e:9c:5a:df:a4:16:4c:ba:8e:fd:27:01:94:70:f4:74:6e: b5:0e:ac:d6:98:3b:b3:fd:40:70:77:a8:ea:ad:8a:60:27:9d: b0:98:04:89:29:fb:15:1f:ea:67:cc:6e:0f:9f:da:0b:d5:4c: 46:9f:61:05:68:85:32:31:13:b3:8c:97:4e:dd:90:94:08:84: 2c:c2:95:e7:7f:66:e2:9b:f4:33:82:7b:44:87:28:86:cd:86: 86:51:2f:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxIX27jzE9TR/iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM5OGY5OWQtYjUxMi00NjQwLWIzOGItMmM4NGRiNDMw YWZiMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NWEzZDI4ODktOTVlMy00YjQzLTljMDgtNTlmYWY4NjQyOTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyKe7NC/X7kTkBOZKWPXrMoI0dEA9gmEI3Yq Dl5IRrSMqoZ4UfoRrSYSx6+xg+xxvgmxqIRffRHB6TWdm61MHATLTAZ+75/xAwuH RV9+uRN4NIGoa/8xypYf1wMzHyAcelB9ESS3zI47pJjjcDBQmmS8vnl2teCDV5Iu osYWbKxD9o6SSlvJni1agCBGGaTTNcZpWaN2M068dgt2m+vJAzv4SfZWuh8WGlcg 03XItejO1hF8NEV+Fu4Qylx3tZrHol+AOzquYRDeo7Dmz3YZeeXP3Du61vu1FnQj 4p1B11LDIjBaV4x629pRqzhwsWkftBrGBW9a2BiMNbLw1KP3GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhdFDiy84BVeuLjsgjM9KVBDIdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4 Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0ZGI0MzBhZmIvM2FjNjk1YWUtMDMzOC0z OGQ2LWFmMzgtMjg4NGI4NTdhMWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzM5OGY5OWQtYjUxMi00NjQwLWIz OGItMmM4NGRiNDMwYWZiLzczOThmOTlkLWI1MTItNDY0MC1iMzhiLTJjODRkYjQz MGFmYi5jcmwwHwYDVR0jBBgwFoAUheeQdgYu1GrTYvqeznJWQpq2z8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0 ZGI0MzBhZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsz6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/NnOjdL1l4KFEX9801zNrT1EcF1WLXNEiYsQQFhibP3LyjuSbSot5G L2koWVS9fXviNw+yb0AAp6HiotqcnY/fJ3vEbgorkModHVULZ+SahlcmsnYFyEvj tDjgrN+TKkwa/83hRLhnxqjGhiHpbf077CWFjCNU5OLfj5LHBC9DZG5m9J3esxi6 9lzxKeu7RprXF4nYmNeoBoiUKwA88XH++IFOnFrfpBZMuo79JwGUcPR0brUOrNaY O7P9QHB3qOqtimAnnbCYBIkp+xUf6mfMbg+f2gvVTEafYQVohTIxE7OMl07dkJQI hCzCled/ZuKb9DOCe0SHKIbNhoZRL0M= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:20 2025 by rpki-client