$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3352aa15-1a25-3a9d-8c42-d60c794947a6.roa File: 3352aa15-1a25-3a9d-8c42-d60c794947a6.roa (raw, json) Hash identifier: XKLzw7hIAaM2yj6kz4u6DGMcIZdbT5b5l8NUNVe0wFU= Subject key identifier: 49:4A:65:9A:EA:62:DF:00:05:CD:F2:02:B6:9D:F7:17:D3:CC:7A:DC Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584930DE7C4906BAE5E0C4094C80 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3352aa15-1a25-3a9d-8c42-d60c794947a6.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 46587 IP address blocks: 206.71.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:7c:49:06:ba:e5:e0:c4:09:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=9f902e1d-bce8-4bda-923c-b3b9768dccd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:64:56:d0:e0:d4:86:01:84:0f:80:04:da: 62:50:4d:bf:d6:4e:ed:59:fe:0f:76:ae:ce:25:12: 83:0f:6c:71:96:e2:0c:08:6b:fe:62:71:f0:4c:8d: a3:d9:b2:42:55:bc:f2:42:0c:c9:6f:e4:d3:b5:52: 53:9b:b1:07:97:45:9f:09:b2:3b:7a:59:e3:4a:fd: 64:9c:b9:a2:c7:7b:be:ae:18:11:dc:98:3b:43:d4: dd:57:cb:8c:a6:56:06:03:76:b5:2a:47:cd:c9:ff: 70:d5:2b:4c:80:71:77:34:74:25:57:b3:fc:36:1f: b7:df:bc:20:da:05:16:af:34:b2:35:dc:ba:5d:18: 34:80:c6:3b:c1:60:16:43:a0:8c:b7:75:04:6c:8e: 7f:0a:32:df:c2:d7:2d:87:4b:6a:ef:c9:4f:a6:cd: 49:60:91:46:12:c7:9c:ab:e9:8a:ff:7d:35:60:68: a0:3d:d8:ad:c5:bf:f7:31:f6:3e:5a:6e:81:75:4c: a3:18:ef:8a:d8:f3:19:e4:d6:68:22:71:8f:c9:5d: 16:90:ce:96:29:5a:01:82:37:b7:01:84:fb:ab:57: a6:02:8d:4e:f4:7c:f5:5f:dc:a1:9e:0d:7b:90:3c: 67:1b:10:ff:dd:5f:4c:a4:69:df:c4:87:ad:be:a2: ae:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4A:65:9A:EA:62:DF:00:05:CD:F2:02:B6:9D:F7:17:D3:CC:7A:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/3352aa15-1a25-3a9d-8c42-d60c794947a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 206.71.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:da:dc:1b:68:8e:33:03:7e:bd:c6:95:1b:c8:c6:88:7d:11: 22:d7:7e:18:56:29:a0:45:dc:4d:14:dd:a2:8c:02:35:3a:9f: 0e:77:04:54:f3:12:54:fa:01:59:5e:09:de:7c:93:98:52:28: bf:c2:01:42:63:79:32:af:09:03:68:66:5f:1c:1c:1c:fe:0f: b2:21:7a:9e:ed:db:a7:37:ce:40:2c:2a:7a:e6:5d:9a:71:06: 59:c4:8f:ad:3c:6c:f1:e4:6b:85:c1:54:ac:f8:2c:12:38:32: 2a:40:13:08:d0:61:d8:d4:d1:4d:c8:15:dc:22:cc:0d:52:82: d6:b4:60:c8:89:29:9f:a5:6a:da:b0:b4:2b:67:58:f1:12:67: 58:dd:3a:5c:8b:0a:c3:0a:2d:b4:5d:24:74:b3:3c:13:21:87: 36:a5:d6:73:cd:91:07:1b:dc:1d:a9:dc:ef:55:cc:5a:43:6d: 78:9c:87:48:08:24:d2:5a:e0:18:eb:f8:41:dc:fe:6e:de:7d: cf:ef:ef:9b:70:14:5d:80:ef:9b:ef:d1:ef:a8:53:1d:f0:f2: dd:d7:d5:5c:21:c7:69:7c:13:89:f3:81:29:37:c5:96:91:17: 9c:2f:0f:37:e8:bc:4c:93:cf:aa:31:1a:58:c4:6f:c5:fd:0e: ff:0e:d0:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nxJBrrl4MQJTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk OWY5MDJlMWQtYmNlOC00YmRhLTkyM2MtYjNiOTc2OGRjY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniRkVtDg1IYBhA+ABNpiUE2/1k7tWf4Pdq7O JRKDD2xxluIMCGv+YnHwTI2j2bJCVbzyQgzJb+TTtVJTm7EHl0WfCbI7elnjSv1k nLmix3u+rhgR3Jg7Q9TdV8uMplYGA3a1KkfNyf9w1StMgHF3NHQlV7P8Nh+337wg 2gUWrzSyNdy6XRg0gMY7wWAWQ6CMt3UEbI5/CjLfwtcth0tq78lPps1JYJFGEsec q+mK/301YGigPditxb/3MfY+Wm6BdUyjGO+K2PMZ5NZoInGPyV0WkM6WKVoBgje3 AYT7q1emAo1O9Hz1X9yhng17kDxnGxD/3V9MpGnfxIetvqKubwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElKZZrqYt8ABc3yArad9xfTzHrcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvMzM1MmFhMTUtMWEyNS0z YTlkLThjNDItZDYwYzc5NDk0N2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzkf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACba3BtojjMDfr3GlRvIxoh9ESLXfhhWKaBF3E0U3aKMAjU6nw53BFTz ElT6AVleCd58k5hSKL/CAUJjeTKvCQNoZl8cHBz+D7Ihep7t26c3zkAsKnrmXZpx BlnEj608bPHka4XBVKz4LBI4MipAEwjQYdjU0U3IFdwizA1Sgta0YMiJKZ+latqw tCtnWPESZ1jdOlyLCsMKLbRdJHSzPBMhhzal1nPNkQcb3B2p3O9VzFpDbXich0gI JNJa4Bjr+EHc/m7efc/v75twFF2A75vv0e+oUx3w8t3X1Vwhx2l8E4nzgSk3xZaR F5wvDzfovEyTz6oxGljEb8X9Dv8O0M0= -----END CERTIFICATE-----Generated at Sun Apr 27 18:54:26 2025 by rpki-client