$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/283f3339-2271-3365-b5e0-e0cbd98ce2be.roa File: 283f3339-2271-3365-b5e0-e0cbd98ce2be.roa (raw, json) Hash identifier: Y5DWUCe6OHnJWzytjuCijwMS+8qdKrC9ZuUz68IyWRQ= Subject key identifier: 20:18:65:12:3E:86:AC:41:9D:81:AF:C4:5C:45:11:28:36:59:66:BB Certificate issuer: /CN=5e3e99cc-7992-4ac1-a256-917cce07532e Certificate serial: 010D0C9F432858497C3EEB35A360F9CC6417A680 Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/283f3339-2271-3365-b5e0-e0cbd98ce2be.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 13737 IP address blocks: 206.212.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:eb:35:a3:60:f9:cc:64:17:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=40eb2c18-e107-4b37-8fd6-084e53b29f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:d5:78:47:2c:82:9f:40:12:ad:2a:f8:8c: 4c:f4:85:b3:c4:9f:37:2f:68:eb:56:4f:78:af:1d: 3c:e8:8e:14:89:61:3a:99:aa:de:bf:6a:4a:7e:e1: da:c4:b0:b5:7c:0b:28:b0:0e:59:56:9f:d9:17:0b: a8:67:ec:88:c9:bb:b5:8e:9e:03:d5:75:9f:36:51: a1:df:c3:1e:16:3b:8f:e5:75:32:a3:ab:49:0a:1c: 0b:98:0b:a6:cb:bd:d0:12:27:ad:bf:e4:26:01:da: c6:15:59:7c:67:da:a8:85:4a:2a:91:bf:76:79:c7: c1:36:5a:bd:67:28:cc:8a:b5:46:e5:cd:09:5a:96: 96:3d:e5:21:53:4d:14:13:63:07:2e:e1:7a:e0:7f: c2:3e:b5:83:cd:64:1f:d9:ca:6e:8e:33:f0:3c:2b: 54:81:74:3b:c7:eb:17:36:b2:78:b9:00:20:d8:b6: c1:54:f0:c3:f2:ec:c7:4c:f1:29:b3:c0:64:c2:8b: 69:76:54:35:b9:da:63:84:f4:3d:a3:9c:02:0b:e9: 37:f5:ca:32:5b:ed:52:15:a9:4c:0e:f6:1e:b5:c7: 83:76:1f:f7:e2:4c:c0:83:94:c3:ec:97:c4:18:b8: ec:6e:d9:e7:13:8c:1a:4a:20:cb:aa:8b:02:c6:6c: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:18:65:12:3E:86:AC:41:9D:81:AF:C4:5C:45:11:28:36:59:66:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/283f3339-2271-3365-b5e0-e0cbd98ce2be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl X509v3 Authority Key Identifier: keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer sbgp-ipAddrBlock: critical IPv4: 206.212.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9d:9a:d6:17:d0:83:59:96:ad:59:f2:6a:42:ac:d7:3c:aa: 41:e2:0e:01:50:d9:16:17:80:f3:11:17:b1:5c:eb:f4:51:38: a3:4f:62:68:a7:ec:7f:43:02:51:02:b7:14:79:65:a1:58:e2: 37:22:e7:83:ad:6f:43:18:1c:8c:1e:f7:57:45:bb:6c:f1:6d: cf:04:00:d9:64:0e:61:1a:d5:49:99:89:8e:37:49:ff:c1:b4: 8f:9c:44:53:01:9d:2f:39:3f:81:53:fc:8a:1d:4e:dc:7f:75: 77:ae:ec:29:4b:b3:21:d3:c2:75:b6:03:af:97:7c:82:75:61: 80:2c:75:b9:fc:28:57:a1:c0:78:a9:40:2b:11:9d:41:da:87: ea:9d:86:75:03:75:40:46:8d:dd:cb:c9:c2:67:25:cf:28:ef: 26:24:eb:2e:7a:26:50:cd:55:da:5c:e6:c0:d5:21:6c:04:f2: 31:82:08:86:c0:3f:74:0e:d8:c9:7a:03:1b:91:53:65:21:77: 81:66:e5:79:2c:4c:d2:bd:b1:20:28:51:d9:96:7e:d0:ca:24: bf:c4:14:74:13:5d:aa:cf:79:53:93:1f:23:30:e6:ad:fb:cc: 18:6e:5e:b6:e6:78:36:66:cd:7d:47:10:eb:56:53:71:1d:68: bb:14:b0:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8Pus1o2D5zGQXpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1 MzJlMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk NDBlYjJjMTgtZTEwNy00YjM3LThmZDYtMDg0ZTUzYjI5ZjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrrVeEcsgp9AEq0q+IxM9IWzxJ83L2jrVk94 rx086I4UiWE6marev2pKfuHaxLC1fAsosA5ZVp/ZFwuoZ+yIybu1jp4D1XWfNlGh 38MeFjuP5XUyo6tJChwLmAumy73QEietv+QmAdrGFVl8Z9qohUoqkb92ecfBNlq9 ZyjMirVG5c0JWpaWPeUhU00UE2MHLuF64H/CPrWDzWQf2cpujjPwPCtUgXQ7x+sX NrJ4uQAg2LbBVPDD8uzHTPEps8BkwotpdlQ1udpjhPQ9o5wCC+k39coyW+1SFalM DvYetceDdh/34kzAg5TD7JfEGLjsbtnnE4waSiDLqosCxmxtUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAYZRI+hqxBnYGvxFxFESg2WWa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvMjgzZjMzMzktMjI3MS0z MzY1LWI1ZTAtZTBjYmQ5OGNlMmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3 NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj Y2UwNzUzMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztT/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmdmtYX0INZlq1Z8mpCrNc8qkHiDgFQ2RYXgPMRF7Fc6/RROKNPYmin 7H9DAlECtxR5ZaFY4jci54Otb0MYHIwe91dFu2zxbc8EANlkDmEa1UmZiY43Sf/B tI+cRFMBnS85P4FT/IodTtx/dXeu7ClLsyHTwnW2A6+XfIJ1YYAsdbn8KFehwHip QCsRnUHah+qdhnUDdUBGjd3LycJnJc8o7yYk6y56JlDNVdpc5sDVIWwE8jGCCIbA P3QO2Ml6AxuRU2Uhd4Fm5XksTNK9sSAoUdmWftDKJL/EFHQTXarPeVOTHyMw5q37 zBhuXrbmeDZmzX1HEOtWU3EdaLsUsPU= -----END CERTIFICATE-----Generated at Sun Apr 27 04:05:07 2025 by rpki-client