$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/30222fda-e243-32b6-b245-ed2edaf68e09.roa File: 30222fda-e243-32b6-b245-ed2edaf68e09.roa (raw, json) Hash identifier: Ojf5eNUjGfIryoZc49A0WC03Zc4pf3+wlOuHek5jWaM= Subject key identifier: 98:59:6D:88:78:74:F4:A0:D0:2A:26:FE:A2:12:89:E2:80:D4:E0:30 Certificate issuer: /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8 Certificate serial: 010D0C9F43285848F65BDBE9E55E2F9B3587A900 Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/30222fda-e243-32b6-b245-ed2edaf68e09.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16796 IP address blocks: 206.211.216.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:db:e9:e5:5e:2f:9b:35:87:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=4758d78a-9402-4b33-a4b3-d8523713d849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8c:0e:09:45:76:1d:1f:00:97:dc:2d:50:0d: 20:9e:5c:69:f2:0a:f8:6d:86:8e:6b:2a:43:f5:6c: 5f:8c:22:78:c8:a1:15:9e:f2:87:89:37:0d:c0:87: 2a:9a:d5:cf:5f:52:ad:bf:13:e9:4e:68:ed:98:6f: 87:58:70:cd:cc:9d:76:85:33:c9:7e:e6:76:93:e6: 1e:a8:ea:ca:8d:0b:dc:55:c1:e3:85:03:0d:72:54: 48:44:c6:c3:2c:b7:e5:88:ea:62:4f:67:46:e9:c3: 36:81:fa:c3:e7:da:4f:4e:22:ee:c9:40:13:60:67: d0:28:8e:af:b2:e3:87:8d:25:10:be:5c:3a:e7:44: c4:77:af:6d:b1:ef:53:9f:e4:19:d7:f0:fa:57:01: e3:ba:52:47:99:49:63:2a:39:83:54:b3:26:41:0f: 3c:ad:3a:05:38:1c:84:80:a8:88:e2:3c:9c:ed:50: 7c:09:4f:bc:b1:b4:02:15:6b:ce:b2:4c:ef:bb:3e: 89:60:0a:14:e1:0b:c6:34:34:77:05:62:a8:14:9b: bd:a5:f7:92:50:ca:e3:af:4c:dd:6f:3d:0b:1d:d9: 57:b8:78:f0:78:a6:07:d7:a2:54:48:01:bb:96:04: 42:63:62:ae:cd:22:a8:4d:29:26:83:a2:d4:f0:ea: a7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:59:6D:88:78:74:F4:A0:D0:2A:26:FE:A2:12:89:E2:80:D4:E0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/30222fda-e243-32b6-b245-ed2edaf68e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl X509v3 Authority Key Identifier: keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer sbgp-ipAddrBlock: critical IPv4: 206.211.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:78:1b:7f:65:90:bc:32:25:05:cd:d8:35:e0:26:f1:4c:78: 26:4b:18:1b:64:3e:6e:44:3c:37:ae:f6:86:e3:b4:09:6c:32: fa:1f:2c:71:54:ca:22:e8:31:39:4b:a4:a9:83:cf:d2:0f:b9: 35:65:26:c8:61:b3:7c:fa:64:86:c0:db:1d:e3:9e:83:4d:67: 85:61:25:31:04:a0:f6:94:fc:e9:53:b6:92:19:0b:a3:6e:15: 11:f8:e5:02:e2:44:d4:00:f0:12:f3:42:35:bc:fb:cf:a1:b6: c4:e4:09:62:4b:8a:bf:03:de:fa:52:fc:41:20:20:bd:08:dd: 99:39:08:12:2a:06:38:34:83:0e:bb:19:2f:9a:94:66:16:18: d4:e7:17:52:ad:ff:94:81:ec:2c:92:30:6d:05:81:33:bd:d9: ec:14:c2:8b:cd:d2:c5:34:b2:c8:6d:98:b7:9f:09:f5:98:97: 3a:fe:01:c7:91:e6:64:18:e2:94:5a:ed:53:e3:15:08:52:a7: f2:1a:ae:7f:0b:6d:58:0f:f9:42:bf:67:15:45:e4:7e:53:d4: 5c:36:77:80:72:29:c3:0d:c4:80:14:d2:df:13:53:6d:5f:5c: 03:23:47:2f:62:24:0e:2a:45:39:53:1f:98:e4:e1:f3:c1:a2: 44:74:d3:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9vp5V4vmzWHqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRiMDRiMjAtMDlkMy00Y2Y5LThkZDAtYzQ1Y2U1OTg5 OWQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NDc1OGQ3OGEtOTQwMi00YjMzLWE0YjMtZDg1MjM3MTNkODQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYwOCUV2HR8Al9wtUA0gnlxp8gr4bYaOaypD 9WxfjCJ4yKEVnvKHiTcNwIcqmtXPX1KtvxPpTmjtmG+HWHDNzJ12hTPJfuZ2k+Ye qOrKjQvcVcHjhQMNclRIRMbDLLfliOpiT2dG6cM2gfrD59pPTiLuyUATYGfQKI6v suOHjSUQvlw650TEd69tse9Tn+QZ1/D6VwHjulJHmUljKjmDVLMmQQ88rToFOByE gKiI4jyc7VB8CU+8sbQCFWvOskzvuz6JYAoU4QvGNDR3BWKoFJu9pfeSUMrjr0zd bz0LHdlXuHjweKYH16JUSAG7lgRCY2KuzSKoTSkmg6LU8OqnCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhZbYh4dPSg0Com/qISieKA1OAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGIw NGIyMC0wOWQzLTRjZjktOGRkMC1jNDVjZTU5ODk5ZDgvMzAyMjJmZGEtZTI0My0z MmI2LWIyNDUtZWQyZWRhZjY4ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRiMDRiMjAtMDlkMy00Y2Y5LThk ZDAtYzQ1Y2U1OTg5OWQ4L2U0YjA0YjIwLTA5ZDMtNGNmOS04ZGQwLWM0NWNlNTk4 OTlkOC5jcmwwHwYDVR0jBBgwFoAU2paC1lH+07XgQc9x1uafrOAumQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGIwNGIyMC0wOWQzLTRjZjktOGRkMC1jNDVj ZTU5ODk5ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBztPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ94G39lkLwyJQXN2DXgJvFMeCZLGBtkPm5EPDeu9objtAlsMvofLHFU yiLoMTlLpKmDz9IPuTVlJshhs3z6ZIbA2x3jnoNNZ4VhJTEEoPaU/OlTtpIZC6Nu FRH45QLiRNQA8BLzQjW8+8+htsTkCWJLir8D3vpS/EEgIL0I3Zk5CBIqBjg0gw67 GS+alGYWGNTnF1Kt/5SB7CySMG0FgTO92ewUwovN0sU0sshtmLefCfWYlzr+AceR 5mQY4pRa7VPjFQhSp/Iarn8LbVgP+UK/ZxVF5H5T1Fw2d4ByKcMNxIAU0t8TU21f XAMjRy9iJA4qRTlTH5jk4fPBokR00wg= -----END CERTIFICATE-----Generated at Tue Apr 29 19:50:25 2025 by rpki-client