$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa File: 5fa6e3d9-d618-3d95-9a11-af6760164377.roa (raw, json) Hash identifier: D9mo2U64M3MMAqRbLb2P15cjG5ATaMiSTQiT9O5SXOg= Subject key identifier: 2B:E0:50:46:78:93:33:4D:08:09:13:26:EE:65:55:C8:7F:CC:E7:56 Certificate issuer: /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Certificate serial: 010D0C9F43285848EF613DD8F739B50EF732BF80 Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 400790 IP address blocks: 207.228.219.0/24 maxlen: 24 2606:f6c0:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:3d:d8:f7:39:b5:0e:f7:32:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=40bf21fc-9dcd-4664-a805-5fde0c77a10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fe:7a:57:3c:c2:7d:af:2a:f3:16:c9:46:5f: 3f:f8:88:55:c5:59:c6:e4:d0:f0:60:18:d0:32:9b: 6e:e8:a2:26:17:de:a3:50:e2:d7:dd:f9:a2:10:f4: 46:b5:f8:13:2f:91:f5:c7:19:a1:22:61:8a:27:ac: b9:19:21:08:69:bc:67:3c:ad:a2:e5:bb:62:ed:5d: 81:5c:7f:07:80:4f:8c:fd:3c:26:f9:0e:99:0e:7b: c8:52:28:39:86:6e:c3:8c:b0:91:3a:6c:34:75:43: 33:fb:19:73:15:92:bc:99:ce:21:f9:cb:18:86:18: 81:9a:2d:66:6c:9a:50:2a:17:5e:7a:e6:11:b6:e7: 0e:90:25:a4:92:1c:0f:b6:f6:76:a8:42:28:e1:76: 5d:97:68:9e:91:24:89:34:90:4c:b1:69:5d:6b:4f: dd:35:c9:b4:d0:f6:7d:82:a1:0d:b0:e1:47:82:9e: 09:d3:d4:c8:8a:ba:e2:38:39:5f:b4:cf:12:c2:2b: 12:8f:16:d8:a0:64:27:05:7c:76:9d:41:9e:32:b4: e6:21:ff:b5:bf:b0:1f:b4:d8:11:83:b0:ff:3e:93: 4f:09:19:07:6e:27:59:e2:43:c6:0b:ab:97:61:c7: 56:b2:0f:08:ae:ae:74:ed:7a:8e:b9:d1:fc:93:55: 99:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E0:50:46:78:93:33:4D:08:09:13:26:EE:65:55:C8:7F:CC:E7:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/5fa6e3d9-d618-3d95-9a11-af6760164377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl X509v3 Authority Key Identifier: keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer sbgp-ipAddrBlock: critical IPv4: 207.228.219.0/24 IPv6: 2606:f6c0:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:fe:9d:8f:e9:15:34:8e:e7:6d:4e:f8:9a:2d:b6:d6:ec:d2: f8:49:62:3b:fd:fe:3b:5a:ce:6b:4c:78:bc:66:cb:c1:63:1e: 1f:14:93:1b:82:f4:10:97:b7:51:48:ed:c1:b0:23:86:84:a1: aa:40:62:02:64:4d:8c:d1:59:87:59:85:09:bc:9d:2a:38:88: 79:a5:0f:fd:3f:f0:90:8e:01:88:bf:59:ea:f4:fb:68:af:11: 56:39:44:1c:d1:e2:87:c4:5b:a4:25:06:67:f4:f4:32:b9:36: 2f:e1:69:14:72:08:b3:4d:dc:17:03:08:44:50:57:1b:6e:0e: 0b:06:f4:41:b9:ab:0e:35:08:2a:31:84:14:81:37:92:a0:51: 0f:60:35:63:45:04:68:72:83:f7:c3:4a:11:fa:ef:69:7c:dd: 28:3a:3f:85:62:bb:c7:10:bf:0a:86:84:ac:db:be:f4:73:68: 55:a4:a3:36:1d:c3:82:af:b4:9e:60:fe:bc:d8:d9:24:72:9e: 9d:1a:46:d7:b6:35:9c:6b:eb:6d:c9:25:4c:5f:f5:e2:c8:f7: 05:0f:6f:66:00:4f:d1:53:1c:8c:ee:6f:58:9d:7c:2b:6c:5a: 0c:86:3f:a2:f9:e2:0c:84:3f:76:18:35:34:85:8e:fd:8e:ee: 1a:88:2a:85 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjvYT3Y9zm1Dvcyv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2OWU1NWQtM2JhZi00MWU2LTllNjctYmJlNWVkODg4 YmU5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDBiZjIxZmMtOWRjZC00NjY0LWE4MDUtNWZkZTBjNzdhMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8f56VzzCfa8q8xbJRl8/+IhVxVnG5NDwYBjQ Mptu6KImF96jUOLX3fmiEPRGtfgTL5H1xxmhImGKJ6y5GSEIabxnPK2i5bti7V2B XH8HgE+M/Twm+Q6ZDnvIUig5hm7DjLCROmw0dUMz+xlzFZK8mc4h+csYhhiBmi1m bJpQKhdeeuYRtucOkCWkkhwPtvZ2qEIo4XZdl2iekSSJNJBMsWlda0/dNcm00PZ9 gqENsOFHgp4J09TIirriODlftM8SwisSjxbYoGQnBXx2nUGeMrTmIf+1v7AftNgR g7D/PpNPCRkHbidZ4kPGC6uXYcdWsg8Irq507XqOudH8k1WZxwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCvgUEZ4kzNNCAkTJu5lVch/zOdWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5 ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1ZWQ4ODhiZTkvNWZhNmUzZDktZDYxOC0z ZDk1LTlhMTEtYWY2NzYwMTY0Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmU2OWU1NWQtM2JhZi00MWU2LTll NjctYmJlNWVkODg4YmU5LzJlNjllNTVkLTNiYWYtNDFlNi05ZTY3LWJiZTVlZDg4 OGJlOS5jcmwwHwYDVR0jBBgwFoAUuOVt8qT8p5onhZVWGclu3DiFdDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZTY5ZTU1ZC0zYmFmLTQxZTYtOWU2Ny1iYmU1 ZWQ4ODhiZTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAz+TbMA8E AgACMAkDBwAmBvbAAQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAr/6dj+kVNI7nbU74mi221uzS+EliO/3+ O1rOa0x4vGbLwWMeHxSTG4L0EJe3UUjtwbAjhoShqkBiAmRNjNFZh1mFCbydKjiI eaUP/T/wkI4BiL9Z6vT7aK8RVjlEHNHih8RbpCUGZ/T0Mrk2L+FpFHIIs03cFwMI RFBXG24OCwb0QbmrDjUIKjGEFIE3kqBRD2A1Y0UEaHKD98NKEfrvaXzdKDo/hWK7 xxC/CoaErNu+9HNoVaSjNh3Dgq+0nmD+vNjZJHKenRpG17Y1nGvrbcklTF/14sj3 BQ9vZgBP0VMcjO5vWJ18K2xaDIY/ovniDIQ/dhg1NIWO/Y7uGogqhQ== -----END CERTIFICATE-----Generated at Fri May 9 20:51:43 2025 by rpki-client