$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa File: a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa (raw, json) Hash identifier: e9qXGv64ZT4I7vGXT1QcwKgL4v5HF3HE24ITn9/2+p8= Subject key identifier: 76:3A:B3:68:EF:72:6C:26:73:40:03:00:C6:9C:46:75:A9:48:EF:82 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F432858499829E07C43B67DCF2CE6A980 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 376 IP address blocks: 206.167.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:e0:7c:43:b6:7d:cf:2c:e6:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=9422bde9-0e79-47c0-9a38-b099fc263105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:eb:a1:f7:ed:60:73:c8:1c:5e:ef:47:ab: da:f8:ba:db:e8:04:db:33:d0:8b:50:06:0a:a5:83: 5b:5c:54:a4:7c:f8:57:f8:82:03:7a:b0:02:04:c9: 04:7d:0d:0a:fe:c3:64:08:ed:d3:3f:ab:0f:06:f7: 30:cf:1b:6e:c0:cd:ce:4e:bd:d7:bf:43:15:81:cb: 79:cc:ed:28:5c:bc:06:48:b2:33:f7:89:ac:b6:ea: 34:6b:6f:48:1d:19:9f:3a:a9:e3:09:04:28:0b:9b: cd:cc:83:e8:37:43:68:68:97:f9:11:84:9c:56:6c: ce:f9:40:aa:9b:8b:97:f6:3b:bf:68:43:ff:79:e3: 5d:d4:58:42:c6:92:db:82:6f:f4:e1:ca:80:db:e3: f2:95:b9:4f:a5:b6:46:e8:d3:30:50:1a:d1:0a:fe: 5c:0d:5a:00:82:9c:42:c7:8d:b1:b1:88:64:eb:ca: f8:92:19:14:ef:23:7d:1d:3b:fa:9e:2c:a6:5c:51: 97:ad:8f:97:6d:f8:75:0e:eb:79:7f:fe:e0:6b:27: a9:68:da:e4:36:0b:88:e4:bf:5f:5b:d7:c6:28:5e: 5f:f8:99:5b:19:4e:29:55:78:4c:32:6f:ff:46:7b: 52:26:e1:df:45:fa:0f:03:07:7d:dd:11:40:d1:22: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3A:B3:68:EF:72:6C:26:73:40:03:00:C6:9C:46:75:A9:48:EF:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a9a3ec3a-33b4-38b1-8dc9-c8b8d693b808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e6:b7:1c:dc:54:bb:fc:0c:98:30:d3:f0:ef:b7:ed:a7:e9: f1:fd:87:c1:24:c2:a8:9f:b9:29:a9:47:60:08:54:b9:ca:b8: 0f:67:05:a0:1f:e3:99:ae:21:13:95:22:3b:6f:5e:2a:30:b4: df:10:52:21:fd:93:f7:4c:d5:b5:59:3e:2d:a4:14:e3:56:60: 04:eb:c0:ad:d2:b4:0a:54:53:a0:a5:a3:dc:50:5c:2e:e8:c8: ca:86:96:65:7f:e7:2f:2c:50:46:57:46:8f:02:bf:50:27:85: 5c:e0:f5:f9:38:30:c4:54:a0:97:cb:a5:f9:73:4c:a0:43:f2: 62:91:87:7e:70:25:6b:72:f2:6a:d5:eb:e3:0b:02:3b:d4:03: f1:c0:a3:ef:36:51:94:2c:85:95:1e:9e:72:35:a7:ec:86:cb: 42:55:7f:40:82:2a:e7:9a:ed:68:9e:03:4a:8e:18:33:4f:ec: 38:ff:45:62:50:dc:17:e2:4a:40:39:c4:1c:de:8e:ba:9e:fd: 73:3e:2b:1a:aa:b9:f2:d0:03:7f:d7:a9:cb:55:d6:91:0f:4c: 59:25:d6:b5:d0:a6:8d:43:33:69:85:3d:cb:bf:6f:7f:ac:b2: 87:c7:5b:cd:29:75:94:ab:7b:97:02:35:04:be:69:62:34:c4: 92:21:ec:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeB8Q7Z9zyzmqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk OTQyMmJkZTktMGU3OS00N2MwLTlhMzgtYjA5OWZjMjYzMTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprbrofftYHPIHF7vR6va+Lrb6ATbM9CLUAYK pYNbXFSkfPhX+IIDerACBMkEfQ0K/sNkCO3TP6sPBvcwzxtuwM3OTr3Xv0MVgct5 zO0oXLwGSLIz94mstuo0a29IHRmfOqnjCQQoC5vNzIPoN0NoaJf5EYScVmzO+UCq m4uX9ju/aEP/eeNd1FhCxpLbgm/04cqA2+PylblPpbZG6NMwUBrRCv5cDVoAgpxC x42xsYhk68r4khkU7yN9HTv6niymXFGXrY+Xbfh1Dut5f/7gayepaNrkNguI5L9f W9fGKF5f+JlbGU4pVXhMMm//RntSJuHfRfoPAwd93RFA0SJspwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHY6s2jvcmwmc0ADAMacRnWpSO+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYTlhM2VjM2EtMzNiNC0z OGIxLThkYzktYzhiOGQ2OTNiODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjmtxzcVLv8DJgw0/Dvt+2n6fH9h8EkwqifuSmpR2AIVLnKuA9nBaAf 45muIROVIjtvXiowtN8QUiH9k/dM1bVZPi2kFONWYATrwK3StApUU6Clo9xQXC7o yMqGlmV/5y8sUEZXRo8Cv1AnhVzg9fk4MMRUoJfLpflzTKBD8mKRh35wJWty8mrV 6+MLAjvUA/HAo+82UZQshZUennI1p+yGy0JVf0CCKuea7WieA0qOGDNP7Dj/RWJQ 3BfiSkA5xBzejrqe/XM+KxqqufLQA3/XqctV1pEPTFkl1rXQpo1DM2mFPcu/b3+s sofHW80pdZSre5cCNQS+aWI0xJIh7Lo= -----END CERTIFICATE-----Generated at Fri May 9 19:58:42 2025 by rpki-client