$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/2bff52b5-8d83-3d16-8edc-f8200a4a7d2a.roa File: 2bff52b5-8d83-3d16-8edc-f8200a4a7d2a.roa (raw, json) Hash identifier: pmeXMTHVyE1DGfuzl8S4w5WT7S3AFBzmlxTiTRzh5wo= Subject key identifier: C4:29:BE:AB:34:AB:0D:1A:87:23:58:41:B7:11:BB:8D:ED:BB:9B:C0 Certificate issuer: /CN=5791cb0d-5211-4c45-8605-8ac3cb96d9dd Certificate serial: 010D0C9F43285849B6DF516E6D53A4DCD77B6280 Authority key identifier: 6A:9A:8B:89:A1:9E:F9:CF:DC:BF:AE:67:45:DF:46:3F:C5:F9:3D:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/2bff52b5-8d83-3d16-8edc-f8200a4a7d2a.roa Signing time: Fri 02 May 2025 01:00:47 +0000 ROA not before: Fri 02 May 2025 01:00:47 +0000 ROA not after: Thu 31 Jul 2025 01:00:47 +0000 asID: 18106 IP address blocks: 206.166.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b6:df:51:6e:6d:53:a4:dc:d7:7b:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5791cb0d-5211-4c45-8605-8ac3cb96d9dd Validity Not Before: May 2 01:00:47 2025 GMT Not After : Jul 31 01:00:47 2025 GMT Subject: CN=64f4d50a-d5d0-440c-974d-3ee9a60a26c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:7d:c0:c2:cc:a6:84:9f:5e:9e:c7:c9:70: e0:9e:e5:81:9e:43:c0:4a:da:cf:a6:d9:9d:03:af: a5:5c:8f:b1:c1:81:51:bf:4b:6c:d1:f8:ed:0e:10: e4:44:03:0d:39:5f:4e:8c:7d:3f:2e:ca:87:93:e8: 95:0d:fe:04:2f:f9:10:5d:65:85:03:4c:2d:1a:67: e2:ad:fa:bf:57:12:52:4e:23:6c:30:3f:00:03:1d: 62:27:8c:9a:40:7d:19:02:47:2a:3a:b5:66:b4:4c: 35:98:cb:08:4d:e3:33:31:38:b5:fa:ed:d0:3d:ea: ad:18:7e:a8:1c:6d:d2:2d:9f:d0:83:bd:63:66:60: de:d8:1b:4f:a5:19:f7:e1:9d:74:06:5c:8d:4f:c5: db:f4:b7:28:40:88:7c:b5:38:e0:02:7d:98:2a:47: cd:77:f0:5c:50:51:fd:3b:98:72:86:35:7d:3d:93: 87:08:05:fb:34:f4:8d:54:f2:ee:dd:23:78:f9:21: 65:bf:7e:a2:bc:e9:94:97:62:52:e0:0e:73:9d:c1: f1:64:5d:8f:83:ab:41:bb:76:e0:41:09:ea:94:4c: 8a:68:4b:53:c8:6d:98:c0:d2:c0:61:5e:68:1e:1c: c3:70:b7:e1:e0:d1:56:15:07:3d:9d:a5:80:1f:68: 12:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:29:BE:AB:34:AB:0D:1A:87:23:58:41:B7:11:BB:8D:ED:BB:9B:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/2bff52b5-8d83-3d16-8edc-f8200a4a7d2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.crl X509v3 Authority Key Identifier: keyid:6A:9A:8B:89:A1:9E:F9:CF:DC:BF:AE:67:45:DF:46:3F:C5:F9:3D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5791cb0d-5211-4c45-8605-8ac3cb96d9dd.cer sbgp-ipAddrBlock: critical IPv4: 206.166.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3f:64:9a:ec:a3:26:7b:60:32:31:e7:8a:83:72:87:07:7e: 16:70:50:5e:6b:0a:d0:a7:0f:be:bd:e4:04:31:9a:87:80:15: 0b:f1:f4:da:7e:f2:b5:bd:f7:98:a7:f3:95:a1:0d:97:cc:9c: 1e:fc:11:55:49:b4:88:9b:e2:6a:2c:35:d2:d4:6b:82:48:6a: 57:94:a4:a7:ea:e9:71:ff:79:37:8f:c8:56:49:4f:fd:08:de: 08:34:aa:1c:49:0e:13:51:44:db:6f:8e:0f:d8:1b:6b:e8:7d: 5f:29:bc:7b:e4:8e:e3:cc:c5:ef:40:3b:ce:f7:c3:4c:1c:73: e2:34:c5:8c:aa:29:96:2b:d0:90:1b:c9:9c:88:d1:5c:5a:f7: eb:0f:81:05:d4:56:72:a9:4f:8e:67:31:6c:89:6f:87:7e:fe: f8:e8:25:67:62:23:d8:3a:b8:41:c0:54:b4:c0:b1:3b:6d:74: 63:10:9c:63:de:83:b7:f5:00:2e:72:11:5b:f7:e2:56:6a:cc: 11:1d:53:ca:24:db:ab:d7:ca:5e:96:38:ef:0f:e3:f4:9b:c3: 41:bb:4c:76:9e:28:08:0c:12:07:d6:bf:ac:10:02:d7:04:37: 85:0b:7b:69:53:61:66:41:c8:ba:52:28:e4:fd:c4:8d:69:c8: 09:b6:75:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm231FubVOk3Nd7YoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc5MWNiMGQtNTIxMS00YzQ1LTg2MDUtOGFjM2NiOTZk OWRkMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk NjRmNGQ1MGEtZDVkMC00NDBjLTk3NGQtM2VlOWE2MGEyNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXR9wMLMpoSfXp7HyXDgnuWBnkPAStrPptmd A6+lXI+xwYFRv0ts0fjtDhDkRAMNOV9OjH0/LsqHk+iVDf4EL/kQXWWFA0wtGmfi rfq/VxJSTiNsMD8AAx1iJ4yaQH0ZAkcqOrVmtEw1mMsITeMzMTi1+u3QPeqtGH6o HG3SLZ/Qg71jZmDe2BtPpRn34Z10BlyNT8Xb9LcoQIh8tTjgAn2YKkfNd/BcUFH9 O5hyhjV9PZOHCAX7NPSNVPLu3SN4+SFlv36ivOmUl2JS4A5zncHxZF2Pg6tBu3bg QQnqlEyKaEtTyG2YwNLAYV5oHhzDcLfh4NFWFQc9naWAH2gSGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQpvqs0qw0ahyNYQbcRu43tu5vAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Nzkx Y2IwZC01MjExLTRjNDUtODYwNS04YWMzY2I5NmQ5ZGQvMmJmZjUyYjUtOGQ4My0z ZDE2LThlZGMtZjgyMDBhNGE3ZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTc5MWNiMGQtNTIxMS00YzQ1LTg2 MDUtOGFjM2NiOTZkOWRkLzU3OTFjYjBkLTUyMTEtNGM0NS04NjA1LThhYzNjYjk2 ZDlkZC5jcmwwHwYDVR0jBBgwFoAUapqLiaGe+c/cv65nRd9GP8X5PacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NzkxY2IwZC01MjExLTRjNDUtODYwNS04YWMz Y2I5NmQ5ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg/ZJrsoyZ7YDIx54qDcocHfhZwUF5rCtCnD7695AQxmoeAFQvx9Np+ 8rW995in85WhDZfMnB78EVVJtIib4mosNdLUa4JIaleUpKfq6XH/eTePyFZJT/0I 3gg0qhxJDhNRRNtvjg/YG2vofV8pvHvkjuPMxe9AO873w0wcc+I0xYyqKZYr0JAb yZyI0Vxa9+sPgQXUVnKpT45nMWyJb4d+/vjoJWdiI9g6uEHAVLTAsTttdGMQnGPe g7f1AC5yEVv34lZqzBEdU8ok26vXyl6WOO8P4/Sbw0G7THaeKAgMEgfWv6wQAtcE N4ULe2lTYWZByLpSKOT9xI1pyAm2dUg= -----END CERTIFICATE-----Generated at Sat May 10 11:45:43 2025 by rpki-client