$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa File: 1da5043e-166b-3b4e-9f88-d7e917854fc5.roa (raw, json) Hash identifier: w6jvdaWU8d0sLfdE37HePNAhwysY7VY714M8ws9lMcc= Subject key identifier: 6A:8F:ED:C2:10:E0:CA:DD:C8:12:8A:F0:C2:00:B8:19:6E:D3:73:1B Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F43285849C4D4BF883DFE3258E6A1F600 Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 40513 IP address blocks: 167.206.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:bf:88:3d:fe:32:58:e6:a1:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=32d74eff-ce7f-4fe9-9148-94dc9f970932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:57:b7:20:89:26:67:61:bb:2e:18:3a:bd: 65:be:7a:7e:ce:af:ae:5b:4c:22:12:2c:fc:0c:3e: 3c:b7:51:8b:ce:f8:77:3f:17:82:2e:1b:33:83:14: 48:41:92:d2:5d:f7:0c:16:59:35:ed:27:17:32:c5: fa:b1:ba:0c:2e:43:93:78:d4:63:26:a9:d3:aa:ff: d1:a7:95:ec:3a:f7:96:2d:5b:fc:da:44:8d:4d:37: 14:2d:f0:e5:24:a6:12:10:e9:1c:8c:9c:d9:83:b3: 6d:e9:e8:42:2f:dd:aa:52:23:ad:c6:2a:d4:53:5f: dc:81:16:c7:e5:53:4d:b0:e8:dd:99:8a:0c:1d:45: 67:47:64:8b:c6:9b:df:4c:36:ce:7a:6c:78:6e:f7: 0a:20:84:21:b7:12:a6:4f:ed:ad:7f:d7:ed:95:ab: c4:24:95:4e:c8:0a:92:ab:ac:eb:57:a8:2e:6c:99: 87:0e:d0:84:df:bb:ba:b1:b2:98:00:d6:29:98:2a: a9:53:b3:05:ff:02:af:90:e3:8f:3d:32:7d:d6:55: 9e:51:98:f3:74:a8:a1:ae:20:99:72:4f:10:22:dc: 91:30:df:91:2d:3b:b4:38:47:d1:62:ee:a7:19:6d: 6b:ef:4b:0d:ce:d5:64:1b:09:fc:6c:ea:0d:da:03: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8F:ED:C2:10:E0:CA:DD:C8:12:8A:F0:C2:00:B8:19:6E:D3:73:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:21:ae:e6:3d:b2:73:07:f2:b8:46:04:6e:40:4e:2c:54:02: 7f:46:cc:8f:70:e2:2a:07:c5:02:d7:c3:ea:fb:f7:f9:0b:d7: 5c:78:e5:01:f0:12:96:1c:d0:56:6b:cf:61:6d:0f:7a:9c:d6: ee:81:2d:79:0c:5e:42:75:53:4b:c4:4e:ff:8f:1a:1c:a2:a4: 75:8a:47:94:f7:1d:2f:e1:b8:e9:4e:b7:cb:4b:e8:35:07:58: db:0c:a1:bf:2c:54:96:a7:42:fc:39:64:6c:8a:d8:99:cf:47: f2:ec:b4:f5:c8:ce:76:ab:b5:e0:8d:ce:55:b5:f0:9f:2a:26: ba:b0:f6:9d:f6:76:fc:94:31:60:5f:4e:97:23:df:13:7e:bd: 66:7f:49:17:ff:0e:5f:df:6a:38:10:13:9c:ee:3e:50:5e:e2: f9:ed:88:bd:59:9c:ec:fe:21:28:eb:41:cc:ac:d8:05:60:94: 64:59:13:ea:5a:13:a4:ae:60:44:6f:2f:03:85:7e:bb:57:d2: 63:56:5c:97:5e:b0:77:82:be:a6:39:c3:07:b5:89:97:ff:86: 84:1f:9e:4f:93:a3:22:56:69:0d:32:90:01:20:b5:40:7e:48: 9e:4d:8b:37:c7:57:6b:79:2a:0d:35:ca:2c:a6:76:17:7a:37: 66:b1:1a:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1L+IPf4yWOah9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk MzJkNzRlZmYtY2U3Zi00ZmU5LTkxNDgtOTRkYzlmOTcwOTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ5XtyCJJmdhuy4YOr1lvnp+zq+uW0wiEiz8 DD48t1GLzvh3PxeCLhszgxRIQZLSXfcMFlk17ScXMsX6sboMLkOTeNRjJqnTqv/R p5XsOveWLVv82kSNTTcULfDlJKYSEOkcjJzZg7Nt6ehCL92qUiOtxirUU1/cgRbH 5VNNsOjdmYoMHUVnR2SLxpvfTDbOemx4bvcKIIQhtxKmT+2tf9ftlavEJJVOyAqS q6zrV6gubJmHDtCE37u6sbKYANYpmCqpU7MF/wKvkOOPPTJ91lWeUZjzdKihriCZ ck8QItyRMN+RLTu0OEfRYu6nGW1r70sNztVkGwn8bOoN2gOKnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqP7cIQ4MrdyBKK8MIAuBlu03MbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvMWRhNTA0M2UtMTY2Yi0z YjRlLTlmODgtZDdlOTE3ODU0ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp87RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEhruY9snMH8rhGBG5ATixUAn9GzI9w4ioHxQLXw+r79/kL11x45QHw EpYc0FZrz2FtD3qc1u6BLXkMXkJ1U0vETv+PGhyipHWKR5T3HS/huOlOt8tL6DUH WNsMob8sVJanQvw5ZGyK2JnPR/LstPXIznarteCNzlW18J8qJrqw9p32dvyUMWBf Tpcj3xN+vWZ/SRf/Dl/fajgQE5zuPlBe4vntiL1ZnOz+ISjrQcys2AVglGRZE+pa E6SuYERvLwOFfrtX0mNWXJdesHeCvqY5wwe1iZf/hoQfnk+ToyJWaQ0ykAEgtUB+ SJ5NizfHV2t5Kg01yiymdhd6N2axGnI= -----END CERTIFICATE-----Generated at Fri May 9 02:38:45 2025 by rpki-client