$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa File: 1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa (raw, json) Hash identifier: oi8q+5pLa0N7doQv86WEOLjORntOXIpi64dNahtmvvo= Subject key identifier: 5A:26:E7:6D:21:72:43:ED:4D:E1:ED:75:39:55:D2:00:B6:F2:A6:19 Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584905E66E25BE6C98AE854CE700 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa Signing time: Thu 27 Feb 2025 15:37:09 +0000 ROA not before: Thu 27 Feb 2025 15:37:09 +0000 ROA not after: Wed 28 May 2025 14:37:09 +0000 asID: 5650 IP address blocks: 206.174.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:e6:6e:25:be:6c:98:ae:85:4c:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Feb 27 15:37:09 2025 GMT Not After : May 28 14:37:09 2025 GMT Subject: CN=39e6d1c8-3ea6-4a5d-9e91-77b994e41635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:66:78:05:9d:6e:1b:09:df:9d:36:0a:a4:44: fa:f1:99:a3:bd:c8:b8:24:5b:fc:75:2e:4b:c6:16: ee:e6:7e:9d:0b:37:2f:6e:aa:4a:d1:54:15:5a:9a: 87:12:25:a5:29:79:1c:bd:64:72:e6:25:01:8f:8c: 33:5a:c2:4c:ac:01:d3:85:f3:d5:87:54:df:72:ec: 75:a2:28:85:0d:b4:3c:e5:5d:15:ba:97:4a:49:bf: 94:a5:88:0a:f9:79:76:2b:90:04:e3:cb:89:ee:1a: 4f:7c:68:f3:9d:b3:9e:b7:c8:af:fc:53:33:1c:a8: c1:8b:b3:33:6d:0e:b9:d7:06:be:56:a2:70:c5:05: 45:a4:c7:0c:c9:9b:24:3a:53:37:ce:d3:3e:12:e9: 8c:31:27:8f:85:c9:22:e1:19:54:74:5f:8e:a8:13: 14:2f:0f:e0:a2:92:7f:10:96:25:42:cc:39:3a:dc: f8:2b:c5:47:9c:d2:91:4f:05:61:9b:9b:c1:39:c6: b5:82:f4:52:4a:2e:83:1e:22:7a:df:fd:c6:3f:8a: 3a:0e:68:67:2b:5a:35:38:1e:7d:77:a6:8a:5c:f5: e5:b7:1b:4f:08:96:ad:cd:32:b4:2b:3e:fa:d2:3d: 9b:57:a1:30:85:a7:0d:d4:90:37:c2:82:af:3b:18: f0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:26:E7:6D:21:72:43:ED:4D:E1:ED:75:39:55:D2:00:B6:F2:A6:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/1f1fd3fd-cb00-32ad-8e11-5782495f5e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:69:f8:d9:db:e5:40:46:44:58:be:c2:aa:7d:e8:c3:1f:72: 4d:72:33:c0:b0:37:72:17:95:d6:f7:f9:3a:8c:d1:a7:e4:11: 99:d4:e9:63:a7:25:61:f4:9e:46:b9:ce:26:d8:f2:bd:4a:a0: d8:cb:b7:97:56:3f:3e:a3:d1:1e:cf:3b:3a:e2:b2:78:57:c9: 31:7b:3a:c0:33:7e:5b:3c:3c:da:77:fa:ed:fc:b1:af:a9:c6: c7:b2:b0:9d:3c:fc:d1:79:71:8a:18:6e:f2:f5:95:b0:8f:ed: ca:99:01:72:83:5d:49:1b:a9:41:ca:0c:2b:96:45:70:9f:c2: b4:1d:5b:fd:4b:b1:f9:5b:09:c7:9b:01:07:bc:26:69:3c:cd: 78:95:27:9b:44:c2:82:38:77:ba:31:5b:f1:ef:0b:40:76:c0: 0a:d9:33:ff:74:28:80:51:27:17:cc:3d:49:91:cb:93:40:44: b3:38:53:88:15:98:57:e6:20:3f:9a:5a:99:d7:53:f0:24:46: 7b:37:cf:aa:a2:7d:ee:fe:e1:e5:16:5f:dd:7f:da:71:24:3f: b2:f2:e4:4a:9a:0f:55:f8:16:7c:53:f8:3e:8c:bb:f5:9d:79: e7:9f:ee:71:7d:2a:62:30:54:f9:b4:9c:f6:9a:fb:3a:97:02: c8:22:55:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkF5m4lvmyYroVM5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MDIyNzE1MzcwOVoXDTI1MDUyODE0MzcwOVowLzEtMCsGA1UEAxMk MzllNmQxYzgtM2VhNi00YTVkLTllOTEtNzdiOTk0ZTQxNjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWZ4BZ1uGwnfnTYKpET68Zmjvci4JFv8dS5L xhbu5n6dCzcvbqpK0VQVWpqHEiWlKXkcvWRy5iUBj4wzWsJMrAHThfPVh1Tfcux1 oiiFDbQ85V0VupdKSb+UpYgK+Xl2K5AE48uJ7hpPfGjznbOet8iv/FMzHKjBi7Mz bQ651wa+VqJwxQVFpMcMyZskOlM3ztM+EumMMSePhcki4RlUdF+OqBMULw/gopJ/ EJYlQsw5Otz4K8VHnNKRTwVhm5vBOca1gvRSSi6DHiJ63/3GP4o6DmhnK1o1OB59 d6aKXPXltxtPCJatzTK0Kz760j2bV6EwhacN1JA3woKvOxjwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFom520hckPtTeHtdTlV0gC28qYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvMWYxZmQzZmQtY2IwMC0z MmFkLThlMTEtNTc4MjQ5NWY1ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzq6UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANp+Nnb5UBGRFi+wqp96MMfck1yM8CwN3IXldb3+TqM0afkEZnU6WOn JWH0nka5zibY8r1KoNjLt5dWPz6j0R7POzrisnhXyTF7OsAzfls8PNp3+u38sa+p xseysJ08/NF5cYoYbvL1lbCP7cqZAXKDXUkbqUHKDCuWRXCfwrQdW/1LsflbCceb AQe8Jmk8zXiVJ5tEwoI4d7oxW/HvC0B2wArZM/90KIBRJxfMPUmRy5NARLM4U4gV mFfmID+aWpnXU/AkRns3z6qife7+4eUWX91/2nEkP7Ly5EqaD1X4FnxT+D6Mu/Wd eeef7nF9KmIwVPm0nPaa+zqXAsgiVX0= -----END CERTIFICATE-----Generated at Tue May 6 16:22:53 2025 by rpki-client