$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/683ea603-7170-36d4-889d-5604174e78f5.roa File: 683ea603-7170-36d4-889d-5604174e78f5.roa (raw, json) Hash identifier: iErbuttDRO66QXTLb2URROjguV9EeG5rcfqQaGLDNjE= Subject key identifier: 70:03:F4:9E:76:AC:D0:70:47:82:3F:A5:56:88:56:4B:F7:AC:B5:11 Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F43285849B41493294CE9EABA222E9A80 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/683ea603-7170-36d4-889d-5604174e78f5.roa Signing time: Thu 01 May 2025 01:00:46 +0000 ROA not before: Thu 01 May 2025 01:00:46 +0000 ROA not after: Wed 30 Jul 2025 01:00:46 +0000 asID: 7029 IP address blocks: 206.174.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:14:93:29:4c:e9:ea:ba:22:2e:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: May 1 01:00:46 2025 GMT Not After : Jul 30 01:00:46 2025 GMT Subject: CN=d17981ce-a544-4b99-8857-405dd1943757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:8e:67:19:55:88:80:45:37:0d:a2:e1:af: 4b:92:e9:93:86:05:be:e8:31:c2:1b:5a:ec:57:52: de:14:86:46:65:7c:3e:97:39:9a:65:8e:86:18:4f: c6:1f:57:00:e0:81:68:87:ce:88:23:af:48:49:e4: 02:c8:c3:21:09:7c:72:d5:65:58:d4:2a:fc:e0:e9: f0:a9:0b:40:3b:a5:c6:11:87:04:f6:c8:78:43:a3: 33:6e:d4:1b:2b:ca:cf:f7:2c:d7:60:19:cb:de:2a: 06:e9:b7:8b:9f:8f:3e:c3:3f:36:c3:b2:63:ca:6e: dd:ef:51:a4:c6:d3:e3:4d:7b:c4:55:2e:2f:2c:df: 48:97:c0:93:b5:a2:1d:0c:fa:69:49:01:0c:96:54: 51:c4:49:9c:5c:2c:cb:5a:a4:ab:05:97:d6:0f:4d: bb:68:19:eb:4c:ca:6c:2a:dc:32:16:88:d5:6f:a6: ef:2e:06:13:82:50:01:c0:f3:ee:19:42:70:f0:b7: 91:af:07:a1:42:a2:27:7e:e7:3f:16:b4:b0:94:1f: 35:ec:48:41:90:9c:72:c9:2e:73:07:b3:32:26:cf: 1e:75:1c:cb:c9:89:22:79:43:f5:38:6c:7b:76:8e: 63:28:d6:5a:35:29:4a:da:d1:02:35:11:07:6b:d4: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:03:F4:9E:76:AC:D0:70:47:82:3F:A5:56:88:56:4B:F7:AC:B5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/683ea603-7170-36d4-889d-5604174e78f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:af:c9:f1:f7:d6:c4:5e:2e:81:20:f0:c7:c5:1a:4b:7c:b9: b1:21:02:36:dd:c6:39:f2:b9:0f:f2:76:f4:ea:e8:86:54:db: b3:8e:34:1d:cd:2a:be:6e:73:4d:53:dc:4f:5a:41:9a:19:a3: 7a:6f:33:13:49:bf:e6:56:11:b1:49:f1:35:a7:fc:ef:fa:b0: 73:a4:ec:2d:63:32:3f:99:8e:fb:91:b6:74:09:33:b1:9e:d2: 6f:e7:64:bd:ce:e5:bf:11:88:f0:92:42:96:7e:30:c1:91:7a: 58:00:e4:72:4a:37:08:3f:d5:3a:1d:02:ba:6d:51:3b:9c:55: 41:78:92:da:5a:4d:fa:b9:5f:68:82:be:5b:7e:cf:77:a2:5a: a6:f2:d1:b4:6c:7a:d2:f2:1b:37:7f:cd:94:7d:f2:e4:60:35: f3:c6:fa:88:32:50:a3:09:10:0f:4a:9e:fd:14:22:a0:bf:71: a5:d7:83:c1:90:dd:37:1d:f3:0f:9a:52:9c:a4:e5:de:0d:39: e4:8a:0f:e9:c3:f8:28:91:04:17:92:84:a8:ac:e4:c2:59:b0: c5:58:9c:87:0e:fc:45:a0:ad:c2:62:14:6b:26:f9:ef:0c:e7: d6:c6:33:6a:4e:93:70:4e:19:7b:c2:2e:64:a9:2b:88:f7:9a: 6f:4c:9d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm0FJMpTOnquiIumoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk ZDE3OTgxY2UtYTU0NC00Yjk5LTg4NTctNDA1ZGQxOTQzNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp++OZxlViIBFNw2i4a9LkumThgW+6DHCG1rs V1LeFIZGZXw+lzmaZY6GGE/GH1cA4IFoh86II69ISeQCyMMhCXxy1WVY1Cr84Onw qQtAO6XGEYcE9sh4Q6MzbtQbK8rP9yzXYBnL3ioG6beLn48+wz82w7Jjym7d71Gk xtPjTXvEVS4vLN9Il8CTtaIdDPppSQEMllRRxEmcXCzLWqSrBZfWD027aBnrTMps KtwyFojVb6bvLgYTglABwPPuGUJw8LeRrwehQqInfuc/FrSwlB817EhBkJxyyS5z B7MyJs8edRzLyYkieUP1OGx7do5jKNZaNSlK2tECNREHa9ROqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAD9J52rNBwR4I/pVaIVkv3rLURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvNjgzZWE2MDMtNzE3MC0z NmQ0LTg4OWQtNTYwNDE3NGU3OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzq6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuvyfH31sReLoEg8MfFGkt8ubEhAjbdxjnyuQ/ydvTq6IZU27OONB3N Kr5uc01T3E9aQZoZo3pvMxNJv+ZWEbFJ8TWn/O/6sHOk7C1jMj+ZjvuRtnQJM7Ge 0m/nZL3O5b8RiPCSQpZ+MMGRelgA5HJKNwg/1TodArptUTucVUF4ktpaTfq5X2iC vlt+z3eiWqby0bRsetLyGzd/zZR98uRgNfPG+ogyUKMJEA9Knv0UIqC/caXXg8GQ 3Tcd8w+aUpyk5d4NOeSKD+nD+CiRBBeShKis5MJZsMVYnIcO/EWgrcJiFGsm+e8M 59bGM2pOk3BOGXvCLmSpK4j3mm9MnYE= -----END CERTIFICATE-----Generated at Thu May 8 00:02:13 2025 by rpki-client