$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/c6086ff1-75bd-3962-a692-00d25c23940f.roa File: c6086ff1-75bd-3962-a692-00d25c23940f.roa (raw, json) Hash identifier: FbSw4MA332dbGw9Upzkh/NBT+DpmJunU4uuUQj43yFs= Subject key identifier: D6:01:D8:11:49:4F:D9:B3:E1:A2:A1:04:1A:62:29:FA:1C:EA:B0:81 Certificate issuer: /CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692 Certificate serial: 010D0C9F43285849067D454376EE187EBB8EAB80 Authority key identifier: 74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/c6086ff1-75bd-3962-a692-00d25c23940f.roa Signing time: Thu 27 Feb 2025 20:41:05 +0000 ROA not before: Thu 27 Feb 2025 20:41:05 +0000 ROA not after: Wed 28 May 2025 19:41:05 +0000 asID: 62681 IP address blocks: 192.206.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:7d:45:43:76:ee:18:7e:bb:8e:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed41e4bd-3b0f-4d8c-ad8a-125555e7b692 Validity Not Before: Feb 27 20:41:05 2025 GMT Not After : May 28 19:41:05 2025 GMT Subject: CN=97b75809-c381-4e28-9ba8-7e20ae4b8ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:5b:01:07:0c:95:b2:d9:ff:b9:c4:8a:11: 3f:db:36:7e:5a:d0:b9:e1:c4:4a:82:2f:f5:79:1d: 35:3e:a0:94:08:71:99:fd:67:d2:ba:bd:e4:8e:3b: 58:d8:56:78:a9:96:07:8c:18:0e:a2:b3:3c:f0:e8: ed:d0:d1:d4:03:81:79:3e:a4:a4:8f:16:f5:0c:78: cc:20:9d:77:59:2a:a9:e6:a1:50:8d:af:25:3e:b1: 48:f3:0c:a3:66:b6:ae:7d:59:fc:0f:d9:95:75:d0: c4:85:ac:e0:e7:3e:9b:96:ac:4e:12:3e:9e:aa:89: fc:0c:f6:4f:bb:df:21:a6:c8:d3:41:64:85:cf:e2: 2b:88:8e:3e:f2:a2:1d:a4:4e:81:b4:79:57:f0:60: 4d:79:ab:15:af:c5:bf:e1:16:85:6d:9b:7e:ac:35: 36:db:8b:cf:e4:44:b5:4f:9d:c6:c4:bd:cc:8c:ce: ca:ce:9a:61:eb:3f:91:f3:bf:70:ca:15:ea:1b:4b: 7e:c9:b4:c9:64:a7:1a:f0:84:95:5b:e9:d4:04:41: ec:45:be:d9:0e:94:bc:a5:7e:df:e4:a1:1b:3e:a3: 99:d1:e2:67:6b:5b:72:8c:66:50:67:f7:04:78:1e: 67:dd:b9:30:30:76:50:57:53:57:40:65:cf:ea:28: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:01:D8:11:49:4F:D9:B3:E1:A2:A1:04:1A:62:29:FA:1C:EA:B0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/c6086ff1-75bd-3962-a692-00d25c23940f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.crl X509v3 Authority Key Identifier: keyid:74:CA:8D:DF:F2:AB:11:AE:86:41:33:B8:27:D2:EC:9F:FD:9E:B3:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ed41e4bd-3b0f-4d8c-ad8a-125555e7b692.cer sbgp-ipAddrBlock: critical IPv4: 192.206.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:28:76:90:45:bd:12:07:a6:10:4a:fb:a1:54:79:90:88:98: 66:72:ac:19:32:86:65:8a:86:20:36:54:f3:32:fe:c1:f1:a8: 21:24:2a:0c:3a:ad:94:20:be:b2:d6:cd:3d:2d:4e:9f:7f:26: e8:84:51:10:b7:80:13:49:e2:af:68:8b:ef:a0:f5:ab:4d:af: 3f:93:6d:06:a4:e9:a8:7f:40:3a:48:cc:79:4a:f3:a8:ea:00: 8a:9d:5c:3e:71:8f:61:b3:06:c2:79:d7:e8:b4:74:5f:4f:d3: 4c:fd:62:20:0d:47:2b:23:af:3c:61:54:fc:68:55:a9:c5:d7: 19:a3:f5:2d:2f:48:a7:08:42:62:7d:3e:de:9e:6b:f3:16:81: 13:df:fd:1c:06:26:16:78:d4:b4:00:96:84:15:e2:c7:28:5c: 36:56:66:cc:16:fe:46:03:1a:c2:3a:5f:b5:7b:8b:50:6d:b3: 83:23:2b:b6:83:8b:1c:95:06:f2:24:1a:26:7a:cd:42:bc:b6: cd:9b:08:cd:1e:13:3b:2b:4b:ca:2b:b1:88:e4:35:8a:94:bd: 8a:f7:cf:1f:f2:f5:b6:75:07:8d:05:16:1f:9f:84:c4:62:5d: 14:4e:27:68:0e:40:df:ea:59:e9:8a:45:7e:5d:0f:54:40:f6: 97:68:b3:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGfUVDdu4YfruOq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWQ0MWU0YmQtM2IwZi00ZDhjLWFkOGEtMTI1NTU1ZTdi NjkyMB4XDTI1MDIyNzIwNDEwNVoXDTI1MDUyODE5NDEwNVowLzEtMCsGA1UEAxMk OTdiNzU4MDktYzM4MS00ZTI4LTliYTgtN2UyMGFlNGI4ZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktZbAQcMlbLZ/7nEihE/2zZ+WtC54cRKgi/1 eR01PqCUCHGZ/WfSur3kjjtY2FZ4qZYHjBgOorM88Ojt0NHUA4F5PqSkjxb1DHjM IJ13WSqp5qFQja8lPrFI8wyjZraufVn8D9mVddDEhazg5z6blqxOEj6eqon8DPZP u98hpsjTQWSFz+IriI4+8qIdpE6BtHlX8GBNeasVr8W/4RaFbZt+rDU224vP5ES1 T53GxL3MjM7Kzpph6z+R879wyhXqG0t+ybTJZKca8ISVW+nUBEHsRb7ZDpS8pX7f 5KEbPqOZ0eJna1tyjGZQZ/cEeB5n3bkwMHZQV1NXQGXP6ih65wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYB2BFJT9mz4aKhBBpiKfoc6rCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZDQx ZTRiZC0zYjBmLTRkOGMtYWQ4YS0xMjU1NTVlN2I2OTIvYzYwODZmZjEtNzViZC0z OTYyLWE2OTItMDBkMjVjMjM5NDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWQ0MWU0YmQtM2IwZi00ZDhjLWFk OGEtMTI1NTU1ZTdiNjkyL2VkNDFlNGJkLTNiMGYtNGQ4Yy1hZDhhLTEyNTU1NWU3 YjY5Mi5jcmwwHwYDVR0jBBgwFoAUdMqN3/KrEa6GQTO4J9Lsn/2es4swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZDQxZTRiZC0zYjBmLTRkOGMtYWQ4YS0xMjU1 NTVlN2I2OTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM4jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0odpBFvRIHphBK+6FUeZCImGZyrBkyhmWKhiA2VPMy/sHxqCEkKgw6 rZQgvrLWzT0tTp9/JuiEURC3gBNJ4q9oi++g9atNrz+TbQak6ah/QDpIzHlK86jq AIqdXD5xj2GzBsJ51+i0dF9P00z9YiANRysjrzxhVPxoVanF1xmj9S0vSKcIQmJ9 Pt6ea/MWgRPf/RwGJhZ41LQAloQV4scoXDZWZswW/kYDGsI6X7V7i1Bts4MjK7aD ixyVBvIkGiZ6zUK8ts2bCM0eEzsrS8orsYjkNYqUvYr3zx/y9bZ1B40FFh+fhMRi XRROJ2gOQN/qWemKRX5dD1RA9pdos5s= -----END CERTIFICATE-----Generated at Thu May 8 09:09:45 2025 by rpki-client