$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa File: d7e961b2-50a1-302c-b680-21a7f62e493d.roa (raw, json) Hash identifier: yRWa2fINkzfNYP7YTwUna1zplpWaBG1ThEPB2k1/G3s= Subject key identifier: 27:A0:87:32:AD:91:08:DB:56:F9:78:17:8E:BA:B9:F1:AF:47:8D:9D Certificate issuer: /CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5 Certificate serial: 010D0C9F43285848EC96978D7AE2FAF1A2F66380 Authority key identifier: 46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 22711 IP address blocks: 206.83.160.0/20 maxlen: 24 2620:13d:f000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:97:8d:7a:e2:fa:f1:a2:f6:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=107debac-da40-4119-8413-42dba7ff7c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:bb:f1:0a:0e:58:0e:b6:d0:0c:aa:27:48: 8b:6b:b2:23:25:77:a8:18:6b:8f:c0:7d:d1:88:2a: a0:94:e7:7b:97:05:af:eb:82:07:0d:10:17:d1:30: 95:d9:85:af:6a:c5:5a:ea:38:4e:30:9e:6a:27:ca: eb:6a:76:52:10:00:4b:4a:c5:4f:eb:42:95:f8:32: e1:d8:d7:53:ad:bd:c6:03:a9:65:4e:9b:24:b7:3c: 8d:e3:ed:f3:bc:a4:46:8e:b0:92:00:08:1d:b0:fa: f7:2a:60:b7:ec:09:51:c9:4c:db:76:83:43:ea:f7: 0f:ba:a1:9f:e4:ea:71:d5:90:ae:ef:fe:f6:16:1d: 3d:7b:3f:22:12:f7:bf:f4:11:34:3c:0e:72:5c:e8: 25:01:db:88:73:b1:0c:71:88:16:7b:8d:82:9c:d7: 52:f8:92:d4:95:03:a3:dc:74:2a:15:b5:12:8c:a2: bf:6d:02:b4:af:83:3e:dc:16:7d:2b:2d:0a:ae:a0: 16:93:ad:55:0d:ef:f0:5c:8c:54:3a:76:cb:10:be: 9c:ba:fa:a6:bc:34:84:44:d0:62:20:a1:d9:60:3b: 1e:d0:63:70:e8:6e:2e:bc:5f:95:ba:e0:32:f9:33: 70:73:0f:53:78:33:cf:c8:ac:a1:ec:b7:b1:ff:4e: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A0:87:32:AD:91:08:DB:56:F9:78:17:8E:BA:B9:F1:AF:47:8D:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/d7e961b2-50a1-302c-b680-21a7f62e493d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl X509v3 Authority Key Identifier: keyid:46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer sbgp-ipAddrBlock: critical IPv4: 206.83.160.0/20 IPv6: 2620:13d:f000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:43:18:9e:50:e0:50:9b:a3:70:16:45:5b:a5:11:8a:79:8a: d7:d5:f0:3c:bd:58:fe:aa:08:99:2b:ae:63:6d:cc:ce:0c:37: a6:fa:b1:a3:dd:ea:70:ec:ab:95:08:5a:b5:64:4c:16:09:c9: 36:84:89:78:03:50:ff:b7:b3:e2:c4:d1:0d:b3:55:c2:1f:f0: c5:c1:0d:a8:b8:c5:bd:7b:ff:bf:4b:3f:97:a4:10:81:b5:0d: f9:95:71:12:18:20:04:5c:87:9d:d8:c0:32:a0:93:d3:16:ee: 8e:4f:41:b8:d9:84:dd:01:5e:cd:56:a8:08:fb:d7:0b:4e:49: 4b:39:a7:51:9e:a6:1e:8e:d7:db:20:92:98:20:e8:c4:dd:f6: 96:d4:67:b9:3d:68:6a:79:7d:e7:96:f6:71:bf:be:be:c2:ab: 64:a9:7c:d2:3f:1c:4f:fd:1a:62:8a:1e:f7:10:88:1c:5a:90: c7:de:5e:f9:22:ae:7b:ef:ff:86:90:58:85:12:91:73:80:b3: 28:f6:6d:19:c3:d1:ee:91:a8:32:6c:fb:cc:8c:b5:ba:9d:d9: f1:ee:f2:63:5c:b1:1b:5a:49:6d:ab:e7:eb:52:f0:a7:bb:9b: d1:4e:5f:85:99:b6:27:ea:cc:a2:13:87:d9:84:67:97:b9:e5: a3:77:16:d5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEjslpeNeuL68aL2Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgzNzVjZTQtZjljYi00MGViLTlmODMtNjdkMWNmYWFh M2Y1MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MTA3ZGViYWMtZGE0MC00MTE5LTg0MTMtNDJkYmE3ZmY3YzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMa78QoOWA620AyqJ0iLa7IjJXeoGGuPwH3R iCqglOd7lwWv64IHDRAX0TCV2YWvasVa6jhOMJ5qJ8rranZSEABLSsVP60KV+DLh 2NdTrb3GA6llTpsktzyN4+3zvKRGjrCSAAgdsPr3KmC37AlRyUzbdoND6vcPuqGf 5Opx1ZCu7/72Fh09ez8iEve/9BE0PA5yXOglAduIc7EMcYgWe42CnNdS+JLUlQOj 3HQqFbUSjKK/bQK0r4M+3BZ9Ky0KrqAWk61VDe/wXIxUOnbLEL6cuvqmvDSERNBi IKHZYDse0GNw6G4uvF+VuuAy+TNwcw9TeDPPyKyh7Lex/04o+wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCeghzKtkQjbVvl4F466ufGvR42dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ODM3 NWNlNC1mOWNiLTQwZWItOWY4My02N2QxY2ZhYWEzZjUvZDdlOTYxYjItNTBhMS0z MDJjLWI2ODAtMjFhN2Y2MmU0OTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjgzNzVjZTQtZjljYi00MGViLTlm ODMtNjdkMWNmYWFhM2Y1LzY4Mzc1Y2U0LWY5Y2ItNDBlYi05ZjgzLTY3ZDFjZmFh YTNmNS5jcmwwHwYDVR0jBBgwFoAURup/fr/edULFdRaspZP5BoounswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82ODM3NWNlNC1mOWNiLTQwZWItOWY4My02N2Qx Y2ZhYWEzZjUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEzlOgMA4E AgACMAgDBgAmIAE98DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbQxieUOBQm6NwFkVbpRGKeYrX1fA8vVj+ qgiZK65jbczODDem+rGj3epw7KuVCFq1ZEwWCck2hIl4A1D/t7PixNENs1XCH/DF wQ2ouMW9e/+/Sz+XpBCBtQ35lXESGCAEXIed2MAyoJPTFu6OT0G42YTdAV7NVqgI +9cLTklLOadRnqYejtfbIJKYIOjE3faW1Ge5PWhqeX3nlvZxv76+wqtkqXzSPxxP /Rpiih73EIgcWpDH3l75Iq577/+GkFiFEpFzgLMo9m0Zw9HukagybPvMjLW6ndnx 7vJjXLEbWkltq+frUvCnu5vRTl+FmbYn6syiE4fZhGeXueWjdxbV -----END CERTIFICATE-----Generated at Mon May 5 09:17:34 2025 by rpki-client