$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa File: b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa (raw, json) Hash identifier: T6UnftNRyHfDyvMatU7lDLQR9SxzR8aSOXBdyDesSXE= Subject key identifier: 35:22:2B:DD:5E:DC:B8:95:22:05:A4:23:70:12:6D:D0:CC:FF:F5:4C Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584940394ACBBDC3EC25CEB0A800 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 6250 IP address blocks: 216.163.120.0/23 maxlen: 24 216.163.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4a:cb:bd:c3:ec:25:ce:b0:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=88a1f3f9-59c2-4845-b8dc-54f700dc2a68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d7:f9:7b:f8:35:36:68:2d:1c:b2:8f:f8:36: 3e:4a:4f:3b:18:6f:ed:0a:bb:ea:ed:40:a5:f4:43: 20:18:54:a9:69:3e:81:5c:84:d0:6a:56:90:d6:1d: a0:b3:4f:63:9d:3b:bb:6f:1d:6c:3d:43:e7:6e:48: ee:5a:1b:53:b2:9b:d9:1c:22:3a:52:8a:b6:b9:59: 1a:70:2d:fd:76:99:b7:6a:0e:e7:c6:3e:98:0e:c5: fa:a9:1c:07:c3:b7:55:9c:67:16:53:25:7a:15:56: e0:0c:1e:86:f9:51:96:34:66:03:67:a2:ae:d3:32: 77:ea:56:21:f9:e2:68:a5:fb:21:73:d9:c7:ce:64: 22:e7:26:a7:76:b9:2f:0c:10:8f:36:3e:8d:3f:a7: f5:77:7d:03:e6:8b:55:d4:42:aa:3e:1b:7b:e2:bb: ef:87:54:46:b8:25:55:28:8b:0c:9f:78:37:e0:2f: c2:93:71:6e:7f:59:3a:e0:33:01:a7:8f:16:06:fc: 25:d8:37:e9:4a:6a:ba:83:d9:2d:0d:b2:9e:60:69: e0:00:d6:7c:94:48:87:ec:f9:3d:00:57:17:c9:62: d7:bd:0d:91:cb:91:4c:11:6d:32:73:af:97:4e:c4: de:9a:04:b0:71:be:c8:f8:64:6a:ca:24:9e:9a:92: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:22:2B:DD:5E:DC:B8:95:22:05:A4:23:70:12:6D:D0:CC:FF:F5:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/b4533f27-95b4-3281-bca9-b634a4b0ce4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 216.163.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e6:f2:43:fa:a6:dc:8d:dd:c2:fb:76:07:69:9f:31:c1:27: 3b:6a:16:f9:9d:71:3c:d9:a2:8f:4c:3c:8f:f9:98:93:9c:c6: 86:f5:9e:7f:8b:94:6b:78:08:dd:fa:a5:d6:6c:09:73:fe:a6: c4:ca:63:4a:02:c9:cc:3a:c3:11:a5:e6:ee:82:73:e8:d3:0e: 7b:34:d7:9b:be:40:a1:d8:12:88:e6:6d:46:61:70:61:94:c9: 14:fe:dd:c4:74:c2:18:4f:fc:fa:4b:fc:de:0f:68:ba:43:0d: 8b:61:b1:59:2b:3b:74:5f:b4:98:87:a1:c7:7b:b8:98:d4:1d: 40:ff:e9:87:d6:ab:af:e8:a3:aa:94:9b:61:b8:99:5c:f0:7e: fc:2d:87:25:48:26:0d:ef:e5:53:dc:66:cc:a7:5d:18:3f:ac: ed:1d:77:6a:7b:b8:f5:2f:ce:31:30:bd:14:7a:94:fe:73:2d: b7:dd:30:2b:bf:4b:d5:f9:bf:9f:68:32:e1:5c:0e:df:79:43: 18:b6:f1:ee:31:54:51:69:6b:ec:7e:03:72:84:e4:eb:f4:fb: 15:5e:c1:8b:fa:c0:25:38:4d:d9:bf:78:4a:5b:9f:7a:4f:b7: 8c:89:db:6d:3a:a4:c2:5e:13:71:12:82:b1:83:3a:5e:5f:76: 4b:f5:98:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUrLvcPsJc6wqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ODhhMWYzZjktNTljMi00ODQ1LWI4ZGMtNTRmNzAwZGMyYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNf5e/g1NmgtHLKP+DY+Sk87GG/tCrvq7UCl 9EMgGFSpaT6BXITQalaQ1h2gs09jnTu7bx1sPUPnbkjuWhtTspvZHCI6Uoq2uVka cC39dpm3ag7nxj6YDsX6qRwHw7dVnGcWUyV6FVbgDB6G+VGWNGYDZ6Ku0zJ36lYh +eJopfshc9nHzmQi5yandrkvDBCPNj6NP6f1d30D5otV1EKqPht74rvvh1RGuCVV KIsMn3g34C/Ck3Fuf1k64DMBp48WBvwl2DfpSmq6g9ktDbKeYGngANZ8lEiH7Pk9 AFcXyWLXvQ2Ry5FMEW0yc6+XTsTemgSwcb7I+GRqyiSempLLYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUiK91e3LiVIgWkI3ASbdDM//VMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvYjQ1MzNmMjctOTViNC0z MjgxLWJjYTktYjYzNGE0YjBjZTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXm8kP6ptyN3cL7dgdpnzHBJztqFvmdcTzZoo9MPI/5mJOcxob1nn+L lGt4CN36pdZsCXP+psTKY0oCycw6wxGl5u6Cc+jTDns015u+QKHYEojmbUZhcGGU yRT+3cR0whhP/PpL/N4PaLpDDYthsVkrO3RftJiHocd7uJjUHUD/6YfWq6/oo6qU m2G4mVzwfvwthyVIJg3v5VPcZsynXRg/rO0dd2p7uPUvzjEwvRR6lP5zLbfdMCu/ S9X5v59oMuFcDt95Qxi28e4xVFFpa+x+A3KE5Ov0+xVewYv6wCU4Tdm/eEpbn3pP t4yJ2206pMJeE3ESgrGDOl5fdkv1mAA= -----END CERTIFICATE-----Generated at Thu Apr 17 15:25:15 2025 by rpki-client