$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa File: ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa (raw, json) Hash identifier: JTzkvYkFwzcNGavM5K6uhgmmY8+Jq1/FBOXVTZ4rSG4= Subject key identifier: 32:BF:A6:1B:5B:D2:04:08:01:70:2B:63:F9:EF:95:37:38:0C:CE:5D Certificate issuer: /CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Certificate serial: 010D0C9F432858496CE44D1FAA95CA73843FA100 Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 396163 IP address blocks: 204.16.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:4d:1f:aa:95:ca:73:84:3f:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=85b18b90-48a3-4b88-babe-385415c19488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:30:9f:c2:0c:39:56:76:94:d9:dd:14:eb: 75:54:f8:cc:1b:f8:35:b1:c2:cd:1e:64:fa:68:12: 0e:7f:55:0c:07:9c:61:a1:6d:2a:77:21:84:e7:d3: dc:4b:89:75:3f:2f:78:77:a9:5c:80:90:6a:c7:e7: 7e:39:d6:d5:0a:78:e5:0a:47:98:d2:0e:73:c8:4c: 24:33:15:21:e8:e4:3b:c6:0d:81:01:6f:19:b6:54: 54:f3:9f:9b:12:32:21:81:cb:2e:da:b9:53:c5:d5: 51:eb:6e:50:c7:a5:1a:0c:b1:67:b5:75:a3:5a:7d: 02:ea:ea:d2:e3:b4:9a:30:51:e5:fe:ab:d9:d0:8e: dd:b4:03:79:cd:c5:9b:15:2a:c7:2e:4b:7b:f3:54: 31:48:ef:9a:9e:74:4e:8a:af:0e:97:48:70:cd:d5: 82:cd:80:c5:cd:6c:98:01:e7:ca:c7:dc:74:8a:37: 0c:8b:61:4b:63:6c:a3:4f:98:4b:04:60:0c:b2:91: db:84:da:c2:c4:17:9e:d4:b3:ea:98:6c:8f:fe:f3: 41:21:15:aa:cf:42:33:d9:05:82:a3:f3:d0:70:4a: c0:83:e8:c7:85:ee:27:52:0b:1e:bb:46:47:cd:6a: b4:6a:a0:83:be:64:7f:f0:61:f1:e9:a8:b0:8b:89: 40:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:A6:1B:5B:D2:04:08:01:70:2B:63:F9:EF:95:37:38:0C:CE:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/ac1a28b8-e141-3be4-9962-3f1737f5ba5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl X509v3 Authority Key Identifier: keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer sbgp-ipAddrBlock: critical IPv4: 204.16.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a9:6c:fd:40:5a:92:a8:67:6f:04:bc:74:32:80:c3:48:b5: bb:5f:cf:91:47:1a:16:d4:48:be:f0:4d:cc:f0:ec:3f:1b:07: 9a:c7:bb:79:4a:0f:3e:1a:10:cd:2f:62:ca:88:a2:d9:9f:c6: 3a:65:76:41:be:03:9a:bd:9f:25:74:9e:59:92:12:aa:bd:99: a4:82:0c:4b:b7:ba:09:b3:a5:40:92:71:9c:b5:03:cd:11:bb: 8d:98:b2:27:d5:30:1d:d7:e9:91:40:31:8f:5f:1b:be:58:0a: ec:1b:9d:f7:80:e6:1a:20:bf:ab:78:24:96:02:a8:5b:09:af: e2:90:69:29:ab:7a:81:bc:63:5e:53:94:55:ab:89:44:57:30: fa:c2:d0:bc:51:0f:ba:a1:05:5a:5f:70:e9:66:d9:08:ad:29: 40:74:87:cc:e4:c9:a7:df:e7:43:a4:a6:09:68:37:02:6f:6a: 82:10:5c:54:c4:db:fe:c4:78:b0:30:40:da:a6:b6:a9:a3:d2: 8a:b3:67:24:09:57:87:b4:f0:41:ff:69:a9:b8:0a:e0:15:1e: 97:97:d5:98:4c:96:e7:54:b1:72:01:e1:7e:b7:a8:d3:40:0e: af:47:33:60:58:28:4f:5d:4d:51:9c:c7:64:5e:4b:87:98:31: 96:ab:32:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5E0fqpXKc4Q/oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVl MWI0MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ODViMThiOTAtNDhhMy00Yjg4LWJhYmUtMzg1NDE1YzE5NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFkwn8IMOVZ2lNndFOt1VPjMG/g1scLNHmT6 aBIOf1UMB5xhoW0qdyGE59PcS4l1Py94d6lcgJBqx+d+OdbVCnjlCkeY0g5zyEwk MxUh6OQ7xg2BAW8ZtlRU85+bEjIhgcsu2rlTxdVR625Qx6UaDLFntXWjWn0C6urS 47SaMFHl/qvZ0I7dtAN5zcWbFSrHLkt781QxSO+annROiq8Ol0hwzdWCzYDFzWyY AefKx9x0ijcMi2FLY2yjT5hLBGAMspHbhNrCxBee1LPqmGyP/vNBIRWqz0Iz2QWC o/PQcErAg+jHhe4nUgseu0ZHzWq0aqCDvmR/8GHx6aiwi4lAVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK/phtb0gQIAXArY/nvlTc4DM5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NjBi NGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvYWMxYTI4YjgtZTE0MS0z YmU0LTk5NjItM2YxNzM3ZjViYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTYwYjRjNTQtYmQzNS00NmUxLTg2 OTgtYWZmNTAxOTVlMWI0LzU2MGI0YzU0LWJkMzUtNDZlMS04Njk4LWFmZjUwMTk1 ZTFiNC5jcmwwHwYDVR0jBBgwFoAU4fMs3hxf7UyVmngN3vppc96VL8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1 MDE5NWUxYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2pbP1AWpKoZ28EvHQygMNItbtfz5FHGhbUSL7wTczw7D8bB5rHu3lK Dz4aEM0vYsqIotmfxjpldkG+A5q9nyV0nlmSEqq9maSCDEu3ugmzpUCScZy1A80R u42YsifVMB3X6ZFAMY9fG75YCuwbnfeA5hogv6t4JJYCqFsJr+KQaSmreoG8Y15T lFWriURXMPrC0LxRD7qhBVpfcOlm2QitKUB0h8zkyaff50OkpgloNwJvaoIQXFTE 2/7EeLAwQNqmtqmj0oqzZyQJV4e08EH/aam4CuAVHpeX1ZhMludUsXIB4X63qNNA Dq9HM2BYKE9dTVGcx2ReS4eYMZarMtU= -----END CERTIFICATE-----Generated at Tue Apr 8 15:27:54 2025 by rpki-client