$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/7de333bc-a47c-3ee8-ae48-79e25cddf42e.roa File: 7de333bc-a47c-3ee8-ae48-79e25cddf42e.roa (raw, json) Hash identifier: KfFUAl1w7q2akgpfUkMBkplGB+306TurtZ8klTje7zY= Subject key identifier: E1:69:1F:09:DB:BC:2B:47:CB:47:DE:B5:C3:58:5E:6E:ED:C4:F0:D1 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F43285848AFB7B6CB82643BED6DA2AB80 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/7de333bc-a47c-3ee8-ae48-79e25cddf42e.roa Signing time: Mon 27 Jan 2025 18:43:31 +0000 ROA not before: Mon 27 Jan 2025 18:43:31 +0000 ROA not after: Sun 27 Apr 2025 17:43:31 +0000 asID: 54198 IP address blocks: 198.251.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:b7:b6:cb:82:64:3b:ed:6d:a2:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jan 27 18:43:31 2025 GMT Not After : Apr 27 17:43:31 2025 GMT Subject: CN=12ba7f1b-96e9-45c0-85ae-70b2161367cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:54:75:32:d3:a3:30:b0:74:1a:c5:09:0d:99: b8:32:4b:9e:22:e2:92:af:b6:65:00:cb:13:dc:de: cb:30:22:a2:84:66:bc:76:03:15:1b:39:12:62:85: 90:80:dc:80:bf:50:10:cd:1a:59:d2:26:01:42:20: 1f:d2:bd:01:f1:5a:36:04:89:02:95:60:4a:bb:15: cd:53:e8:fa:b0:be:7f:63:e7:37:c0:60:87:08:31: d8:41:0d:b1:fc:04:24:0b:72:b6:91:d6:a7:e1:4b: c7:5b:3b:9a:2d:23:2a:b1:29:b0:bf:71:3d:de:5f: 93:ac:d5:65:8e:50:ac:ce:6f:48:c8:f4:41:1d:fa: fe:d9:2f:83:9c:ad:90:84:6c:44:b6:7d:30:d1:47: 65:a1:82:eb:a1:0f:24:ef:75:21:d2:90:2c:e1:ab: e2:3e:5f:98:29:dd:ca:4c:f1:2b:bd:28:6a:d9:de: 95:9e:63:be:b2:d8:3a:28:db:f3:66:b3:f3:79:27: c8:5d:ca:c8:a8:74:3f:63:28:2e:e9:bc:29:5a:e4: 92:8c:2d:f3:b3:22:99:11:ac:33:99:a0:ab:88:06: 44:4f:50:e7:6a:8b:c6:d0:fc:0b:1f:08:a3:a4:db: 33:64:d6:f8:c2:ba:81:9a:26:28:37:b4:07:9e:e1: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:69:1F:09:DB:BC:2B:47:CB:47:DE:B5:C3:58:5E:6E:ED:C4:F0:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/7de333bc-a47c-3ee8-ae48-79e25cddf42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 198.251.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f4:a8:f6:ef:ae:c6:0a:2f:df:79:12:58:b7:07:87:89:2a: bb:ce:54:0f:c8:5b:e7:31:53:41:c8:53:aa:0d:f7:f7:e4:b4: 31:9c:c5:20:70:92:e3:83:1f:4d:6c:3b:a5:e9:2f:fc:e0:30: c4:24:ce:61:f4:01:b8:fe:5f:be:bc:66:23:7b:ab:a8:34:34: 9e:da:d0:6d:47:43:e8:48:10:e3:ad:76:86:86:07:bb:47:e5: 14:0f:47:48:02:17:e3:a1:bd:e2:db:c0:05:07:ca:cb:f5:38: dc:b1:cc:27:28:6d:07:f5:58:6c:6e:b0:ad:b9:20:77:ed:42: 03:e8:b2:2f:39:e8:fe:c9:f8:c6:01:6c:3c:13:07:b0:dd:be: c4:be:65:c6:4f:57:a9:35:67:cf:e9:d0:89:76:62:72:74:f8: 34:4b:85:80:01:a1:7c:7d:61:fe:69:56:94:ac:a8:66:7a:29: fc:5a:45:65:b6:d3:05:ed:df:56:59:45:e9:b5:cb:bc:ae:72: f7:1f:fa:7f:d9:e6:f0:12:b3:5e:93:be:58:ca:01:94:1c:75: 1e:00:cd:34:89:97:a9:3e:12:89:3d:e2:d0:b3:b6:20:21:e3: 19:23:e1:ea:ed:93:4f:f1:e8:00:86:84:47:b6:b8:2e:22:69: 30:c3:d8:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivt7bLgmQ77W2iq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDEyNzE4NDMzMVoXDTI1MDQyNzE3NDMzMVowLzEtMCsGA1UEAxMk MTJiYTdmMWItOTZlOS00NWMwLTg1YWUtNzBiMjE2MTM2N2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglR1MtOjMLB0GsUJDZm4MkueIuKSr7ZlAMsT 3N7LMCKihGa8dgMVGzkSYoWQgNyAv1AQzRpZ0iYBQiAf0r0B8Vo2BIkClWBKuxXN U+j6sL5/Y+c3wGCHCDHYQQ2x/AQkC3K2kdan4UvHWzuaLSMqsSmwv3E93l+TrNVl jlCszm9IyPRBHfr+2S+DnK2QhGxEtn0w0UdloYLroQ8k73Uh0pAs4aviPl+YKd3K TPErvShq2d6VnmO+stg6KNvzZrPzeSfIXcrIqHQ/Yygu6bwpWuSSjC3zsyKZEawz maCriAZET1DnaovG0PwLHwijpNszZNb4wrqBmiYoN7QHnuHC+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFpHwnbvCtHy0fetcNYXm7txPDRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvN2RlMzMzYmMtYTQ3Yy0z ZWU4LWFlNDgtNzllMjVjZGRmNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExvswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC30qPbvrsYKL995Eli3B4eJKrvOVA/IW+cxU0HIU6oN9/fktDGcxSBw kuODH01sO6XpL/zgMMQkzmH0Abj+X768ZiN7q6g0NJ7a0G1HQ+hIEOOtdoaGB7tH 5RQPR0gCF+OhveLbwAUHysv1ONyxzCcobQf1WGxusK25IHftQgPosi856P7J+MYB bDwTB7DdvsS+ZcZPV6k1Z8/p0Il2YnJ0+DRLhYABoXx9Yf5pVpSsqGZ6KfxaRWW2 0wXt31ZZRem1y7yucvcf+n/Z5vASs16TvljKAZQcdR4AzTSJl6k+Eok94tCztiAh 4xkj4ertk0/x6ACGhEe2uC4iaTDD2Dc= -----END CERTIFICATE-----Generated at Fri Apr 11 23:06:31 2025 by rpki-client