$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa File: aae793b8-1871-365c-b48d-3bc0238d3be0.roa (raw, json) Hash identifier: ghpTf1fIkV4iEdNWnQk5c9SnOc15fQVtWuzvH3Y2WCM= Subject key identifier: 05:B2:35:0D:D6:92:B4:F3:4A:73:E7:97:B4:D4:33:39:DF:7B:7A:42 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F432858496A19A50C4D06A3854777E300 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 5769 IP address blocks: 70.80.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:a5:0c:4d:06:a3:85:47:77:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=daf153ac-e1c9-4b90-ae2f-ca12f03a9474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:26:89:f3:12:27:09:67:d7:9b:96:18:80: bd:09:fa:67:74:d1:b1:45:5a:df:55:b8:49:0d:f3: df:20:73:63:61:bc:bc:29:7f:9f:15:26:a3:d4:80: 9c:ee:f0:dc:d9:60:b0:90:40:37:98:5b:8a:17:e8: c5:bb:9d:ea:1d:77:16:64:3b:13:6a:8f:3b:57:8d: 59:6e:b6:13:20:84:65:ec:aa:82:1e:e4:5c:70:fa: 9c:9a:3e:bf:0d:19:a8:55:9b:f7:05:27:b6:40:2a: a7:a2:fe:11:47:40:09:66:45:80:ee:99:f9:1c:b5: 06:11:19:2d:50:2a:1f:4d:dd:cf:f4:ef:14:ea:f8: 12:f8:89:40:80:cd:20:8e:c4:70:45:0a:89:be:df: b6:11:77:12:13:5e:4b:c2:78:a1:d8:fa:7c:25:56: 3e:1a:ab:dc:ea:ab:88:da:c8:dc:9d:d8:d4:68:e5: d8:f4:83:bc:00:18:15:c3:2e:c0:7a:8c:8e:36:63: 72:8d:72:0c:0e:e6:df:b3:1d:6f:2b:47:9a:c5:a7: fa:a6:6c:78:ac:95:88:58:7e:5b:53:26:50:ec:f0: cc:9d:7d:12:d6:5b:38:31:7e:ba:4f:83:f2:57:80: 80:ad:78:21:6f:3a:fd:f1:53:ce:cd:cf:4e:59:18: 5e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B2:35:0D:D6:92:B4:F3:4A:73:E7:97:B4:D4:33:39:DF:7B:7A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 70.80.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e3:78:39:a2:7f:d7:6c:68:7b:56:f2:16:14:92:51:24:35: 9d:0b:19:f4:f4:06:df:97:1a:3c:85:a2:49:4d:80:65:1b:fd: 91:bf:9a:ed:c7:58:ed:3d:76:ef:e5:7c:06:92:5d:31:d1:45: 92:ec:db:35:10:24:be:6b:1c:08:c5:49:72:a3:e3:d9:2b:14: da:75:0f:51:b4:f3:51:18:ba:2b:5f:1e:61:03:d9:14:55:bf: 24:b6:59:32:9c:d2:7f:5f:64:b6:14:be:a4:72:50:dd:cc:8b: 66:5f:7f:d7:6d:54:3f:06:fc:d5:9b:0a:67:69:6f:a6:a6:bb: 01:e6:f7:a6:bf:15:76:be:99:4d:81:4f:e3:9d:d6:63:76:c8: f6:5c:fa:68:5e:02:c7:de:12:cf:5a:cb:9c:dc:59:7b:d4:54: 68:3c:c8:f4:cf:a1:9c:9b:8f:11:86:54:0f:ed:fe:56:ca:2f: c5:ff:5e:5d:08:bf:9f:5f:63:9d:3b:79:22:5f:a2:3b:98:53: ea:18:c0:d1:c0:dc:57:2d:fe:54:c2:d2:bf:fe:14:94:db:99: 64:43:a3:8e:87:58:35:5f:f6:03:7a:e2:8f:fa:53:05:88:ad: 7d:80:c1:e1:38:df:69:c2:de:f6:49:97:2c:24:d0:1d:13:e1: ca:91:19:33 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElqGaUMTQajhUd34wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZGFmMTUzYWMtZTFjOS00YjkwLWFlMmYtY2ExMmYwM2E5NDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTomifMSJwln15uWGIC9CfpndNGxRVrfVbhJ DfPfIHNjYby8KX+fFSaj1ICc7vDc2WCwkEA3mFuKF+jFu53qHXcWZDsTao87V41Z brYTIIRl7KqCHuRccPqcmj6/DRmoVZv3BSe2QCqnov4RR0AJZkWA7pn5HLUGERkt UCofTd3P9O8U6vgS+IlAgM0gjsRwRQqJvt+2EXcSE15Lwnih2Pp8JVY+Gqvc6quI 2sjcndjUaOXY9IO8ABgVwy7AeoyONmNyjXIMDubfsx1vK0eaxaf6pmx4rJWIWH5b UyZQ7PDMnX0S1ls4MX66T4PyV4CArXghbzr98VPOzc9OWRheswIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAWyNQ3WkrTzSnPnl7TUMznfe3pCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYWFlNzkzYjgtMTg3MS0z NjVjLWI0OGQtM2JjMDIzOGQzYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRlAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALeN4OaJ/12xoe1byFhSSUSQ1nQsZ9PQG35caPIWiSU2AZRv9kb+a7cdY 7T127+V8BpJdMdFFkuzbNRAkvmscCMVJcqPj2SsU2nUPUbTzURi6K18eYQPZFFW/ JLZZMpzSf19kthS+pHJQ3cyLZl9/121UPwb81ZsKZ2lvpqa7Aeb3pr8Vdr6ZTYFP 453WY3bI9lz6aF4Cx94Sz1rLnNxZe9RUaDzI9M+hnJuPEYZUD+3+Vsovxf9eXQi/ n19jnTt5Il+iO5hT6hjA0cDcVy3+VMLSv/4UlNuZZEOjjodYNV/2A3rij/pTBYit fYDB4TjfacLe9kmXLCTQHRPhypEZMw== -----END CERTIFICATE-----Generated at Fri Apr 11 22:39:58 2025 by rpki-client