$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/0890b6b6-de12-3d38-9902-63eb89db2e14.roa File: 0890b6b6-de12-3d38-9902-63eb89db2e14.roa (raw, json) Hash identifier: eQnV7IYfkuxvtlc6ZmnoanQ/zJnTbS/qWRtKuEEyNbc= Subject key identifier: 19:AE:6E:F0:09:60:36:48:CA:2B:49:0C:D9:84:36:7A:C8:FF:E5:5F Certificate issuer: /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Certificate serial: 010D0C9F43285849071BE2EDA29B6CC99E0E3D00 Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/0890b6b6-de12-3d38-9902-63eb89db2e14.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 16276 IP address blocks: 40.160.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:e2:ed:a2:9b:6c:c9:9e:0e:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=caf41b7c-3edd-4bbb-9c8c-3dd8fb8622ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:b6:1d:53:10:8a:75:55:59:7d:19:4e:07: a5:c2:a9:05:f8:18:2b:61:84:4c:38:86:5d:79:40: 74:6a:f1:fb:b7:0f:f4:ee:8f:93:c6:5a:94:d0:69: d7:aa:f9:82:f4:11:56:12:9f:3b:09:07:df:c5:4e: d9:98:86:34:70:58:c7:96:99:64:39:8f:db:3a:a5: bb:94:3d:12:85:41:6d:98:34:46:c4:4d:2d:98:74: f2:86:68:c1:2a:7f:12:5c:bb:8c:1d:af:dd:13:cc: 3a:64:36:8a:47:db:bd:7c:6e:f5:8a:bf:b6:6e:5c: 87:8c:81:bd:c8:c8:43:c6:7c:1f:aa:ed:77:a7:59: 02:3a:d0:84:b4:e4:4f:46:c2:5f:28:6e:38:c7:2b: ab:c2:ba:15:94:f2:64:87:10:57:25:b8:c1:09:8d: 28:dc:a3:40:5c:dd:bb:54:f2:da:95:15:b0:76:8c: 90:85:8f:b4:86:05:b8:ba:25:25:68:0a:89:7f:bf: e3:c0:47:dd:fa:2a:f9:ed:7a:7a:c4:f0:81:0f:c1: 39:f8:49:83:eb:74:95:b1:bc:1e:53:df:c7:bb:5b: e1:8b:86:5c:f9:50:57:df:81:73:ac:e7:82:1f:e3: f1:26:e9:26:25:d8:75:51:4d:fd:b4:9d:05:0b:8b: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AE:6E:F0:09:60:36:48:CA:2B:49:0C:D9:84:36:7A:C8:FF:E5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/0890b6b6-de12-3d38-9902-63eb89db2e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl X509v3 Authority Key Identifier: keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer sbgp-ipAddrBlock: critical IPv4: 40.160.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7c:7c:fe:3d:97:8f:b9:82:6f:0e:08:8f:73:dc:50:5c:53: 6b:84:d0:de:5d:fc:55:24:a0:8f:ea:80:5b:41:1b:55:13:79: e5:40:a8:c7:88:84:21:3b:28:1c:f6:ee:4c:13:07:c8:5e:bf: fb:48:fa:c6:c9:c1:ed:0a:6f:86:63:37:d3:15:34:d1:ae:3f: af:c9:53:fa:11:c9:43:cd:0f:23:35:18:f2:e8:72:45:fd:98: ec:ff:32:be:15:39:c8:97:3f:3d:7f:a2:f2:d6:64:52:2a:1f: 54:c7:77:93:3b:57:38:71:d0:bc:20:80:be:f0:8d:a4:69:dd: 76:0a:b6:f8:c1:37:05:0e:19:f0:dc:30:09:98:a4:94:c3:bb: 59:fb:c2:bc:a5:6a:dd:b4:e3:a7:8b:bb:90:04:42:3c:73:22: 06:b0:3e:61:f4:2a:c0:9e:a6:70:1d:69:1e:23:9b:b8:f2:83: d2:f0:4c:22:6b:c8:84:4f:ac:12:98:68:d5:44:e0:89:eb:4e: 38:6d:5d:b1:dc:44:a7:ef:2c:62:35:ed:f8:de:7a:8b:94:8a: f6:27:ab:c2:8d:32:30:4f:e6:1b:85:40:d9:ce:ff:2f:19:04: 33:0f:db:b7:1b:67:40:a9:11:5c:69:09:89:39:87:e4:9d:43: 90:7d:7a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+LtoptsyZ4OPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg2NmU0YTAtNTgxMC00YmI0LTljNTQtN2Y3MDNjY2Y0 Mjg5MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk Y2FmNDFiN2MtM2VkZC00YmJiLTljOGMtM2RkOGZiODYyMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtli2HVMQinVVWX0ZTgelwqkF+BgrYYRMOIZd eUB0avH7tw/07o+TxlqU0GnXqvmC9BFWEp87CQffxU7ZmIY0cFjHlplkOY/bOqW7 lD0ShUFtmDRGxE0tmHTyhmjBKn8SXLuMHa/dE8w6ZDaKR9u9fG71ir+2blyHjIG9 yMhDxnwfqu13p1kCOtCEtORPRsJfKG44xyurwroVlPJkhxBXJbjBCY0o3KNAXN27 VPLalRWwdoyQhY+0hgW4uiUlaAqJf7/jwEfd+ir57Xp6xPCBD8E5+EmD63SVsbwe U9/Hu1vhi4Zc+VBX34FzrOeCH+PxJukmJdh1UU39tJ0FC4t92wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmubvAJYDZIyitJDNmENnrI/+VfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2 ZTRhMC01ODEwLTRiYjQtOWM1NC03ZjcwM2NjZjQyODkvMDg5MGI2YjYtZGUxMi0z ZDM4LTk5MDItNjNlYjg5ZGIyZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjg2NmU0YTAtNTgxMC00YmI0LTlj NTQtN2Y3MDNjY2Y0Mjg5LzY4NjZlNGEwLTU4MTAtNGJiNC05YzU0LTdmNzAzY2Nm NDI4OS5jcmwwHwYDVR0jBBgwFoAUEHunC1iP+wF1ygZ5ghjPQfW9FmIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82ODY2ZTRhMC01ODEwLTRiYjQtOWM1NC03Zjcw M2NjZjQyODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEKKDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR8fP49l4+5gm8OCI9z3FBcU2uE0N5d/FUkoI/qgFtBG1UTeeVAqMeI hCE7KBz27kwTB8hev/tI+sbJwe0Kb4ZjN9MVNNGuP6/JU/oRyUPNDyM1GPLockX9 mOz/Mr4VOciXPz1/ovLWZFIqH1THd5M7Vzhx0LwggL7wjaRp3XYKtvjBNwUOGfDc MAmYpJTDu1n7wrylat2046eLu5AEQjxzIgawPmH0KsCepnAdaR4jm7jyg9LwTCJr yIRPrBKYaNVE4InrTjhtXbHcRKfvLGI17fjeeouUivYnq8KNMjBP5huFQNnO/y8Z BDMP27cbZ0CpEVxpCYk5h+SdQ5B9et8= -----END CERTIFICATE-----Generated at Thu Apr 10 19:34:09 2025 by rpki-client