$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/71f13e4c-0331-356c-b34c-e3bb1cd07c68.roa File: 71f13e4c-0331-356c-b34c-e3bb1cd07c68.roa (raw, json) Hash identifier: 6iqJp4TGUNfxmea5CYcnC9Hnqbxatz/uyZhHBU5v3sM= Subject key identifier: 0A:0D:12:8B:68:BC:26:8B:E2:8E:8C:33:82:C5:F7:09:EF:C4:9C:B2 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F43285848F4F69C2C82B57BA9807D2500 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/71f13e4c-0331-356c-b34c-e3bb1cd07c68.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 0 IP address blocks: 165.92.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9c:2c:82:b5:7b:a9:80:7d:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=e8d22550-9940-4fb0-b064-edbab3f6157c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:12:de:77:07:df:c4:27:6b:a6:51:43:f2:fc: b0:33:7a:47:19:4a:f3:1a:fd:21:52:0c:71:8a:73: 36:f9:27:e0:ef:57:07:aa:ff:d5:3d:47:a6:33:4f: 69:82:47:f0:16:cf:20:f7:67:a8:ae:c8:2a:28:f0: 74:04:d6:5a:7b:08:4a:64:e7:42:e5:0f:77:c5:df: c5:f0:7e:a7:b8:d2:a0:85:be:62:2c:69:28:39:32: 20:60:a5:1d:ff:d3:10:4a:6c:e8:23:e8:c1:c9:50: 6f:0e:b5:e0:f6:99:9a:ff:42:c2:b1:44:d4:b6:67: a7:8f:e5:33:28:b4:ba:a2:0f:d8:e6:1d:b2:20:59: e3:8c:a2:0d:48:12:79:9d:50:26:40:bd:89:81:07: 2e:ae:a2:e1:0e:de:04:78:81:a5:33:bb:45:5d:fb: 0d:ee:52:33:a4:5d:27:91:e0:ed:b5:f4:07:c9:c6: ef:df:d2:8e:ec:4a:71:24:ed:db:c0:66:df:6c:ad: d1:32:f7:57:19:14:88:4e:89:1c:6f:5d:a5:81:aa: 89:6c:33:50:8e:5d:63:90:66:ac:22:42:00:f3:e1: a4:f8:d6:ed:1d:16:5f:3e:92:5c:dd:4c:dc:71:9c: 1f:44:e2:fc:d0:d6:7d:cc:98:23:7d:1e:c5:87:8a: 12:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0D:12:8B:68:BC:26:8B:E2:8E:8C:33:82:C5:F7:09:EF:C4:9C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/71f13e4c-0331-356c-b34c-e3bb1cd07c68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 165.92.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:76:42:d2:f9:f2:1c:53:cf:5c:a3:59:e1:5a:bc:bd:19:30: 46:c8:15:38:6e:67:26:58:69:28:f8:9e:55:23:a9:d5:cd:88: 99:7a:dc:04:6f:4b:21:d3:94:0f:7a:a4:42:d3:2f:26:d8:34: b0:1b:76:5f:ce:a8:1f:5f:ac:41:82:dd:63:85:b7:7e:4d:b6: c8:a6:43:44:81:5a:20:a9:9e:53:d6:62:c5:47:32:14:4b:d3: 26:06:2a:1f:fe:47:35:f7:ab:b8:d1:56:a3:12:25:b1:02:05: 7a:ba:87:3b:28:b8:ea:8e:5a:07:97:7b:eb:7e:a4:b8:16:c5: 4a:4a:31:11:d1:62:7f:23:d5:6f:e6:51:d1:36:47:f4:f8:27: 54:36:da:3c:bd:81:b4:57:d8:f9:e9:b9:ba:49:50:a6:8c:e9: 69:86:36:5c:fd:b2:b3:10:8b:9b:ea:d3:ba:4e:ea:fc:7a:6f: 60:cd:d8:4b:dd:7d:63:51:8d:33:12:54:93:e8:89:2d:8a:a2: 04:7e:69:7c:fe:dc:3a:5a:11:4d:e7:f0:f7:96:24:ff:ae:f1: 0f:56:ba:06:6d:9d:f6:47:89:fe:1d:a4:28:01:6c:4f:99:e8: 29:e1:ab:28:8e:30:5f:a8:c8:e9:32:26:72:24:84:83:42:1e: a0:7a:09:e0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEj09pwsgrV7qYB9JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZThkMjI1NTAtOTk0MC00ZmIwLWIwNjQtZWRiYWIzZjYxNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxLedwffxCdrplFD8vywM3pHGUrzGv0hUgxx inM2+Sfg71cHqv/VPUemM09pgkfwFs8g92eorsgqKPB0BNZaewhKZOdC5Q93xd/F 8H6nuNKghb5iLGkoOTIgYKUd/9MQSmzoI+jByVBvDrXg9pma/0LCsUTUtmenj+Uz KLS6og/Y5h2yIFnjjKINSBJ5nVAmQL2JgQcurqLhDt4EeIGlM7tFXfsN7lIzpF0n keDttfQHycbv39KO7EpxJO3bwGbfbK3RMvdXGRSITokcb12lgaqJbDNQjl1jkGas IkIA8+Gk+NbtHRZfPpJc3UzccZwfROL80NZ9zJgjfR7Fh4oS2QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAoNEotovCaL4o6MM4LF9wnvxJyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNzFmMTNlNGMtMDMzMS0z NTZjLWIzNGMtZTNiYjFjZDA3YzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApVwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAVHZC0vnyHFPPXKNZ4Vq8vRkwRsgVOG5nJlhpKPieVSOp1c2ImXrcBG9L IdOUD3qkQtMvJtg0sBt2X86oH1+sQYLdY4W3fk22yKZDRIFaIKmeU9ZixUcyFEvT JgYqH/5HNferuNFWoxIlsQIFerqHOyi46o5aB5d7636kuBbFSkoxEdFifyPVb+ZR 0TZH9PgnVDbaPL2BtFfY+em5uklQpozpaYY2XP2ysxCLm+rTuk7q/HpvYM3YS919 Y1GNMxJUk+iJLYqiBH5pfP7cOloRTefw95Yk/67xD1a6Bm2d9keJ/h2kKAFsT5no KeGrKI4wX6jI6TImciSEg0IeoHoJ4A== -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:51 2025 by rpki-client