$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/80be0def-4049-3ae5-bb3c-3633976d709e.roa File: 80be0def-4049-3ae5-bb3c-3633976d709e.roa (raw, json) Hash identifier: WItt3AQCinKWvpeJ5WPyFUjjbxPtiIMG67DunzqvWB8= Subject key identifier: 75:48:21:61:A8:0C:36:11:C2:DA:60:E4:83:BC:5F:BD:4C:F4:4D:6F Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F43285848BE8633E3BFB0717F23D32720 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/80be0def-4049-3ae5-bb3c-3633976d709e.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 396356 IP address blocks: 216.105.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:33:e3:bf:b0:71:7f:23:d3:27:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=170f5ee6-be47-473e-8b01-f2b4015258b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:13:e6:7c:aa:cf:24:29:99:b4:6b:94:8b: f6:26:39:5a:b0:92:10:17:42:bd:7b:32:6b:14:00: 28:2c:0e:9b:4c:24:27:29:92:5a:48:97:fe:51:2d: 14:51:18:81:d5:9a:0c:29:3e:63:4d:d2:2a:6b:63: ff:24:03:99:07:3d:a1:5c:09:0e:cb:94:97:27:2a: ab:f5:90:63:ce:08:b3:1e:03:e8:a5:95:18:6e:f9: f6:36:95:7f:4e:34:b7:55:03:eb:d8:e6:b2:09:75: f5:c8:8d:35:25:c6:20:e0:b3:63:9e:1f:81:67:68: 18:08:37:67:8b:53:4f:9d:ff:42:30:bf:5f:53:ec: 45:a2:25:96:3d:10:aa:8c:72:d3:9f:f9:55:34:26: fc:3e:b3:26:34:1b:e0:42:75:db:9c:c4:0d:cf:67: 8d:3e:8f:f3:98:92:69:a4:c1:70:5e:89:6a:c0:7e: 8b:ca:ae:5b:0e:c5:5f:43:d9:e9:7e:ed:7b:70:f1: d9:11:34:d8:3a:b3:ba:8d:c3:11:45:13:2c:a9:45: 37:32:74:62:be:f5:83:7c:71:df:84:eb:53:78:2e: 22:0c:1f:92:05:b6:7b:15:5d:ba:63:8f:0e:05:f6: ba:ca:c5:88:b8:1e:b8:56:a4:75:73:01:26:15:92: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:48:21:61:A8:0C:36:11:C2:DA:60:E4:83:BC:5F:BD:4C:F4:4D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/80be0def-4049-3ae5-bb3c-3633976d709e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 216.105.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5e:25:a8:9b:f0:bc:35:86:f6:20:36:1e:36:da:dd:72:42: f2:fb:a5:4b:09:38:cb:a6:02:68:5c:42:a2:38:c8:cc:04:8e: 67:64:79:88:b0:c4:81:de:50:54:35:32:cc:e4:df:ee:06:11: ed:81:ec:19:fd:68:0e:40:be:3c:b0:aa:d1:2d:4e:49:a6:d6: 33:af:c8:2a:ed:56:f9:98:61:12:f9:52:81:6b:f0:18:a1:d7: 7d:4e:1c:bf:8b:53:6c:dd:3e:04:ba:b3:ea:27:91:55:33:32: 94:a0:ce:be:be:9e:85:f1:67:bb:08:d2:36:74:1d:e6:86:a1: d6:28:f0:fc:f8:bd:c4:79:54:cb:43:41:89:bd:cd:4a:56:ce: 03:17:7c:ff:3a:fd:4b:09:cb:69:42:46:3b:70:31:90:9b:5f: 01:30:8f:c0:e5:ca:8f:e6:f8:9a:28:8d:15:bb:28:db:a2:65: 8c:74:0a:4d:3c:de:bd:f8:d5:6a:91:4a:2e:e0:40:d4:dc:c1: 2c:3c:61:70:0b:12:f8:bc:6e:15:bd:03:46:3c:38:be:74:52: 7d:52:b0:ee:15:33:ab:02:6f:2b:3d:33:bd:bc:97:21:7a:cf: c3:9b:96:72:92:cf:40:ff:4a:1d:a0:ab:a6:d2:65:d7:2a:4c: 32:05:57:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hjPjv7BxfyPTJyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MTcwZjVlZTYtYmU0Ny00NzNlLThiMDEtZjJiNDAxNTI1OGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznoT5nyqzyQpmbRrlIv2JjlasJIQF0K9ezJr FAAoLA6bTCQnKZJaSJf+US0UURiB1ZoMKT5jTdIqa2P/JAOZBz2hXAkOy5SXJyqr 9ZBjzgizHgPopZUYbvn2NpV/TjS3VQPr2OayCXX1yI01JcYg4LNjnh+BZ2gYCDdn i1NPnf9CML9fU+xFoiWWPRCqjHLTn/lVNCb8PrMmNBvgQnXbnMQNz2eNPo/zmJJp pMFwXolqwH6Lyq5bDsVfQ9npfu17cPHZETTYOrO6jcMRRRMsqUU3MnRivvWDfHHf hOtTeC4iDB+SBbZ7FV26Y48OBfa6ysWIuB64VqR1cwEmFZKjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVIIWGoDDYRwtpg5IO8X71M9E1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvODBiZTBkZWYtNDA0OS0z YWU1LWJiM2MtMzYzMzk3NmQ3MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNeJaib8Lw1hvYgNh422t1yQvL7pUsJOMumAmhcQqI4yMwEjmdkeYiw xIHeUFQ1Mszk3+4GEe2B7Bn9aA5AvjywqtEtTkmm1jOvyCrtVvmYYRL5UoFr8Bih 131OHL+LU2zdPgS6s+onkVUzMpSgzr6+noXxZ7sI0jZ0HeaGodYo8Pz4vcR5VMtD QYm9zUpWzgMXfP86/UsJy2lCRjtwMZCbXwEwj8Dlyo/m+JoojRW7KNuiZYx0Ck08 3r341WqRSi7gQNTcwSw8YXALEvi8bhW9A0Y8OL50Un1SsO4VM6sCbys9M728lyF6 z8OblnKSz0D/Sh2gq6bSZdcqTDIFV3A= -----END CERTIFICATE-----Generated at Fri Mar 14 08:17:01 2025 by rpki-client