$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa File: 7956eda3-70c9-3ed7-b458-8c5b621234c3.roa (raw, json) Hash identifier: o16yApb9Gr4DJ5qKJW4H/iTTAiqcvb0wxTpHOFGTi3U= Subject key identifier: C8:62:B1:13:45:C5:3C:6B:43:87:CD:DD:72:03:1D:B6:41:A6:69:CF Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F43285848A13617ECC85EBAADD5B27B40 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 40628 IP address blocks: 205.153.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:17:ec:c8:5e:ba:ad:d5:b2:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=8ef71716-b7c1-428f-8331-b4230629c9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:ec:dd:03:ee:f3:7c:4c:1f:bd:03:06:4f: 1c:a4:b5:42:d7:5a:05:6c:01:67:24:31:7f:48:c8: 34:56:75:3d:32:b3:d4:5e:96:fc:89:c7:63:1b:b6: 82:b6:06:da:48:0a:cb:51:26:f6:c3:4b:61:47:9b: 49:a2:ba:31:c8:09:00:63:10:bc:22:dd:4a:e4:cf: c9:0f:b1:cf:fb:d2:d0:5d:48:10:29:87:8c:e9:b9: 7d:16:38:3d:2a:14:ad:f7:0a:a2:93:70:d7:9d:01: 8b:47:c0:b4:ae:24:f9:23:b0:36:e4:07:fb:fc:96: 22:83:82:bc:32:94:04:66:da:68:41:e4:2e:5b:e3: 08:87:8e:04:76:80:60:86:56:49:0c:34:ff:c8:f8: bd:e0:86:00:46:95:35:a4:ea:8c:ba:85:dc:c4:25: c0:51:cb:dd:c0:97:97:e9:71:85:21:37:78:89:2c: c9:18:70:02:23:3d:61:57:12:d8:e9:9d:23:2c:ad: 66:97:20:f2:69:c4:97:c0:a5:9a:33:2f:3c:d3:ad: 43:b6:f6:fb:51:33:64:81:91:8d:d5:17:6c:b3:7d: 50:b8:f3:01:c1:64:b5:77:fc:b1:77:39:1d:b7:d8: 07:b3:ab:09:eb:e9:af:a0:ed:f5:6b:2b:aa:3d:69: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:62:B1:13:45:C5:3C:6B:43:87:CD:DD:72:03:1D:B6:41:A6:69:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/7956eda3-70c9-3ed7-b458-8c5b621234c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 205.153.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:01:a8:8a:46:ff:c0:81:a2:ef:d7:99:d2:45:a5:df:dd:cd: 1c:fd:f3:1a:33:8b:97:6d:86:01:6c:ff:30:3d:68:7f:d8:b9: d1:75:a6:96:27:41:a8:09:fa:1e:2e:ed:24:2f:86:e6:e5:97: 58:9e:ce:c1:06:2c:f6:0b:9a:c4:8c:06:85:60:35:78:e8:87: 5b:d3:e1:b5:4b:ae:18:96:e6:c0:2f:0e:2a:d9:de:e2:28:6a: 3a:4f:b6:30:89:d5:bf:3f:a7:83:75:a4:ef:5e:e4:de:78:12: 6d:2f:ae:c8:c7:d2:ca:6b:3d:da:14:c9:92:e3:55:c6:c5:e5: 1b:88:a6:34:46:d5:b8:c1:bb:92:c5:a6:e1:42:3e:dd:48:96: b9:f1:21:d0:d6:4b:d3:8a:f4:77:db:32:ed:e8:f3:3a:2b:bd: 62:af:60:e7:17:e4:f5:d2:d7:7e:d7:9a:b1:e3:6d:45:f4:44: 16:83:fa:16:6d:31:39:81:25:1a:5b:b1:2e:29:d1:9d:ab:9b: 42:5f:5f:ed:42:3a:28:d0:0a:28:84:b2:74:ff:01:e3:74:27: a2:7c:ed:98:be:f1:08:d3:c9:59:78:e8:56:56:0c:44:88:e7: 64:aa:25:2f:7a:a6:e6:d6:76:1f:e0:cd:03:68:19:59:b5:9e: 47:12:cf:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhfsyF66rdWye0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk OGVmNzE3MTYtYjdjMS00MjhmLTgzMzEtYjQyMzA2MjljOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDjs3QPu83xMH70DBk8cpLVC11oFbAFnJDF/ SMg0VnU9MrPUXpb8icdjG7aCtgbaSArLUSb2w0thR5tJoroxyAkAYxC8It1K5M/J D7HP+9LQXUgQKYeM6bl9Fjg9KhSt9wqik3DXnQGLR8C0riT5I7A25Af7/JYig4K8 MpQEZtpoQeQuW+MIh44EdoBghlZJDDT/yPi94IYARpU1pOqMuoXcxCXAUcvdwJeX 6XGFITd4iSzJGHACIz1hVxLY6Z0jLK1mlyDyacSXwKWaMy88061Dtvb7UTNkgZGN 1Rdss31QuPMBwWS1d/yxdzkdt9gHs6sJ6+mvoO31ayuqPWlL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhisRNFxTxrQ4fN3XIDHbZBpmnPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvNzk1NmVkYTMtNzBjOS0z ZWQ3LWI0NTgtOGM1YjYyMTIzNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKABqIpG/8CBou/XmdJFpd/dzRz98xozi5dthgFs/zA9aH/YudF1ppYn QagJ+h4u7SQvhubll1iezsEGLPYLmsSMBoVgNXjoh1vT4bVLrhiW5sAvDirZ3uIo ajpPtjCJ1b8/p4N1pO9e5N54Em0vrsjH0sprPdoUyZLjVcbF5RuIpjRG1bjBu5LF puFCPt1IlrnxIdDWS9OK9HfbMu3o8zorvWKvYOcX5PXS137XmrHjbUX0RBaD+hZt MTmBJRpbsS4p0Z2rm0JfX+1COijQCiiEsnT/AeN0J6J87Zi+8QjTyVl46FZWDESI 52SqJS96pubWdh/gzQNoGVm1nkcSz0o= -----END CERTIFICATE-----Generated at Sat Apr 5 08:06:47 2025 by rpki-client