$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/a350b5ed-119f-3439-ae67-868e95d1f191.roa File: a350b5ed-119f-3439-ae67-868e95d1f191.roa (raw, json) Hash identifier: TpcWUFhc6JzcAa7pMQSkvH0vPG6QcDR8/nh5oHB6s1Q= Subject key identifier: D5:C0:19:E8:65:42:58:E9:42:4D:96:C2:5A:F3:9B:78:D7:4A:9E:D2 Certificate issuer: /CN=db0c6eca-2399-410f-9a3e-c3cede4c4362 Certificate serial: 010D0C9F43285848F22BE2064BF4A4F4EDC1A040 Authority key identifier: 3C:39:77:48:E1:E8:88:33:B9:F2:CB:C9:E1:A3:49:E6:D0:87:15:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/a350b5ed-119f-3439-ae67-868e95d1f191.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 13927 IP address blocks: 159.242.192.0/22 maxlen: 24 159.242.204.0/23 maxlen: 24 184.95.16.0/20 maxlen: 24 192.69.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2b:e2:06:4b:f4:a4:f4:ed:c1:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db0c6eca-2399-410f-9a3e-c3cede4c4362 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=87f542c9-63af-4d3c-9cb1-ba97e5cc26fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:87:aa:59:40:5f:96:a2:23:c7:a2:39:3a:d3: ce:6c:f3:08:0f:0c:18:3d:e0:75:02:ba:9c:30:60: 7d:04:12:83:ee:44:c4:c1:76:f6:cf:92:d4:59:0b: 65:84:bf:7f:31:23:93:7f:06:58:1a:1f:46:2b:1c: 09:48:ea:d5:15:54:15:e3:92:5c:18:bb:d6:61:36: 4c:b6:39:a2:f9:1c:6f:71:7d:b2:a1:5a:14:66:1b: e4:0f:c6:d2:e8:d8:2b:35:42:66:fa:59:2c:d2:b0: 17:f9:2a:86:8b:e4:40:09:41:4b:cb:25:4d:ba:aa: a3:1c:d2:15:3c:bf:70:68:5f:b3:ce:b7:c3:e9:82: ad:01:ac:4a:9d:af:26:9d:02:8f:40:86:50:c4:bc: fc:d3:e6:a8:81:87:35:07:dc:40:31:ae:77:e6:96: 14:3a:dc:83:45:79:d2:de:12:67:3e:c2:58:76:78: af:f2:92:6d:d6:f3:aa:b2:65:85:12:16:06:d0:bb: d8:56:df:74:e9:f8:43:a1:4c:7e:be:e3:aa:0e:86: ea:e4:3a:1e:98:a8:00:70:83:54:c0:5c:ea:11:92: b2:95:e5:3a:27:1d:81:20:70:f1:18:57:40:97:82: 13:c5:51:6e:dd:b4:13:2e:ca:ea:b9:bc:79:d4:c9: f0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C0:19:E8:65:42:58:E9:42:4D:96:C2:5A:F3:9B:78:D7:4A:9E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/a350b5ed-119f-3439-ae67-868e95d1f191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362/db0c6eca-2399-410f-9a3e-c3cede4c4362.crl X509v3 Authority Key Identifier: keyid:3C:39:77:48:E1:E8:88:33:B9:F2:CB:C9:E1:A3:49:E6:D0:87:15:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db0c6eca-2399-410f-9a3e-c3cede4c4362.cer sbgp-ipAddrBlock: critical IPv4: 159.242.192.0/22 159.242.204.0/23 184.95.16.0/20 192.69.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:fa:6d:bf:bc:3d:0c:9e:32:f5:bc:c0:ff:6b:54:be:70:68: 4b:6b:c0:e3:03:41:dd:8c:d8:ba:9a:00:1e:50:fa:cf:5f:49: d8:a7:24:22:ae:e9:d3:4b:90:56:2e:c1:db:c9:bd:3a:43:5c: 36:76:90:cb:45:ec:b5:be:39:bc:90:06:b0:91:9d:dc:c0:e1: 8f:67:bc:33:ce:4b:ea:cc:64:06:9e:6d:e0:a4:d9:60:38:63: cc:9a:fd:5e:4c:36:2e:75:ca:55:bb:d0:d1:b4:26:c6:9e:e8: ad:33:fd:1a:51:d7:1c:9c:fa:14:00:15:21:f2:30:df:6b:67: 35:8f:96:b7:c5:1b:a3:a1:8f:8d:fd:99:e7:55:e8:86:32:4a: e8:ba:bb:39:9d:13:e6:75:c9:b7:89:bc:d5:b4:8e:da:6e:e1: 77:75:de:14:d0:db:b9:b3:d0:3b:60:8e:67:0a:33:fe:fe:33: 5f:d0:11:33:b5:7d:de:9f:b8:fc:38:59:f9:07:8f:54:90:cc: 90:7a:00:aa:29:8b:1d:13:62:86:1f:cb:11:b6:bc:4f:a7:75: b7:dc:2f:bb:97:2b:77:9d:96:a1:97:50:b7:05:da:e6:df:80: 4e:b5:4f:87:b7:0b:cc:e7:93:2a:02:07:2a:97:11:ec:49:72: 65:28:f5:ff -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEjyK+IGS/Sk9O3BoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIwYzZlY2EtMjM5OS00MTBmLTlhM2UtYzNjZWRlNGM0 MzYyMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ODdmNTQyYzktNjNhZi00ZDNjLTljYjEtYmE5N2U1Y2MyNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoeqWUBflqIjx6I5OtPObPMIDwwYPeB1Arqc MGB9BBKD7kTEwXb2z5LUWQtlhL9/MSOTfwZYGh9GKxwJSOrVFVQV45JcGLvWYTZM tjmi+RxvcX2yoVoUZhvkD8bS6NgrNUJm+lks0rAX+SqGi+RACUFLyyVNuqqjHNIV PL9waF+zzrfD6YKtAaxKna8mnQKPQIZQxLz80+aogYc1B9xAMa535pYUOtyDRXnS 3hJnPsJYdniv8pJt1vOqsmWFEhYG0LvYVt906fhDoUx+vuOqDobq5DoemKgAcINU wFzqEZKyleU6Jx2BIHDxGFdAl4ITxVFu3bQTLsrqubx51Mnw4wIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFNXAGehlQljpQk2Wwlrzm3jXSp7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjBj NmVjYS0yMzk5LTQxMGYtOWEzZS1jM2NlZGU0YzQzNjIvYTM1MGI1ZWQtMTE5Zi0z NDM5LWFlNjctODY4ZTk1ZDFmMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGIwYzZlY2EtMjM5OS00MTBmLTlh M2UtYzNjZWRlNGM0MzYyL2RiMGM2ZWNhLTIzOTktNDEwZi05YTNlLWMzY2VkZTRj NDM2Mi5jcmwwHwYDVR0jBBgwFoAUPDl3SOHoiDO58svJ4aNJ5tCHFRQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjBjNmVjYS0yMzk5LTQxMGYtOWEzZS1jM2Nl ZGU0YzQzNjIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCn/LAAwQB n/LMAwQEuF8QAwQDwEUIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB76bb+8PQyeMvW8wP9rVL5waEtrwOMD Qd2M2LqaAB5Q+s9fSdinJCKu6dNLkFYuwdvJvTpDXDZ2kMtF7LW+ObyQBrCRndzA 4Y9nvDPOS+rMZAaebeCk2WA4Y8ya/V5MNi51ylW70NG0Jsae6K0z/RpR1xyc+hQA FSHyMN9rZzWPlrfFG6Ohj439medV6IYySui6uzmdE+Z1ybeJvNW0jtpu4Xd13hTQ 27mz0DtgjmcKM/7+M1/QETO1fd6fuPw4WfkHj1SQzJB6AKopix0TYoYfyxG2vE+n dbfcL7uXK3edlqGXULcF2ubfgE61T4e3C8znkyoCByqXEexJcmUo9f8= -----END CERTIFICATE-----Generated at Wed Apr 16 17:06:54 2025 by rpki-client