$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d8ec4d76-2217-3dcc-9d9f-0160ed9429b5.roa File: d8ec4d76-2217-3dcc-9d9f-0160ed9429b5.roa (raw, json) Hash identifier: bwVEEDfxuPC50ajHTJu4F4govrP4ERk9d6zYIV1kBo4= Subject key identifier: E5:A0:2E:AB:9C:E6:9C:13:31:D1:63:2F:4B:A7:75:DE:F5:03:59:DA Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F432858492CAE85F17C8E57E0B6C24800 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d8ec4d76-2217-3dcc-9d9f-0160ed9429b5.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 14593 IP address blocks: 216.147.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:85:f1:7c:8e:57:e0:b6:c2:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a0bc167e-32a6-4143-88b3-2c0fbd493b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e6:cb:fc:25:b0:13:c7:2c:61:77:b8:e3:ae: 1b:93:31:49:01:b7:d6:41:e2:8d:6d:a0:97:5d:41: f1:bd:c9:1a:7c:4a:64:e5:38:e5:72:9c:c8:ef:98: 35:53:9f:0a:2d:9e:a7:d3:50:75:f0:43:45:36:05: 02:64:a0:43:8b:d3:c5:22:b4:bc:8e:2d:d2:4e:d0: c1:c2:d1:03:f9:c2:ac:8b:0c:fc:c7:20:45:3c:ab: f2:93:ee:ef:e1:48:c7:8d:88:83:16:c6:f7:71:e6: 53:71:96:2e:c5:97:68:11:9a:eb:59:fe:72:12:fd: b9:cf:d2:08:e7:82:b4:f9:92:56:71:06:26:57:03: d8:20:2a:b9:bd:b0:da:2b:e6:a0:83:2a:cd:3e:9d: b3:7d:b2:f3:ae:41:9e:1e:1a:47:49:42:95:f9:48: d4:48:9f:c3:b9:68:c8:0d:f5:a6:9b:95:5a:57:c9: 77:ff:84:62:db:cb:35:cf:bc:c8:16:7a:00:fd:39: 66:60:71:00:85:40:6d:a4:59:5a:0c:3f:7f:27:48: 17:67:9a:d9:04:f1:59:75:be:e6:df:ae:94:53:9b: 8a:c8:a9:b4:fd:37:27:7c:76:9c:32:85:d6:43:15: e4:5b:e4:19:c5:04:b5:10:90:9d:9b:a3:e6:ee:ef: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A0:2E:AB:9C:E6:9C:13:31:D1:63:2F:4B:A7:75:DE:F5:03:59:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d8ec4d76-2217-3dcc-9d9f-0160ed9429b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 216.147.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0c:04:2c:68:58:3d:87:60:bd:15:6f:04:1a:c1:4b:45:3f: 3c:7e:19:df:f6:0c:6b:cd:69:af:84:a6:dd:76:41:43:5f:7c: fc:c6:c8:9d:86:54:e6:7a:23:ff:90:dd:05:4e:b1:14:e4:03: f8:15:b4:18:ef:37:0a:0d:84:3e:3e:b2:d9:ae:2e:16:40:85: 07:9f:46:17:03:ae:f9:66:71:b1:ef:f4:7c:78:7c:43:46:e8: 31:ef:bd:f9:13:2b:e9:8f:eb:7e:43:4f:06:74:ff:9d:e1:5e: 54:3e:9e:93:f3:09:2e:25:48:2b:e5:50:a3:74:ed:25:2e:3c: 29:5e:95:7b:c2:2c:1a:da:2a:1f:5d:4b:22:1b:0f:14:14:00: e8:c3:93:92:eb:1e:ed:82:cd:2d:b9:b5:27:ed:8b:08:6e:bf: 19:d1:f7:80:56:3f:3f:5a:0f:fd:c9:f7:82:5d:29:07:09:de: 4a:a6:88:cc:b6:ce:49:68:22:7b:a8:c4:ce:33:17:0a:5d:a1: 84:33:97:90:f6:bd:31:9a:67:1b:18:f1:81:ff:1b:23:66:26: b1:fe:a3:0f:ef:17:a3:05:c8:41:fc:d5:19:34:3f:8d:2a:1f: 1a:8b:6f:8c:04:32:43:64:4d:36:09:83:12:91:39:d6:b3:c2: b5:03:df:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroXxfI5X4LbCSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTBiYzE2N2UtMzJhNi00MTQzLTg4YjMtMmMwZmJkNDkzYjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjebL/CWwE8csYXe4464bkzFJAbfWQeKNbaCX XUHxvckafEpk5TjlcpzI75g1U58KLZ6n01B18ENFNgUCZKBDi9PFIrS8ji3STtDB wtED+cKsiwz8xyBFPKvyk+7v4UjHjYiDFsb3ceZTcZYuxZdoEZrrWf5yEv25z9II 54K0+ZJWcQYmVwPYICq5vbDaK+aggyrNPp2zfbLzrkGeHhpHSUKV+UjUSJ/DuWjI DfWmm5VaV8l3/4Ri28s1z7zIFnoA/TlmYHEAhUBtpFlaDD9/J0gXZ5rZBPFZdb7m 366UU5uKyKm0/TcnfHacMoXWQxXkW+QZxQS1EJCdm6Pm7u/o/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWgLquc5pwTMdFjL0undd71A1naMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvZDhlYzRkNzYtMjIxNy0z ZGNjLTlkOWYtMDE2MGVkOTQyOWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2JN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIMBCxoWD2HYL0VbwQawUtFPzx+Gd/2DGvNaa+Ept12QUNffPzGyJ2G VOZ6I/+Q3QVOsRTkA/gVtBjvNwoNhD4+stmuLhZAhQefRhcDrvlmcbHv9Hx4fENG 6DHvvfkTK+mP635DTwZ0/53hXlQ+npPzCS4lSCvlUKN07SUuPClelXvCLBraKh9d SyIbDxQUAOjDk5LrHu2CzS25tSftiwhuvxnR94BWPz9aD/3J94JdKQcJ3kqmiMy2 zkloInuoxM4zFwpdoYQzl5D2vTGaZxsY8YH/GyNmJrH+ow/vF6MFyEH81Rk0P40q HxqLb4wEMkNkTTYJgxKROdazwrUD38A= -----END CERTIFICATE-----Generated at Sat Apr 5 13:12:20 2025 by rpki-client