$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/92be4af1-fb07-371f-a7d7-c8e44f1de4b0.roa File: 92be4af1-fb07-371f-a7d7-c8e44f1de4b0.roa (raw, json) Hash identifier: 4oEABkPrl3oqs94BI3ALF6wpFRtDlDQXke1nW8nNPgE= Subject key identifier: 74:39:13:05:CB:8B:C2:F4:06:18:BF:F0:0C:B6:E2:35:F0:68:11:B5 Certificate issuer: /CN=3df29669-3733-4127-bbde-a71cc4b5a661 Certificate serial: 010D0C9F43285848A1361D27CD53D8F69BDB7500 Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/92be4af1-fb07-371f-a7d7-c8e44f1de4b0.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 55247 IP address blocks: 216.162.208.0/22 maxlen: 22 216.162.208.0/23 maxlen: 23 216.162.208.0/24 maxlen: 24 216.162.209.0/24 maxlen: 24 216.162.210.0/23 maxlen: 23 216.162.210.0/24 maxlen: 24 216.162.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1d:27:cd:53:d8:f6:9b:db:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=73b96ab4-47f7-47d1-9093-d35c3b82722d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:de:94:f5:0c:d1:2f:e7:ea:ca:34:e5:c2:b0: 1b:55:dd:8a:5e:a4:e9:d0:ff:51:c2:c8:b7:4b:a3: 1c:d7:f1:89:ee:2a:51:ca:b9:f3:26:19:2a:ec:ec: 67:b9:4b:18:23:7f:23:f3:3c:f8:f0:07:20:e9:e0: 4b:39:b3:30:c4:98:ba:b2:16:01:bc:ee:d0:de:bc: ce:80:9e:8e:06:03:e9:1d:e7:1f:2d:0d:da:fe:98: 4d:3b:4b:48:bf:fe:5f:6f:b8:6d:33:05:2f:d3:77: 2a:d7:d5:91:3a:6e:52:00:2f:b1:96:99:7b:08:3a: 0e:35:a5:b2:2f:62:62:b2:a6:96:56:26:65:f9:c4: f0:9f:9a:05:db:74:d1:b9:a5:78:3c:89:ae:0e:d4: 75:0a:2f:d6:82:3c:0f:13:a9:85:12:57:fe:a1:4c: 13:4a:00:12:0a:f2:17:da:9e:32:88:2c:bb:ca:23: 36:eb:8e:57:ee:b6:cf:6d:f4:50:0e:9b:f0:cd:b7: b5:98:49:d9:03:0a:f1:4f:7b:00:a8:82:b6:35:e1: ce:7a:d8:9c:4d:09:6b:85:d1:cb:3f:5d:3c:a5:af: 9d:f2:fd:47:5e:63:6b:4b:de:f7:3a:1f:d9:bd:13: bb:3c:20:fc:9f:f7:e3:e6:41:73:62:f4:9e:90:20: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:39:13:05:CB:8B:C2:F4:06:18:BF:F0:0C:B6:E2:35:F0:68:11:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/92be4af1-fb07-371f-a7d7-c8e44f1de4b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl X509v3 Authority Key Identifier: keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer sbgp-ipAddrBlock: critical IPv4: 216.162.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:00:ba:49:2a:41:ce:23:2f:eb:01:be:d2:4c:bb:04:4f:a2: 07:4f:7c:0c:d2:57:58:a5:1a:90:f1:3a:5c:7a:84:e5:8f:c2: 52:ca:1f:8f:96:74:46:50:41:df:93:cb:4e:06:fe:ac:62:bc: ee:8f:c3:ce:4d:c2:34:9f:48:de:e1:b7:b5:07:30:f9:1e:3d: 10:f9:37:3b:e9:21:f5:b8:84:89:28:5a:b4:5b:ce:58:e8:2b: 58:3a:ce:a2:bd:ac:c0:05:c3:36:b7:1a:c1:26:0a:36:0b:42: ea:3a:68:92:c3:6e:88:5f:9b:73:d8:14:7c:c5:10:e9:a0:08: d6:05:de:e0:9c:74:9c:a3:7a:2d:83:c9:3e:b0:35:84:db:6b: e2:4b:6b:0a:f4:cf:b9:7e:e4:d6:19:dd:0a:22:1d:71:20:56: 71:40:7a:b4:2b:4f:d1:f8:53:9b:65:86:7a:8f:25:5c:e5:87: 95:1b:22:04:80:04:a4:0f:9f:49:b4:22:02:cb:e2:fa:71:02: f9:ad:5c:9e:00:0c:ba:29:7b:f2:72:cd:24:13:f2:f9:59:ee: 2b:7a:67:f3:c7:47:05:78:f9:d8:1a:88:c1:34:c5:17:0a:bc: 12:b7:64:38:c8:1a:2b:f3:51:66:11:29:0f:86:05:28:71:74: b5:3c:93:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNh0nzVPY9pvbdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RmMjk2NjktMzczMy00MTI3LWJiZGUtYTcxY2M0YjVh NjYxMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NzNiOTZhYjQtNDdmNy00N2QxLTkwOTMtZDM1YzNiODI3MjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8d6U9QzRL+fqyjTlwrAbVd2KXqTp0P9Rwsi3 S6Mc1/GJ7ipRyrnzJhkq7OxnuUsYI38j8zz48Acg6eBLObMwxJi6shYBvO7Q3rzO gJ6OBgPpHecfLQ3a/phNO0tIv/5fb7htMwUv03cq19WROm5SAC+xlpl7CDoONaWy L2JisqaWViZl+cTwn5oF23TRuaV4PImuDtR1Ci/WgjwPE6mFElf+oUwTSgASCvIX 2p4yiCy7yiM2645X7rbPbfRQDpvwzbe1mEnZAwrxT3sAqIK2NeHOeticTQlrhdHL P108pa+d8v1HXmNrS973Oh/ZvRO7PCD8n/fj5kFzYvSekCC0dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQ5EwXLi8L0Bhi/8Ay24jXwaBG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYy OTY2OS0zNzMzLTQxMjctYmJkZS1hNzFjYzRiNWE2NjEvOTJiZTRhZjEtZmIwNy0z NzFmLWE3ZDctYzhlNDRmMWRlNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RmMjk2NjktMzczMy00MTI3LWJi ZGUtYTcxY2M0YjVhNjYxLzNkZjI5NjY5LTM3MzMtNDEyNy1iYmRlLWE3MWNjNGI1 YTY2MS5jcmwwHwYDVR0jBBgwFoAUla0kVNAfCbW05KXSZq5z8tSbVdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYyOTY2OS0zNzMzLTQxMjctYmJkZS1hNzFj YzRiNWE2NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2KLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8AukkqQc4jL+sBvtJMuwRPogdPfAzSV1ilGpDxOlx6hOWPwlLKH4+W dEZQQd+Ty04G/qxivO6Pw85NwjSfSN7ht7UHMPkePRD5NzvpIfW4hIkoWrRbzljo K1g6zqK9rMAFwza3GsEmCjYLQuo6aJLDbohfm3PYFHzFEOmgCNYF3uCcdJyjei2D yT6wNYTba+JLawr0z7l+5NYZ3QoiHXEgVnFAerQrT9H4U5tlhnqPJVzlh5UbIgSA BKQPn0m0IgLL4vpxAvmtXJ4ADLope/JyzSQT8vlZ7it6Z/PHRwV4+dgaiME0xRcK vBK3ZDjIGivzUWYRKQ+GBShxdLU8k3I= -----END CERTIFICATE-----Generated at Sat Apr 12 00:15:15 2025 by rpki-client