$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/337e0aa1-dc43-361c-98f0-93d466af2bda.roa File: 337e0aa1-dc43-361c-98f0-93d466af2bda.roa (raw, json) Hash identifier: 9IG6u4iokWFW3b/Q25H4gc9LpXYJZSZZTG5K3IZ5KYY= Subject key identifier: 8F:21:C3:B1:43:C7:A3:2D:73:9A:EF:E0:13:3E:C8:41:C5:06:06:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D5EA54A716455D6903B70 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/337e0aa1-dc43-361c-98f0-93d466af2bda.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33650 IP address blocks: 173.160.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:5e:a5:4a:71:64:55:d6:90:3b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=bf51922a-b159-4d8b-9e5a-77d587886eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f0:f9:bb:5b:ed:db:40:36:ad:94:19:a5:c9: 59:49:63:47:1a:8d:f0:3b:ee:52:ce:6f:63:e6:62: 9d:6e:ae:55:1e:07:41:5f:43:85:de:1a:eb:aa:6b: 77:96:aa:57:34:63:f3:2f:8e:b9:ef:49:db:65:ce: 75:dc:93:b8:dc:65:35:c2:7e:27:7d:10:97:b2:6f: b7:d3:ff:32:ec:fc:51:1c:b8:eb:f0:ad:bb:49:f6: 83:df:f0:ca:0d:cf:9e:f5:cd:9b:30:bb:44:0c:77: 5c:fa:1e:80:0e:9a:cc:9f:3f:41:7e:bc:96:3c:f4: 26:ea:dd:9d:50:08:a7:6e:7b:8f:c1:5b:31:2a:a1: b8:8e:89:b6:bc:9e:a0:3e:05:31:1d:9a:33:0f:0b: 9e:0d:f0:9d:1e:90:59:78:22:f0:41:dc:d2:20:ad: 61:c3:95:eb:f6:06:c4:85:72:5f:c3:fa:ce:6f:d2: 01:82:74:aa:99:65:d9:61:45:ee:bf:88:98:de:64: 74:b6:3f:a6:f8:c8:67:a7:86:4b:58:fe:f1:5a:79: 5e:fc:0c:5f:e6:96:44:1f:d3:99:a1:7e:f7:88:a1: dd:11:82:db:91:81:9e:9c:49:a5:ba:f6:b6:05:5d: 26:48:c3:ea:7a:1b:e2:bf:62:fa:a0:10:00:05:0c: de:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:21:C3:B1:43:C7:A3:2D:73:9A:EF:E0:13:3E:C8:41:C5:06:06:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/337e0aa1-dc43-361c-98f0-93d466af2bda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 173.160.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:d1:ef:e7:32:b0:e7:d2:7d:ab:83:58:2b:40:fa:74:82:db: ee:6b:b8:d6:42:d5:64:90:1b:c3:8d:5a:ba:f8:52:71:73:15: 7f:84:a4:3f:d4:ae:69:39:03:02:6c:4c:71:18:0b:28:6f:28: 86:46:6b:65:cf:e3:f5:a8:21:69:45:c3:5c:c6:5d:eb:e2:d9: 77:65:5f:4b:a9:f8:03:7e:1d:f5:b4:68:46:82:38:36:4d:9b: 97:75:e9:0f:f6:a8:42:66:24:92:82:47:34:b1:e3:98:83:cc: 3c:9e:8f:02:f5:a1:ec:1b:00:a6:e1:6c:98:56:a0:d2:4f:49: 71:16:f2:d1:cb:9a:b1:b3:01:8a:eb:41:79:a3:a5:d1:9a:a6: 7a:b2:ef:f2:b2:3e:4e:5f:4a:1d:e8:02:23:a4:6d:33:6d:f9: d8:e3:1f:02:6e:73:69:8d:cf:8e:3e:cc:9c:ca:55:25:e4:ff: ff:9c:ae:a0:22:d0:91:d7:4f:48:39:6c:57:83:56:ec:b9:c1: 2f:4b:b0:4d:9f:1b:a2:87:9c:b6:66:87:6b:72:a3:27:30:8e: 2c:27:60:c1:68:3b:e4:1f:97:5f:b6:fa:46:aa:3b:66:7d:a2: 91:13:b1:cd:e4:a2:d9:b1:5e:7b:ba:fb:46:f6:b8:6d:9f:31: 30:53:23:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebV6lSnFkVdaQO3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YmY1MTkyMmEtYjE1OS00ZDhiLTllNWEtNzdkNTg3ODg2ZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPD5u1vt20A2rZQZpclZSWNHGo3wO+5Szm9j 5mKdbq5VHgdBX0OF3hrrqmt3lqpXNGPzL46570nbZc513JO43GU1wn4nfRCXsm+3 0/8y7PxRHLjr8K27SfaD3/DKDc+e9c2bMLtEDHdc+h6ADprMnz9BfryWPPQm6t2d UAinbnuPwVsxKqG4jom2vJ6gPgUxHZozDwueDfCdHpBZeCLwQdzSIK1hw5Xr9gbE hXJfw/rOb9IBgnSqmWXZYUXuv4iY3mR0tj+m+Mhnp4ZLWP7xWnle/Axf5pZEH9OZ oX73iKHdEYLbkYGenEmluva2BV0mSMPqehviv2L6oBAABQzeBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8hw7FDx6Mtc5rv4BM+yEHFBgYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzM3ZTBhYTEtZGM0My0z NjFjLTk4ZjAtOTNkNDY2YWYyYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHraCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMPR7+cysOfSfauDWCtA+nSC2+5ruNZC1WSQG8ONWrr4UnFzFX+EpD/U rmk5AwJsTHEYCyhvKIZGa2XP4/WoIWlFw1zGXevi2XdlX0up+AN+HfW0aEaCODZN m5d16Q/2qEJmJJKCRzSx45iDzDyejwL1oewbAKbhbJhWoNJPSXEW8tHLmrGzAYrr QXmjpdGapnqy7/KyPk5fSh3oAiOkbTNt+djjHwJuc2mNz44+zJzKVSXk//+crqAi 0JHXT0g5bFeDVuy5wS9LsE2fG6KHnLZmh2tyoycwjiwnYMFoO+Qfl1+2+kaqO2Z9 opETsc3kotmxXnu6+0b2uG2fMTBTIxU= -----END CERTIFICATE-----Generated at Sun Apr 6 17:11:46 2025 by rpki-client