$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa File: ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa (raw, json) Hash identifier: lqyVnP9qqr7b6bvr0tgbfhuo147R46S4Gft+8lcZIEY= Subject key identifier: D5:B6:78:00:D5:3D:4D:A8:B0:F4:49:7D:F9:D0:C9:3A:16:3D:CD:F4 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F43285848B4C0D0B0C1C78B8FA4660F80 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 4213 IP address blocks: 216.176.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:d0:b0:c1:c7:8b:8f:a4:66:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=7ba6440b-5ea1-4028-864d-1eeccfd4d110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:95:a3:5e:be:00:4b:bf:c4:fd:03:23:6f: e6:ab:70:6a:5b:16:56:f9:99:fd:82:f0:3a:ae:fd: ad:da:dc:85:d8:fd:31:5b:99:59:ee:93:d0:0f:4b: e8:5e:7f:ee:44:ab:e5:df:f5:e9:db:83:5d:65:4f: 27:08:c9:f6:b1:61:8e:a0:18:cf:c2:07:5a:c0:33: 4f:f5:78:1e:03:dc:d7:a5:4f:2f:bc:9d:74:7b:df: 2e:37:e5:d0:ae:b1:24:e3:27:bd:4d:62:49:3a:bf: ea:69:51:c8:b5:b9:24:04:b6:66:89:04:aa:a8:1f: 3f:d5:34:03:5e:6b:4b:d9:42:b1:a9:14:fc:80:b1: 9e:69:5b:10:f4:9e:87:4b:61:6f:c4:31:3a:6f:53: 89:ea:6c:de:5b:c6:b8:24:01:9b:31:e3:62:98:55: 74:1f:97:47:53:25:f2:e7:7f:8d:2c:b0:d4:39:06: f4:e0:53:3c:53:d7:15:67:7e:ed:5f:61:2c:06:ca: 18:e7:28:2a:b9:3d:b1:ea:da:f2:03:a6:23:02:86: 7e:72:5a:a7:79:1f:62:86:55:66:38:b4:ee:3b:e2: 6c:8b:3c:a1:bb:26:97:24:07:29:d1:47:c4:b0:df: 21:bb:b0:16:37:7f:5d:d4:50:2e:65:5f:73:e6:a7: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B6:78:00:D5:3D:4D:A8:B0:F4:49:7D:F9:D0:C9:3A:16:3D:CD:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 216.176.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:53:99:be:ad:f8:ab:bc:f5:b4:eb:4d:d2:df:ec:17:a1:a0: db:b4:92:c7:21:33:39:4b:e3:7b:47:90:85:7a:fa:cb:ef:5d: 67:27:51:bd:f4:6c:2a:fa:eb:c3:e8:51:7e:df:98:c4:cd:1a: e6:76:be:a7:3c:79:99:c3:e0:c0:b3:32:0b:6d:44:17:40:d2: 32:f3:18:0e:7d:fb:8c:c9:63:d5:2b:3a:19:2a:a6:e0:bd:19: c4:64:38:1d:98:f5:3e:b8:4c:3f:42:31:23:44:d9:8c:c8:9c: 98:94:66:ad:36:76:5f:a5:a8:4c:1b:46:2a:e3:7f:10:45:8d: 90:37:d8:2b:12:e2:ef:43:17:a4:8e:34:76:0a:3b:10:b1:a5: 8e:0d:88:2f:ee:21:6d:2e:64:5e:40:4a:32:8d:a2:9c:1a:1a: 0d:70:3f:98:44:e0:78:3e:ec:50:3b:c3:66:2f:94:03:65:c5: 2d:9e:cf:36:cf:b1:73:ae:31:31:47:f4:9d:58:b0:e3:ca:c4: 7e:40:f8:45:b6:12:c9:8c:40:c0:2e:6d:d5:94:fa:b4:40:78: da:cc:b1:74:9d:8e:55:cb:ec:a3:50:71:6d:b0:47:9e:62:88: 02:37:7c:b5:2a:a1:6a:76:3e:92:3e:5d:d8:bd:ed:17:79:d6: 43:d7:5f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wNCwwceLj6RmD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk N2JhNjQ0MGItNWVhMS00MDI4LTg2NGQtMWVlY2NmZDRkMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3uVo16+AEu/xP0DI2/mq3BqWxZW+Zn9gvA6 rv2t2tyF2P0xW5lZ7pPQD0voXn/uRKvl3/Xp24NdZU8nCMn2sWGOoBjPwgdawDNP 9XgeA9zXpU8vvJ10e98uN+XQrrEk4ye9TWJJOr/qaVHItbkkBLZmiQSqqB8/1TQD XmtL2UKxqRT8gLGeaVsQ9J6HS2FvxDE6b1OJ6mzeW8a4JAGbMeNimFV0H5dHUyXy 53+NLLDUOQb04FM8U9cVZ37tX2EsBsoY5ygquT2x6tryA6YjAoZ+clqneR9ihlVm OLTuO+JsizyhuyaXJAcp0UfEsN8hu7AWN39d1FAuZV9z5qdLRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW2eADVPU2osPRJffnQyToWPc30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZWM1MzkyMGEtYTQwMy0z ZWIyLTlmMGYtYWU4YjlmNmFhNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFTmb6t+Ku89bTrTdLf7BehoNu0kschMzlL43tHkIV6+svvXWcnUb30 bCr668PoUX7fmMTNGuZ2vqc8eZnD4MCzMgttRBdA0jLzGA59+4zJY9UrOhkqpuC9 GcRkOB2Y9T64TD9CMSNE2YzInJiUZq02dl+lqEwbRirjfxBFjZA32CsS4u9DF6SO NHYKOxCxpY4NiC/uIW0uZF5ASjKNopwaGg1wP5hE4Hg+7FA7w2YvlANlxS2ezzbP sXOuMTFH9J1YsOPKxH5A+EW2EsmMQMAubdWU+rRAeNrMsXSdjlXL7KNQcW2wR55i iAI3fLUqoWp2PpI+Xdi97Rd51kPXX58= -----END CERTIFICATE-----Generated at Fri Apr 4 22:49:52 2025 by rpki-client