$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/1a8b4670-b976-3f02-829a-82952c6e8f62.roa File: 1a8b4670-b976-3f02-829a-82952c6e8f62.roa (raw, json) Hash identifier: zqbqL7eCemkteK3kQAiFjfOfH0KgLr2JUixM8PgNhuk= Subject key identifier: 1A:11:01:2D:12:13:A9:D3:5E:4B:45:19:7F:7E:EE:CA:1F:9D:BA:1E Certificate issuer: /CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569 Certificate serial: 010D0C9F4328584913AC3391974D1845C7AED180 Authority key identifier: 7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/1a8b4670-b976-3f02-829a-82952c6e8f62.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 393731 IP address blocks: 148.170.224.0/20 maxlen: 24 199.88.52.0/22 maxlen: 24 204.156.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:33:91:97:4d:18:45:c7:ae:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=d89208d6-5c00-4e6f-86dc-a2524cca502e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ae:f5:8c:37:00:73:b8:34:20:ac:27:04:be: a4:df:70:32:fa:b6:23:7e:a0:19:93:7d:11:16:c6: a3:e8:ae:ca:8c:d1:1f:52:20:0c:c3:e7:35:6e:a3: 5b:87:cf:ca:58:d0:34:eb:16:cc:29:1c:e7:36:dc: 32:98:f1:bc:a3:e4:cc:43:65:a2:c7:80:04:5a:a7: ea:d6:ad:f0:ad:89:0d:27:79:8b:a5:5c:14:9a:56: 10:56:37:64:6d:a8:48:82:3c:01:5d:20:09:b4:0c: 2f:a2:6a:64:a6:f5:0a:c4:9d:25:67:54:93:16:f2: d4:37:15:07:25:90:eb:1a:b7:0e:7f:b2:d1:83:9b: 4c:19:38:2d:1a:f6:1d:96:6f:67:4b:47:6f:7d:c1: eb:1c:e8:63:c4:dc:0d:c5:80:a6:40:a9:e8:ea:de: 63:6e:0f:d3:68:3b:03:d6:c9:2e:48:a2:39:f4:e2: b1:a1:2d:6c:ee:92:47:6a:09:be:66:69:4c:12:b7: fa:32:a4:b2:49:c5:bd:9e:e3:99:69:71:d8:55:b9: 0b:db:de:e1:61:fc:0c:d7:3b:04:20:7e:9c:8e:98: e8:f1:2a:3f:3d:bd:5e:5b:5a:2e:70:84:9c:af:a9: 4a:3a:13:84:10:90:a1:21:44:c0:20:8d:e4:cf:06: cb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:11:01:2D:12:13:A9:D3:5E:4B:45:19:7F:7E:EE:CA:1F:9D:BA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/1a8b4670-b976-3f02-829a-82952c6e8f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.crl X509v3 Authority Key Identifier: keyid:7E:43:91:89:D1:82:7F:29:92:31:FD:11:FC:5E:A5:94:1E:96:94:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c5fd4a62-d8cc-4e44-b5cb-53a93c2b7569.cer sbgp-ipAddrBlock: critical IPv4: 148.170.224.0/20 199.88.52.0/22 204.156.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d5:38:3a:0f:96:da:1d:99:ef:8a:ea:bd:82:92:88:e4:6a: 95:c3:42:1f:68:85:15:3f:c5:47:81:c4:25:11:77:9c:be:10: 44:51:fc:39:69:63:6f:f7:cb:35:cd:0d:49:02:e5:cf:35:1d: 90:d2:2a:d5:6b:ad:1f:d0:a5:8d:db:0e:13:03:f6:e8:67:10: 4e:82:19:11:15:a9:aa:7d:1c:f7:29:81:a8:1a:80:d8:50:36: 76:ef:09:32:52:b2:9c:50:4a:82:5d:bf:f0:2c:4f:31:1f:a6: a5:44:78:bb:ef:7a:66:f5:d4:f5:52:c8:dd:26:4f:23:3d:80: fb:48:be:b8:a4:a3:21:c8:61:c4:b1:15:aa:ed:95:a7:0c:2b: 4d:ba:f4:5f:78:0c:b9:d1:d0:af:4e:7c:18:55:05:fa:96:f9: 38:3f:cc:4b:68:c8:cc:59:31:f0:f0:23:c8:53:a9:ea:12:2a: fc:1c:c7:72:98:8b:9c:6d:73:5f:87:73:f3:b0:29:08:e7:36: c8:f4:9d:c7:38:2b:f7:84:48:17:08:19:5c:dc:35:10:a8:a5: 97:eb:a2:f3:e2:a7:9f:58:0f:0b:31:95:47:fa:ce:20:14:a2: 44:79:2d:b9:13:ec:2f:cd:75:a7:bf:d9:c1:99:b3:db:33:72: cd:31:c5:4b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkTrDORl00YRceu0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzVmZDRhNjItZDhjYy00ZTQ0LWI1Y2ItNTNhOTNjMmI3 NTY5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDg5MjA4ZDYtNWMwMC00ZTZmLTg2ZGMtYTI1MjRjY2E1MDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK71jDcAc7g0IKwnBL6k33Ay+rYjfqAZk30R Fsaj6K7KjNEfUiAMw+c1bqNbh8/KWNA06xbMKRznNtwymPG8o+TMQ2Wix4AEWqfq 1q3wrYkNJ3mLpVwUmlYQVjdkbahIgjwBXSAJtAwvompkpvUKxJ0lZ1STFvLUNxUH JZDrGrcOf7LRg5tMGTgtGvYdlm9nS0dvfcHrHOhjxNwNxYCmQKno6t5jbg/TaDsD 1skuSKI59OKxoS1s7pJHagm+ZmlMErf6MqSyScW9nuOZaXHYVbkL297hYfwM1zsE IH6cjpjo8So/Pb1eW1oucIScr6lKOhOEEJChIUTAII3kzwbL1QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBoRAS0SE6nTXktFGX9+7sofnboeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNWZk NGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5M2MyYjc1NjkvMWE4YjQ2NzAtYjk3Ni0z ZjAyLTgyOWEtODI5NTJjNmU4ZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzVmZDRhNjItZDhjYy00ZTQ0LWI1 Y2ItNTNhOTNjMmI3NTY5L2M1ZmQ0YTYyLWQ4Y2MtNGU0NC1iNWNiLTUzYTkzYzJi NzU2OS5jcmwwHwYDVR0jBBgwFoAUfkORidGCfymSMf0R/F6llB6WlNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNWZkNGE2Mi1kOGNjLTRlNDQtYjVjYi01M2E5 M2MyYjc1NjkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQElKrgAwQC x1g0AwQDzJygMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAB7VODoPltodme+K6r2CkojkapXDQh9ohRU/xUeB xCURd5y+EERR/DlpY2/3yzXNDUkC5c81HZDSKtVrrR/QpY3bDhMD9uhnEE6CGREV qap9HPcpgagagNhQNnbvCTJSspxQSoJdv/AsTzEfpqVEeLvvemb11PVSyN0mTyM9 gPtIvrikoyHIYcSxFartlacMK0269F94DLnR0K9OfBhVBfqW+Tg/zEtoyMxZMfDw I8hTqeoSKvwcx3KYi5xtc1+Hc/OwKQjnNsj0ncc4K/eESBcIGVzcNRCopZfrovPi p59YDwsxlUf6ziAUokR5LbkT7C/Ndae/2cGZs9szcs0xxUs= -----END CERTIFICATE-----Generated at Fri Apr 4 16:02:51 2025 by rpki-client