$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa File: b945e2a1-3f45-305c-afce-b18a9404721d.roa (raw, json) Hash identifier: +sIlri6utlDBGu/wwzhjhlnV7vU2KkiYLnSpOS8ccLg= Subject key identifier: ED:B2:B4:54:96:70:EA:25:43:A9:90:24:EA:9B:E7:4C:53:9B:9C:29 Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584975445FA8D2FF73E3FC2A0180 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 397976 IP address blocks: 195.85.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:5f:a8:d2:ff:73:e3:fc:2a:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=a22b2872-8657-464a-82f9-bcb483e7bee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:af:f7:13:59:ce:dc:0c:f8:5d:27:91:e2: db:2d:0d:ae:6d:05:05:56:96:04:09:19:a1:0b:f9: 59:7c:e9:2d:b4:25:24:5d:33:d6:86:ff:45:c1:fa: 7c:5f:b4:f1:09:a7:28:dd:19:2e:1f:58:3c:26:9d: d5:a0:1e:39:f1:6b:d3:88:5b:4a:2d:23:a9:72:3c: 9a:19:61:b5:9f:fe:95:7d:2f:66:7c:2d:54:e8:af: 86:01:93:66:a1:8c:a2:ef:f7:84:cc:ea:cc:85:b9: d4:23:d8:54:57:41:87:53:b0:f3:69:2b:a6:3c:9d: b8:e9:98:94:59:c5:84:b9:8a:0f:03:19:5e:3c:1d: f4:da:8b:6e:84:97:38:05:45:c5:74:00:5c:33:2b: 89:22:34:1e:cb:8d:ce:a3:8f:0a:a3:1a:2c:bc:11: b7:a5:ac:dd:b4:6f:63:30:b2:ca:39:a5:75:b2:7b: 89:25:41:67:e3:93:9a:d8:97:4b:2e:9f:71:eb:00: b8:9d:30:30:ec:ac:9c:61:29:ed:e2:1d:5e:82:79: a9:6d:bb:ae:d8:80:2c:c2:53:94:ac:a4:fe:b4:91: fb:9b:98:98:9f:91:49:b8:b0:36:21:46:46:c7:7c: 85:52:14:ae:69:1d:70:87:fb:4b:09:94:22:2a:7d: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B2:B4:54:96:70:EA:25:43:A9:90:24:EA:9B:E7:4C:53:9B:9C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/b945e2a1-3f45-305c-afce-b18a9404721d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 195.85.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:92:9b:b4:9a:d4:e3:e8:33:1b:81:88:ef:2a:d9:b9:5b:79: 73:48:b4:cb:71:50:01:ea:f3:ac:d4:7e:3e:b2:0e:84:4d:c9: 6f:a9:68:dc:56:69:34:85:d4:b4:2f:c4:26:a7:a8:a8:3e:56: fb:4b:6b:4d:88:c7:cc:74:20:68:ed:4e:22:db:d5:bb:c8:74: 7b:c0:b6:6a:5d:32:90:d1:dc:d2:c2:93:f9:fa:2d:79:10:86: 92:7e:8c:3c:ec:bd:6b:bd:67:37:0a:ca:93:8e:98:6a:b8:8e: e6:aa:0b:c9:e5:57:48:3e:bc:b2:d6:f1:37:03:1a:64:0e:3e: 37:35:63:5d:35:73:a9:80:09:37:2e:c3:7c:02:5e:9a:19:e0: 84:6d:8c:0a:11:06:e9:d9:c4:0b:8e:20:a1:8a:e7:df:af:54: 61:53:bf:34:02:65:8d:92:83:2a:ab:8e:ca:5f:89:d0:c3:a9: 75:da:98:3a:e7:bc:b6:ea:aa:ef:d3:41:af:5e:72:17:86:8c: cf:c5:ed:04:49:12:59:64:a4:39:55:da:36:12:70:9f:44:5c: ab:fd:2d:0f:32:3c:6a:63:de:c5:80:8f:11:3b:54:45:cb:10: 70:76:a7:ff:6b:fd:64:e5:5d:78:52:3c:80:1e:f2:ef:e9:9d: 59:30:fb:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RF+o0v9z4/wqAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk YTIyYjI4NzItODY1Ny00NjRhLTgyZjktYmNiNDgzZTdiZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdOv9xNZztwM+F0nkeLbLQ2ubQUFVpYECRmh C/lZfOkttCUkXTPWhv9Fwfp8X7TxCaco3RkuH1g8Jp3VoB458WvTiFtKLSOpcjya GWG1n/6VfS9mfC1U6K+GAZNmoYyi7/eEzOrMhbnUI9hUV0GHU7DzaSumPJ246ZiU WcWEuYoPAxlePB302otuhJc4BUXFdABcMyuJIjQey43Oo48KoxosvBG3pazdtG9j MLLKOaV1snuJJUFn45Oa2JdLLp9x6wC4nTAw7KycYSnt4h1egnmpbbuu2IAswlOU rKT+tJH7m5iYn5FJuLA2IUZGx3yFUhSuaR1wh/tLCZQiKn3mIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2ytFSWcOolQ6mQJOqb50xTm5wpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvYjk0NWUyYTEtM2Y0NS0z MDVjLWFmY2UtYjE4YTk0MDQ3MjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1V2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCSm7Sa1OPoMxuBiO8q2blbeXNItMtxUAHq86zUfj6yDoRNyW+paNxW aTSF1LQvxCanqKg+VvtLa02Ix8x0IGjtTiLb1bvIdHvAtmpdMpDR3NLCk/n6LXkQ hpJ+jDzsvWu9ZzcKypOOmGq4juaqC8nlV0g+vLLW8TcDGmQOPjc1Y101c6mACTcu w3wCXpoZ4IRtjAoRBunZxAuOIKGK59+vVGFTvzQCZY2SgyqrjspfidDDqXXamDrn vLbqqu/TQa9echeGjM/F7QRJEllkpDlV2jYScJ9EXKv9LQ8yPGpj3sWAjxE7VEXL EHB2p/9r/WTlXXhSPIAe8u/pnVkw+9A= -----END CERTIFICATE-----Generated at Sun Apr 20 04:09:51 2025 by rpki-client