$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa File: 2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa (raw, json) Hash identifier: ktvbano2RcpXfj1ZDE7ElhqE8ine8Puv6wE9uWTQifA= Subject key identifier: B5:FD:52:FF:FA:5A:95:1E:90:A7:C8:21:F4:D2:01:E2:27:72:81:B3 Certificate issuer: /CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Certificate serial: 010D0C9F4328584913AC194AA074425C570A5080 Authority key identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 400071 IP address blocks: 216.73.182.0/23 maxlen: 32 2602:fc31::/36 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:19:4a:a0:74:42:5c:57:0a:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=fa2c1459-ff83-4d16-a374-5a424c625e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:6f:ef:38:42:7d:dc:cf:f2:f0:c1:39:97: 1e:3e:4e:bf:4a:59:74:7b:e4:e1:45:3e:56:b3:30: 99:21:b1:e1:38:be:b1:22:d2:56:21:d2:7d:2c:fd: 0d:6b:33:a2:76:12:d6:76:37:f7:de:fa:7b:67:58: 5b:c0:0b:92:e2:91:83:3c:dd:89:3e:11:b7:be:4e: 9a:e6:b8:45:e3:a6:6d:29:3c:26:7b:da:76:5e:0b: 56:83:69:c6:e9:ea:3a:39:04:4e:6a:a2:57:8a:6c: 73:d6:a5:46:ee:51:6e:22:4b:41:53:9b:7e:65:c2: df:5e:cc:d0:1f:34:5b:91:bb:c3:62:8e:18:de:f1: a3:a9:35:11:4f:1c:12:22:ba:fa:43:da:f0:c1:84: 8d:f2:3b:2e:cb:5f:20:df:d4:1d:97:a2:fa:97:12: 1b:01:d4:bd:aa:8f:93:5c:19:83:95:b2:50:05:eb: 58:c0:c7:d7:f5:b4:3a:4b:57:f9:5f:6a:64:b6:99: d9:4d:6a:a2:9c:ad:d8:0b:5b:f5:aa:53:7c:57:2e: 2c:f5:ea:79:30:ae:64:47:6f:09:6c:8d:80:ce:bf: ed:71:e8:ba:44:62:a6:e2:48:cd:84:15:b8:73:6b: 1f:61:1f:3a:b6:73:eb:72:8c:61:86:b4:37:cb:ef: 49:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FD:52:FF:FA:5A:95:1E:90:A7:C8:21:F4:D2:01:E2:27:72:81:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/2b4d7d21-616e-384a-acf5-2b24d533c7aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.crl X509v3 Authority Key Identifier: keyid:22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer sbgp-ipAddrBlock: critical IPv4: 216.73.182.0/23 IPv6: 2602:fc31::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ed:13:8c:7e:9f:43:46:88:37:a4:ae:bb:64:35:d4:e5:bc: ca:f8:8e:01:63:ca:6f:24:40:a0:ef:a3:a8:ab:15:82:01:2d: f0:31:30:40:c2:a1:74:c9:66:e8:7b:61:09:57:25:96:a6:d4: 25:c0:a2:58:52:1b:5d:65:33:0f:5c:b1:c0:93:45:e0:a7:6f: 50:14:9f:07:b3:09:52:21:28:4a:80:1a:23:c1:a2:e0:d0:a9: 6c:c4:c4:c5:d4:e5:52:3a:d9:85:76:75:eb:96:28:b6:d3:2e: f1:ed:68:83:1c:e4:92:78:97:75:30:53:32:8b:ab:bf:98:d2: 7f:19:ba:73:c5:78:86:c1:9e:d0:7a:ca:6c:ea:5f:f5:e0:3b: 66:cc:bd:21:93:6b:cc:05:bd:7e:d0:ec:98:5e:bd:51:c3:a3: 36:cd:95:6e:29:f4:cd:12:e9:11:7b:81:70:94:da:c6:ba:c6: c9:3a:69:ff:17:24:dc:01:c3:ce:24:84:fd:d1:41:b1:c3:ce: 87:a8:c6:52:3d:fd:10:01:ae:77:61:86:ae:da:05:95:a6:9e: 8b:73:0e:05:89:12:d8:b4:e9:ec:2a:1d:54:5f:44:68:c3:9f: 48:24:ae:c8:b4:77:a1:d7:04:bc:41:b2:59:ff:b0:8a:30:d3: 1d:8e:20:38 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkTrBlKoHRCXFcKUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2NGYtZDI1MDgyY2Jj OTU0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZmEyYzE0NTktZmY4My00ZDE2LWEzNzQtNWE0MjRjNjI1ZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPpv7zhCfdzP8vDBOZcePk6/Sll0e+ThRT5W szCZIbHhOL6xItJWIdJ9LP0NazOidhLWdjf33vp7Z1hbwAuS4pGDPN2JPhG3vk6a 5rhF46ZtKTwme9p2XgtWg2nG6eo6OQROaqJXimxz1qVG7lFuIktBU5t+ZcLfXszQ HzRbkbvDYo4Y3vGjqTURTxwSIrr6Q9rwwYSN8jsuy18g39Qdl6L6lxIbAdS9qo+T XBmDlbJQBetYwMfX9bQ6S1f5X2pktpnZTWqinK3YC1v1qlN8Vy4s9ep5MK5kR28J bI2Azr/tcei6RGKm4kjNhBW4c2sfYR86tnPrcoxhhrQ3y+9JyQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLX9Uv/6WpUekKfIIfTSAeIncoGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NDMz ZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJjYmM5NTQvMmI0ZDdkMjEtNjE2ZS0z ODRhLWFjZjUtMmIyNGQ1MzNjN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDQzM2ZiNGEtMGQ0Yy00MGI3LWI2 NGYtZDI1MDgyY2JjOTU0LzQ0MzNmYjRhLTBkNGMtNDBiNy1iNjRmLWQyNTA4MmNi Yzk1NC5jcmwwHwYDVR0jBBgwFoAUIuc6/P4lUE98qgNeJlMFyd8NIgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUw ODJjYmM5NTQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQB2Em2MA4E AgACMAgDBgQmAvwxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCC7ROMfp9DRog3pK67ZDXU5bzK+I4BY8pv JECg76OoqxWCAS3wMTBAwqF0yWboe2EJVyWWptQlwKJYUhtdZTMPXLHAk0Xgp29Q FJ8HswlSIShKgBojwaLg0KlsxMTF1OVSOtmFdnXrlii20y7x7WiDHOSSeJd1MFMy i6u/mNJ/GbpzxXiGwZ7Qesps6l/14DtmzL0hk2vMBb1+0OyYXr1Rw6M2zZVuKfTN EukRe4FwlNrGusbJOmn/FyTcAcPOJIT90UGxw86HqMZSPf0QAa53YYau2gWVpp6L cw4FiRLYtOnsKh1UX0Row59IJK7ItHeh1wS8QbJZ/7CKMNMdjiA4 -----END CERTIFICATE-----Generated at Fri Apr 11 23:52:41 2025 by rpki-client