$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2b0914da-3387-3454-bc38-ee4a7e5e9603.roa File: 2b0914da-3387-3454-bc38-ee4a7e5e9603.roa (raw, json) Hash identifier: 8+z61YQuyYrPFx8MfdHJZ5qKJeERcDckyaAD2bZZjCU= Subject key identifier: BA:E5:C1:FF:E5:E5:29:EF:92:C8:25:24:61:2F:42:09:60:C1:A8:65 Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F432858496850FC69375BA0028BB12680 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2b0914da-3387-3454-bc38-ee4a7e5e9603.roa Signing time: Thu 03 Apr 2025 21:41:04 +0000 ROA not before: Thu 03 Apr 2025 21:41:04 +0000 ROA not after: Wed 02 Jul 2025 21:41:04 +0000 asID: 32913 IP address blocks: 208.85.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:50:fc:69:37:5b:a0:02:8b:b1:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Apr 3 21:41:04 2025 GMT Not After : Jul 2 21:41:04 2025 GMT Subject: CN=be6f6031-8edb-4999-9c15-16a79ff1daec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dd:48:d8:52:7f:c4:4f:41:1f:35:95:47:78: 08:bd:48:82:a3:b5:00:71:fb:21:23:04:ed:71:1c: c6:e6:b8:b9:d8:e7:90:08:d5:56:72:c2:4e:cc:21: 9c:f8:0c:20:d2:e6:62:5f:05:10:d2:9c:d4:4f:e6: 25:d1:1e:e4:73:fe:24:ef:e7:57:04:e1:5e:bf:a5: 0f:6e:54:1e:cb:d1:54:d0:ab:a6:be:79:48:09:74: e1:93:c7:24:86:b1:0f:22:c8:91:cc:37:fa:96:b6: d5:57:58:3a:92:89:28:7e:da:77:77:4d:81:bf:19: 4c:3c:7b:da:db:10:da:1f:a7:e6:f0:75:aa:3d:a0: f2:d9:27:67:be:27:6a:cd:d6:c3:c0:73:cd:50:35: 29:7f:91:14:9b:65:d8:38:9a:38:e4:ba:ce:c1:a9: 8b:e7:5c:b8:6f:ad:74:25:99:04:e3:a5:35:bd:65: be:22:1b:79:d1:26:e9:1c:d8:35:17:b5:fa:57:c9: 79:fb:d3:f5:5b:00:df:ac:19:94:0f:e7:ed:91:e8: da:5d:f0:63:a8:11:65:ab:7a:09:de:4c:52:83:c8: b0:79:30:36:45:6f:6a:aa:d3:17:19:8a:b0:c9:78: 09:c8:3f:28:65:41:74:72:70:cd:e2:20:d8:50:41: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E5:C1:FF:E5:E5:29:EF:92:C8:25:24:61:2F:42:09:60:C1:A8:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2b0914da-3387-3454-bc38-ee4a7e5e9603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 208.85.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:56:b4:e0:f9:de:af:b0:ba:7f:1e:7c:b7:5d:48:9f:33:78: ba:f6:d5:53:97:ca:f5:b2:1e:49:5d:9e:0e:75:79:30:c7:38: df:b2:06:6f:8f:64:7d:27:60:74:78:67:06:62:e2:c5:61:f9: 06:95:ab:5f:89:f0:5a:8c:b5:6a:73:cd:6d:20:c9:60:67:3a: f2:0b:60:03:c6:75:96:12:4a:ab:c0:33:27:61:c7:cb:23:08: c0:8e:0f:7d:b0:52:d8:78:70:48:57:69:92:d1:1d:ba:b3:03: 80:b7:d1:5d:0a:88:22:74:05:d2:db:a9:88:6b:ef:cb:ee:5e: 51:b6:09:f5:74:06:f8:c2:22:d2:4d:c0:4b:b6:f4:fc:f6:f7: 2c:0b:08:ec:79:39:f9:92:82:60:5e:4a:ce:c7:f3:39:0c:66: fc:1d:45:97:18:a5:22:39:5b:23:10:43:64:4e:f5:74:dd:a5: 66:81:0e:98:b2:61:ac:6a:e6:f4:23:36:08:c5:f7:dd:40:f7: cf:92:25:b2:fe:22:f0:92:21:df:43:f0:6f:b7:65:5d:dd:ca: cb:9f:f6:52:a1:7c:58:52:c6:62:38:ca:2d:d7:66:ef:88:55: f4:db:3b:8f:80:5e:ac:0c:fb:48:93:a4:13:5a:c5:5a:08:b9: 53:8f:c3:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEloUPxpN1ugAouxJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI1MDQwMzIxNDEwNFoXDTI1MDcwMjIxNDEwNFowLzEtMCsGA1UEAxMk YmU2ZjYwMzEtOGVkYi00OTk5LTljMTUtMTZhNzlmZjFkYWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN1I2FJ/xE9BHzWVR3gIvUiCo7UAcfshIwTt cRzG5ri52OeQCNVWcsJOzCGc+Awg0uZiXwUQ0pzUT+Yl0R7kc/4k7+dXBOFev6UP blQey9FU0KumvnlICXThk8ckhrEPIsiRzDf6lrbVV1g6kokoftp3d02BvxlMPHva 2xDaH6fm8HWqPaDy2SdnvidqzdbDwHPNUDUpf5EUm2XYOJo45LrOwamL51y4b610 JZkE46U1vWW+Iht50SbpHNg1F7X6V8l5+9P1WwDfrBmUD+ftkejaXfBjqBFlq3oJ 3kxSg8iweTA2RW9qqtMXGYqwyXgJyD8oZUF0cnDN4iDYUEGALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrlwf/l5SnvksglJGEvQglgwahlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvMmIwOTE0ZGEtMzM4Ny0z NDU0LWJjMzgtZWU0YTdlNWU5NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpWtOD53q+wun8efLddSJ8zeLr21VOXyvWyHkldng51eTDHON+yBm+P ZH0nYHR4ZwZi4sVh+QaVq1+J8FqMtWpzzW0gyWBnOvILYAPGdZYSSqvAMydhx8sj CMCOD32wUth4cEhXaZLRHbqzA4C30V0KiCJ0BdLbqYhr78vuXlG2CfV0BvjCItJN wEu29Pz29ywLCOx5OfmSgmBeSs7H8zkMZvwdRZcYpSI5WyMQQ2RO9XTdpWaBDpiy Yaxq5vQjNgjF991A98+SJbL+IvCSId9D8G+3ZV3dysuf9lKhfFhSxmI4yi3XZu+I VfTbO4+AXqwM+0iTpBNaxVoIuVOPw4I= -----END CERTIFICATE-----Generated at Wed Apr 9 19:42:35 2025 by rpki-client