$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ee9e380-7ff4-3834-9988-9fe4553a0667.roa File: 0ee9e380-7ff4-3834-9988-9fe4553a0667.roa (raw, json) Hash identifier: YTgeEwUIKBc9b7vLl38HSHvd0DqmVqZLtUfD7fIWjcM= Subject key identifier: D9:D8:98:3B:E0:57:B7:CD:2C:BD:D5:97:3E:6C:98:5C:B7:30:B4:80 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F43285848DD3BAF83BAF33CC8A301E280 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ee9e380-7ff4-3834-9988-9fe4553a0667.roa Signing time: Thu 13 Feb 2025 02:00:40 +0000 ROA not before: Thu 13 Feb 2025 02:00:40 +0000 ROA not after: Wed 14 May 2025 01:00:40 +0000 asID: 16739 IP address blocks: 208.72.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dd:3b:af:83:ba:f3:3c:c8:a3:01:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Feb 13 02:00:40 2025 GMT Not After : May 14 01:00:40 2025 GMT Subject: CN=e60e6410-80a7-4824-9cbf-1d4325a65509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:14:91:f9:af:8f:72:9f:d9:63:65:95:98:38: 94:39:37:fd:d0:84:ce:c4:2c:1a:f7:3c:1f:88:b9: 50:8e:e5:50:ea:a3:97:99:cf:a2:9b:b5:31:50:ea: 05:fb:c4:b6:82:f7:69:5e:0e:d8:9d:7d:e0:ea:0f: 6a:e1:6b:b3:ca:e3:dd:54:65:c2:f3:b6:a1:84:df: 6b:53:c6:a3:9a:a4:9e:8a:44:12:56:93:bb:1e:a3: 7d:6e:51:6a:00:fd:f9:bb:57:bb:c3:f0:a8:ff:6c: 83:c0:f7:04:4d:72:76:55:60:d1:a4:84:f7:75:d5: 63:f4:57:f6:1d:d5:e5:8b:47:d0:c0:96:db:ad:87: cf:50:50:cd:7d:32:24:6b:b7:68:6b:e8:55:8e:72: 76:d0:7d:ca:c9:38:74:74:97:59:77:ef:27:1f:6c: e7:11:02:54:66:6f:6f:12:b7:a1:3a:55:71:2c:05: 3a:a2:b4:4d:6e:4c:f3:b5:cc:d2:2b:ad:d5:73:97: 5a:a8:fe:9f:8f:62:9f:da:21:40:94:5e:3d:2b:72: 6f:db:69:22:50:75:d4:e6:5d:6e:eb:85:17:5d:41: e8:05:76:59:85:ca:9d:21:53:46:b5:8f:98:e6:1c: c5:cc:33:4a:70:05:4b:5b:4f:cf:34:dc:03:6c:0e: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D8:98:3B:E0:57:B7:CD:2C:BD:D5:97:3E:6C:98:5C:B7:30:B4:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ee9e380-7ff4-3834-9988-9fe4553a0667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 208.72.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:fb:42:d4:a6:88:61:52:32:93:0a:f8:59:9a:06:5e:64:2c: 55:52:57:06:49:9f:79:1c:92:b1:69:4e:ba:53:08:07:8d:4a: 36:76:2c:57:a6:6d:2c:a4:9c:db:a7:87:90:f5:f7:61:d4:13: e3:46:50:bf:93:8d:55:0e:e6:b6:14:53:14:6c:d1:ba:c5:f5: f6:bd:6d:b3:57:3b:78:d5:65:19:d0:f1:93:2b:8e:88:90:03: 4f:72:58:9a:a2:8d:be:04:60:86:13:13:37:12:2f:18:f1:25: 56:2e:8e:f0:5b:15:f0:be:4f:72:9a:2a:21:c2:84:bc:6c:2e: 98:83:47:49:ca:da:3c:a7:16:76:4e:35:57:d8:5b:90:a4:dd: 9c:1d:3f:04:2a:dc:d2:88:d7:f9:7b:a7:5c:af:de:f0:64:82: 84:0f:06:af:24:c2:97:aa:e8:eb:f3:00:35:32:fa:2b:b5:9a: 59:59:02:3c:aa:f8:59:95:19:4d:f7:41:a9:a4:39:bf:70:16: e2:34:79:38:45:00:67:14:35:d2:b2:02:12:57:3e:fa:69:bf: 94:1f:ff:e8:17:40:ff:dc:5b:08:f4:00:0e:4e:f3:c0:3f:5f: f2:7d:6c:ac:89:33:54:39:57:d5:e4:3c:e1:15:17:67:9c:70: 2e:16:2f:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO6+DuvM8yKMB4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk ZTYwZTY0MTAtODBhNy00ODI0LTljYmYtMWQ0MzI1YTY1NTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphSR+a+Pcp/ZY2WVmDiUOTf90ITOxCwa9zwf iLlQjuVQ6qOXmc+im7UxUOoF+8S2gvdpXg7YnX3g6g9q4WuzyuPdVGXC87ahhN9r U8ajmqSeikQSVpO7HqN9blFqAP35u1e7w/Co/2yDwPcETXJ2VWDRpIT3ddVj9Ff2 HdXli0fQwJbbrYfPUFDNfTIka7doa+hVjnJ20H3KyTh0dJdZd+8nH2znEQJUZm9v ErehOlVxLAU6orRNbkzztczSK63Vc5daqP6fj2Kf2iFAlF49K3Jv22kiUHXU5l1u 64UXXUHoBXZZhcqdIVNGtY+Y5hzFzDNKcAVLW0/PNNwDbA4bmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnYmDvgV7fNLL3Vlz5smFy3MLSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvMGVlOWUzODAtN2ZmNC0z ODM0LTk5ODgtOWZlNDU1M2EwNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH7QtSmiGFSMpMK+FmaBl5kLFVSVwZJn3kckrFpTrpTCAeNSjZ2LFem bSyknNunh5D192HUE+NGUL+TjVUO5rYUUxRs0brF9fa9bbNXO3jVZRnQ8ZMrjoiQ A09yWJqijb4EYIYTEzcSLxjxJVYujvBbFfC+T3KaKiHChLxsLpiDR0nK2jynFnZO NVfYW5Ck3ZwdPwQq3NKI1/l7p1yv3vBkgoQPBq8kwpeq6OvzADUy+iu1mllZAjyq +FmVGU33QamkOb9wFuI0eThFAGcUNdKyAhJXPvppv5Qf/+gXQP/cWwj0AA5O88A/ X/J9bKyJM1Q5V9XkPOEVF2eccC4WL9w= -----END CERTIFICATE-----Generated at Fri Apr 11 23:35:49 2025 by rpki-client