$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4a37cc34-5949-36f5-8d84-0fcfaf5b3fe3.roa File: 4a37cc34-5949-36f5-8d84-0fcfaf5b3fe3.roa (raw, json) Hash identifier: eC9vlF9OiWHjxpRlLlBZhYlJo4rYShfSaClWzTyau6E= Subject key identifier: 82:B7:40:40:1E:D5:05:C7:26:F3:E9:2A:6E:24:CB:02:AE:22:C8:63 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584960541412291C1FCAC4F23200 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4a37cc34-5949-36f5-8d84-0fcfaf5b3fe3.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 216.113.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:14:12:29:1c:1f:ca:c4:f2:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=5b6656c2-b107-4b4f-98a5-31c5aaa3883a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:4b:1c:d4:d2:6d:e9:2a:7f:ff:02:d6:c7: 93:e9:1e:8c:da:64:02:30:46:c2:2a:4c:3d:da:ba: e8:0f:12:1d:e6:42:88:45:d7:a4:31:27:a5:28:7c: 80:d1:70:a1:71:78:31:d2:89:b1:67:f5:3b:64:35: a0:f9:76:90:6c:00:43:1e:63:74:a9:70:1c:91:ce: db:c8:a5:84:d4:3b:13:1c:ff:98:6b:8e:c1:37:44: 68:9c:1d:d3:6b:a6:39:a2:7c:6f:8b:2c:ec:d4:fc: 94:70:34:70:a6:c5:02:6e:f4:ed:33:3f:4e:35:ea: d2:57:b7:c6:a3:86:04:69:9c:15:56:2f:98:f6:f6: 13:76:e1:c1:bb:e4:ad:3c:37:6c:52:2e:e1:fc:70: 6d:a2:66:70:f9:2d:ef:af:db:67:1a:7a:9e:cc:fa: 3a:ca:a0:cb:45:8a:69:17:05:ea:df:6b:df:1a:a1: 75:c3:58:e1:c9:ec:43:87:ed:ad:f3:db:e3:d3:a9: aa:4c:8e:32:bb:81:4f:7b:13:90:22:b7:08:8a:e2: 48:b7:ab:ee:d1:25:9c:81:77:ab:3b:fd:e4:55:06: a1:6b:9b:0c:43:38:b4:c9:d2:f6:1b:fa:8d:e6:93: 70:29:1c:ba:3d:15:67:04:32:c9:00:7f:11:0e:d0: 3c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B7:40:40:1E:D5:05:C7:26:F3:E9:2A:6E:24:CB:02:AE:22:C8:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4a37cc34-5949-36f5-8d84-0fcfaf5b3fe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 216.113.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a8:09:92:9a:c7:35:03:5a:68:66:b6:ae:72:6c:96:42:ab: d3:9b:35:41:37:65:95:fb:fb:4a:dd:30:05:dc:54:f1:bb:3c: a3:18:cf:24:90:72:9b:70:70:ae:65:c0:77:d2:f6:ab:79:fd: 08:33:da:50:86:1e:f5:cc:4d:85:df:d8:06:c7:9e:5c:c7:86: bc:5d:7d:62:2c:a4:df:89:a5:4f:50:4c:a7:c1:7f:0a:a5:78: f9:42:85:92:11:ff:62:87:d6:fb:2c:2a:5b:ce:dd:d1:ca:19: 9b:71:b8:72:cc:d8:aa:8c:ca:f5:c3:39:d8:f9:17:24:78:35: 70:cb:f7:5d:fc:10:6d:5a:db:2f:81:12:9d:58:36:c9:a4:83: 47:29:f7:9a:b8:4c:5e:8d:a6:49:f4:fc:b4:de:39:67:78:34: c0:56:2a:38:e8:1c:0c:38:17:4c:86:b2:7d:4b:4c:3b:aa:44: 66:3c:79:27:d7:13:2f:45:92:9f:a7:92:03:f1:46:3d:a3:64: 74:16:89:d7:43:18:6f:91:9d:4c:bf:4f:8c:12:b6:8f:f9:85: ee:9a:dd:5c:42:13:00:1b:54:11:2d:92:48:ac:e1:d4:e2:f9: 4c:08:75:6b:1d:5d:20:6c:26:be:dd:a3:7f:67:6b:f8:45:ac: 61:c2:52:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBQSKRwfysTyMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk NWI2NjU2YzItYjEwNy00YjRmLTk4YTUtMzFjNWFhYTM4ODNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA245LHNTSbekqf/8C1seT6R6M2mQCMEbCKkw9 2rroDxId5kKIRdekMSelKHyA0XChcXgx0omxZ/U7ZDWg+XaQbABDHmN0qXAckc7b yKWE1DsTHP+Ya47BN0RonB3Ta6Y5onxviyzs1PyUcDRwpsUCbvTtMz9ONerSV7fG o4YEaZwVVi+Y9vYTduHBu+StPDdsUi7h/HBtomZw+S3vr9tnGnqezPo6yqDLRYpp FwXq32vfGqF1w1jhyexDh+2t89vj06mqTI4yu4FPexOQIrcIiuJIt6vu0SWcgXer O/3kVQaha5sMQzi0ydL2G/qN5pNwKRy6PRVnBDLJAH8RDtA8pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK3QEAe1QXHJvPpKm4kywKuIshjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNGEzN2NjMzQtNTk0OS0z NmY1LThkODQtMGZjZmFmNWIzZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2HFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGoCZKaxzUDWmhmtq5ybJZCq9ObNUE3ZZX7+0rdMAXcVPG7PKMYzySQ cptwcK5lwHfS9qt5/Qgz2lCGHvXMTYXf2AbHnlzHhrxdfWIspN+JpU9QTKfBfwql ePlChZIR/2KH1vssKlvO3dHKGZtxuHLM2KqMyvXDOdj5FyR4NXDL9138EG1a2y+B Ep1YNsmkg0cp95q4TF6Npkn0/LTeOWd4NMBWKjjoHAw4F0yGsn1LTDuqRGY8eSfX Ey9Fkp+nkgPxRj2jZHQWiddDGG+RnUy/T4wSto/5he6a3VxCEwAbVBEtkkis4dTi +UwIdWsdXSBsJr7do39na/hFrGHCUl4= -----END CERTIFICATE-----Generated at Fri Apr 11 23:27:12 2025 by rpki-client