$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa File: a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa (raw, json) Hash identifier: NsJ4cRF8MJcVv37bv7qVBUvuZ0vIaz+2A9IAn5hDPQc= Subject key identifier: F3:74:8A:80:0B:A3:99:DB:D7:A2:AC:B9:D5:46:E6:56:B1:5F:FF:D7 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F432858491246ADCF1506311F8E6441A0 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 394111 IP address blocks: 206.72.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ad:cf:15:06:31:1f:8e:64:41:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=46ccd34b-a167-465d-929d-a823275e3e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:26:1f:ef:02:1b:58:ee:55:cb:0c:95:37:2b: 29:a6:a5:ab:78:1c:68:9a:2b:5e:94:c6:7f:b1:f9: cf:24:01:ab:55:66:4d:68:d4:bf:04:74:09:95:e0: 00:d1:32:6d:f7:50:e9:50:c6:f8:dd:6e:8e:94:f1: a5:5f:e1:fb:2f:c2:b8:0e:dc:df:a8:94:39:e5:14: 04:a0:ea:ca:d6:a4:64:90:ee:20:a6:17:a7:25:0b: 89:21:65:51:19:3e:00:20:66:4c:f9:92:12:36:0d: e7:da:74:a9:00:3c:b5:80:44:49:fe:b1:a5:85:f4: fa:28:6d:56:89:f3:e5:b0:f8:45:5b:d7:c0:8f:6c: f2:55:b7:66:45:f5:69:1f:47:93:65:d8:07:a0:52: f7:63:b5:75:27:e5:57:e3:01:ec:59:61:e4:c9:1d: dc:4d:7f:76:8a:d7:20:32:e9:84:1d:f6:cf:ad:2f: 0d:e5:6b:b2:1e:8a:4b:83:88:91:f4:be:fe:6f:63: 71:bb:36:2a:98:cd:80:b8:a7:47:32:33:65:81:4c: e4:43:8c:4a:9c:b3:67:c9:f2:fa:75:2a:e1:8f:1d: 28:bd:eb:0a:12:d1:1f:ed:c5:db:c1:d4:90:11:33: fe:a7:0c:ed:76:ba:07:b0:ac:f9:5d:fd:07:a1:75: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:74:8A:80:0B:A3:99:DB:D7:A2:AC:B9:D5:46:E6:56:B1:5F:FF:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a463cdbc-f02a-3f9c-a824-9c3e57ef99cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 206.72.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:6d:e5:8f:7d:3d:e7:4b:2f:4d:4e:66:1f:6d:4a:ce:fd:bf: ef:e2:f2:ad:47:77:ad:1a:cd:69:2e:3a:35:34:8a:1d:14:5a: 1b:8b:14:6f:37:93:51:7f:38:93:c7:62:07:f3:73:3d:03:98: 34:b4:4a:2d:b9:d3:d4:c9:9c:93:66:43:89:32:dd:d9:d5:c0: da:ee:5f:52:16:90:f7:e2:ef:d3:ea:c2:8c:41:c0:70:25:24: 43:3e:d4:e8:27:ad:e2:21:6e:8d:6b:27:ee:95:18:44:14:1d: 45:ed:4b:9f:75:a4:34:32:9d:57:4b:08:2c:1b:f3:68:ce:3c: 01:51:58:3b:39:3f:ce:f0:e7:7d:6c:6b:18:6e:31:2e:74:55: 1a:33:ad:a1:33:43:30:13:25:41:8c:fe:cf:23:87:81:82:ae: a4:c1:2a:c5:8d:ca:e2:a3:9b:fe:81:00:44:11:9e:0e:25:17: f5:06:df:81:67:b9:cb:86:f6:12:de:53:12:30:25:6b:7f:89: b7:25:ad:c5:57:33:60:e7:60:48:9a:c2:5a:19:34:cd:c5:fe: 00:44:92:fa:5c:ba:b5:16:0d:5b:da:e4:a2:0e:77:37:e3:b8: 18:4d:ea:41:10:df:1f:0a:c6:c6:8c:fc:51:5b:57:5b:70:e7: b9:7c:be:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRq3PFQYxH45kQaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NDZjY2QzNGItYTE2Ny00NjVkLTkyOWQtYTgyMzI3NWUzZTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SYf7wIbWO5VywyVNysppqWreBxomitelMZ/ sfnPJAGrVWZNaNS/BHQJleAA0TJt91DpUMb43W6OlPGlX+H7L8K4DtzfqJQ55RQE oOrK1qRkkO4gphenJQuJIWVRGT4AIGZM+ZISNg3n2nSpADy1gERJ/rGlhfT6KG1W ifPlsPhFW9fAj2zyVbdmRfVpH0eTZdgHoFL3Y7V1J+VX4wHsWWHkyR3cTX92itcg MumEHfbPrS8N5WuyHopLg4iR9L7+b2NxuzYqmM2AuKdHMjNlgUzkQ4xKnLNnyfL6 dSrhjx0ovesKEtEf7cXbwdSQETP+pwztdroHsKz5Xf0HoXWwFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN0ioALo5nb16KsudVG5laxX//XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYTQ2M2NkYmMtZjAyYS0z ZjljLWE4MjQtOWMzZTU3ZWY5OWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFt5Y99PedLL01OZh9tSs79v+/i8q1Hd60azWkuOjU0ih0UWhuLFG83 k1F/OJPHYgfzcz0DmDS0Si2509TJnJNmQ4ky3dnVwNruX1IWkPfi79PqwoxBwHAl JEM+1OgnreIhbo1rJ+6VGEQUHUXtS591pDQynVdLCCwb82jOPAFRWDs5P87w531s axhuMS50VRozraEzQzATJUGM/s8jh4GCrqTBKsWNyuKjm/6BAEQRng4lF/UG34Fn ucuG9hLeUxIwJWt/ibclrcVXM2DnYEiawloZNM3F/gBEkvpcurUWDVva5KIOdzfj uBhN6kEQ3x8KxsaM/FFbV1tw57l8vpQ= -----END CERTIFICATE-----Generated at Sat Apr 12 13:37:40 2025 by rpki-client