$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a929555f-9352-337b-a8b7-403f6d57c296.roa File: a929555f-9352-337b-a8b7-403f6d57c296.roa (raw, json) Hash identifier: DAkKtfOGE5bxWFah66vZvffvNPEsP4o0jlUncnm5F2E= Subject key identifier: 0A:77:45:BB:C1:B5:D3:81:D2:20:51:73:F5:5C:6D:21:77:83:42:A3 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584913AC1CC667CC8BE6867C3880 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a929555f-9352-337b-a8b7-403f6d57c296.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 394111 IP address blocks: 172.97.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1c:c6:67:cc:8b:e6:86:7c:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=b264b437-7565-4134-8e5b-beda6897af90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:49:f3:16:ca:5f:01:f6:76:33:92:54:0f:9f: 25:58:fc:a4:fa:30:fb:47:e2:95:4c:75:ac:a9:90: 73:42:42:21:00:cf:9e:72:c6:02:6b:21:3f:c0:12: bb:e2:aa:d7:b9:40:01:70:91:6c:2f:54:26:b7:68: d6:9a:d9:9e:60:46:34:bf:80:44:d3:da:ee:ff:62: a8:dc:51:d3:5e:6b:c6:1d:2d:92:d0:58:1c:0d:c4: 83:e6:02:ad:e6:8c:d7:9d:28:1a:2c:9a:75:34:ff: 2b:b7:41:c9:f8:e5:5a:dd:cc:67:34:b1:6b:f7:17: c4:37:a0:7d:69:7b:0a:8c:d3:5a:96:75:55:9d:6e: 48:ce:34:a8:eb:42:08:c5:ea:46:9c:56:8f:0a:a3: 18:4f:2d:d6:cc:0c:72:6a:18:d7:9c:ff:34:89:01: f1:c4:8d:4c:59:0c:c3:24:6d:2e:25:ea:f2:fe:21: 39:36:87:27:db:5f:a5:c9:5b:be:e3:58:58:ca:20: 42:0e:3e:7c:83:20:f6:70:80:b4:95:4f:74:f2:be: 00:b9:6a:e3:a3:fb:88:cb:6e:ba:c9:f6:a4:ca:78: 55:6e:14:4e:67:5c:f9:41:7d:e1:5a:ac:5c:83:d9: d3:c0:fc:59:92:2f:14:8e:a5:b1:ca:88:d4:50:c7: b7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:77:45:BB:C1:B5:D3:81:D2:20:51:73:F5:5C:6D:21:77:83:42:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/a929555f-9352-337b-a8b7-403f6d57c296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 172.97.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:69:c2:36:9f:76:1f:e9:45:2a:55:0d:dc:f3:14:80:aa:02: f4:ce:5e:2d:32:57:1e:1e:67:6a:14:51:eb:7d:65:76:93:92: 40:9c:67:09:93:01:20:c9:6b:19:d2:f0:78:88:1b:5a:fc:29: 29:99:3b:33:7a:86:bc:8f:c4:f5:15:55:92:17:ac:cb:9f:66: 0b:30:7f:d5:b5:19:63:49:aa:3c:d7:71:84:24:46:f3:79:3d: 6d:29:a8:2e:cd:cf:ba:7a:b3:7d:39:74:d8:4b:e1:a2:ca:8a: 52:01:8b:16:b0:d1:10:fd:5f:77:d0:61:22:43:3d:c4:e4:0f: db:5d:38:b3:e6:48:ed:69:4f:7f:58:5c:d2:06:75:6f:00:90: 45:c4:e3:a7:99:1f:72:27:2a:16:32:4b:69:f9:1f:33:99:34: 78:7f:74:b8:2e:eb:79:6a:10:21:07:96:93:4a:c0:d3:cf:42: 99:de:cd:b4:f7:e7:c2:74:0f:7c:5d:00:a2:9a:0b:ba:07:97: fd:aa:47:5c:f2:a0:1c:de:96:54:5a:42:c1:24:9e:85:36:a1: 26:c0:19:70:38:af:38:42:01:64:b1:97:67:75:1c:8a:42:42: 48:5f:c1:31:f2:4e:17:60:91:a0:83:e6:14:b7:bd:4c:88:dc: fc:17:ad:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBzGZ8yL5oZ8OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YjI2NGI0MzctNzU2NS00MTM0LThlNWItYmVkYTY4OTdhZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0nzFspfAfZ2M5JUD58lWPyk+jD7R+KVTHWs qZBzQkIhAM+ecsYCayE/wBK74qrXuUABcJFsL1Qmt2jWmtmeYEY0v4BE09ru/2Ko 3FHTXmvGHS2S0FgcDcSD5gKt5ozXnSgaLJp1NP8rt0HJ+OVa3cxnNLFr9xfEN6B9 aXsKjNNalnVVnW5IzjSo60IIxepGnFaPCqMYTy3WzAxyahjXnP80iQHxxI1MWQzD JG0uJery/iE5Nocn21+lyVu+41hYyiBCDj58gyD2cIC0lU908r4AuWrjo/uIy266 yfakynhVbhROZ1z5QX3hWqxcg9nTwPxZki8UjqWxyojUUMe3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAp3RbvBtdOB0iBRc/VcbSF3g0KjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYTkyOTU1NWYtOTM1Mi0z MzdiLWE4YjctNDAzZjZkNTdjMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErGEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNpwjafdh/pRSpVDdzzFICqAvTOXi0yVx4eZ2oUUet9ZXaTkkCcZwmT ASDJaxnS8HiIG1r8KSmZOzN6hryPxPUVVZIXrMufZgswf9W1GWNJqjzXcYQkRvN5 PW0pqC7Nz7p6s305dNhL4aLKilIBixaw0RD9X3fQYSJDPcTkD9tdOLPmSO1pT39Y XNIGdW8AkEXE46eZH3InKhYyS2n5HzOZNHh/dLgu63lqECEHlpNKwNPPQpnezbT3 58J0D3xdAKKaC7oHl/2qR1zyoBzellRaQsEknoU2oSbAGXA4rzhCAWSxl2d1HIpC QkhfwTHyThdgkaCD5hS3vUyI3PwXra4= -----END CERTIFICATE-----Generated at Sat Apr 12 13:57:02 2025 by rpki-client