$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa File: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (raw, json) Hash identifier: c8W4mUEwymiiuUv2IgnZEghwnpQVBYoIf0TLvwj7jVw= Subject key identifier: 61:F8:04:42:77:2E:76:89:A8:6D:B9:0F:68:E9:52:0E:FD:B8:B2:A3 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F432858495C243ED6E499A1B48D39FB80 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 21902 IP address blocks: 64.110.16.0/21 maxlen: 21 108.163.68.0/22 maxlen: 22 216.189.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 19 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3e:d6:e4:99:a1:b4:8d:39:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=7d5b5449-2fa2-44ff-8a6a-726afcbcb021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:bf:03:42:23:83:6a:bf:07:0e:e4:c9:6d: 22:19:96:5c:c7:ad:6f:83:b1:16:e9:9c:46:59:88: 1a:b2:9b:2a:96:dc:c6:a6:8f:da:14:0c:b1:4a:67: 5e:59:db:a1:18:d2:68:2e:bb:f9:36:fa:b1:e8:06: 10:ec:b2:bf:72:38:91:cb:90:18:cf:d0:c3:f8:60: ac:b3:08:a0:09:44:69:75:c7:cf:45:87:e4:d2:00: 93:88:d8:d8:f9:35:1f:48:cf:1c:93:1d:44:6b:aa: e3:1f:10:5d:12:a2:dd:50:9e:60:a7:ef:a4:09:72: d2:fe:87:42:bd:04:a2:56:0d:9b:a6:3b:ff:02:ea: a5:e6:68:45:ff:06:ee:a1:4f:23:65:8e:bf:73:26: d8:32:99:29:36:b9:04:a0:ea:bc:c6:f7:c0:f4:dd: 1a:99:54:2d:42:31:9d:5e:ee:6d:ae:0a:af:9a:a6: d8:36:08:d9:aa:d2:f2:41:44:3f:13:f2:63:d5:c1: fd:6c:dd:a3:95:09:2a:20:2b:48:14:cc:b2:b8:85: b3:fc:c7:d4:85:6f:53:f8:a6:f3:66:11:52:b6:9a: 20:ed:06:06:78:18:a5:5c:3d:38:35:16:c3:df:58: e5:e7:13:27:5b:7b:58:5c:1f:88:f0:31:a7:ab:39: 50:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:04:42:77:2E:76:89:A8:6D:B9:0F:68:E9:52:0E:FD:B8:B2:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: 64.110.16.0/21 108.163.68.0/22 216.189.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f4:1e:8c:fe:60:d1:b1:a0:22:d7:44:0a:80:39:4b:57:76: f6:25:cb:dd:16:5c:4c:d4:bb:a9:02:23:c8:a8:7f:c1:96:69: d1:88:27:6e:cf:8b:5c:6b:80:33:5f:2b:47:5f:a1:48:6d:65: f6:6c:a0:40:00:4b:f9:c3:3f:33:83:1f:78:e0:ea:a5:8c:1f: 11:9a:9f:c0:8b:eb:ab:af:a2:23:0b:c3:a2:94:5f:ce:0b:10: 54:8a:6e:6c:48:5e:bd:af:0a:df:1c:e1:e0:74:27:4a:02:47: c5:79:60:dc:eb:8a:c5:56:2d:e1:3f:cb:e8:3e:33:e9:44:a1: bc:28:55:45:a4:21:5a:06:0e:f3:b0:90:ef:7a:6a:6a:ae:41: 45:b6:a8:d2:74:7a:3f:85:03:9e:52:a1:b1:43:15:ac:ca:f9: ae:17:d7:24:c3:19:d9:e0:7c:f3:f2:e6:39:a6:67:8e:28:f9: b9:ae:08:5b:6b:e6:41:ab:f6:66:fc:ba:42:c7:98:3f:cc:1a: ad:33:d1:51:10:99:99:6c:8a:8e:e0:80:03:2e:4b:4d:1d:db: a4:89:42:b3:6b:d3:a5:98:fa:16:87:a4:21:d1:31:b7:8d:d5: 2a:ca:de:5e:12:df:40:7c:91:d5:88:cb:23:b4:10:93:fa:b7: 9f:d4:70:22 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWElcJD7W5JmhtI05+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk N2Q1YjU0NDktMmZhMi00NGZmLThhNmEtNzI2YWZjYmNiMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0C/A0Ijg2q/Bw7kyW0iGZZcx61vg7EW6ZxG WYgaspsqltzGpo/aFAyxSmdeWduhGNJoLrv5Nvqx6AYQ7LK/cjiRy5AYz9DD+GCs swigCURpdcfPRYfk0gCTiNjY+TUfSM8ckx1Ea6rjHxBdEqLdUJ5gp++kCXLS/odC vQSiVg2bpjv/Auql5mhF/wbuoU8jZY6/cybYMpkpNrkEoOq8xvfA9N0amVQtQjGd Xu5trgqvmqbYNgjZqtLyQUQ/E/Jj1cH9bN2jlQkqICtIFMyyuIWz/MfUhW9T+Kbz ZhFStpog7QYGeBilXD04NRbD31jl5xMnW3tYXB+I8DGnqzlQzQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFGH4BEJ3LnaJqG25D2jpUg79uLKjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvNjViMWFkMzYtY2JlOS0z NzcxLTljOTYtZTcwMDc0NGU2OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG4QAwQC bKNEAwQE2L2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGL0Hoz+YNGxoCLXRAqAOUtXdvYly90WXEzUu6kC I8iof8GWadGIJ27Pi1xrgDNfK0dfoUhtZfZsoEAAS/nDPzODH3jg6qWMHxGan8CL 66uvoiMLw6KUX84LEFSKbmxIXr2vCt8c4eB0J0oCR8V5YNzrisVWLeE/y+g+M+lE obwoVUWkIVoGDvOwkO96amquQUW2qNJ0ej+FA55SobFDFazK+a4X1yTDGdngfPPy 5jmmZ44o+bmuCFtr5kGr9mb8ukLHmD/MGq0z0VEQmZlsio7ggAMuS00d26SJQrNr 06WY+haHpCHRMbeN1SrK3l4S30B8kdWIyyO0EJP6t5/UcCI= -----END CERTIFICATE-----Generated at Fri Apr 18 07:52:26 2025 by rpki-client