$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa File: 0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa (raw, json) Hash identifier: w7NUsSsHTTFZzg59SJkE8TTFRRee0EbzXEea8udYUrw= Subject key identifier: 33:A4:93:FF:AB:25:08:57:A7:8F:B7:1E:A3:5E:C3:81:E0:30:42:1A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285848A1361B64389EB0BBB5178040 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 21547 IP address blocks: 64.140.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1b:64:38:9e:b0:bb:b5:17:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=2162bce2-75a6-4093-951a-72771f2935a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:75:a4:7f:c2:da:52:af:70:0e:23:08:14:cd: 05:15:c6:3a:56:7e:8f:16:94:24:fb:32:e9:1f:b1: 40:b2:ee:4d:1a:3c:34:12:2e:39:d4:3f:eb:4f:67: b0:e1:d0:e7:47:1d:fc:78:3e:78:ba:e6:08:92:d5: 0b:d2:db:74:eb:db:28:a5:fb:e1:3a:55:d5:f0:e8: a2:ef:9d:d9:fa:13:b6:87:98:9f:51:b8:05:6e:b8: 2f:dc:17:be:e3:32:05:b2:6c:af:b9:d5:5e:57:78: 7f:89:e4:19:3d:0f:82:80:33:dc:e0:b2:e0:b2:02: e3:8a:36:e7:cd:ae:5e:32:8d:98:12:2c:b5:f1:2d: 61:43:48:8d:8e:35:75:a2:f7:11:95:fb:f6:74:48: 3d:f5:ce:b1:18:23:da:ed:0c:67:cf:1e:93:db:7d: c2:ec:ab:64:da:0b:99:7a:ce:d9:e6:8d:81:5c:ec: 9f:6d:45:7b:24:7f:1e:5f:fa:58:b3:70:13:b9:53: 58:b8:d8:e9:0e:32:5e:08:5c:4d:c6:2d:93:49:8b: d4:e1:0d:fd:df:ca:8f:2b:89:d3:d8:ae:0b:29:ef: 30:fa:d0:1e:d5:45:fa:25:5a:82:bd:6b:f8:2f:62: fe:99:f3:37:b4:a6:4e:f7:75:1f:d8:d2:d5:e2:62: 3e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A4:93:FF:AB:25:08:57:A7:8F:B7:1E:A3:5E:C3:81:E0:30:42:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/0dbd03a0-5eda-3bf5-b902-bd2fa3e314d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 64.140.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:dc:4c:4c:50:b5:c0:61:e5:82:5a:10:1b:af:56:79:1b:88: e1:f2:dd:92:6b:bd:90:bd:3e:cf:b3:41:8f:74:01:ef:0e:fd: 9e:87:d7:8e:a7:27:af:b0:8d:bb:43:71:d7:02:af:23:b1:11: dd:e3:a1:f4:d3:61:b5:b4:7d:30:49:51:1a:d2:03:ac:78:1e: f8:b7:23:74:99:03:ba:1d:6b:a7:02:ad:13:13:85:b5:7e:e3: 28:5d:ce:90:d8:5d:c4:7a:aa:9b:20:ac:d3:b9:02:7e:07:4a: 96:5b:48:c0:ea:43:29:af:8a:27:aa:e7:9d:f3:25:6c:6d:7e: f0:9f:8a:79:9e:af:ad:48:59:e1:1a:f3:66:96:e0:f4:dd:1a: 1b:a8:54:0b:ee:9d:82:ea:bc:62:b0:8e:c7:b5:6a:f7:1a:f1: 38:6b:8b:0b:55:da:f3:23:5d:9e:13:13:70:03:10:b1:43:2f: 37:96:91:43:ff:53:f7:37:eb:70:71:93:e0:f2:03:5b:ae:66: f0:bb:da:ed:e5:ac:c7:ab:41:42:1d:14:0c:bf:06:74:2c:7e: c0:06:a1:7b:09:d5:44:d3:b6:b3:cf:da:d4:df:0d:26:b1:c1: 36:bc:4c:9b:e9:18:e9:1e:df:20:f6:d1:14:fb:06:e4:2a:50: 85:7f:2f:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhtkOJ6wu7UXgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk MjE2MmJjZTItNzVhNi00MDkzLTk1MWEtNzI3NzFmMjkzNWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXWkf8LaUq9wDiMIFM0FFcY6Vn6PFpQk+zLp H7FAsu5NGjw0Ei451D/rT2ew4dDnRx38eD54uuYIktUL0tt069sopfvhOlXV8Oii 753Z+hO2h5ifUbgFbrgv3Be+4zIFsmyvudVeV3h/ieQZPQ+CgDPc4LLgsgLjijbn za5eMo2YEiy18S1hQ0iNjjV1ovcRlfv2dEg99c6xGCPa7Qxnzx6T233C7Ktk2guZ es7Z5o2BXOyfbUV7JH8eX/pYs3ATuVNYuNjpDjJeCFxNxi2TSYvU4Q3938qPK4nT 2K4LKe8w+tAe1UX6JVqCvWv4L2L+mfM3tKZO93Uf2NLV4mI+tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOkk/+rJQhXp4+3HqNew4HgMEIaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMGRiZDAzYTAtNWVkYS0z YmY1LWI5MDItYmQyZmEzZTMxNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQIzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfcTExQtcBh5YJaEBuvVnkbiOHy3ZJrvZC9Ps+zQY90Ae8O/Z6H146n J6+wjbtDcdcCryOxEd3jofTTYbW0fTBJURrSA6x4Hvi3I3SZA7oda6cCrRMThbV+ 4yhdzpDYXcR6qpsgrNO5An4HSpZbSMDqQymviieq553zJWxtfvCfinmer61IWeEa 82aW4PTdGhuoVAvunYLqvGKwjse1avca8ThriwtV2vMjXZ4TE3ADELFDLzeWkUP/ U/c363Bxk+DyA1uuZvC72u3lrMerQUIdFAy/BnQsfsAGoXsJ1UTTtrPP2tTfDSax wTa8TJvpGOke3yD20RT7BuQqUIV/Lzs= -----END CERTIFICATE-----Generated at Fri Apr 11 23:51:54 2025 by rpki-client