$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e4600f8-1d1d-3717-86b7-2ceee3105bdd.roa File: 1e4600f8-1d1d-3717-86b7-2ceee3105bdd.roa (raw, json) Hash identifier: XxKgcDfsUhhTd0vkQVXg6gMtwPShJ+nmEgQfM6eHtGI= Subject key identifier: AA:5E:A5:61:65:D1:02:77:1B:4A:71:99:0D:67:36:B5:4C:0A:41:A1 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858497DA471DF969A392072FDF780 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e4600f8-1d1d-3717-86b7-2ceee3105bdd.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 15320 IP address blocks: 216.238.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:71:df:96:9a:39:20:72:fd:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=31c41f90-e347-4fad-a05a-59bda8f63a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:af:db:e0:75:45:ef:d0:39:a4:50:c8:6f:24: 8a:d3:11:7e:51:30:e2:3b:bd:d3:33:9e:5e:ea:fe: 91:71:ae:24:22:4f:90:a5:e3:6f:74:7c:35:97:cd: e4:cb:d9:c1:6e:f9:a0:72:3a:8c:68:fa:00:12:36: d2:0f:9c:fe:19:f7:c1:97:29:eb:ca:01:f8:ee:5b: 14:56:c8:82:e7:91:79:10:65:da:88:0c:38:f3:1d: 7c:4a:c3:02:1f:65:48:fa:31:a0:cf:1d:0c:75:ff: 61:bf:8f:83:44:ec:38:ee:95:0c:47:c4:f4:43:3d: bc:29:f4:af:cd:97:8b:71:d0:80:ae:93:73:44:ab: de:fa:52:1a:da:31:ba:61:73:53:29:7c:e7:c2:ab: e4:3c:0a:06:6d:fb:8b:43:44:76:ee:7b:13:04:ee: cd:3f:aa:72:da:37:22:9b:db:6c:d7:81:0e:2b:49: 50:a9:5e:45:74:25:b1:65:d5:3d:ed:d1:86:41:c3: 7f:13:eb:7f:11:d0:87:66:38:dc:c4:12:5f:68:2d: df:6d:bd:e6:b4:06:0b:47:cb:81:af:ff:49:ef:c5: 28:4d:bf:e8:2a:33:04:f3:4a:1e:1a:2c:2e:22:46: 67:cc:f1:12:e8:dc:1e:b2:ae:ab:b5:55:a2:dd:d4: 04:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5E:A5:61:65:D1:02:77:1B:4A:71:99:0D:67:36:B5:4C:0A:41:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e4600f8-1d1d-3717-86b7-2ceee3105bdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.238.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:77:5b:af:0e:e6:0e:fc:4b:91:03:97:5b:ea:6a:9c:a2:5d: 6e:ee:1e:6c:38:33:60:8d:26:9b:a8:55:89:ff:22:77:e9:88: b5:f2:cb:f0:89:2f:b4:1f:d2:ab:2c:d4:ae:66:4e:0a:e3:d2: 88:56:d9:ee:c9:64:10:70:8f:b0:92:ad:c9:09:a6:1a:d7:e2: 90:b5:9a:bd:80:3d:38:f1:ee:7e:3d:b9:5a:ba:d5:8b:ea:69: 2f:ec:c2:5e:4e:af:7b:d8:d6:e1:cb:81:a8:dd:4e:56:6e:f1: ca:ec:a5:ef:b0:ff:bf:06:41:15:97:2b:85:f0:af:78:8b:eb: 8e:89:a2:19:54:9f:ea:31:21:17:21:f1:3a:cb:20:40:8a:3b: 29:62:53:a4:b5:ae:ef:a6:4c:48:39:cb:59:98:2b:b6:2c:a7: 1b:75:1a:73:a5:69:eb:ce:48:ca:43:eb:75:f3:d6:af:b4:14: 40:3b:db:2b:17:36:ed:e6:ac:fa:5a:02:ed:61:62:40:14:b3: cc:1f:ed:90:e9:f7:e0:27:9d:50:32:83:03:99:d5:2d:0a:86: fc:61:3b:6e:77:d7:04:49:6f:91:1c:17:5c:ab:9d:db:0a:d3: 94:e2:9e:75:90:9d:3d:18:e5:ee:98:80:20:a0:cd:9e:06:1f: cb:ea:db:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHHflpo5IHL994AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MzFjNDFmOTAtZTM0Ny00ZmFkLWEwNWEtNTliZGE4ZjYzYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q/b4HVF79A5pFDIbySK0xF+UTDiO73TM55e 6v6Rca4kIk+QpeNvdHw1l83ky9nBbvmgcjqMaPoAEjbSD5z+GffBlynrygH47lsU VsiC55F5EGXaiAw48x18SsMCH2VI+jGgzx0Mdf9hv4+DROw47pUMR8T0Qz28KfSv zZeLcdCArpNzRKve+lIa2jG6YXNTKXznwqvkPAoGbfuLQ0R27nsTBO7NP6py2jci m9ts14EOK0lQqV5FdCWxZdU97dGGQcN/E+t/EdCHZjjcxBJfaC3fbb3mtAYLR8uB r/9J78UoTb/oKjME80oeGiwuIkZnzPES6Nwesq6rtVWi3dQEjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpepWFl0QJ3G0pxmQ1nNrVMCkGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMWU0NjAwZjgtMWQxZC0z NzE3LTg2YjctMmNlZWUzMTA1YmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2O6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJd3W68O5g78S5EDl1vqapyiXW7uHmw4M2CNJpuoVYn/InfpiLXyy/CJ L7Qf0qss1K5mTgrj0ohW2e7JZBBwj7CSrckJphrX4pC1mr2APTjx7n49uVq61Yvq aS/swl5Or3vY1uHLgajdTlZu8crspe+w/78GQRWXK4Xwr3iL646JohlUn+oxIRch 8TrLIECKOyliU6S1ru+mTEg5y1mYK7Yspxt1GnOlaevOSMpD63Xz1q+0FEA72ysX Nu3mrPpaAu1hYkAUs8wf7ZDp9+AnnVAygwOZ1S0KhvxhO2531wRJb5EcF1yrndsK 05TinnWQnT0Y5e6YgCCgzZ4GH8vq21s= -----END CERTIFICATE-----Generated at Fri Apr 11 23:55:37 2025 by rpki-client