$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa File: 2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa (raw, json) Hash identifier: KJgOFDBBhvpT3to5hSzvUKJtZ8NR+q6e9mw9qFY0DbY= Subject key identifier: 52:DF:6D:0B:15:D6:3D:C4:F6:46:6B:AF:E5:91:A3:AC:14:DF:01:F9 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584900216F0102704A22A5BF70B8 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 13536 IP address blocks: 216.179.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:6f:01:02:70:4a:22:a5:bf:70:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=143b0af8-82f8-4898-ae81-00cc7213c0d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:1e:91:df:ba:63:9b:0f:df:f7:36:2f:ce: 3a:e5:f8:44:fb:d7:03:f4:91:23:1d:94:d9:cf:4b: 9d:d2:95:2b:3d:a8:6d:62:07:d0:76:71:49:a2:d0: ae:cf:d3:77:7e:48:36:04:51:90:11:ff:a7:9c:04: 3f:d6:30:cc:a1:b7:35:1a:35:ed:dd:6e:76:a5:e6: fe:36:19:77:b3:a4:e9:e3:b6:28:f4:92:16:6d:79: 0e:4d:7f:cc:ea:c9:30:80:ec:b4:61:a2:85:ba:b7: c1:ea:b1:ad:38:68:8a:e3:76:f9:dc:a8:54:28:b8: fe:64:65:f6:37:4b:2e:6f:46:c5:63:a0:5a:c8:d0: 13:0b:94:54:7d:1a:51:16:69:ab:24:d3:99:a3:7c: 89:1a:8b:d8:10:69:63:e9:ab:06:ac:79:26:ab:61: ec:b4:36:f9:29:4e:8a:f6:63:a2:ab:e4:88:f6:76: c5:c1:e2:ef:27:db:75:b7:78:8b:7d:64:0b:54:fb: 74:5f:31:c5:40:38:20:e1:ec:41:29:4d:8b:4b:4a: 78:e4:7b:92:5b:51:da:67:3a:28:91:83:18:ac:b1: 03:8f:24:4c:ff:98:d7:a8:41:e9:5f:5d:c4:4f:a9: f7:1d:75:4d:f7:75:e0:5e:83:79:3c:ab:9d:56:46: 4e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:6D:0B:15:D6:3D:C4:F6:46:6B:AF:E5:91:A3:AC:14:DF:01:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.179.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:74:30:3e:1e:5d:b5:53:95:c7:76:0f:91:20:d3:b0:38:f2: 15:e0:2e:52:37:2b:b0:ca:f3:fb:5f:02:0e:16:85:91:40:bc: 31:18:e4:c2:66:8c:8b:76:45:e7:14:79:b1:1d:3d:76:6a:ec: 6a:c8:99:5c:8a:be:2f:93:75:91:ce:ea:4f:d1:5a:d0:71:4e: f9:ad:6f:0c:f0:00:3b:2e:b0:f2:97:88:8c:59:bb:b8:53:fd: 59:8f:0e:87:75:3e:7e:ee:68:ce:bf:45:d5:63:d0:fc:74:64: 3d:dc:0b:1d:9f:15:10:af:a8:72:3d:2a:e3:a8:40:e3:77:ad: 49:ab:17:20:c9:51:78:ea:2d:86:86:82:0a:96:db:f9:0f:f9: a8:76:4c:f2:1b:ac:04:ee:a1:46:22:88:1a:47:24:50:15:9c: 15:c7:6f:db:cb:46:b9:bd:d1:d2:0f:06:a1:04:45:d1:55:04: 24:c7:c4:cc:27:7b:9f:fd:02:7c:fa:b9:e3:1d:11:34:38:6f: bc:85:5f:ff:f5:ca:dc:45:32:a1:9f:13:a2:7d:e9:32:11:01: fd:81:32:5b:45:64:f2:ea:47:fd:22:3a:a5:48:e5:65:6f:bb: 46:78:69:85:cb:ca:79:4b:5c:98:34:f9:1c:50:58:8d:5a:24: 24:bd:01:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIW8BAnBKIqW/cLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk MTQzYjBhZjgtODJmOC00ODk4LWFlODEtMDBjYzcyMTNjMGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyoekd+6Y5sP3/c2L8465fhE+9cD9JEjHZTZ z0ud0pUrPahtYgfQdnFJotCuz9N3fkg2BFGQEf+nnAQ/1jDMobc1GjXt3W52peb+ Nhl3s6Tp47Yo9JIWbXkOTX/M6skwgOy0YaKFurfB6rGtOGiK43b53KhUKLj+ZGX2 N0sub0bFY6BayNATC5RUfRpRFmmrJNOZo3yJGovYEGlj6asGrHkmq2HstDb5KU6K 9mOiq+SI9nbFweLvJ9t1t3iLfWQLVPt0XzHFQDgg4exBKU2LS0p45HuSW1HaZzoo kYMYrLEDjyRM/5jXqEHpX13ET6n3HXVN93XgXoN5PKudVkZOfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLfbQsV1j3E9kZrr+WRo6wU3wH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMjg5OWE3ZjctMjdjMi0z Y2Y2LWJiYmYtOGIwZTgzM2FlMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2LMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx0MD4eXbVTlcd2D5Eg07A48hXgLlI3K7DK8/tfAg4WhZFAvDEY5MJm jIt2RecUebEdPXZq7GrImVyKvi+TdZHO6k/RWtBxTvmtbwzwADsusPKXiIxZu7hT /VmPDod1Pn7uaM6/RdVj0Px0ZD3cCx2fFRCvqHI9KuOoQON3rUmrFyDJUXjqLYaG ggqW2/kP+ah2TPIbrATuoUYiiBpHJFAVnBXHb9vLRrm90dIPBqEERdFVBCTHxMwn e5/9Anz6ueMdETQ4b7yFX//1ytxFMqGfE6J96TIRAf2BMltFZPLqR/0iOqVI5WVv u0Z4aYXLynlLXJg0+RxQWI1aJCS9AZk= -----END CERTIFICATE-----Generated at Tue Apr 8 18:23:24 2025 by rpki-client