$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/abf35ee1-4bf3-3a10-9b1b-187524745ba3.roa File: abf35ee1-4bf3-3a10-9b1b-187524745ba3.roa (raw, json) Hash identifier: NCVSR85vPiAe85F4lk8C+kpuBHYEzB4mtxjQW14eKSg= Subject key identifier: 63:13:5A:84:67:1D:35:32:D8:71:4D:D8:40:66:AF:08:8A:A8:BD:E0 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285848A99628211668BBFC12021AA0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/abf35ee1-4bf3-3a10-9b1b-187524745ba3.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397311 IP address blocks: 216.59.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:28:21:16:68:bb:fc:12:02:1a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=dcb014d3-478c-42d7-ab0f-eece61c65658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:e7:a7:4c:a1:d2:8b:e8:99:82:92:a7:13: c9:1d:b4:ea:94:84:de:99:7c:6f:bc:fe:cd:69:69: cd:2b:65:b5:37:86:31:39:8e:90:87:c1:65:6b:ae: db:d4:00:64:0c:c6:d3:3d:c9:25:c2:cf:48:ba:03: 76:bb:eb:fc:c4:d8:44:c9:32:63:8f:f6:b9:4a:4e: 1f:7b:3e:ef:fb:cf:b8:c1:e0:33:b6:b7:51:ca:5d: 49:b0:01:74:52:92:97:a9:b9:49:2e:b2:5c:fd:02: 6f:64:24:fc:a8:77:15:79:52:81:b8:aa:da:cc:b9: 62:05:1c:67:0c:e7:8a:53:a4:48:ab:cc:f8:20:b6: 24:be:36:69:68:f7:1f:b9:bb:83:87:f6:fb:40:ad: f0:8b:3e:02:9e:b2:3d:fa:59:2f:18:50:e0:11:04: 24:43:8f:fe:91:6a:f0:d3:d0:dc:06:94:cb:be:da: 22:fc:55:48:3f:74:16:97:1d:dc:fb:e0:93:d8:f0: 5d:b2:19:93:79:f4:03:b3:4a:d1:ae:3c:6c:4c:e1: 1d:ec:9d:9d:64:fa:63:5d:9a:a8:b6:cb:69:09:39: ef:cb:fb:f8:a6:1b:6d:31:90:30:36:3f:8d:d1:9b: ab:02:9a:8f:d1:86:1d:9f:d6:d6:97:37:33:23:cf: 88:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:5A:84:67:1D:35:32:D8:71:4D:D8:40:66:AF:08:8A:A8:BD:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/abf35ee1-4bf3-3a10-9b1b-187524745ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:31:91:0d:42:a9:64:1f:a5:cf:3c:f8:e1:5d:0a:94:95:b5: 81:51:56:48:42:22:65:f7:5a:e7:e2:92:c1:8e:e4:b8:27:13: cd:84:45:a0:05:96:32:f0:b1:ae:3f:25:66:8e:a3:56:7e:2c: dd:e0:68:c6:7e:06:a3:cb:4c:90:46:f1:89:06:9d:04:fe:9a: b6:55:94:e4:bb:76:c2:a0:42:70:a2:69:05:f5:dc:bf:8b:4e: fb:76:72:66:73:cd:20:e3:68:46:a8:2e:2b:ab:08:e3:85:89: 5e:1e:96:7d:89:38:83:de:c8:85:ff:97:9c:a8:2e:e1:96:33: 99:d3:c7:3a:62:21:22:a9:4c:75:15:ab:21:3e:8e:be:1b:98: 24:c0:0e:9b:41:72:d5:76:b8:a3:14:77:4f:d4:67:fd:45:5a: 15:e7:a3:c9:70:6d:0f:46:09:83:2b:02:0c:35:52:19:ba:f9: 5a:cc:ec:c7:56:01:d8:e5:6d:31:0c:3c:14:d2:ab:a8:b5:99: 2e:81:0b:97:c2:30:36:e9:19:86:d8:a6:bc:c1:cb:3a:14:25: 40:1a:14:81:a6:09:6c:71:7c:37:a9:b1:ec:d8:48:7b:29:7c: 23:50:48:4a:43:19:14:39:a8:aa:3d:8f:cb:6e:5d:ee:18:8a: 81:90:c4:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplighFmi7/BICGqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGNiMDE0ZDMtNDc4Yy00MmQ3LWFiMGYtZWVjZTYxYzY1NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBvnp0yh0ovomYKSpxPJHbTqlITemXxvvP7N aWnNK2W1N4YxOY6Qh8Fla67b1ABkDMbTPcklws9IugN2u+v8xNhEyTJjj/a5Sk4f ez7v+8+4weAztrdRyl1JsAF0UpKXqblJLrJc/QJvZCT8qHcVeVKBuKrazLliBRxn DOeKU6RIq8z4ILYkvjZpaPcfubuDh/b7QK3wiz4CnrI9+lkvGFDgEQQkQ4/+kWrw 09DcBpTLvtoi/FVIP3QWlx3c++CT2PBdshmTefQDs0rRrjxsTOEd7J2dZPpjXZqo tstpCTnvy/v4phttMZAwNj+N0ZurApqP0YYdn9bWlzczI8+IhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMTWoRnHTUy2HFN2EBmrwiKqL3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYWJmMzVlZTEtNGJmMy0z YTEwLTliMWItMTg3NTI0NzQ1YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DtBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMxkQ1CqWQfpc88+OFdCpSVtYFRVkhCImX3WufiksGO5LgnE82ERaAF ljLwsa4/JWaOo1Z+LN3gaMZ+BqPLTJBG8YkGnQT+mrZVlOS7dsKgQnCiaQX13L+L Tvt2cmZzzSDjaEaoLiurCOOFiV4eln2JOIPeyIX/l5yoLuGWM5nTxzpiISKpTHUV qyE+jr4bmCTADptBctV2uKMUd0/UZ/1FWhXno8lwbQ9GCYMrAgw1Uhm6+VrM7MdW AdjlbTEMPBTSq6i1mS6BC5fCMDbpGYbYprzByzoUJUAaFIGmCWxxfDepsezYSHsp fCNQSEpDGRQ5qKo9j8tuXe4YioGQxFk= -----END CERTIFICATE-----Generated at Fri Apr 11 23:47:56 2025 by rpki-client