$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/cb9c15d8-67e5-3b4e-a6dc-7e8a5cd8ad7d.roa File: cb9c15d8-67e5-3b4e-a6dc-7e8a5cd8ad7d.roa (raw, json) Hash identifier: imIhsvCwVJjaGlDTMv0Yaj4aa5drygTHD2TKtF564HE= Subject key identifier: DB:7E:3A:6A:94:FE:A5:94:46:4B:E9:21:38:1A:B0:EF:67:6C:AD:BF Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F43285848ADC61AC59792BEF45B728C20 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/cb9c15d8-67e5-3b4e-a6dc-7e8a5cd8ad7d.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 13536 IP address blocks: 216.114.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:1a:c5:97:92:be:f4:5b:72:8c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=f277adee-9672-4e01-8326-e768a8832ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:c6:d1:d5:b8:8d:13:d2:df:db:e8:fe:4c: ff:10:48:73:24:34:11:10:be:c8:11:49:45:d1:52: ef:77:49:84:26:33:db:cf:77:3f:2d:02:12:f8:bc: 16:9c:db:b7:52:22:ff:c2:5a:97:48:fd:2b:1a:bc: a7:d9:73:7e:26:68:8a:68:e7:03:f9:24:de:47:43: 66:37:27:20:b1:e2:27:42:ee:22:a0:10:b1:63:97: 87:ae:70:86:b7:2c:7d:71:9d:be:9b:59:4a:e8:bb: 91:42:c1:17:ce:43:c7:62:5f:c4:cf:ba:cf:f9:d1: f3:58:52:16:6e:32:56:d2:7f:16:4c:e6:ac:49:78: 0f:c7:a8:91:0b:ed:37:5d:5b:de:f1:be:bd:b1:ec: 6f:55:19:7b:01:fc:86:b2:d0:b0:b1:b6:3f:81:35: b0:a0:07:d4:14:c8:99:8c:ef:03:a3:2f:9d:ba:72: 4a:42:9c:d8:24:47:6b:69:91:5b:54:27:57:5c:ab: d9:1c:b6:db:48:73:9d:7e:c7:f2:f1:9e:6e:cf:4b: 7f:4e:44:fc:8d:2b:9e:6b:3c:f6:38:86:b2:bd:cb: 31:9e:cf:39:9a:0c:83:44:09:96:56:0e:91:ad:96: ed:fb:80:5c:82:eb:d7:ff:a9:30:7c:86:ec:4e:66: 72:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7E:3A:6A:94:FE:A5:94:46:4B:E9:21:38:1A:B0:EF:67:6C:AD:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/cb9c15d8-67e5-3b4e-a6dc-7e8a5cd8ad7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:09:2c:83:38:d7:5e:bb:50:78:8c:8d:36:82:cc:a8:a4:93: d9:ff:31:fb:5f:8d:8c:ca:9f:37:c7:ae:83:7f:ff:9e:1c:3f: fc:db:73:13:50:1e:61:d0:d9:9e:46:db:4d:98:9d:25:32:f3: 75:93:1f:37:b7:82:50:46:30:14:ee:dd:d7:d5:3e:d5:34:66: 3d:1a:d0:53:8b:31:15:e2:7c:3b:8f:4c:cb:10:fb:a0:14:42: c9:d8:d1:b3:a2:2d:9b:d4:b0:be:0c:30:51:e1:7c:70:67:ea: 1b:21:fd:00:72:4e:43:15:35:9e:45:73:dc:08:08:29:32:2e: 20:a8:f7:5a:30:82:0d:41:22:8b:a9:d6:d8:b3:92:58:b8:fa: a3:96:91:ef:08:f6:3b:49:85:1e:b4:91:da:75:b6:30:ca:51: e3:5f:23:3a:77:55:12:17:91:00:db:4e:d5:f9:c0:57:74:01: c4:77:d9:60:b7:c0:67:3e:30:8e:62:96:fb:c8:35:a3:29:ab: 8b:0a:bb:f1:ed:04:c3:f1:d6:e5:34:72:5e:93:c0:30:5f:08: 91:ad:61:40:52:40:9d:12:54:6d:a6:2b:23:f3:1b:cb:11:45: 68:04:89:c8:bd:c3:3c:6a:99:c9:2f:a4:53:1d:76:72:7f:f5: 2f:bb:df:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhrFl5K+9FtyjCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjI3N2FkZWUtOTY3Mi00ZTAxLTgzMjYtZTc2OGE4ODMyYmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6XG0dW4jRPS39vo/kz/EEhzJDQREL7IEUlF 0VLvd0mEJjPbz3c/LQIS+LwWnNu3UiL/wlqXSP0rGryn2XN+JmiKaOcD+STeR0Nm NycgseInQu4ioBCxY5eHrnCGtyx9cZ2+m1lK6LuRQsEXzkPHYl/Ez7rP+dHzWFIW bjJW0n8WTOasSXgPx6iRC+03XVve8b69sexvVRl7AfyGstCwsbY/gTWwoAfUFMiZ jO8Doy+dunJKQpzYJEdraZFbVCdXXKvZHLbbSHOdfsfy8Z5uz0t/TkT8jSueazz2 OIayvcsxns85mgyDRAmWVg6RrZbt+4BcguvX/6kwfIbsTmZyiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNt+OmqU/qWURkvpITgasO9nbK2/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvY2I5YzE1ZDgtNjdlNS0z YjRlLWE2ZGMtN2U4YTVjZDhhZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HKSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMJLIM41167UHiMjTaCzKikk9n/MftfjYzKnzfHroN//54cP/zbcxNQ HmHQ2Z5G202YnSUy83WTHze3glBGMBTu3dfVPtU0Zj0a0FOLMRXifDuPTMsQ+6AU QsnY0bOiLZvUsL4MMFHhfHBn6hsh/QByTkMVNZ5Fc9wICCkyLiCo91owgg1BIoup 1tizkli4+qOWke8I9jtJhR60kdp1tjDKUeNfIzp3VRIXkQDbTtX5wFd0AcR32WC3 wGc+MI5ilvvINaMpq4sKu/HtBMPx1uU0cl6TwDBfCJGtYUBSQJ0SVG2mKyPzG8sR RWgEici9wzxqmckvpFMddnJ/9S+73wc= -----END CERTIFICATE-----Generated at Tue Apr 8 18:17:10 2025 by rpki-client