$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa File: acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa (raw, json) Hash identifier: psISS8oTrvGp98qpd8gulu5BJR1F9GZ9/hMr6wMnfRI= Subject key identifier: 9A:F6:95:BF:FE:53:DA:9C:7A:B3:70:EB:D7:82:EF:BE:0E:3A:36:E0 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584961B991CC7078D6841ED45B00 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 13536 IP address blocks: 208.20.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:91:cc:70:78:d6:84:1e:d4:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=df56c972-e70f-453b-963b-433752265c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:4f:ab:88:89:6d:6b:49:e2:62:18:33:74: 7c:47:e2:3a:bb:10:65:63:c2:cb:f8:9c:b4:ed:aa: fa:18:68:3b:e9:1f:34:f8:87:92:21:a5:94:02:2e: f9:30:be:46:d2:ac:eb:7e:bb:4b:94:aa:36:d0:1d: dd:9b:54:06:b3:48:8a:9b:47:94:90:24:6f:c9:4a: 67:60:0a:31:7a:dc:b6:10:d2:9b:07:3b:f9:65:ed: 0b:64:2e:bd:ec:1e:c0:3c:57:7b:bc:52:73:87:30: f3:7c:0e:08:7b:9e:67:30:b5:f0:86:e7:b1:00:b0: 4d:b9:54:81:d5:9f:4c:d9:cb:fa:ae:2c:fa:6c:79: b0:00:67:46:d7:7b:48:a5:72:47:45:12:51:c1:4f: c3:44:2d:d8:ce:6d:61:68:bb:71:2b:df:1d:68:f2: 75:b2:20:b4:4f:1b:3e:b2:d8:a5:01:a7:80:8d:2b: 16:e4:bf:d9:a3:c8:d5:8e:73:27:97:d9:a1:4e:45: 37:24:7c:92:3c:2f:79:a3:34:f6:30:8d:09:1a:e7: 12:fe:35:6f:c6:04:25:3d:2e:7a:ce:fe:09:25:41: 7a:e1:58:09:d0:6c:c5:92:9e:86:e4:0f:5f:87:6f: 24:5d:85:21:66:96:33:be:78:77:4f:f3:c2:f5:4a: f9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F6:95:BF:FE:53:DA:9C:7A:B3:70:EB:D7:82:EF:BE:0E:3A:36:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/acf0070a-bcf1-31f7-b9b5-03e6b40f4c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:70:37:50:14:46:59:ed:14:41:d0:41:bd:7a:29:52:ca:a9: df:e3:8b:8e:41:b1:9a:79:a3:6d:9f:8d:57:fc:6f:da:2a:c6: 3f:0c:7d:8c:ae:fb:42:b8:ce:ed:11:90:91:ef:8e:9f:9c:20: 49:b4:04:85:a1:d2:92:72:2d:63:92:5d:1c:16:74:81:fb:ec: a3:86:65:63:ba:bb:4b:81:0b:de:ec:24:e5:46:23:43:ec:9b: 3f:27:32:fc:97:48:ed:09:9f:ce:ea:47:87:e2:b7:8f:31:55: 0e:6f:c4:92:c9:76:ec:f7:95:70:05:e4:cc:ec:08:57:9b:f0: 00:01:75:b6:9f:52:02:ce:95:e3:2f:d5:f1:5d:cc:22:54:50: fa:f8:17:ff:00:2a:cf:19:92:f0:4c:e1:77:d4:3e:b9:64:8b: 57:7f:63:bc:5a:92:01:eb:88:53:17:67:71:83:14:55:6f:e5: c9:60:ff:c1:66:fd:ef:76:1a:e6:36:76:70:0a:3c:e3:53:4e: 4d:64:c8:af:95:45:c0:a9:4e:36:bb:70:b0:88:70:fa:64:23: 06:d1:b1:f9:ba:31:1e:14:38:d8:61:29:44:e6:89:b8:b4:1f: 9c:1d:de:cc:f2:66:f0:c4:c9:7b:99:9d:73:ba:ea:dc:8f:9b: db:b8:11:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZHMcHjWhB7UWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZGY1NmM5NzItZTcwZi00NTNiLTk2M2ItNDMzNzUyMjY1Yzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltVPq4iJbWtJ4mIYM3R8R+I6uxBlY8LL+Jy0 7ar6GGg76R80+IeSIaWUAi75ML5G0qzrfrtLlKo20B3dm1QGs0iKm0eUkCRvyUpn YAoxety2ENKbBzv5Ze0LZC697B7APFd7vFJzhzDzfA4Ie55nMLXwhuexALBNuVSB 1Z9M2cv6riz6bHmwAGdG13tIpXJHRRJRwU/DRC3Yzm1haLtxK98daPJ1siC0Txs+ stilAaeAjSsW5L/Zo8jVjnMnl9mhTkU3JHySPC95ozT2MI0JGucS/jVvxgQlPS56 zv4JJUF64VgJ0GzFkp6G5A9fh28kXYUhZpYzvnh3T/PC9Ur50QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJr2lb/+U9qcerNw69eC774OOjbgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYWNmMDA3MGEtYmNmMS0z MWY3LWI5YjUtMDNlNmI0MGY0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBwN1AURlntFEHQQb16KVLKqd/ji45BsZp5o22fjVf8b9oqxj8MfYyu +0K4zu0RkJHvjp+cIEm0BIWh0pJyLWOSXRwWdIH77KOGZWO6u0uBC97sJOVGI0Ps mz8nMvyXSO0Jn87qR4fit48xVQ5vxJLJduz3lXAF5MzsCFeb8AABdbafUgLOleMv 1fFdzCJUUPr4F/8AKs8ZkvBM4XfUPrlki1d/Y7xakgHriFMXZ3GDFFVv5clg/8Fm /e92GuY2dnAKPONTTk1kyK+VRcCpTja7cLCIcPpkIwbRsfm6MR4UONhhKUTmibi0 H5wd3szyZvDEyXuZnXO66tyPm9u4Efk= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:44 2025 by rpki-client