$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/0a16814a-bcd7-3c59-b9cb-d788cc70f5d0.roa File: 0a16814a-bcd7-3c59-b9cb-d788cc70f5d0.roa (raw, json) Hash identifier: ynxPpH7nlx/grICNiDvmkjTla/C1cDLaXkEbuikgo+Q= Subject key identifier: D9:F9:20:A3:2E:29:8C:A1:1C:25:23:84:F3:AC:4F:B6:15:A9:8F:CA Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F432858493243D8F48D93C2FEC0297018 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/0a16814a-bcd7-3c59-b9cb-d788cc70f5d0.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 88 IP address blocks: 204.153.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:d8:f4:8d:93:c2:fe:c0:29:70:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=38fdfaf3-29ff-44c5-b77c-d650117bf8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8e:39:96:2d:65:32:54:2b:2e:f2:11:b4:a7: 5d:a2:09:be:b7:ce:57:13:c4:73:34:46:d1:87:c4: 66:bf:a6:0a:bf:b0:4c:eb:e8:61:d4:a0:73:2e:44: d4:3e:1f:73:e0:de:2a:1e:76:cf:9f:ed:61:40:80: e8:04:c8:66:7c:7b:5f:ad:a5:42:f5:4c:f0:f3:12: 11:f2:41:bc:4b:95:d4:82:7f:4b:1c:f3:eb:5b:cf: 1a:e9:ac:d2:04:59:4b:84:7f:3a:5d:ea:38:ca:b2: 65:00:73:99:ad:e5:95:d5:3e:01:0e:d1:f9:16:62: 44:31:aa:e9:26:36:07:81:72:67:6d:d7:9c:04:aa: 6c:0b:ec:3e:52:8a:a4:f4:27:22:d5:88:dd:a9:58: ec:85:b9:df:f5:80:bc:77:53:83:cb:5a:3a:09:11: d3:3f:d6:2f:95:88:8c:a4:6b:6a:ef:7d:67:29:87: 40:0e:52:ff:6b:74:ef:1b:e4:c9:a1:a8:13:f4:95: 87:14:ce:e1:da:98:cc:74:df:16:b9:99:e1:0c:e8: a9:f3:84:87:c3:67:87:4a:30:bf:b8:2f:3e:2e:bc: 65:4a:c4:f7:11:59:d8:fa:57:39:c7:b9:b0:14:fb: 60:87:d2:1c:e4:55:e5:10:39:de:17:95:9e:6b:7e: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F9:20:A3:2E:29:8C:A1:1C:25:23:84:F3:AC:4F:B6:15:A9:8F:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/0a16814a-bcd7-3c59-b9cb-d788cc70f5d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:63:6b:39:ce:21:ee:13:5c:db:89:5a:28:a0:8c:f6:37:f8: e3:69:78:bd:a3:0b:4f:d1:fc:f8:53:4e:8c:fd:f2:4c:f8:38: d9:28:1b:85:97:be:1e:a0:c9:97:02:2d:03:f4:84:55:5c:01: ff:f4:62:cd:b2:1c:68:4b:d0:95:af:41:9b:d8:52:82:32:d2: 64:04:ce:9c:2f:c5:33:9c:ca:84:a8:a1:c1:08:d0:63:d4:ef: a5:8f:3e:74:5e:6f:6f:b1:0b:34:f9:b3:8a:9a:80:d3:c8:e6: a9:a8:18:ae:09:99:25:29:d7:65:de:ed:b9:bc:03:42:86:ed: d1:b8:6a:3b:28:e1:27:d9:23:d8:97:88:9b:03:ff:ea:45:89: cd:fb:10:43:da:a5:af:cb:d0:6e:16:72:35:9a:e7:cf:30:16: ed:21:54:e3:44:76:3d:bb:78:4c:3a:39:47:52:0e:68:ce:e0: e8:e3:21:cd:16:b2:78:29:89:0c:82:9d:54:23:9d:69:82:d5: 81:f8:97:3d:c4:ca:f8:16:c1:7d:76:06:20:00:85:c5:af:aa: b3:65:d9:87:66:78:56:6e:e6:67:e9:51:79:e3:b6:15:8f:0b: 4b:1d:d2:f7:7c:88:28:4c:ae:8f:d5:f6:f9:b0:68:7c:fd:71: 75:b1:2f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9j0jZPC/sApcBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk MzhmZGZhZjMtMjlmZi00NGM1LWI3N2MtZDY1MDExN2JmOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI45li1lMlQrLvIRtKddogm+t85XE8RzNEbR h8Rmv6YKv7BM6+hh1KBzLkTUPh9z4N4qHnbPn+1hQIDoBMhmfHtfraVC9Uzw8xIR 8kG8S5XUgn9LHPPrW88a6azSBFlLhH86Xeo4yrJlAHOZreWV1T4BDtH5FmJEMarp JjYHgXJnbdecBKpsC+w+Uoqk9Cci1YjdqVjshbnf9YC8d1ODy1o6CRHTP9YvlYiM pGtq731nKYdADlL/a3TvG+TJoagT9JWHFM7h2pjMdN8WuZnhDOip84SHw2eHSjC/ uC8+LrxlSsT3EVnY+lc5x7mwFPtgh9Ic5FXlEDneF5Wea34QCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn5IKMuKYyhHCUjhPOsT7YVqY/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvMGExNjgxNGEtYmNkNy0z YzU5LWI5Y2ItZDc4OGNjNzBmNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNjaznOIe4TXNuJWiigjPY3+ONpeL2jC0/R/PhTToz98kz4ONkoG4WX vh6gyZcCLQP0hFVcAf/0Ys2yHGhL0JWvQZvYUoIy0mQEzpwvxTOcyoSoocEI0GPU 76WPPnReb2+xCzT5s4qagNPI5qmoGK4JmSUp12Xe7bm8A0KG7dG4ajso4SfZI9iX iJsD/+pFic37EEPapa/L0G4WcjWa588wFu0hVONEdj27eEw6OUdSDmjO4OjjIc0W sngpiQyCnVQjnWmC1YH4lz3EyvgWwX12BiAAhcWvqrNl2YdmeFZu5mfpUXnjthWP C0sd0vd8iChMro/V9vmwaHz9cXWxL6c= -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:51 2025 by rpki-client