$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa File: 791de0f2-89d2-3bf0-8407-e85b17cab367.roa (raw, json) Hash identifier: Ennb+twdugWVjoiCXbEf22sWH8wu192a0V3SBXbwWMY= Subject key identifier: DE:E2:16:97:6B:36:5F:11:11:FD:59:E8:DD:CC:3D:2D:28:2F:1E:A1 Certificate issuer: /CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Certificate serial: 010D0C9F43285849244E7B8A7E148B048244D096 Authority key identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16545 IP address blocks: 192.74.220.0/22 maxlen: 24 2602:ff80::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7b:8a:7e:14:8b:04:82:44:d0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=66507d34-5417-48e8-90f8-9a32407036ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e0:2d:68:27:3d:f9:a0:5c:f9:1f:3f:e3:84: b6:89:e4:e2:d2:d4:f3:cb:f9:5c:3d:75:86:8f:65: 8a:ab:6b:09:84:a5:b0:6a:0e:85:5d:61:9d:ca:89: 28:60:da:d7:b8:79:bc:85:49:3b:4f:d1:25:46:69: 3a:ba:79:86:76:7b:27:7f:bb:00:46:76:da:4c:87: d2:ef:fc:c4:e9:e9:84:ba:06:84:89:d8:4d:9f:00: 30:a6:be:63:f7:56:a3:9a:54:6b:bc:d4:25:80:cb: f5:d0:fd:6d:87:8d:40:1b:ea:75:f7:74:06:e3:54: 0b:6e:04:aa:fa:2a:d3:b3:19:b6:b8:3c:45:a8:39: 10:20:1b:6e:47:eb:55:14:91:1e:f2:c0:db:9b:5a: 58:cb:77:a8:d7:2c:24:a0:19:a3:64:af:e5:69:21: 18:84:92:00:dd:a6:69:1f:b3:48:60:d8:2a:3e:bb: f7:7e:4f:b2:e9:55:e5:36:bd:ae:14:b9:ea:ff:e5: e8:a1:1b:3e:22:77:f1:98:27:f0:40:3d:b6:2d:b7: 62:9a:6d:5b:fa:73:39:93:4d:5e:fa:2c:54:17:60: 40:01:46:64:03:24:e7:9e:cc:6f:26:af:36:f1:05: c1:a4:c6:fd:27:eb:69:c0:82:99:cb:d3:d8:19:94: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:E2:16:97:6B:36:5F:11:11:FD:59:E8:DD:CC:3D:2D:28:2F:1E:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/791de0f2-89d2-3bf0-8407-e85b17cab367.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.crl X509v3 Authority Key Identifier: keyid:67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.74.220.0/22 IPv6: 2602:ff80::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f2:18:2f:f3:e8:36:77:a9:20:d1:1e:36:a1:e0:09:66:11: b4:e1:71:73:42:5d:5a:a8:3c:b7:1e:68:44:7f:2e:d4:ec:93: 7d:0f:54:d9:cd:51:6a:9b:7b:33:a4:54:65:d5:45:b0:51:2d: 5c:44:15:5b:4e:06:83:fc:b1:80:e1:30:a0:e8:f2:23:19:86: f6:14:bd:71:0c:45:18:bf:58:66:79:95:2b:0b:b8:7e:f1:3e: 86:af:73:4d:51:2c:3d:25:b3:e1:29:f6:21:bf:b0:fa:7e:50: a2:0b:5e:fb:b4:77:1e:1c:91:ba:b6:f7:7e:15:aa:a8:d2:0b: 35:97:d0:e4:c3:87:09:56:08:a5:d0:11:c8:1d:22:68:00:1b: 32:60:df:a2:bf:0a:ad:44:8c:8f:80:6b:b7:e8:c9:d8:80:53: b6:65:3e:e2:23:ac:f5:bf:b1:9d:3c:9d:1f:20:87:65:73:28: 24:51:0f:c5:ea:26:d3:04:ae:73:dc:e0:69:bb:7c:4a:d5:50: 64:f3:87:33:6b:24:f6:f0:24:1f:8d:90:fd:6c:6e:ae:10:26: 6c:71:b0:4d:56:d7:61:26:9c:bb:ac:a1:57:dc:86:df:3c:f5: fe:8a:6b:d8:87:cd:8c:78:4e:6c:8b:a9:b2:17:fb:88:2a:76: c7:40:e2:76 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkkTnuKfhSLBIJE0JYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg0ZjkzNTAtZmMzZC00MjM5LTgwYmYtZGIxMGQyNDYy YTRmMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NjY1MDdkMzQtNTQxNy00OGU4LTkwZjgtOWEzMjQwNzAzNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeAtaCc9+aBc+R8/44S2ieTi0tTzy/lcPXWG j2WKq2sJhKWwag6FXWGdyokoYNrXuHm8hUk7T9ElRmk6unmGdnsnf7sARnbaTIfS 7/zE6emEugaEidhNnwAwpr5j91ajmlRrvNQlgMv10P1th41AG+p193QG41QLbgSq +irTsxm2uDxFqDkQIBtuR+tVFJEe8sDbm1pYy3eo1ywkoBmjZK/laSEYhJIA3aZp H7NIYNgqPrv3fk+y6VXlNr2uFLnq/+XooRs+InfxmCfwQD22Lbdimm1b+nM5k01e +ixUF2BAAUZkAyTnnsxvJq828QXBpMb9J+tpwIKZy9PYGZToRQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFN7iFpdrNl8REf1Z6N3MPS0oLx6hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kODRm OTM1MC1mYzNkLTQyMzktODBiZi1kYjEwZDI0NjJhNGYvNzkxZGUwZjItODlkMi0z YmYwLTg0MDctZTg1YjE3Y2FiMzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDg0ZjkzNTAtZmMzZC00MjM5LTgw YmYtZGIxMGQyNDYyYTRmL2Q4NGY5MzUwLWZjM2QtNDIzOS04MGJmLWRiMTBkMjQ2 MmE0Zi5jcmwwHwYDVR0jBBgwFoAUZxr5I5VUwfZBlQs+fBHfIlookIswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kODRmOTM1MC1mYzNkLTQyMzktODBiZi1kYjEw ZDI0NjJhNGYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCwErcMA4E AgACMAgDBgQmAv+AADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBq8hgv8+g2d6kg0R42oeAJZhG04XFzQl1a qDy3HmhEfy7U7JN9D1TZzVFqm3szpFRl1UWwUS1cRBVbTgaD/LGA4TCg6PIjGYb2 FL1xDEUYv1hmeZUrC7h+8T6Gr3NNUSw9JbPhKfYhv7D6flCiC177tHceHJG6tvd+ Faqo0gs1l9Dkw4cJVgil0BHIHSJoABsyYN+ivwqtRIyPgGu36MnYgFO2ZT7iI6z1 v7GdPJ0fIIdlcygkUQ/F6ibTBK5z3OBpu3xK1VBk84czayT28CQfjZD9bG6uECZs cbBNVtdhJpy7rKFX3IbfPPX+imvYh82MeE5si6myF/uIKnbHQOJ2 -----END CERTIFICATE-----Generated at Sat Apr 12 00:28:35 2025 by rpki-client