$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa File: 2bbd8a46-2cba-38a1-8529-1accbb01208c.roa (raw, json) Hash identifier: ogzpD2JrCW0rlGMuFXCiOGybZwC0ckAQH/qi6H8sjYQ= Subject key identifier: 84:2A:EE:43:92:46:16:4D:05:9B:17:7D:95:C6:9A:51:71:A8:7A:BB Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584937D93924A2992495A60E5040 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 398210 IP address blocks: 168.220.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:39:24:a2:99:24:95:a6:0e:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=0a74c982-33bf-450b-94a4-b4a3f5aad9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:75:4c:d1:ac:17:be:1a:52:92:b4:5b:ba: b4:ec:58:0d:74:0b:53:ef:a7:1b:50:55:a2:28:c1: d7:b3:47:11:5e:9f:95:f0:8f:04:14:7e:17:4e:e0: 81:88:16:a6:79:96:3a:08:95:1a:5b:e1:86:ac:eb: 57:40:9c:12:40:eb:85:98:91:14:ee:0f:d5:20:12: 7d:ba:bf:66:0f:bf:ce:8e:9a:b5:73:c9:a8:35:ba: 7b:83:91:9e:c5:08:ef:fe:4a:f4:c2:dc:5f:de:a9: d6:8e:5e:a1:30:ce:28:81:19:d4:70:77:a2:b7:32: e2:52:c4:d4:7c:0b:c2:07:c1:0b:88:b4:d8:2e:41: ca:c4:1d:28:06:95:bf:bc:85:e6:08:c9:6c:e4:94: 35:4d:7f:0f:66:62:18:fd:ca:63:a7:a9:32:04:64: f9:ac:2e:56:34:1d:67:f5:3f:5e:06:6c:67:e3:ad: c2:e1:7e:d7:c5:95:3a:db:11:5e:3b:5e:4d:38:a7: 25:8b:a0:95:f1:bd:6c:1a:c5:05:2b:a3:02:64:fe: aa:36:8b:d3:a6:13:e1:ef:bb:21:24:64:d8:27:60: 6f:80:f4:8a:ee:fd:86:7d:a0:6c:04:b4:51:ca:6f: d8:7e:78:83:68:38:66:ea:0b:8a:e9:4b:ab:39:5e: a9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2A:EE:43:92:46:16:4D:05:9B:17:7D:95:C6:9A:51:71:A8:7A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/2bbd8a46-2cba-38a1-8529-1accbb01208c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3f:fc:db:21:46:f7:ef:54:43:9f:84:29:34:9e:54:19:e3: 47:d3:fc:77:2e:70:32:75:9a:69:7e:d1:81:22:64:00:1d:8a: b9:bd:68:f2:93:ec:31:7f:77:ad:28:5e:85:fa:c8:9e:21:34: 7b:73:80:ff:47:cd:75:ad:9f:90:d8:92:ed:f9:3f:94:f4:4a: ff:48:5c:c2:5a:01:98:6f:32:a3:fb:6d:c3:24:af:99:fd:d2: cd:2c:43:e4:42:64:11:7f:9a:f8:2c:13:04:31:55:68:f6:39: 38:2d:9d:53:ba:2f:26:4d:b2:06:a2:9e:82:1a:1d:df:29:09: 46:03:b8:11:bb:72:a5:80:f9:fa:7f:b7:9d:66:80:5a:ff:07: 7d:79:ca:b9:03:90:72:f1:10:31:a8:ad:b5:3e:8e:ea:a5:16: eb:ee:ea:d5:dc:3f:90:e2:83:54:cc:8e:36:79:d1:5e:02:37: b3:98:ea:d7:c6:ea:90:3d:cb:9c:fe:de:d1:ba:db:60:19:a5: d9:e6:37:c9:89:96:31:f5:17:e2:8e:cc:0c:35:c8:aa:e5:50: 12:14:46:91:0c:62:24:3f:b9:9b:09:c6:6a:65:34:1a:6e:d0: d2:33:b3:1d:ec:27:fd:ef:93:8c:4a:6c:92:92:ae:fb:b4:27: f7:88:fd:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TkkopkklaYOUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk MGE3NGM5ODItMzNiZi00NTBiLTk0YTQtYjRhM2Y1YWFkOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiw91TNGsF74aUpK0W7q07FgNdAtT76cbUFWi KMHXs0cRXp+V8I8EFH4XTuCBiBameZY6CJUaW+GGrOtXQJwSQOuFmJEU7g/VIBJ9 ur9mD7/Ojpq1c8moNbp7g5GexQjv/kr0wtxf3qnWjl6hMM4ogRnUcHeitzLiUsTU fAvCB8ELiLTYLkHKxB0oBpW/vIXmCMls5JQ1TX8PZmIY/cpjp6kyBGT5rC5WNB1n 9T9eBmxn463C4X7XxZU62xFeO15NOKcli6CV8b1sGsUFK6MCZP6qNovTphPh77sh JGTYJ2BvgPSK7v2GfaBsBLRRym/YfniDaDhm6guK6UurOV6pmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQq7kOSRhZNBZsXfZXGmlFxqHq7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMmJiZDhhNDYtMmNiYS0z OGExLTg1MjktMWFjY2JiMDEyMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqNyzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc//NshRvfvVEOfhCk0nlQZ40fT/HcucDJ1mml+0YEiZAAdirm9aPKT 7DF/d60oXoX6yJ4hNHtzgP9HzXWtn5DYku35P5T0Sv9IXMJaAZhvMqP7bcMkr5n9 0s0sQ+RCZBF/mvgsEwQxVWj2OTgtnVO6LyZNsgainoIaHd8pCUYDuBG7cqWA+fp/ t51mgFr/B315yrkDkHLxEDGorbU+juqlFuvu6tXcP5Dig1TMjjZ50V4CN7OY6tfG 6pA9y5z+3tG622AZpdnmN8mJljH1F+KOzAw1yKrlUBIURpEMYiQ/uZsJxmplNBpu 0NIzsx3sJ/3vk4xKbJKSrvu0J/eI/SA= -----END CERTIFICATE-----Generated at Sat Apr 12 14:02:42 2025 by rpki-client