$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa File: 7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa (raw, json) Hash identifier: 844BKdtMEGuGQRN8dklnTZRQemer76SnqbV6No8Yjvg= Subject key identifier: C1:B3:E1:83:B5:06:86:85:73:87:C2:AF:62:08:39:3E:CB:70:9B:3E Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584937D939AA8A15CC4DF958CB40 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 398210 IP address blocks: 168.220.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:39:aa:8a:15:cc:4d:f9:58:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=2cb91eb2-adea-4aaa-bf6c-b7be7c80acc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b3:6c:33:5d:47:0b:37:78:89:20:4c:67:37: ef:e0:03:ee:4c:bc:dc:48:6c:73:71:f8:7d:65:3c: d1:82:6b:d3:e1:84:17:a7:93:0a:fd:1b:f5:52:71: cd:74:4e:1b:4f:a8:42:b5:bf:fb:60:4e:3b:2e:ed: 86:22:71:80:95:b2:7b:cf:aa:a7:75:36:09:59:53: 23:fe:31:1c:e5:b7:79:d2:19:c6:99:3b:ab:de:b4: 80:0a:67:1b:22:9f:5c:22:e5:06:4d:f8:1a:f0:fe: 91:b7:cd:be:52:f4:c4:6a:e5:22:35:15:33:64:c6: d3:e5:10:73:e1:66:e6:97:62:cd:c0:4e:7f:f8:1c: 16:10:66:d2:54:4d:00:a4:82:a7:b9:63:51:a6:f6: fd:72:1c:e3:95:a4:ec:0f:ae:d3:fc:f8:c2:61:ae: e0:00:57:73:48:ac:4c:9b:8a:a8:15:4b:61:06:9b: f4:81:24:c2:67:f1:f8:6f:c0:59:6d:0f:aa:32:36: 81:f4:7a:0f:e0:7c:ad:40:50:28:be:4b:65:ae:b4: d1:0c:3f:e0:c9:e4:e0:03:1a:65:43:ad:12:da:f1: 11:5d:06:6c:75:5a:fb:9d:83:38:ed:b1:64:ab:5e: 4c:dc:b1:88:c4:10:c8:0e:7d:0e:54:cb:d8:96:64: f6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B3:E1:83:B5:06:86:85:73:87:C2:AF:62:08:39:3E:CB:70:9B:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:0f:85:2f:25:a1:22:f7:b9:33:56:c0:f1:d7:ac:60:d8:3f: 25:75:ca:38:de:e3:cd:05:fb:e4:d6:11:ec:81:f6:f4:f3:43: 11:e1:22:1f:a4:8e:1a:c3:71:f1:5c:fa:bd:d0:30:24:84:7d: 57:c1:06:6b:55:15:a3:e2:1c:2b:75:0c:e2:63:e5:74:b2:6b: d6:ff:4d:51:0f:06:db:9e:07:fb:68:e9:76:70:c6:1c:6c:6d: 23:85:f1:6f:7a:68:79:e0:aa:61:88:39:a7:dc:a1:bd:14:47: 5e:e2:4c:a9:a8:b9:9c:94:11:6a:75:71:6d:c8:fc:1a:5a:5c: 88:d0:5b:09:37:b0:c9:4a:f5:7c:18:ea:0f:14:37:65:bb:b7: 47:de:93:5e:7a:f9:b4:22:fb:8b:68:a3:c0:31:08:a4:d0:56: 1b:8d:42:06:69:b5:9c:a0:4d:7a:cc:30:b4:a5:14:85:32:35: 1a:7a:7a:37:2e:ac:dd:b3:39:37:58:2b:9c:f3:70:50:cd:b5: 8c:45:cd:3f:8d:aa:b2:a5:bb:30:c1:a8:54:69:bf:75:2a:e8: 1d:e9:e3:f7:19:41:5f:ac:2f:59:c9:27:82:7e:57:71:f6:2c: c6:36:58:ce:c0:8f:bb:c4:d9:9b:46:2e:d0:64:77:22:c4:ba: 51:fc:62:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TmqihXMTflYy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk MmNiOTFlYjItYWRlYS00YWFhLWJmNmMtYjdiZTdjODBhY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7NsM11HCzd4iSBMZzfv4APuTLzcSGxzcfh9 ZTzRgmvT4YQXp5MK/Rv1UnHNdE4bT6hCtb/7YE47Lu2GInGAlbJ7z6qndTYJWVMj /jEc5bd50hnGmTur3rSACmcbIp9cIuUGTfga8P6Rt82+UvTEauUiNRUzZMbT5RBz 4Wbml2LNwE5/+BwWEGbSVE0ApIKnuWNRpvb9chzjlaTsD67T/PjCYa7gAFdzSKxM m4qoFUthBpv0gSTCZ/H4b8BZbQ+qMjaB9HoP4HytQFAovktlrrTRDD/gyeTgAxpl Q60S2vERXQZsdVr7nYM47bFkq15M3LGIxBDIDn0OVMvYlmT2RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGz4YO1BoaFc4fCr2IIOT7LcJs+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvNzYxMmIxN2EtMmQ3Mi0z OGYwLWJmMGUtOGY4ZDg0MWY0MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqNygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMPhS8loSL3uTNWwPHXrGDYPyV1yjje480F++TWEeyB9vTzQxHhIh+k jhrDcfFc+r3QMCSEfVfBBmtVFaPiHCt1DOJj5XSya9b/TVEPBtueB/to6XZwxhxs bSOF8W96aHngqmGIOafcob0UR17iTKmouZyUEWp1cW3I/BpaXIjQWwk3sMlK9XwY 6g8UN2W7t0fek156+bQi+4too8AxCKTQVhuNQgZptZygTXrMMLSlFIUyNRp6ejcu rN2zOTdYK5zzcFDNtYxFzT+NqrKluzDBqFRpv3Uq6B3p4/cZQV+sL1nJJ4J+V3H2 LMY2WM7Aj7vE2ZtGLtBkdyLEulH8YnM= -----END CERTIFICATE-----Generated at Sat Apr 12 13:49:45 2025 by rpki-client