$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa File: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (raw, json) Hash identifier: PtYNIh8X9g5aEHWFJfRx0RLGasXye5JAvDiVC09y7g0= Subject key identifier: 2D:25:79:A2:D0:62:DD:4D:CA:0C:AE:A6:CC:9E:E9:A5:81:DA:21:4D Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F43285849287E5E5C71A0B9C37E01E500 Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 33040 IP address blocks: 199.48.216.0/21 maxlen: 21 2605:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:5e:5c:71:a0:b9:c3:7e:01:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=4dc0617c-9401-4562-b3e3-7bbe7ec288ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:68:84:de:7c:59:d6:9b:40:76:8e:d6:70:61: 9c:aa:53:42:9f:bd:54:08:2a:8e:a6:d3:e5:1f:96: a4:86:55:8a:c0:7b:2b:a6:b9:92:4a:8f:d7:6a:db: 8a:89:57:82:4b:b4:df:3c:8a:30:93:ff:8a:46:dc: 80:50:bc:c7:b2:d6:8c:ae:71:58:13:36:1b:79:ae: 1a:5c:34:b3:ac:77:6b:29:40:17:d6:6c:67:a6:96: 6e:3b:d2:ce:16:98:4f:58:90:40:a1:37:00:5c:6d: 8c:64:e2:13:c2:0a:71:81:7d:88:bd:48:12:92:ec: 8b:75:a6:09:98:00:a2:4d:8f:5e:79:00:a0:16:27: 22:95:25:62:58:a4:a6:b8:38:92:a5:ca:f6:0e:1c: 2b:f8:5a:7e:b2:d3:cd:64:57:9c:8a:9c:82:da:f2: de:05:8d:54:a6:58:a1:5e:59:94:5e:2d:ec:1a:fe: 57:3b:e1:3d:88:67:5a:56:00:75:6a:8b:81:c6:dc: a3:b9:ad:33:77:ff:8d:71:57:56:3f:94:c5:33:39: 05:ef:65:2d:c7:7f:52:4b:66:e3:9e:5f:0a:c2:34: 97:d1:8c:cf:56:be:17:d4:28:aa:86:cf:32:42:46: 09:0b:93:31:0f:f8:75:e5:3b:a7:8e:1d:d2:37:e4: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:25:79:A2:D0:62:DD:4D:CA:0C:AE:A6:CC:9E:E9:A5:81:DA:21:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: 199.48.216.0/21 IPv6: 2605:3d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f9:c4:b1:b8:9f:40:29:dc:cb:b1:1e:43:12:e1:23:e4:d9: 9a:d6:6f:9f:2c:00:ab:46:e6:44:91:ca:a0:ed:83:16:57:08: 3a:4f:f6:65:84:51:bf:f7:0a:6f:e0:69:30:01:c4:08:ba:1c: 82:3f:86:88:95:98:3d:21:fd:f1:73:f8:9e:d8:0c:63:6d:04: ee:41:9e:61:d3:7d:fd:13:21:b8:d3:f9:f4:82:07:bf:e0:fd: 89:d7:ab:65:eb:f9:2c:d1:9c:dc:b4:22:41:2d:77:03:92:73: be:f9:0b:70:4b:f5:e4:7d:b9:2e:ab:c9:af:5e:86:62:59:79: 50:35:24:91:14:ae:88:bc:de:8c:bf:fc:8e:7e:cf:c1:aa:8b: 4c:eb:1e:c7:a0:e9:ed:b9:b2:1f:9f:ab:76:80:b1:db:7b:42: ef:90:78:8a:6d:6d:05:72:de:83:22:ce:3e:0d:5c:41:7a:ba: 51:5d:2d:c2:bd:a8:ef:42:22:7c:02:e8:a0:0c:5e:a8:ff:ea: 2c:05:03:15:23:da:99:87:ac:83:fe:58:23:77:13:ef:de:3f: ec:f1:d2:e9:f1:70:d2:0b:b3:b5:21:7b:6f:b2:f5:a2:21:aa: 45:87:fb:73:80:0a:fd:8d:22:96:2a:ce:af:7c:fd:6c:f5:1a: 37:96:8f:87 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEkofl5ccaC5w34B5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk NGRjMDYxN2MtOTQwMS00NTYyLWIzZTMtN2JiZTdlYzI4OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2iE3nxZ1ptAdo7WcGGcqlNCn71UCCqOptPl H5akhlWKwHsrprmSSo/XatuKiVeCS7TfPIowk/+KRtyAULzHstaMrnFYEzYbea4a XDSzrHdrKUAX1mxnppZuO9LOFphPWJBAoTcAXG2MZOITwgpxgX2IvUgSkuyLdaYJ mACiTY9eeQCgFicilSViWKSmuDiSpcr2Dhwr+Fp+stPNZFecipyC2vLeBY1Uplih XlmUXi3sGv5XO+E9iGdaVgB1aouBxtyjua0zd/+NcVdWP5TFMzkF72Utx39SS2bj nl8KwjSX0YzPVr4X1Ciqhs8yQkYJC5MxD/h15Tunjh3SN+R6kwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFC0leaLQYt1Nygyupsye6aWB2iFNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjM4NDllOGEtMzc5YS0z MGU3LWFhZWYtOGQ4NzQ2Yjk5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxzDYMA0E AgACMAcDBQAmBT1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACb5xLG4n0Ap3MuxHkMS4SPk2ZrWb58sAKtG 5kSRyqDtgxZXCDpP9mWEUb/3Cm/gaTABxAi6HII/hoiVmD0h/fFz+J7YDGNtBO5B nmHTff0TIbjT+fSCB7/g/YnXq2Xr+SzRnNy0IkEtdwOSc775C3BL9eR9uS6rya9e hmJZeVA1JJEUroi83oy//I5+z8Gqi0zrHseg6e25sh+fq3aAsdt7Qu+QeIptbQVy 3oMizj4NXEF6ulFdLcK9qO9CInwC6KAMXqj/6iwFAxUj2pmHrIP+WCN3E+/eP+zx 0unxcNILs7Uhe2+y9aIhqkWH+3OACv2NIpYqzq98/Wz1GjeWj4c= -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:07 2025 by rpki-client