$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa File: 2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa (raw, json) Hash identifier: 5XOp1qCti/HoVlR5P6NLUPWqju9X/jOCTGl8PAdNJqg= Subject key identifier: BB:7A:D9:4C:4A:50:15:DA:94:48:27:92:B6:CF:AC:05:84:D2:6C:25 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285848CB1659D2139C74115605D610 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 33322 IP address blocks: 204.15.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:59:d2:13:9c:74:11:56:05:d6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=283bc167-2503-4ebb-9007-1a4d03364ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:37:c1:72:cf:f6:45:d0:18:4d:52:9c:67: 68:7d:4b:36:b6:21:2e:54:db:c6:8e:10:46:bd:d6: f1:56:f8:9d:12:b1:f5:7d:58:c0:0a:18:08:cc:b7: ff:1c:d9:47:71:54:c8:cb:33:69:49:1f:0f:08:fc: b7:70:b6:74:60:76:fe:19:a9:57:99:89:26:3a:11: 92:0c:28:78:46:be:00:4b:5d:0b:bc:50:d1:ee:b5: df:a1:bd:c2:89:6e:a2:d8:30:3f:4f:9f:7d:ee:ad: 7b:b0:8b:29:82:dd:89:fa:cb:cc:96:50:3b:9c:b1: e8:60:67:0d:ab:fe:b2:68:bd:5b:21:7e:38:2d:e4: d9:02:21:2e:0a:2a:3e:75:74:52:f0:c2:bd:79:9e: 87:c1:06:8a:be:4a:fa:8e:09:95:e0:ae:55:a8:65: 7e:e5:07:7d:0a:22:48:65:1f:7b:a3:bc:c6:d5:c1: c6:fe:60:f5:76:98:b4:23:32:82:1d:b3:a5:9c:a7: ea:69:04:2b:14:59:3f:a0:8c:1a:5a:73:d4:d9:b9: 96:97:02:02:67:2f:d3:b5:48:5d:34:e5:68:40:dc: cf:2b:7b:4f:7b:93:72:94:d3:50:91:34:2c:10:62: 14:18:81:3a:4d:3f:21:aa:85:5b:81:d7:4c:cc:77: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7A:D9:4C:4A:50:15:DA:94:48:27:92:B6:CF:AC:05:84:D2:6C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.15.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:6f:2a:e5:3d:d2:27:ad:73:80:6a:07:30:fe:60:f8:c3:cf: 6d:80:49:a0:ce:cc:20:51:5d:18:8a:e2:40:c9:0e:fc:bd:dc: ad:98:d5:cb:5d:d1:5e:ff:36:09:6a:36:f9:2d:bf:c3:2a:fb: 2d:af:a2:49:57:ca:99:fc:ff:97:e0:02:b1:3c:16:62:c9:dd: 4d:28:03:1c:66:12:61:b5:89:1f:f9:9b:a5:e8:72:66:6f:41: 48:e4:62:72:45:85:89:11:f9:3a:04:2b:f0:e8:77:1a:6a:93: dc:a8:57:e7:4e:5f:a1:93:cb:bd:f4:da:43:02:74:ce:9c:30: 0c:dc:2f:42:6b:3d:f1:f1:67:b6:6e:16:79:b1:09:2a:03:1f: bb:86:8e:a3:2d:b8:18:f8:b1:6f:93:92:60:7d:08:26:36:e3: c5:33:27:40:dc:f2:4a:9c:a2:4d:f3:07:3b:f1:c7:5b:9f:58: 61:a4:4c:42:db:0a:da:3c:5c:19:d3:c0:83:c6:48:96:1e:c8: 3e:f0:fa:da:0e:56:4c:3e:4b:50:c5:ac:cc:4d:df:68:d2:af: ae:3f:51:f9:da:3e:b1:45:ca:8b:5f:c5:c1:20:aa:a5:53:fa: ac:ec:41:2e:c7:74:21:3d:fa:4c:f4:4c:96:2e:c0:30:45:da: f2:3e:fe:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlnSE5x0EVYF1hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk MjgzYmMxNjctMjUwMy00ZWJiLTkwMDctMWE0ZDAzMzY0YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXo3wXLP9kXQGE1SnGdofUs2tiEuVNvGjhBG vdbxVvidErH1fVjAChgIzLf/HNlHcVTIyzNpSR8PCPy3cLZ0YHb+GalXmYkmOhGS DCh4Rr4AS10LvFDR7rXfob3CiW6i2DA/T5997q17sIspgt2J+svMllA7nLHoYGcN q/6yaL1bIX44LeTZAiEuCio+dXRS8MK9eZ6HwQaKvkr6jgmV4K5VqGV+5Qd9CiJI ZR97o7zG1cHG/mD1dpi0IzKCHbOlnKfqaQQrFFk/oIwaWnPU2bmWlwICZy/TtUhd NOVoQNzPK3tPe5NylNNQkTQsEGIUGIE6TT8hqoVbgddMzHcwhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt62UxKUBXalEgnkrbPrAWE0mwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMmZiOTYyOTctMGE4Yi0z N2VjLWJlM2YtMzBiYTViOGMyYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxvKuU90ietc4BqBzD+YPjDz22ASaDOzCBRXRiK4kDJDvy93K2Y1ctd 0V7/NglqNvktv8Mq+y2voklXypn8/5fgArE8FmLJ3U0oAxxmEmG1iR/5m6XocmZv QUjkYnJFhYkR+ToEK/Dodxpqk9yoV+dOX6GTy7302kMCdM6cMAzcL0JrPfHxZ7Zu FnmxCSoDH7uGjqMtuBj4sW+TkmB9CCY248UzJ0Dc8kqcok3zBzvxx1ufWGGkTELb Cto8XBnTwIPGSJYeyD7w+toOVkw+S1DFrMxN32jSr64/UfnaPrFFyotfxcEgqqVT +qzsQS7HdCE9+kz0TJYuwDBF2vI+/qs= -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:17 2025 by rpki-client