$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa File: a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa (raw, json) Hash identifier: aiyIxNgZq3BAlrprj3HXS+ZlP9LKtMlmLIrWWTiRpZQ= Subject key identifier: E3:97:65:2D:B8:A6:17:D3:FB:B8:42:2F:8E:67:DE:68:5C:E2:63:06 Certificate issuer: /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Certificate serial: 010D0C9F43285848A29B4784A125A622E353FF90 Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 15108 IP address blocks: 192.160.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:47:84:a1:25:a6:22:e3:53:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=abd7eee6-0bd5-4180-a7de-42a65b68133c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c2:7f:8c:66:f2:10:1f:1a:ce:f7:a5:be:b8: 17:ab:92:c1:41:c9:ed:bc:2a:cc:09:bf:24:8c:7a: 8a:79:5f:03:3d:87:2b:e6:8e:3b:41:58:9a:4d:d1: c5:ba:66:cd:bd:7d:65:78:19:fa:dc:fc:57:53:41: 61:e6:7f:c0:5b:58:ac:9d:5b:d6:c7:e1:14:12:5d: 12:1c:ba:91:91:8f:23:78:8d:e5:ae:6a:2e:fe:60: 35:f2:dd:89:ba:a1:cf:1e:f5:12:05:0c:48:37:be: db:d7:73:81:f1:de:fd:a0:10:f2:83:36:b9:49:8f: 6b:80:a0:e5:b8:fb:21:12:4c:17:05:92:35:ec:28: 41:f5:cd:4a:7c:31:7c:d1:eb:f5:21:61:7c:2a:e1: 72:dc:18:4b:3f:74:37:0e:fd:ba:db:a0:c0:ca:52: 79:45:f7:48:a2:ae:5d:4b:83:ef:93:05:10:00:1a: 8d:1f:3f:13:63:4a:a5:7c:60:56:2c:2f:8b:4e:b0: 6b:86:ce:48:4f:42:3f:83:74:a2:3d:83:fb:c1:d5: d8:81:e2:40:6a:8a:da:ea:d1:a3:87:55:e8:ab:15: 44:d3:32:d6:1c:a8:ac:fd:9e:fe:ae:ac:77:7d:c5: fc:1b:b0:46:3f:d3:d3:ea:73:b4:cf:01:3b:a8:10: e1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:97:65:2D:B8:A6:17:D3:FB:B8:42:2F:8E:67:DE:68:5C:E2:63:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/a80886a4-4c73-39b7-9eaa-2d9e46d6c507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl X509v3 Authority Key Identifier: keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer sbgp-ipAddrBlock: critical IPv4: 192.160.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6a:cc:19:6a:78:b7:2f:c9:37:8a:0a:14:95:e2:65:49:48: 46:c8:0b:c2:01:23:72:97:e9:b6:81:e7:ed:4d:6a:b9:d8:72: 1e:b8:86:cd:03:e6:92:7f:2d:6f:88:9f:cb:05:2d:95:f8:f3: a1:50:bd:f2:65:ec:15:30:8c:5f:e9:30:01:b2:d8:28:61:aa: be:93:d5:2d:e2:da:7a:92:58:9f:9b:2a:fa:23:3d:5f:0b:01: 5c:c2:e9:ea:ee:6e:f0:58:60:1a:1e:89:47:60:10:e2:a6:57: a2:dc:a6:ca:b2:53:bf:b5:43:5a:2a:fc:9b:0c:47:66:de:9c: 86:08:b0:da:a5:05:ed:74:e0:6c:1f:d7:33:0d:13:cc:38:e7: 7b:8d:36:46:0b:a1:23:4b:50:db:7e:1a:a6:71:a9:53:9b:d0: bd:19:77:f6:36:d4:dc:8e:d9:83:1f:69:bc:97:f1:46:d7:28: cf:45:63:bd:a5:88:63:7e:5f:d0:25:e6:bb:e1:b5:d5:69:9b: 73:1f:b8:57:f1:da:41:e7:88:d6:cd:56:a2:bf:d3:1b:54:08: aa:50:b7:84:e4:d3:9f:89:60:e2:eb:32:9a:c9:f9:78:39:b3: 01:8c:a4:8b:d7:a1:d0:58:4e:f0:08:3a:ab:04:43:96:37:d3: db:f7:9f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0eEoSWmIuNT/5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4 ZmNkMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk YWJkN2VlZTYtMGJkNS00MTgwLWE3ZGUtNDJhNjViNjgxMzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMJ/jGbyEB8azvelvrgXq5LBQcntvCrMCb8k jHqKeV8DPYcr5o47QViaTdHFumbNvX1leBn63PxXU0Fh5n/AW1isnVvWx+EUEl0S HLqRkY8jeI3lrmou/mA18t2JuqHPHvUSBQxIN77b13OB8d79oBDygza5SY9rgKDl uPshEkwXBZI17ChB9c1KfDF80ev1IWF8KuFy3BhLP3Q3Dv2626DAylJ5RfdIoq5d S4PvkwUQABqNHz8TY0qlfGBWLC+LTrBrhs5IT0I/g3SiPYP7wdXYgeJAaora6tGj h1XoqxVE0zLWHKis/Z7+rqx3fcX8G7BGP9PT6nO0zwE7qBDhIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOXZS24phfT+7hCL45n3mhc4mMGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3 YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvYTgwODg2YTQtNGM3My0z OWI3LTllYWEtMmQ5ZTQ2ZDZjNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1 OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5 OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5qzBlqeLcvyTeKChSV4mVJSEbIC8IBI3KX6baB5+1NarnYch64hs0D 5pJ/LW+In8sFLZX486FQvfJl7BUwjF/pMAGy2Chhqr6T1S3i2nqSWJ+bKvojPV8L AVzC6erubvBYYBoeiUdgEOKmV6LcpsqyU7+1Q1oq/JsMR2benIYIsNqlBe104Gwf 1zMNE8w453uNNkYLoSNLUNt+GqZxqVOb0L0Zd/Y21NyO2YMfabyX8UbXKM9FY72l iGN+X9Al5rvhtdVpm3MfuFfx2kHniNbNVqK/0xtUCKpQt4Tk05+JYOLrMprJ+Xg5 swGMpIvXodBYTvAIOqsEQ5Y309v3nxo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:48:30 2025 by rpki-client