$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa File: f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa (raw, json) Hash identifier: /DsUT6ufXrrBx/qnaRbdXN+bo499dn/nDKEvZbwVSgQ= Subject key identifier: BC:70:3B:42:8B:53:0A:0C:8D:1C:8B:BE:34:48:85:F6:9B:69:3F:F3 Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F43285849538426EB533BB79941B4FA00 Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa Signing time: Thu 27 Mar 2025 10:52:11 +0000 ROA not before: Thu 27 Mar 2025 10:52:11 +0000 ROA not after: Wed 25 Jun 2025 10:52:11 +0000 asID: 401585 IP address blocks: 172.81.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:84:26:eb:53:3b:b7:99:41:b4:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Mar 27 10:52:11 2025 GMT Not After : Jun 25 10:52:11 2025 GMT Subject: CN=de8889b4-6f87-4c04-824f-f007f4cd3ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:ce:31:a3:26:e8:a3:6d:4c:8b:54:f0:18: 47:0a:da:6d:8c:3b:b0:a8:bf:7f:1e:27:a8:7e:16: 01:73:7f:38:09:50:f3:f6:cd:d4:8b:ee:2e:dd:f4: 5e:19:77:84:bc:64:1f:60:da:7c:b3:f9:61:af:ac: ca:84:37:86:49:05:be:17:d6:a9:eb:e4:78:ba:88: 23:01:1f:5c:40:52:8e:a5:73:e7:5a:98:88:cf:16: 9d:1c:dc:e9:ac:fc:01:20:d4:1c:1e:fa:90:c3:1f: 6d:d3:f9:75:33:c7:74:01:eb:6c:17:e9:33:ac:48: 45:53:67:35:ef:c4:54:94:05:44:ca:03:f9:c4:04: cf:0f:3c:b8:12:98:0c:02:23:c0:9f:25:38:bc:ee: 68:07:c6:59:be:8a:de:52:55:90:72:1c:a5:7d:31: 69:b1:87:44:59:c3:8d:02:18:93:93:35:e7:57:a8: de:ce:85:22:01:82:40:22:7f:d9:3b:e3:a6:c5:82: 15:8c:b0:35:54:b8:a8:bc:4c:1f:3a:b6:46:b0:b7: 34:a3:51:a8:52:8d:9e:1d:26:b5:40:f9:22:72:4e: 35:e9:b0:1e:44:95:7b:bc:d6:4d:90:68:6e:19:5e: a3:da:28:dc:61:7d:41:9d:d2:e5:e4:12:15:95:10: 13:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:70:3B:42:8B:53:0A:0C:8D:1C:8B:BE:34:48:85:F6:9B:69:3F:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/f07c58a8-5f5a-372c-9d1b-3bdc4c94f74e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 172.81.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:e8:e5:12:7e:36:fa:9b:ed:ff:c0:db:62:aa:45:82:1b:91: 2d:a2:1b:ec:7c:dd:87:18:2f:c4:ff:14:ef:e8:8d:b6:b3:a2: 99:bc:3e:b9:80:ee:8c:6d:4f:bb:b1:60:46:06:0b:9d:a4:c3: 28:d3:b8:92:94:d9:49:5e:39:f0:fe:a0:3f:80:7b:f8:4e:40: 87:1a:55:12:52:8c:ee:27:f3:ea:06:f1:d8:39:c5:c8:02:1c: 18:d4:96:b8:8e:2b:0b:6d:13:e2:e3:9a:75:40:81:12:35:b1: e2:20:46:f0:f3:58:68:ae:f2:29:8d:0d:d2:04:04:3a:84:25: 31:7d:1d:4a:2a:6e:a6:fd:ca:51:dd:11:36:1f:7f:04:84:7b: 08:09:43:d4:45:9f:95:84:4c:83:07:ef:8d:f1:97:74:6c:22: a2:4d:bf:57:07:c4:9d:4e:5a:91:23:c6:60:d1:f6:02:ed:a9: 76:0d:02:80:92:dd:b8:78:8b:02:05:24:33:33:f3:8d:44:1e: 10:c9:2d:09:77:15:2c:81:f5:b2:60:c8:53:e6:07:1d:48:d1: 42:99:5f:ae:fb:4e:df:d4:50:53:1c:8b:b5:dc:a0:7f:eb:f8: 81:8e:a9:6e:c2:d0:51:7f:4c:46:dc:27:4b:a6:1f:a7:4d:d4: a2:7d:f9:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElThCbrUzu3mUG0+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI1MDMyNzEwNTIxMVoXDTI1MDYyNTEwNTIxMVowLzEtMCsGA1UEAxMk ZGU4ODg5YjQtNmY4Ny00YzA0LTgyNGYtZjAwN2Y0Y2QzZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqafOMaMm6KNtTItU8BhHCtptjDuwqL9/Hieo fhYBc384CVDz9s3Ui+4u3fReGXeEvGQfYNp8s/lhr6zKhDeGSQW+F9ap6+R4uogj AR9cQFKOpXPnWpiIzxadHNzprPwBINQcHvqQwx9t0/l1M8d0AetsF+kzrEhFU2c1 78RUlAVEygP5xATPDzy4EpgMAiPAnyU4vO5oB8ZZvoreUlWQchylfTFpsYdEWcON AhiTkzXnV6jezoUiAYJAIn/ZO+OmxYIVjLA1VLiovEwfOrZGsLc0o1GoUo2eHSa1 QPkick416bAeRJV7vNZNkGhuGV6j2ijcYX1BndLl5BIVlRATxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxwO0KLUwoMjRyLvjRIhfabaT/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvZjA3YzU4YTgtNWY1YS0z NzJjLTlkMWItM2JkYzRjOTRmNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErFFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDo5RJ+Nvqb7f/A22KqRYIbkS2iG+x83YcYL8T/FO/ojbazopm8PrmA 7oxtT7uxYEYGC52kwyjTuJKU2UleOfD+oD+Ae/hOQIcaVRJSjO4n8+oG8dg5xcgC HBjUlriOKwttE+LjmnVAgRI1seIgRvDzWGiu8imNDdIEBDqEJTF9HUoqbqb9ylHd ETYffwSEewgJQ9RFn5WETIMH743xl3RsIqJNv1cHxJ1OWpEjxmDR9gLtqXYNAoCS 3bh4iwIFJDMz841EHhDJLQl3FSyB9bJgyFPmBx1I0UKZX677Tt/UUFMci7XcoH/r +IGOqW7C0FF/TEbcJ0umH6dN1KJ9+Ww= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:40 2025 by rpki-client