$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa File: 20551fed-8091-3df7-8169-f36d6f164c32.roa (raw, json) Hash identifier: KZ/0rL74C+Vl1qWuTmc0vuCSbiwxyoskNG5hYH3maRk= Subject key identifier: 21:C5:EE:19:B1:B7:FA:E8:51:CD:AF:F1:51:51:8C:E9:67:77:47:63 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F432858491D718930175F9DDAF2AEF2C0 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 11650 IP address blocks: 216.176.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:89:30:17:5f:9d:da:f2:ae:f2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=8b4ae49c-d972-49e7-83d0-0f1a0b66fd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9f:a3:d4:75:9a:d1:c7:57:54:7f:b5:0c:b7: 18:91:e0:3c:e0:e3:d4:7b:16:23:fa:4e:af:a2:dc: 4b:b8:94:b6:33:ac:be:59:79:2d:f7:6d:52:2f:c7: a1:04:80:60:73:fe:ba:76:00:eb:13:e4:2b:f3:f0: 4e:41:42:fa:ba:db:bf:9d:44:4b:59:17:96:22:6a: 6d:a2:5f:74:df:2f:b5:22:1d:9f:42:cc:75:40:4f: 8b:5e:91:b6:38:e1:62:e9:6b:54:b7:25:e2:e8:29: 62:a4:9a:61:9a:fa:17:2d:a1:b3:0f:83:92:5a:c4: 26:74:5d:4f:ef:df:f7:70:83:ef:4d:dd:48:80:f9: 89:c7:87:e2:72:29:c0:e5:9c:55:ee:fd:18:91:df: 84:f5:1d:ad:83:73:5a:7a:cd:66:95:97:d8:ef:f3: 64:c7:81:f9:58:c1:a3:3c:7d:72:00:af:03:e9:de: 31:f4:15:9e:85:ad:d5:34:07:d5:e2:6a:4f:a9:79: 2f:a9:43:61:a5:e2:21:9f:7b:58:73:6b:b2:51:0b: 0f:c0:9f:7c:e0:0c:f8:8f:68:61:09:34:37:af:99: 0e:43:44:bc:64:ef:a0:46:73:4d:1e:c6:b3:df:c5: 80:88:7a:80:e6:e8:f6:e5:45:cf:23:54:5b:42:0d: 83:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C5:EE:19:B1:B7:FA:E8:51:CD:AF:F1:51:51:8C:E9:67:77:47:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/20551fed-8091-3df7-8169-f36d6f164c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 216.176.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:20:d9:5e:ec:98:53:0d:8b:c6:88:65:31:4b:f4:4f:ed:2c: dd:1d:3e:af:6c:40:a8:c8:5f:a4:4b:dd:1e:8d:08:82:0a:af: 3b:b8:a4:68:aa:cb:28:75:da:a6:1e:7a:a4:65:61:da:86:eb: 06:d7:f2:9e:51:a8:de:ce:a4:e6:d8:81:fd:6f:28:fa:ad:9a: 48:09:3d:fa:e2:b2:44:b6:31:e2:d9:1f:af:48:8a:3a:fb:15: 87:ac:df:09:fd:ca:1d:3d:0c:45:25:f1:f7:6e:5f:cf:bd:7a: f1:3c:af:e8:e1:0a:27:a1:ff:d1:e3:e8:77:2f:c2:47:a0:a7: a0:5d:01:25:cd:e5:b2:0e:10:72:90:35:c8:bf:7c:d1:a2:c8: 2a:86:96:3b:a0:10:69:af:85:12:1e:58:84:cc:1c:31:b1:7c: 3a:e8:97:b3:aa:f3:0d:a2:2e:83:e3:a6:45:d6:7e:21:43:e0: 52:d2:51:08:ba:ae:95:25:f6:d6:e5:23:bd:1d:fa:f7:47:de: 3b:8e:21:04:51:bc:4f:2d:de:6d:64:71:54:d7:6e:4f:f9:e6: c8:3c:9a:97:a1:ab:5a:5c:c0:3f:59:21:ad:4c:94:53:1f:e0: 43:69:e5:70:91:04:93:5f:0e:72:6b:4c:29:bd:6d:23:1c:5d: b3:40:48:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYkwF1+d2vKu8sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OGI0YWU0OWMtZDk3Mi00OWU3LTgzZDAtMGYxYTBiNjZmZDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5+j1HWa0cdXVH+1DLcYkeA84OPUexYj+k6v otxLuJS2M6y+WXkt921SL8ehBIBgc/66dgDrE+Qr8/BOQUL6utu/nURLWReWImpt ol903y+1Ih2fQsx1QE+LXpG2OOFi6WtUtyXi6ClipJphmvoXLaGzD4OSWsQmdF1P 79/3cIPvTd1IgPmJx4ficinA5ZxV7v0Ykd+E9R2tg3Naes1mlZfY7/Nkx4H5WMGj PH1yAK8D6d4x9BWeha3VNAfV4mpPqXkvqUNhpeIhn3tYc2uyUQsPwJ984Az4j2hh CTQ3r5kOQ0S8ZO+gRnNNHsaz38WAiHqA5uj25UXPI1RbQg2DcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHF7hmxt/roUc2v8VFRjOlnd0djMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvMjA1NTFmZWQtODA5MS0z ZGY3LTgxNjktZjM2ZDZmMTY0YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgg2V7smFMNi8aIZTFL9E/tLN0dPq9sQKjIX6RL3R6NCIIKrzu4pGiq yyh12qYeeqRlYdqG6wbX8p5RqN7OpObYgf1vKPqtmkgJPfriskS2MeLZH69Iijr7 FYes3wn9yh09DEUl8fduX8+9evE8r+jhCieh/9Hj6Hcvwkegp6BdASXN5bIOEHKQ Nci/fNGiyCqGljugEGmvhRIeWITMHDGxfDrol7Oq8w2iLoPjpkXWfiFD4FLSUQi6 rpUl9tblI70d+vdH3juOIQRRvE8t3m1kcVTXbk/55sg8mpehq1pcwD9ZIa1MlFMf 4ENp5XCRBJNfDnJrTCm9bSMcXbNASJw= -----END CERTIFICATE-----Generated at Sat Apr 12 00:25:24 2025 by rpki-client