$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/fd1ed52a-b712-37ae-9e08-625a0869dd53.roa File: fd1ed52a-b712-37ae-9e08-625a0869dd53.roa (raw, json) Hash identifier: vG02Hoq+lKt1cby+Y68suW9+kyA3YqKC+xHOsOl4JWA= Subject key identifier: AC:34:28:7D:90:FD:7A:B4:DF:C1:30:8D:C3:90:59:57:4F:FA:6D:5C Certificate issuer: /CN=4a55c0a6-eaa8-4039-be15-220f288acd5a Certificate serial: 010D0C9F43285849674EF98DF9CB2BD70EAE2C80 Authority key identifier: 46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/fd1ed52a-b712-37ae-9e08-625a0869dd53.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 63129 IP address blocks: 140.235.164.0/22 maxlen: 24 2602:f7d5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:f9:8d:f9:cb:2b:d7:0e:ae:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a55c0a6-eaa8-4039-be15-220f288acd5a Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=6cf5f9c9-4ecd-4a64-b49d-e060b2e7f668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:62:a1:60:da:cc:e7:79:5c:ce:c1:c3:b0:f1: af:3e:56:2b:b0:97:de:67:9e:a2:28:3b:10:74:3b: bc:33:4e:93:5a:70:a5:2f:95:a8:9e:a3:7d:cd:6a: 35:53:32:8d:75:d8:22:6d:29:82:ba:1f:ca:1f:52: 06:e6:3c:5c:e6:de:db:28:ac:7b:12:94:db:4e:ab: b9:92:ad:da:ac:11:9f:6d:f2:4d:4e:fd:f8:96:75: f1:bd:1e:10:a3:51:b7:e9:83:be:15:4a:24:16:4c: 34:a3:04:ca:e4:4f:0d:a4:dc:b7:80:ef:86:6a:71: 3c:8e:02:4b:44:81:a7:7a:25:99:a7:7b:7b:bb:c3: 6c:fc:30:39:3e:db:fe:88:c8:f0:19:83:66:87:4d: da:3d:1a:6b:6c:8f:22:b1:01:c1:65:da:4b:c4:b8: 5d:6d:68:79:e3:fa:53:92:03:10:50:24:f7:71:50: 04:9b:e9:a0:3f:f2:73:50:ce:ba:7c:9d:e9:1b:23: 3e:f0:29:e9:13:75:48:b1:c2:6a:12:4d:0c:c1:3d: aa:70:87:b3:5d:43:72:dd:0e:b4:1f:90:e3:cc:30: 82:2c:6e:ce:19:4e:65:ba:c1:27:48:c1:f3:23:86: 44:97:99:79:95:b9:b4:71:52:85:7e:b7:e3:a2:55: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:34:28:7D:90:FD:7A:B4:DF:C1:30:8D:C3:90:59:57:4F:FA:6D:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/fd1ed52a-b712-37ae-9e08-625a0869dd53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl X509v3 Authority Key Identifier: keyid:46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer sbgp-ipAddrBlock: critical IPv4: 140.235.164.0/22 IPv6: 2602:f7d5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:88:8c:09:ba:08:dc:60:b3:26:72:74:0e:13:41:17:36:ae: 21:20:a3:3b:4e:39:c9:f2:a7:6d:9f:f5:6c:5a:54:28:ac:24: a6:b4:92:c1:80:f2:18:72:08:6e:5a:58:4b:f6:f6:20:93:31: 44:2f:ca:48:e5:3e:fb:7d:58:4d:43:4c:df:da:ab:58:95:11: 36:46:9f:05:fb:cd:e1:29:ef:4c:ed:78:b7:50:10:b9:4e:c0: 94:12:0b:23:eb:6f:be:a5:f6:c1:a0:3a:11:80:a6:c6:38:4e: 73:8a:e0:fe:eb:50:bb:94:66:e5:e6:3d:74:b7:5f:b9:e3:29: a3:01:b6:84:d3:77:12:db:62:3a:e8:0d:5a:d9:57:fb:0d:c1: 3e:da:94:af:50:4a:b1:fd:89:0f:a2:2f:3a:b0:89:b3:d6:5f: 9f:91:cb:35:d0:0d:1c:84:e9:16:b0:eb:03:ef:8a:52:26:ae: 57:5d:e2:a1:bf:1b:0b:dd:35:4c:a8:df:69:47:15:72:4e:c1: 8d:70:22:28:ef:c9:03:8c:68:9e:2d:03:32:e8:0d:41:2b:c4: 70:1d:13:41:2f:12:4d:7a:a5:c6:c7:4e:2f:8f:96:0f:6a:fa: 2a:30:0c:a5:be:2a:3a:2c:8c:86:88:24:ba:70:52:1a:58:8c: 68:4b:a9:d5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElnTvmN+csr1w6uLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE1NWMwYTYtZWFhOC00MDM5LWJlMTUtMjIwZjI4OGFj ZDVhMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk NmNmNWY5YzktNGVjZC00YTY0LWI0OWQtZTA2MGIyZTdmNjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmKhYNrM53lczsHDsPGvPlYrsJfeZ56iKDsQ dDu8M06TWnClL5WonqN9zWo1UzKNddgibSmCuh/KH1IG5jxc5t7bKKx7EpTbTqu5 kq3arBGfbfJNTv34lnXxvR4Qo1G36YO+FUokFkw0owTK5E8NpNy3gO+GanE8jgJL RIGneiWZp3t7u8Ns/DA5Ptv+iMjwGYNmh03aPRprbI8isQHBZdpLxLhdbWh54/pT kgMQUCT3cVAEm+mgP/JzUM66fJ3pGyM+8CnpE3VIscJqEk0MwT2qcIezXUNy3Q60 H5DjzDCCLG7OGU5lusEnSMHzI4ZEl5l5lbm0cVKFfrfjolVDLwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKw0KH2Q/Xq038EwjcOQWVdP+m1cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YTU1 YzBhNi1lYWE4LTQwMzktYmUxNS0yMjBmMjg4YWNkNWEvZmQxZWQ1MmEtYjcxMi0z N2FlLTllMDgtNjI1YTA4NjlkZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGE1NWMwYTYtZWFhOC00MDM5LWJl MTUtMjIwZjI4OGFjZDVhLzRhNTVjMGE2LWVhYTgtNDAzOS1iZTE1LTIyMGYyODhh Y2Q1YS5jcmwwHwYDVR0jBBgwFoAURirgY4Fi4qp0fCDiyWoUYJkiNaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YTU1YzBhNi1lYWE4LTQwMzktYmUxNS0yMjBm Mjg4YWNkNWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCjOukMA4E AgACMAgDBgQmAvfVADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7iIwJugjcYLMmcnQOE0EXNq4hIKM7TjnJ 8qdtn/VsWlQorCSmtJLBgPIYcghuWlhL9vYgkzFEL8pI5T77fVhNQ0zf2qtYlRE2 Rp8F+83hKe9M7Xi3UBC5TsCUEgsj62++pfbBoDoRgKbGOE5ziuD+61C7lGbl5j10 t1+54ymjAbaE03cS22I66A1a2Vf7DcE+2pSvUEqx/YkPoi86sImz1l+fkcs10A0c hOkWsOsD74pSJq5XXeKhvxsL3TVMqN9pRxVyTsGNcCIo78kDjGieLQMy6A1BK8Rw HRNBLxJNeqXGx04vj5YPavoqMAylvio6LIyGiCS6cFIaWIxoS6nV -----END CERTIFICATE-----Generated at Fri Apr 11 23:02:33 2025 by rpki-client