$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa File: 4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa (raw, json) Hash identifier: JQZ6w0LC6Fx82Xq7JJGDl0JvHh+Jl6guGcH9aXiaI8k= Subject key identifier: B9:23:27:58:3C:B3:B8:00:BC:63:A8:AA:11:8E:7C:73:47:CF:CC:2C Certificate issuer: /CN=b96212e2-1faa-48b4-83e9-6deeec8b4bee Certificate serial: 010D0C9F432858494733FD4ADA3FEA363C652480 Authority key identifier: 7E:11:D0:CF:E7:87:A5:2E:B4:B6:6B:38:19:06:BE:6B:92:14:CE:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 400167 IP address blocks: 165.140.62.0/23 maxlen: 24 2606:9240::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/b96212e2-1faa-48b4-83e9-6deeec8b4bee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/b96212e2-1faa-48b4-83e9-6deeec8b4bee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:fd:4a:da:3f:ea:36:3c:65:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b96212e2-1faa-48b4-83e9-6deeec8b4bee Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=960fbeaf-5b30-48ca-a7e6-9f55dc8fcaad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:ed:1e:0e:81:c9:87:b3:35:ec:ec:cd:50: d4:ca:f9:a4:7b:59:80:ac:14:55:fc:72:22:a3:f5: 2d:37:26:b7:79:7b:e0:4f:d7:bc:7d:86:a9:d9:2e: 37:3f:1c:cb:5d:4e:96:e8:12:9e:5b:48:99:24:2d: 97:e5:cc:5a:d6:1c:95:16:c5:ba:a3:9d:e9:d0:2f: 44:e9:ce:4c:58:dc:e0:fb:20:3d:7b:fc:cb:07:f6: 4a:7d:5d:b0:57:d9:1f:2c:8e:2f:a1:ca:74:e6:06: 40:be:a3:17:e1:ab:01:5c:f5:e5:b8:0f:e3:83:51: 63:bf:0a:35:42:6b:1f:19:33:78:d9:94:2f:04:25: a8:e6:67:1c:c5:9b:e9:69:38:d8:f7:57:9a:1f:1b: dc:c3:f6:89:93:22:30:ee:cb:1e:a5:90:96:d2:b3: 0d:c1:5d:19:8b:9f:62:c7:c6:0b:4a:a1:61:64:15: 2d:b2:48:af:88:4b:1f:19:fe:76:3c:74:4e:9e:06: 07:9f:f6:45:74:58:dd:9b:d7:f2:86:5a:3d:a9:6b: 94:f5:60:cf:5d:56:83:46:20:63:5d:ea:b8:97:90: fd:cb:04:73:8a:29:0f:15:6b:16:89:36:02:99:be: b1:b8:5e:f4:69:1c:6b:c8:24:f8:e7:3f:52:30:46: 71:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:23:27:58:3C:B3:B8:00:BC:63:A8:AA:11:8E:7C:73:47:CF:CC:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/b96212e2-1faa-48b4-83e9-6deeec8b4bee.crl X509v3 Authority Key Identifier: keyid:7E:11:D0:CF:E7:87:A5:2E:B4:B6:6B:38:19:06:BE:6B:92:14:CE:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee.cer sbgp-ipAddrBlock: critical IPv4: 165.140.62.0/23 IPv6: 2606:9240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:46:22:b1:40:8d:fa:26:e6:c6:2f:df:fc:27:92:f7:8c:f1: 94:f3:b0:db:32:c5:d0:b0:6f:78:57:08:f8:c9:a9:9a:a3:03: c3:a1:2a:79:97:a8:5b:c3:ad:c9:70:4b:14:39:a5:e7:bd:0c: 18:6c:3b:44:d0:c0:f5:3f:bb:19:f2:e8:a0:91:47:ba:b7:d9: 76:ae:8a:fb:84:5f:c4:82:72:56:61:29:06:24:72:98:5e:22: ec:3d:ff:1e:a3:11:5a:6d:9d:15:42:59:de:62:5e:ac:53:32: 27:23:64:ad:a0:c4:08:11:fc:b9:37:86:b9:cd:cb:8f:d3:d5: 14:2d:61:c5:5e:28:98:9d:61:e4:52:d9:ee:6f:22:52:4c:fe: 4c:94:45:99:1f:6f:cd:ca:b1:2c:1b:22:61:28:b8:38:be:46: 0d:30:18:32:47:92:e1:cd:79:d5:3c:2b:81:ae:41:cd:2c:ac: 16:68:72:85:e4:ab:42:fc:9b:39:8c:cf:63:2e:41:45:8b:1b: 0e:0c:61:b9:ef:17:3d:7a:a2:1e:c5:cb:6b:9a:0d:58:73:68: c1:3e:a1:6f:ff:27:28:2e:33:9f:af:15:33:cc:c6:d5:7b:d9: d4:bc:f4:b7:5a:63:47:aa:2f:ef:0c:30:60:bb:af:65:c9:cd: 91:19:9e:5d -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWElHM/1K2j/qNjxlJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk2MjEyZTItMWZhYS00OGI0LTgzZTktNmRlZWVjOGI0 YmVlMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk OTYwZmJlYWYtNWIzMC00OGNhLWE3ZTYtOWY1NWRjOGZjYWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofntHg6ByYezNezszVDUyvmke1mArBRV/HIi o/UtNya3eXvgT9e8fYap2S43PxzLXU6W6BKeW0iZJC2X5cxa1hyVFsW6o53p0C9E 6c5MWNzg+yA9e/zLB/ZKfV2wV9kfLI4vocp05gZAvqMX4asBXPXluA/jg1Fjvwo1 QmsfGTN42ZQvBCWo5mccxZvpaTjY91eaHxvcw/aJkyIw7ssepZCW0rMNwV0Zi59i x8YLSqFhZBUtskiviEsfGf52PHROngYHn/ZFdFjdm9fyhlo9qWuU9WDPXVaDRiBj Xeq4l5D9ywRziikPFWsWiTYCmb6xuF70aRxryCT45z9SMEZxHQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFLkjJ1g8s7gAvGOoqhGOfHNHz8wsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iOTYy MTJlMi0xZmFhLTQ4YjQtODNlOS02ZGVlZWM4YjRiZWUvNGQ3YzQzOTQtOTI1Yi0z MTk1LWEyYTEtZDhmZWIyNjhhYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjk2MjEyZTItMWZhYS00OGI0LTgz ZTktNmRlZWVjOGI0YmVlL2I5NjIxMmUyLTFmYWEtNDhiNC04M2U5LTZkZWVlYzhi NGJlZS5jcmwwHwYDVR0jBBgwFoAUfhHQz+eHpS60tms4GQa+a5IUzq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iOTYyMTJlMi0xZmFhLTQ4YjQtODNlOS02ZGVl ZWM4YjRiZWUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBpYw+MA0E AgACMAcDBQAmBpJAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAI5GIrFAjfom5sYv3/wnkveM8ZTzsNsyxdCw b3hXCPjJqZqjA8OhKnmXqFvDrclwSxQ5pee9DBhsO0TQwPU/uxny6KCRR7q32Xau ivuEX8SCclZhKQYkcpheIuw9/x6jEVptnRVCWd5iXqxTMicjZK2gxAgR/Lk3hrnN y4/T1RQtYcVeKJidYeRS2e5vIlJM/kyURZkfb83KsSwbImEouDi+Rg0wGDJHkuHN edU8K4GuQc0srBZocoXkq0L8mzmMz2MuQUWLGw4MYbnvFz16oh7Fy2uaDVhzaME+ oW//JyguM5+vFTPMxtV72dS89LdaY0eqL+8MMGC7r2XJzZEZnl0= -----END CERTIFICATE-----Generated at Fri Apr 11 21:49:40 2025 by rpki-client