$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa File: 77ff4321-a6aa-3770-a76f-656f4a193421.roa (raw, json) Hash identifier: 5TrZU/RUpyDtIF3nMXImcUtnNiHi2pwTilAuTwD7qmE= Subject key identifier: 51:D8:6E:1A:59:4F:54:69:65:5A:14:C9:F3:AB:1B:69:46:DA:C6:70 Certificate issuer: /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37 Certificate serial: 010D0C9F4328584957F41415D123BDBA108CE400 Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 6939 IP address blocks: 173.249.160.0/22 maxlen: 24 2602:fb15::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:14:15:d1:23:bd:ba:10:8c:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=1529c826-36e4-4a66-8396-f2ff56ca847f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:c6:7a:95:1c:c6:cb:b4:be:be:0f:f2:3c: 71:06:2e:aa:b3:2a:64:4c:6c:c3:76:0e:a2:fa:6b: 8d:75:30:96:81:b0:15:54:c3:9d:e5:75:59:06:59: de:e9:81:47:6e:a9:8a:29:f3:9c:1e:dd:c2:14:58: 2b:94:8b:9a:2e:3a:8d:a1:19:1a:a0:64:48:1d:6e: 9b:0e:67:3a:e6:9c:2a:4e:06:53:09:59:12:72:62: f0:2d:dc:5e:21:40:65:50:ae:aa:37:f4:d4:6e:ce: 15:0f:98:36:44:9b:f9:33:97:1f:fd:fe:74:80:55: 2f:b3:be:af:b7:e4:83:f4:47:7e:63:e9:f3:32:da: 0f:e8:10:60:b9:57:bc:96:b4:74:11:fb:8f:c9:bd: fc:6c:13:db:93:09:9e:bf:09:53:a7:0b:37:2e:11: 2a:57:a4:06:06:ce:74:76:12:7b:b9:99:76:49:c5: 45:9a:cc:94:0b:8e:d0:57:13:e0:5a:48:38:ec:a6: e5:0d:84:c0:85:f5:c3:fa:8c:76:7d:67:49:5d:94: 96:48:ee:03:bf:ef:66:a2:21:01:e2:17:f8:cd:49: d8:90:59:fa:6d:a3:61:20:96:66:65:2d:17:90:99: bd:b9:31:6f:74:bb:d8:ae:42:91:3b:25:b5:e3:02: 3c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D8:6E:1A:59:4F:54:69:65:5A:14:C9:F3:AB:1B:69:46:DA:C6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl X509v3 Authority Key Identifier: keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer sbgp-ipAddrBlock: critical IPv4: 173.249.160.0/22 IPv6: 2602:fb15::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9d:5b:3e:ee:31:80:b2:bf:2a:f6:a7:e8:8c:d2:15:2c:41: 72:1a:85:15:f4:e5:c5:00:1c:79:f8:96:8a:01:fa:4d:3d:7d: 91:91:b4:1d:ce:39:39:27:b5:50:5a:0c:15:1a:7d:d8:3b:b9: ad:62:3b:b2:3a:c6:b4:1b:d6:56:42:2e:16:00:7a:62:c0:98: 47:a9:cb:cb:07:ce:85:d1:7e:af:48:d4:3c:51:cc:d4:19:bc: a6:d9:5e:d6:b5:36:34:9e:79:b5:49:ef:71:b3:a3:23:ea:4f: 3d:da:fc:dd:7d:e6:4b:f4:d9:9b:de:1b:d0:9f:09:4d:05:2a: a9:44:fb:32:8f:85:fd:47:15:9c:02:de:69:0e:9b:3b:24:b3: 1e:38:58:c8:40:d6:00:33:19:4e:43:7e:fb:1e:4b:63:ef:7d: ed:9f:15:f0:23:25:fb:ee:6d:88:10:71:42:62:71:0e:21:c6: ee:d9:b7:9b:2c:fe:54:c4:02:23:54:21:0e:4d:9b:c7:5b:7f: 8b:0a:98:99:63:c2:50:6d:94:5d:7f:46:9f:a7:2a:ad:6c:e9: 45:c0:0a:82:bc:25:a9:66:26:01:98:fb:d5:38:30:2b:41:d9: 04:a8:1b:58:a7:de:a7:a5:ed:d0:7b:c5:4f:99:9e:66:50:41: 38:7d:e1:83 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWElX9BQV0SO9uhCM5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE2YjlhZmItOWU0Ni00YWIwLTgwMjktN2Y0ZDExNjhi YjM3MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MTUyOWM4MjYtMzZlNC00YTY2LTgzOTYtZjJmZjU2Y2E4NDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorPGepUcxsu0vr4P8jxxBi6qsypkTGzDdg6i +muNdTCWgbAVVMOd5XVZBlne6YFHbqmKKfOcHt3CFFgrlIuaLjqNoRkaoGRIHW6b Dmc65pwqTgZTCVkScmLwLdxeIUBlUK6qN/TUbs4VD5g2RJv5M5cf/f50gFUvs76v t+SD9Ed+Y+nzMtoP6BBguVe8lrR0EfuPyb38bBPbkwmevwlTpws3LhEqV6QGBs50 dhJ7uZl2ScVFmsyUC47QVxPgWkg47KblDYTAhfXD+ox2fWdJXZSWSO4Dv+9moiEB 4hf4zUnYkFn6baNhIJZmZS0XkJm9uTFvdLvYrkKROyW14wI8ZQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFHYbhpZT1RpZVoUyfOrG2lG2sZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MTZi OWFmYi05ZTQ2LTRhYjAtODAyOS03ZjRkMTE2OGJiMzcvNzdmZjQzMjEtYTZhYS0z NzcwLWE3NmYtNjU2ZjRhMTkzNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTE2YjlhZmItOWU0Ni00YWIwLTgw MjktN2Y0ZDExNjhiYjM3LzkxNmI5YWZiLTllNDYtNGFiMC04MDI5LTdmNGQxMTY4 YmIzNy5jcmwwHwYDVR0jBBgwFoAUo2/sfo22meVwUQcAlWiGLWoQLcowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85MTZiOWFmYi05ZTQ2LTRhYjAtODAyOS03ZjRk MTE2OGJiMzcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCrfmgMA4E AgACMAgDBgQmAvsVADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfnVs+7jGAsr8q9qfojNIVLEFyGoUV9OXF ABx5+JaKAfpNPX2RkbQdzjk5J7VQWgwVGn3YO7mtYjuyOsa0G9ZWQi4WAHpiwJhH qcvLB86F0X6vSNQ8UczUGbym2V7WtTY0nnm1Se9xs6Mj6k892vzdfeZL9Nmb3hvQ nwlNBSqpRPsyj4X9RxWcAt5pDps7JLMeOFjIQNYAMxlOQ377Hktj733tnxXwIyX7 7m2IEHFCYnEOIcbu2bebLP5UxAIjVCEOTZvHW3+LCpiZY8JQbZRdf0afpyqtbOlF wAqCvCWpZiYBmPvVODArQdkEqBtYp96npe3Qe8VPmZ5mUEE4feGD -----END CERTIFICATE-----Generated at Sat Apr 12 13:54:32 2025 by rpki-client