$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/e6b1a527-2597-3e33-948f-46dc314e5a2e.roa File: e6b1a527-2597-3e33-948f-46dc314e5a2e.roa (raw, json) Hash identifier: kSMmFBY45NyWJ7LlEfiLReAeegF9+Ugj2mGes4GLOsY= Subject key identifier: 8D:10:B3:30:A2:DB:A9:07:63:8B:23:48:E0:40:69:86:94:F4:2F:40 Certificate issuer: /CN=3976c091-1138-4917-9649-5575618ab7ea Certificate serial: 010D0C9F43285848F7C13DAA75B6899B99E21AC0 Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/e6b1a527-2597-3e33-948f-46dc314e5a2e.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 6079 IP address blocks: 134.202.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3d:aa:75:b6:89:9b:99:e2:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=c4fff6c1-7a33-47e1-9acd-14f320647769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:0d:c7:4b:4f:1e:cf:f8:01:4a:20:71:a8: f3:e2:55:53:62:c6:79:f7:40:eb:fa:f4:68:cc:1a: d7:02:74:cf:6f:2a:34:7a:63:2e:f6:93:b3:d2:d1: 70:f3:98:92:a8:90:c5:c4:c2:06:b7:5e:7e:6c:82: 3d:0c:f3:bd:ff:69:8b:8b:7f:bb:8e:12:ff:05:ac: ec:76:71:03:6b:27:cf:06:1d:8d:97:8d:a9:7d:2f: 7f:6a:ab:5f:33:51:3f:bf:89:f5:53:8c:f6:94:b4: a9:bf:14:e1:f6:18:c7:92:82:44:85:d4:86:df:cf: 9c:cb:a6:c3:80:37:00:a6:2f:6b:bf:c4:02:53:8e: eb:8b:a2:ba:5f:01:9a:8a:6e:e9:53:d3:5c:ec:59: 27:42:48:62:c9:d6:67:ed:c7:62:8e:ac:10:26:5b: 97:4e:e9:51:b9:db:68:14:41:c6:b2:80:3d:0c:19: bd:89:0e:13:67:e0:aa:bb:56:1d:53:21:c9:b5:3d: d8:40:2f:4b:d8:e8:af:44:6e:dc:58:90:16:71:9f: 16:5e:63:1f:6c:e2:e3:b1:3c:ee:94:db:65:ba:56: b3:1d:7c:cc:1c:76:22:e1:de:6f:25:36:dd:ae:5e: 2c:d5:8d:eb:a7:01:5a:2c:d8:25:e9:00:cc:2f:2f: 71:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:10:B3:30:A2:DB:A9:07:63:8B:23:48:E0:40:69:86:94:F4:2F:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/e6b1a527-2597-3e33-948f-46dc314e5a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl X509v3 Authority Key Identifier: keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer sbgp-ipAddrBlock: critical IPv4: 134.202.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5b:21:e8:d1:c7:33:ee:b0:f5:3b:c2:a4:86:34:e4:c9:dd: 02:44:ee:9e:6e:4e:85:01:6f:7c:5d:59:15:c3:82:e9:a7:ad: 12:9e:99:a9:6c:08:d1:08:aa:b0:c7:78:ad:9d:90:2c:9e:98: 9f:01:9e:31:b0:48:c2:ff:27:22:f8:04:ab:52:89:13:09:e7: b1:5e:44:16:b1:a2:ef:84:bb:03:e7:81:4a:bd:ba:62:bf:22: 71:7d:a4:2a:bd:47:17:2d:d0:a0:2f:96:c0:fd:77:7a:d5:6c: 56:4e:b3:eb:2d:09:7c:60:7e:4c:db:9e:b0:40:b4:13:e2:a9: 4f:d2:80:e7:a7:92:f2:a6:d4:32:22:eb:c3:fd:6e:62:a1:26: 17:d8:8b:c1:7a:a0:08:44:dd:4c:18:fb:a6:81:72:42:79:ea: 97:09:87:e0:c5:60:e9:35:72:39:ef:55:39:c4:cb:60:b0:b0: 9a:b5:a2:70:12:f8:8a:25:e9:e6:86:43:f8:fd:3b:20:77:a1: 5b:7b:bd:d9:97:3e:e7:26:d1:45:7b:b8:7d:94:42:ee:f5:a2: 69:33:3d:72:74:37:40:f0:45:3d:e8:a3:4a:61:1e:a9:79:97: e3:f3:c3:c2:26:43:5c:51:d8:49:f4:52:d0:00:22:b3:54:d5: 6b:82:b7:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wT2qdbaJm5niGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi N2VhMB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk YzRmZmY2YzEtN2EzMy00N2UxLTlhY2QtMTRmMzIwNjQ3NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4UNx0tPHs/4AUogcajz4lVTYsZ590Dr+vRo zBrXAnTPbyo0emMu9pOz0tFw85iSqJDFxMIGt15+bII9DPO9/2mLi3+7jhL/Bazs dnEDayfPBh2Nl42pfS9/aqtfM1E/v4n1U4z2lLSpvxTh9hjHkoJEhdSG38+cy6bD gDcApi9rv8QCU47ri6K6XwGaim7pU9Nc7FknQkhiydZn7cdijqwQJluXTulRudto FEHGsoA9DBm9iQ4TZ+Cqu1YdUyHJtT3YQC9L2OivRG7cWJAWcZ8WXmMfbOLjsTzu lNtlulazHXzMHHYi4d5vJTbdrl4s1Y3rpwFaLNgl6QDMLy9xbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0QszCi26kHY4sjSOBAaYaU9C9AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2 YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvZTZiMWE1MjctMjU5Ny0z ZTMzLTk0OGYtNDZkYzMxNGU1YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2 NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1 NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFbIejRxzPusPU7wqSGNOTJ3QJE7p5uToUBb3xdWRXDgumnrRKemals CNEIqrDHeK2dkCyemJ8BnjGwSML/JyL4BKtSiRMJ57FeRBaxou+EuwPngUq9umK/ InF9pCq9Rxct0KAvlsD9d3rVbFZOs+stCXxgfkzbnrBAtBPiqU/SgOenkvKm1DIi 68P9bmKhJhfYi8F6oAhE3UwY+6aBckJ56pcJh+DFYOk1cjnvVTnEy2CwsJq1onAS +Iol6eaGQ/j9OyB3oVt7vdmXPucm0UV7uH2UQu71omkzPXJ0N0DwRT3oo0phHql5 l+Pzw8ImQ1xR2En0UtAAIrNU1WuCt6w= -----END CERTIFICATE-----Generated at Fri Apr 4 19:38:22 2025 by rpki-client