$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa File: d4884f4e-c468-36d8-aa72-3b277a102e42.roa (raw, json) Hash identifier: NwjBgM/Y3DQmxP7Odr2PbTLb4DTQ/RrZWkY6HEBdhEw= Subject key identifier: B3:86:BE:D4:C9:67:4B:09:A6:9C:07:45:9E:F2:F4:42:75:03:37:64 Certificate issuer: /CN=d03866eb-6362-4657-aa66-83307258d945 Certificate serial: 010D0C9F43285849244E7C75CDE98CA778D0A500 Authority key identifier: 65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 192.101.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7c:75:cd:e9:8c:a7:78:d0:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d03866eb-6362-4657-aa66-83307258d945 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=66e79d6b-73d8-477a-862e-0ce3f3fc8bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:36:fd:fb:6c:f6:d6:71:cb:a5:2c:37:8b:db: 8f:af:2d:da:15:85:c0:93:b0:2d:ff:e3:8e:f4:95: d8:de:3b:1d:f9:b5:3c:3d:8f:22:26:2a:db:8d:5d: bf:37:8b:46:cf:b9:0c:2d:6d:ac:c0:39:7a:7b:f1: b9:2d:57:5a:b3:0b:f3:ee:a9:61:7a:8f:d4:e6:72: 01:a5:70:ad:93:cc:e8:31:09:b1:c3:a2:30:1b:cc: 6f:6f:3a:94:6e:35:d3:0a:b8:a4:60:ee:2f:96:eb: 77:f5:0d:79:8c:9f:82:cf:64:ff:57:31:cd:8e:7c: 02:02:37:f9:52:c3:a8:e8:c8:9a:a6:5d:80:b1:f9: 55:d1:36:f1:cc:b3:a8:2d:4d:82:c3:a2:d5:76:24: 76:f3:7b:bf:5f:a1:01:2b:57:a0:8a:1f:99:dd:76: 0e:81:f0:18:02:89:df:cc:51:87:e4:0e:5e:f6:78: 2b:bd:2e:f0:b0:bd:30:dc:d6:11:99:cc:29:46:f4: 95:ad:f8:45:6f:31:74:54:fb:c1:c7:da:9f:11:18: f4:40:b8:fc:6b:69:b7:91:0a:bd:9c:33:54:48:5f: 68:31:cf:4a:83:a4:db:25:3c:9d:2b:81:b1:07:6c: df:4e:6e:69:bd:3c:a9:88:36:44:ff:48:c9:81:3c: a5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:86:BE:D4:C9:67:4B:09:A6:9C:07:45:9E:F2:F4:42:75:03:37:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d4884f4e-c468-36d8-aa72-3b277a102e42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945/d03866eb-6362-4657-aa66-83307258d945.crl X509v3 Authority Key Identifier: keyid:65:67:96:9C:5A:F7:28:6C:5C:24:E2:4F:E8:8A:B2:76:7E:B4:29:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d03866eb-6362-4657-aa66-83307258d945.cer sbgp-ipAddrBlock: critical IPv4: 192.101.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:49:30:ab:01:d7:ca:4b:99:92:05:57:08:e5:fd:b1:0e:70: 89:87:6a:54:6d:67:c2:4b:96:1f:19:95:2a:c1:29:86:bd:aa: d1:3a:56:cf:c2:22:36:1c:d6:fc:f6:0c:df:2b:2e:7d:48:ce: e6:aa:fa:b0:6b:1f:c4:1b:54:00:0f:fe:85:57:1c:b2:ca:7e: 95:db:78:85:7f:fb:9e:92:40:db:f6:e3:93:ff:80:5f:c6:89: d7:e7:ce:6e:f8:58:13:be:15:0d:61:4e:e2:6c:ba:ff:f4:6b: ef:83:b9:d5:d2:95:f5:c3:00:00:9f:2d:3d:f8:5e:0c:9b:4f: 0c:5d:32:80:03:d1:88:ce:bf:c8:89:0d:58:09:e9:be:75:91: d0:ae:0a:e0:6e:ac:6a:3e:b3:b9:b8:65:e0:67:53:f6:4d:02: fa:f7:33:b7:82:0a:cf:78:47:63:cc:b6:8a:30:2b:cb:3f:a8: 9b:bb:b5:0c:98:01:79:6c:e1:9f:d0:95:7e:49:c0:8c:19:e9: d5:f6:65:21:18:09:49:f3:cc:ae:e3:86:4b:7a:e6:32:89:59: b2:5f:3f:7b:fe:3b:a8:d3:3c:0c:72:0c:b4:63:36:d3:19:a5: d1:9a:a6:41:85:30:2a:ed:7b:e7:ca:06:0c:e8:06:6c:61:50: 58:b8:73:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnx1zemMp3jQpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzODY2ZWItNjM2Mi00NjU3LWFhNjYtODMzMDcyNThk OTQ1MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NjZlNzlkNmItNzNkOC00NzdhLTg2MmUtMGNlM2YzZmM4YmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjb9+2z21nHLpSw3i9uPry3aFYXAk7At/+OO 9JXY3jsd+bU8PY8iJirbjV2/N4tGz7kMLW2swDl6e/G5LVdaswvz7qlheo/U5nIB pXCtk8zoMQmxw6IwG8xvbzqUbjXTCrikYO4vlut39Q15jJ+Cz2T/VzHNjnwCAjf5 UsOo6Miapl2AsflV0TbxzLOoLU2Cw6LVdiR283u/X6EBK1egih+Z3XYOgfAYAonf zFGH5A5e9ngrvS7wsL0w3NYRmcwpRvSVrfhFbzF0VPvBx9qfERj0QLj8a2m3kQq9 nDNUSF9oMc9Kg6TbJTydK4GxB2zfTm5pvTypiDZE/0jJgTylwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOGvtTJZ0sJppwHRZ7y9EJ1AzdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4 NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMwNzI1OGQ5NDUvZDQ4ODRmNGUtYzQ2OC0z NmQ4LWFhNzItM2IyNzdhMTAyZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDAzODY2ZWItNjM2Mi00NjU3LWFh NjYtODMzMDcyNThkOTQ1L2QwMzg2NmViLTYzNjItNDY1Ny1hYTY2LTgzMzA3MjU4 ZDk0NS5jcmwwHwYDVR0jBBgwFoAUZWeWnFr3KGxcJOJP6Iqydn60KRcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMDM4NjZlYi02MzYyLTQ2NTctYWE2Ni04MzMw NzI1OGQ5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBJMKsB18pLmZIFVwjl/bEOcImHalRtZ8JLlh8ZlSrBKYa9qtE6Vs/C IjYc1vz2DN8rLn1Izuaq+rBrH8QbVAAP/oVXHLLKfpXbeIV/+56SQNv245P/gF/G idfnzm74WBO+FQ1hTuJsuv/0a++DudXSlfXDAACfLT34XgybTwxdMoAD0YjOv8iJ DVgJ6b51kdCuCuBurGo+s7m4ZeBnU/ZNAvr3M7eCCs94R2PMtoowK8s/qJu7tQyY AXls4Z/QlX5JwIwZ6dX2ZSEYCUnzzK7jhkt65jKJWbJfP3v+O6jTPAxyDLRjNtMZ pdGapkGFMCrte+fKBgzoBmxhUFi4cwA= -----END CERTIFICATE-----Generated at Fri Mar 14 08:19:12 2025 by rpki-client