$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa File: b403408d-4926-31d4-9850-4a8d70ac0328.roa (raw, json) Hash identifier: 0XHObJg1MkFP3+h2FWDwwDnje5Wt5pPdK3p7OWQ/2yM= Subject key identifier: 86:1D:B2:21:1D:9D:1C:8E:06:6E:E5:EF:A7:7B:51:F3:26:D8:9F:99 Certificate issuer: /CN=f25c48f2-c7df-4c6b-b214-2e741959995d Certificate serial: 010D0C9F432858491246BAF58AA352394B7CA480 Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 398427 IP address blocks: 185.165.213.0/24 maxlen: 24 185.165.214.0/24 maxlen: 24 185.165.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:ba:f5:8a:a3:52:39:4b:7c:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=f6dde49f-a6ae-4632-84f3-5592ebd96a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ff:68:64:2a:75:0a:dc:ce:a2:1a:cd:1b:84: 29:63:46:98:5b:05:9e:3c:17:c3:0e:26:b3:42:2b: 12:01:99:6f:aa:8f:92:6d:5e:63:3c:cf:6f:9f:4a: f9:de:46:b6:ad:53:5a:e6:ea:d7:c0:70:b4:fb:7e: bc:b0:02:e0:af:67:12:1c:2f:55:42:a4:e2:19:56: 81:98:e1:88:4f:99:ec:dd:ff:06:d4:67:19:2f:ef: 05:a5:db:fb:81:8f:c9:e6:b7:62:50:82:eb:25:de: 01:bd:02:b0:77:9b:47:43:d4:ad:bd:b4:e1:ad:a6: 05:f1:75:01:a1:be:74:5c:2f:2b:8e:f1:1d:d3:fe: 7d:9c:04:3a:0b:15:98:17:26:76:cb:bd:0d:9c:dd: 48:54:a8:a6:38:16:7e:49:da:d3:09:8d:a3:4f:ce: 5c:61:1a:ff:92:0f:a8:4c:82:ae:df:69:f9:05:8d: 00:fc:45:6d:52:14:30:64:b1:45:48:c3:e5:16:bc: 71:64:dc:6b:8e:ab:48:f9:98:de:ef:b6:47:24:68: 8f:f7:25:bc:b3:6d:ea:e1:4b:49:17:dc:ff:44:b1: f2:a9:b1:82:71:bf:6e:66:bb:5a:8a:8b:b4:d9:c2: 67:69:2d:ec:2c:39:02:7a:aa:3f:d4:07:9d:fc:72: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1D:B2:21:1D:9D:1C:8E:06:6E:E5:EF:A7:7B:51:F3:26:D8:9F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/b403408d-4926-31d4-9850-4a8d70ac0328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl X509v3 Authority Key Identifier: keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer sbgp-ipAddrBlock: critical IPv4: 185.165.213.0-185.165.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:34:4d:fb:8f:92:fc:bb:cb:53:49:ec:41:0d:a5:53:7a:6a: 2f:03:10:df:19:d6:fe:3b:51:65:ea:fd:12:d1:84:a8:e4:a0: e7:13:de:8d:c3:77:ed:e0:91:10:13:c0:6a:89:1c:c1:53:9d: e7:38:81:3d:ba:58:d4:b6:5b:3d:2a:4e:65:f4:8c:d8:6f:92: f0:79:a8:77:df:a6:4b:d6:3c:a4:24:bc:01:76:1b:7d:d3:89: 62:ed:36:92:e2:2f:36:dc:41:01:7a:2f:de:29:24:2b:4d:44: 09:6a:cd:03:ef:75:8c:88:91:ee:6d:f6:a3:8f:04:44:0d:d6: 09:02:2f:40:f9:39:0d:d9:a2:89:62:72:cb:0b:21:21:ee:08: f7:8a:f4:98:fe:f5:31:80:b1:28:9d:32:ac:63:cc:a1:0a:cd: c5:26:9a:fe:e6:6b:0c:f2:2e:55:4a:14:3e:8a:06:1b:6b:07: 6c:dd:50:f4:73:e1:9b:2e:f1:3b:2a:8c:5e:88:cb:4b:90:ce: 99:32:cf:fb:8c:5a:b7:04:b7:0b:b6:11:69:ee:e3:b2:ed:12: 58:7e:23:19:eb:74:48:f7:25:9b:f5:b1:35:75:c7:fe:ee:03: 0e:9c:71:63:a2:49:ea:bf:92:cf:6b:80:31:93:64:d5:c2:44: 5d:3a:50:56 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkSRrr1iqNSOUt8pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5 OTVkMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZjZkZGU0OWYtYTZhZS00NjMyLTg0ZjMtNTU5MmViZDk2YTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv9oZCp1CtzOohrNG4QpY0aYWwWePBfDDiaz QisSAZlvqo+SbV5jPM9vn0r53ka2rVNa5urXwHC0+368sALgr2cSHC9VQqTiGVaB mOGIT5ns3f8G1GcZL+8Fpdv7gY/J5rdiUILrJd4BvQKwd5tHQ9StvbThraYF8XUB ob50XC8rjvEd0/59nAQ6CxWYFyZ2y70NnN1IVKimOBZ+SdrTCY2jT85cYRr/kg+o TIKu32n5BY0A/EVtUhQwZLFFSMPlFrxxZNxrjqtI+Zje77ZHJGiP9yW8s23q4UtJ F9z/RLHyqbGCcb9uZrtaiou02cJnaS3sLDkCeqo/1Aed/HJrrwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIYdsiEdnRyOBm7l76d7UfMm2J+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvYjQwMzQwOGQtNDkyNi0z MWQ0LTk4NTAtNGE4ZDcwYWMwMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5 OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0 MTk1OTk5NWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5pdUD BAO5pdAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGjRN+4+S/LvLU0nsQQ2lU3pqLwMQ3xnW/jtRZer9EtGE qOSg5xPejcN37eCREBPAaokcwVOd5ziBPbpY1LZbPSpOZfSM2G+S8Hmod9+mS9Y8 pCS8AXYbfdOJYu02kuIvNtxBAXov3ikkK01ECWrNA+91jIiR7m32o48ERA3WCQIv QPk5DdmiiWJyywshIe4I94r0mP71MYCxKJ0yrGPMoQrNxSaa/uZrDPIuVUoUPooG G2sHbN1Q9HPhmy7xOyqMXojLS5DOmTLP+4xatwS3C7YRae7jsu0SWH4jGet0SPcl m/WxNXXH/u4DDpxxY6JJ6r+Sz2uAMZNk1cJEXTpQVg== -----END CERTIFICATE-----Generated at Sat Apr 12 15:32:45 2025 by rpki-client