$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/01e8fdf9-f384-346e-959f-5fadfa8b03a5.roa File: 01e8fdf9-f384-346e-959f-5fadfa8b03a5.roa (raw, json) Hash identifier: 2RhOuqhqdiJ5sYPiTGy4MKt1nXnQKIZIFdb7gVenTuU= Subject key identifier: 68:2B:F2:87:D3:92:5A:E9:4D:11:25:57:5C:42:E7:D6:EF:CC:DE:06 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F432858492CAE852F602E273CA5B8EF20 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/01e8fdf9-f384-346e-959f-5fadfa8b03a5.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 53828 IP address blocks: 207.5.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:85:2f:60:2e:27:3c:a5:b8:ef:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=fbac6c50-e574-4df3-91aa-d93601e0b7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ee:83:2b:93:20:56:57:08:5c:dc:78:20:14: 2b:0e:a3:11:11:1b:e7:b2:46:06:6c:77:8e:7f:12: be:97:09:dc:10:4a:e8:d2:85:a9:bf:47:e6:03:24: c9:59:6b:44:c5:31:19:05:16:db:a8:af:33:11:be: 69:60:7f:d2:f3:44:47:78:a6:98:b0:4e:60:3c:21: f9:8f:b7:f2:69:27:5e:d1:a2:da:49:45:b3:b3:73: 35:8e:35:8e:23:4d:55:6a:21:4f:09:82:e0:d5:d0: a1:b6:b8:75:dc:9d:e6:72:79:37:69:56:8c:03:d5: c3:35:4a:72:21:85:30:cc:10:83:9b:06:86:8e:7d: c3:bd:7d:99:44:ca:0b:78:ce:22:b9:f6:4b:d2:7e: 5c:67:7f:a3:48:65:84:a4:b9:a0:3d:39:57:34:69: f2:e0:15:95:99:73:fa:0e:a5:b2:be:23:6f:48:77: d7:2f:5a:b7:2c:ae:30:2f:d1:64:84:b0:67:93:ba: e7:93:8d:f4:66:90:e9:ef:43:2f:93:cc:d3:fd:c6: e4:17:11:12:9c:95:a2:21:5a:4e:84:6f:1e:20:2c: 5e:0e:13:91:27:6c:bb:52:4c:df:16:e7:da:bd:5c: da:77:d8:a6:a8:6e:6f:6c:c2:5c:ee:74:f8:57:54: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2B:F2:87:D3:92:5A:E9:4D:11:25:57:5C:42:E7:D6:EF:CC:DE:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/01e8fdf9-f384-346e-959f-5fadfa8b03a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 207.5.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:76:21:a0:2a:22:e8:4d:05:3e:36:0d:3c:44:ad:97:2f:12: 22:31:b0:3c:8a:66:d3:5e:09:c1:6d:6a:cb:fe:7b:20:de:7a: 99:52:8c:10:72:72:d8:d3:16:af:f7:d0:17:53:58:f1:1c:9d: bb:86:3c:96:c8:ff:d8:28:38:d5:4c:05:8e:31:44:fa:99:97: c5:14:db:82:45:71:50:85:47:2b:62:be:84:7d:18:9e:92:99: 07:3e:ff:c1:69:10:69:d0:ce:f9:9e:f0:f0:4a:e5:5f:fc:dc: f8:af:74:5e:58:a1:05:50:0e:3a:10:27:79:c6:7e:4c:5f:31: cd:48:cf:5f:a7:1e:bf:8f:7a:b1:f2:e4:35:75:db:bf:43:b2: c3:61:df:50:0a:48:d9:72:43:6e:f9:50:c4:23:ec:fb:c6:80: 99:e1:fd:73:a9:09:ee:7f:9b:5e:db:9c:31:c4:e9:6d:e9:b0: 4c:6f:25:32:41:90:8b:9e:c4:a7:cf:68:78:5c:a4:b1:2a:81: 85:aa:09:48:76:8e:c7:7f:a3:24:b3:7c:a1:9a:bc:a0:a2:85: 80:6e:e0:88:cd:d8:ce:e7:77:88:09:cf:89:66:73:e3:7c:0a: 2a:2f:16:5b:76:a2:c0:9b:29:61:81:65:74:a2:27:5f:84:35: dc:e0:d1:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroUvYC4nPKW47yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZmJhYzZjNTAtZTU3NC00ZGYzLTkxYWEtZDkzNjAxZTBiN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu6DK5MgVlcIXNx4IBQrDqMRERvnskYGbHeO fxK+lwncEEro0oWpv0fmAyTJWWtExTEZBRbbqK8zEb5pYH/S80RHeKaYsE5gPCH5 j7fyaSde0aLaSUWzs3M1jjWOI01VaiFPCYLg1dChtrh13J3mcnk3aVaMA9XDNUpy IYUwzBCDmwaGjn3DvX2ZRMoLeM4iufZL0n5cZ3+jSGWEpLmgPTlXNGny4BWVmXP6 DqWyviNvSHfXL1q3LK4wL9FkhLBnk7rnk430ZpDp70Mvk8zT/cbkFxESnJWiIVpO hG8eICxeDhORJ2y7UkzfFufavVzad9imqG5vbMJc7nT4V1RTaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgr8ofTklrpTRElV1xC59bvzN4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvMDFlOGZkZjktZjM4NC0z NDZlLTk1OWYtNWZhZGZhOGIwM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzwVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN2IaAqIuhNBT42DTxErZcvEiIxsDyKZtNeCcFtasv+eyDeeplSjBBy ctjTFq/30BdTWPEcnbuGPJbI/9goONVMBY4xRPqZl8UU24JFcVCFRytivoR9GJ6S mQc+/8FpEGnQzvme8PBK5V/83PivdF5YoQVQDjoQJ3nGfkxfMc1Iz1+nHr+PerHy 5DV1279DssNh31AKSNlyQ275UMQj7PvGgJnh/XOpCe5/m17bnDHE6W3psExvJTJB kIuexKfPaHhcpLEqgYWqCUh2jsd/oySzfKGavKCihYBu4IjN2M7nd4gJz4lmc+N8 CiovFlt2osCbKWGBZXSiJ1+ENdzg0V0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:26:24 2025 by rpki-client