$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/f652d85e-7f1d-381a-80d0-5577ce4aa300.roa File: f652d85e-7f1d-381a-80d0-5577ce4aa300.roa (raw, json) Hash identifier: F6A0e5UfWEWEtoeWb/qZ6iOPUWlrw2AiMXVGVbWWX9k= Subject key identifier: 72:5E:2F:21:3B:C6:F6:AC:84:F7:E5:DD:BB:B5:44:3A:23:C7:33:41 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F432858492CAE7D69E1543D711A08C2C0 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/f652d85e-7f1d-381a-80d0-5577ce4aa300.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 53828 IP address blocks: 144.91.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:7d:69:e1:54:3d:71:1a:08:c2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=be0d0e38-40d7-4fb7-9c9d-6474bc896d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8d:a1:0d:23:c5:5d:c0:b2:77:f8:77:67:de: 0e:cf:a9:bc:f7:89:d5:bd:ba:1f:23:2d:70:9c:42: 7c:ab:3a:21:ec:02:27:4d:9f:32:a4:14:70:43:e5: a3:07:7d:2d:0f:7c:f9:36:9b:10:70:47:67:2c:60: d9:2f:18:12:a7:c8:78:92:e9:1d:46:1f:bc:e2:b4: 1e:5a:bc:6a:8a:82:6e:6b:9e:36:7a:a9:b3:09:bd: ba:55:5b:70:84:e1:00:bf:44:42:77:7b:7b:f2:23: 18:fb:53:40:9e:31:b1:3b:76:73:91:26:f6:5c:32: 74:54:48:93:2e:1d:0a:56:af:f1:a9:7e:9a:0e:16: 6a:21:ab:e0:75:8b:66:04:93:cc:ff:80:fc:05:e7: 4e:90:7f:a7:43:8f:c5:69:c4:6d:01:01:56:eb:c9: c0:62:8c:33:45:26:f0:f6:2b:81:e0:ef:72:cb:98: d0:21:9e:27:1f:39:e3:0e:76:da:d7:c7:8b:3a:f4: 33:14:20:ec:62:ec:2a:03:aa:2e:80:19:2d:3a:2c: f3:15:7b:ec:c2:3b:ed:51:4a:35:70:e8:4d:76:6b: ff:10:b5:ee:63:fd:a7:43:93:82:0c:d8:b4:88:40: ba:49:54:92:64:c2:97:8b:02:b9:58:7e:6e:95:cc: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:5E:2F:21:3B:C6:F6:AC:84:F7:E5:DD:BB:B5:44:3A:23:C7:33:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/f652d85e-7f1d-381a-80d0-5577ce4aa300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 144.91.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:de:43:1b:45:fb:03:d1:de:c2:76:65:b0:25:a9:d0:3b:10: a7:6b:51:b0:46:91:55:57:4c:15:7a:e0:de:fb:7b:62:d1:8b: 1c:57:24:9a:52:de:dc:09:51:c1:a8:23:97:19:da:87:dc:a2: 13:78:95:c5:ed:47:8d:11:aa:11:5f:e5:77:6e:5f:ed:94:d5: ea:d2:6f:1d:ec:c5:40:61:90:7b:d5:77:5c:cd:0d:bf:b5:40: 38:71:31:69:54:f2:45:a9:4b:f0:d2:15:5b:bf:ed:29:b5:d5: b6:9d:86:75:36:db:7b:e3:5d:6b:b3:26:e7:84:00:2e:b8:a9: 11:35:8e:18:78:19:00:3b:12:e1:cf:d0:5f:43:f0:ea:d9:75: 47:e8:3f:54:05:a3:37:58:59:26:42:d2:90:1c:8d:87:fe:3c: 74:11:2d:57:86:41:e5:14:d3:83:49:d5:91:fd:c0:83:bf:de: dc:c8:e6:93:85:7e:13:74:4a:e3:34:51:5d:e8:c0:23:63:66: 1c:f9:c8:63:12:3b:e3:c5:7b:87:3d:6a:8a:8f:02:5d:60:d6: 94:e0:5b:b2:16:e1:74:9b:f0:cd:07:42:a9:84:a6:9c:d1:39: e6:aa:d9:76:0b:fa:4c:53:a2:0d:00:f1:26:6e:65:a7:25:a9: 71:72:99:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrn1p4VQ9cRoIwsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YmUwZDBlMzgtNDBkNy00ZmI3LTljOWQtNjQ3NGJjODk2ZDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI2hDSPFXcCyd/h3Z94Oz6m894nVvbofIy1w nEJ8qzoh7AInTZ8ypBRwQ+WjB30tD3z5NpsQcEdnLGDZLxgSp8h4kukdRh+84rQe WrxqioJua542eqmzCb26VVtwhOEAv0RCd3t78iMY+1NAnjGxO3ZzkSb2XDJ0VEiT Lh0KVq/xqX6aDhZqIavgdYtmBJPM/4D8BedOkH+nQ4/FacRtAQFW68nAYowzRSbw 9iuB4O9yy5jQIZ4nHznjDnba18eLOvQzFCDsYuwqA6ougBktOizzFXvswjvtUUo1 cOhNdmv/ELXuY/2nQ5OCDNi0iEC6SVSSZMKXiwK5WH5ulczhXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJeLyE7xvashPfl3bu1RDojxzNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvZjY1MmQ4NWUtN2YxZC0z ODFhLTgwZDAtNTU3N2NlNGFhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEkFuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3eQxtF+wPR3sJ2ZbAlqdA7EKdrUbBGkVVXTBV64N77e2LRixxXJJpS 3twJUcGoI5cZ2ofcohN4lcXtR40RqhFf5XduX+2U1erSbx3sxUBhkHvVd1zNDb+1 QDhxMWlU8kWpS/DSFVu/7Sm11badhnU223vjXWuzJueEAC64qRE1jhh4GQA7EuHP 0F9D8OrZdUfoP1QFozdYWSZC0pAcjYf+PHQRLVeGQeUU04NJ1ZH9wIO/3tzI5pOF fhN0SuM0UV3owCNjZhz5yGMSO+PFe4c9aoqPAl1g1pTgW7IW4XSb8M0HQqmEppzR Oeaq2XYL+kxTog0A8SZuZaclqXFymfM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:28 2025 by rpki-client