$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa File: 9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa (raw, json) Hash identifier: kfdXI5hH4ue7asgRcky/90tveWJ/Xzplizhc792+5Ak= Subject key identifier: B8:44:A9:25:B5:DB:E7:D8:61:17:03:55:76:36:A2:D6:6A:65:34:77 Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Certificate serial: 010D0C9F43285848FD56ADD9066D1767082CE680 Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 11550 IP address blocks: 173.243.176.0/20 maxlen: 24 199.96.120.0/22 maxlen: 24 204.89.253.0/24 maxlen: 24 216.249.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:ad:d9:06:6d:17:67:08:2c:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=4b2e0bb4-54a2-4b09-bedd-b79fce8793ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:76:e6:21:08:1c:77:aa:b7:8a:d1:ea:ad:50: 1f:3a:f2:85:14:c5:30:50:d5:e1:7e:6b:00:71:28: 77:51:13:fe:80:af:72:8c:fe:17:7d:cb:b0:f1:8d: 12:a7:14:7a:95:99:c3:6e:be:a9:07:bc:0e:d3:fa: fe:82:89:0b:26:f1:5f:f0:75:64:75:d0:1e:2b:f2: f7:38:93:15:41:9c:c1:03:a7:cf:0f:49:3d:69:7b: 09:5b:0a:aa:2e:6c:f4:35:83:d8:d0:4e:df:ce:fc: a1:50:83:fe:26:4f:51:5c:97:1e:54:af:c6:7e:dc: 49:8f:d0:24:3a:3d:52:c5:9f:e2:e1:6e:4a:17:4e: e5:6f:07:27:38:24:27:ae:4e:25:84:e3:3c:b8:94: 2a:c7:cd:e9:d6:d9:ef:56:59:56:bd:f2:f9:ce:8e: f7:93:49:28:3b:5b:89:18:1f:b0:a9:f2:f8:d4:9a: bc:8b:d5:23:b0:8a:3d:c1:b8:fe:db:d2:91:9e:25: df:e2:6d:9e:e7:d4:94:2f:9f:e2:07:12:45:fd:3f: 92:19:1a:c9:88:f8:82:3c:8f:24:ba:19:77:49:98: 1b:8d:0b:64:24:51:b3:e3:4e:f0:e2:07:e1:af:34: cd:5c:fb:b9:2b:b3:50:ab:1d:be:cf:4f:85:f2:b1: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:44:A9:25:B5:DB:E7:D8:61:17:03:55:76:36:A2:D6:6A:65:34:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl X509v3 Authority Key Identifier: keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer sbgp-ipAddrBlock: critical IPv4: 173.243.176.0/20 199.96.120.0/22 204.89.253.0/24 216.249.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:a3:9b:78:87:61:3c:5a:28:db:dd:cf:87:29:f5:b7:c4:30: 3a:ee:0f:ac:20:9e:9e:23:cd:fd:d6:22:51:01:55:49:7d:e6: b2:34:97:f2:db:94:2f:b2:34:94:73:df:bf:07:cb:f7:f4:33: f2:9d:3c:08:5e:23:7f:8c:90:15:e9:35:32:05:e3:45:9d:0d: f3:f8:c9:1e:1c:2b:01:9b:3c:47:84:13:77:30:f0:46:a3:36: 2c:40:52:d2:dd:d4:23:cb:e8:9e:3b:42:3a:f7:a6:81:9c:1f: a1:da:53:85:bb:30:9f:5b:56:1f:64:7b:db:cc:76:c8:47:d5: 6b:96:50:e5:b6:f3:bb:f7:a6:c9:ff:28:4e:74:85:21:43:6b: a5:c1:f3:90:04:96:bb:9a:57:c5:65:a2:4f:70:d4:8e:ab:50: 52:18:a0:45:b5:95:aa:49:4e:9d:ab:16:29:1c:0e:f3:be:e4: 72:29:02:12:f3:4e:05:8e:8c:79:39:6f:5e:6c:34:9c:87:c1: 52:a8:81:45:99:9a:41:6d:e1:83:41:5a:aa:78:fb:00:e4:3b: 1b:36:73:54:be:48:bc:9d:92:9b:33:64:d9:81:a2:99:d9:7a: 00:5e:b4:48:6d:62:21:8e:ec:cf:6b:87:64:f5:aa:5a:aa:a3: e6:6e:36:4c -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEj9Vq3ZBm0XZwgs5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VhYmE4MzAtMGYxNS00YzM2LTk5YjAtMGMxNGJmN2Vi ZjllMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGIyZTBiYjQtNTRhMi00YjA5LWJlZGQtYjc5ZmNlODc5M2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXbmIQgcd6q3itHqrVAfOvKFFMUwUNXhfmsA cSh3URP+gK9yjP4Xfcuw8Y0SpxR6lZnDbr6pB7wO0/r+gokLJvFf8HVkddAeK/L3 OJMVQZzBA6fPD0k9aXsJWwqqLmz0NYPY0E7fzvyhUIP+Jk9RXJceVK/GftxJj9Ak Oj1SxZ/i4W5KF07lbwcnOCQnrk4lhOM8uJQqx83p1tnvVllWvfL5zo73k0koO1uJ GB+wqfL41Jq8i9UjsIo9wbj+29KRniXf4m2e59SUL5/iBxJF/T+SGRrJiPiCPI8k uhl3SZgbjQtkJFGz407w4gfhrzTNXPu5K7NQqx2+z0+F8rEWnQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFLhEqSW12+fYYRcDVXY2otZqZTR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFi YTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0YmY3ZWJmOWUvOWRhYjJmZjQtNmU0Ny0z ZTEyLTlhOTYtNGNkNzBiNGU4ZTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2VhYmE4MzAtMGYxNS00YzM2LTk5 YjAtMGMxNGJmN2ViZjllLzNlYWJhODMwLTBmMTUtNGMzNi05OWIwLTBjMTRiZjdl YmY5ZS5jcmwwHwYDVR0jBBgwFoAUtkIn1zQmnRVMSxbhUm+PwQP6MTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWFiYTgzMC0wZjE1LTRjMzYtOTliMC0wYzE0 YmY3ZWJmOWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQErfOwAwQC x2B4AwQAzFn9AwQF2PlAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAejm3iHYTxaKNvdz4cp9bfEMDruD6wg np4jzf3WIlEBVUl95rI0l/LblC+yNJRz378Hy/f0M/KdPAheI3+MkBXpNTIF40Wd DfP4yR4cKwGbPEeEE3cw8EajNixAUtLd1CPL6J47Qjr3poGcH6HaU4W7MJ9bVh9k e9vMdshH1WuWUOW287v3psn/KE50hSFDa6XB85AElruaV8Vlok9w1I6rUFIYoEW1 lapJTp2rFikcDvO+5HIpAhLzTgWOjHk5b15sNJyHwVKogUWZmkFt4YNBWqp4+wDk Oxs2c1S+SLydkpszZNmBopnZegBetEhtYiGO7M9rh2T1qlqqo+ZuNkw= -----END CERTIFICATE-----Generated at Fri Mar 14 11:13:44 2025 by rpki-client