$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa File: 0bae7820-559d-38ce-bc60-e8ef8a792915.roa (raw, json) Hash identifier: HglDms9w/VrBzNN6wqqDFjzifLsJGP+f98lCmP9+gQM= Subject key identifier: 7D:B8:51:04:DD:BC:C8:4C:EA:15:E4:67:5D:6E:BA:35:BC:09:38:B7 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F43285849350E880566FC6D060593E6A0 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 216.9.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:88:05:66:fc:6d:06:05:93:e6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=eaad0bb8-44b7-46fb-9f69-e8f652cfa527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:06:77:45:cd:52:8b:bf:18:78:e7:1b:10:a9: 1d:e8:22:e1:18:0b:a6:3c:85:75:51:12:6e:32:af: b0:bd:19:65:86:4d:d9:ab:b9:ef:0e:60:f1:ee:ba: 2b:d6:93:0a:dc:26:5c:2d:79:5a:3d:d6:d8:5c:91: b3:e3:71:1b:bb:ed:b3:98:67:2b:cb:3d:8f:ca:c0: ca:39:c9:57:00:48:84:ad:9a:b3:7a:e1:04:30:39: 7f:20:11:e5:8a:36:09:3f:89:4f:d3:ce:eb:f0:f4: e7:4a:33:c9:5c:62:86:7d:9a:ee:71:b3:fd:22:3a: 1a:03:60:ad:a9:12:d6:56:f5:4a:a2:21:93:b1:9c: 9d:d6:cb:5e:83:f7:0f:1f:ce:20:fb:07:9d:55:40: 98:61:95:6c:6a:08:a4:7e:0d:90:ff:e5:d6:b9:5d: b3:6f:aa:c4:fa:0d:b3:ab:33:60:a2:84:41:2a:32: b6:41:7d:53:3b:18:47:42:39:89:b2:d8:2b:df:17: 86:75:69:d5:44:ec:9e:89:c8:25:8d:ec:ab:d1:e5: 8d:a2:e2:b6:48:00:34:be:4d:9d:8d:ce:b3:50:ce: 91:0b:4c:94:6e:fc:f8:2e:2e:f8:0c:2a:45:b5:95: 47:64:09:56:7e:ea:14:98:aa:3b:17:52:fa:88:93: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B8:51:04:DD:BC:C8:4C:EA:15:E4:67:5D:6E:BA:35:BC:09:38:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/0bae7820-559d-38ce-bc60-e8ef8a792915.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 216.9.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6f:70:0f:7e:f6:62:7e:e0:68:47:e3:2b:1e:46:52:b8:7f: 47:e8:da:f7:70:6d:3f:39:05:fc:0c:2b:c4:c7:e6:3f:95:53: 81:54:8f:5d:61:5a:44:c1:28:cc:74:f2:17:16:02:2d:f2:73: 36:ba:02:e1:21:4e:0d:59:5d:21:f3:d1:2c:7d:ce:d5:bf:c9: cf:52:da:36:35:6b:e0:24:e1:8e:53:b7:b2:08:3f:7d:e2:83: 09:a8:38:7c:41:13:22:6a:c3:48:ea:1e:aa:b6:a5:a1:48:c2: db:eb:bf:63:6c:5e:f0:94:ed:41:c5:4f:0d:77:0c:0b:f5:06: a5:0a:ed:82:7e:fb:93:82:a0:a8:e5:8e:64:a8:0e:58:6a:d6: b6:19:df:97:46:c6:6f:e3:e4:8a:db:0e:e5:d3:c2:97:d3:34: e1:19:9a:04:a6:1f:09:ca:c7:6d:55:e1:f6:af:08:3d:20:04: 69:2b:dd:93:bb:2a:17:cc:6f:b7:93:d8:1b:d4:78:ea:28:19: 38:7a:bd:ac:71:71:1c:d1:31:3d:36:7d:13:1e:a5:b8:a4:f2: a4:49:cb:1e:ff:04:b9:d5:1c:d2:75:ff:5e:78:bb:ba:78:f0: 40:52:55:62:ee:80:41:c2:8f:15:66:44:75:8f:97:b3:ec:43: 95:33:e3:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DogFZvxtBgWT5qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZWFhZDBiYjgtNDRiNy00NmZiLTlmNjktZThmNjUyY2ZhNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQZ3Rc1Si78YeOcbEKkd6CLhGAumPIV1URJu Mq+wvRllhk3Zq7nvDmDx7ror1pMK3CZcLXlaPdbYXJGz43Ebu+2zmGcryz2PysDK OclXAEiErZqzeuEEMDl/IBHlijYJP4lP087r8PTnSjPJXGKGfZrucbP9IjoaA2Ct qRLWVvVKoiGTsZyd1steg/cPH84g+wedVUCYYZVsagikfg2Q/+XWuV2zb6rE+g2z qzNgooRBKjK2QX1TOxhHQjmJstgr3xeGdWnVROyeicgljeyr0eWNouK2SAA0vk2d jc6zUM6RC0yUbvz4Li74DCpFtZVHZAlWfuoUmKo7F1L6iJORiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH24UQTdvMhM6hXkZ11uujW8CTi3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvMGJhZTc4MjAtNTU5ZC0z OGNlLWJjNjAtZThlZjhhNzkyOTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AnMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1vcA9+9mJ+4GhH4yseRlK4f0fo2vdwbT85BfwMK8TH5j+VU4FUj11h WkTBKMx08hcWAi3ycza6AuEhTg1ZXSHz0Sx9ztW/yc9S2jY1a+Ak4Y5Tt7IIP33i gwmoOHxBEyJqw0jqHqq2paFIwtvrv2NsXvCU7UHFTw13DAv1BqUK7YJ++5OCoKjl jmSoDlhq1rYZ35dGxm/j5IrbDuXTwpfTNOEZmgSmHwnKx21V4favCD0gBGkr3ZO7 KhfMb7eT2BvUeOooGTh6vaxxcRzRMT02fRMepbik8qRJyx7/BLnVHNJ1/154u7p4 8EBSVWLugEHCjxVmRHWPl7PsQ5Uz44E= -----END CERTIFICATE-----Generated at Sat Apr 12 15:12:32 2025 by rpki-client