$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa File: 9b9b9c14-7c59-311c-b7c4-f4928230b433.roa (raw, json) Hash identifier: bO5KP2bCxaj9afFj5u9xODYaOcAo6xji4aqKQg4T9vg= Subject key identifier: 59:6E:54:B1:99:A1:3A:B1:19:0B:F0:DD:44:AA:E2:4F:98:A0:C1:97 Certificate issuer: /CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Certificate serial: 010D0C9F43285848CC7B9F3D62F89A677FCBDF80 Authority key identifier: AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 8075 IP address blocks: 167.21.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:9f:3d:62:f8:9a:67:7f:cb:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d182bd9-cdc4-4b65-b79d-8927691ae9c2 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=fbb7d647-b5ae-4328-bc4b-4cbbca9684ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:6b:e9:58:45:4d:3f:11:06:e2:2f:e7:25:59: a4:f6:ae:a9:a4:b4:b8:22:8c:ef:9f:39:31:29:ef: cf:8f:c7:6f:0d:59:0b:66:79:f5:29:9c:33:8c:f9: 9d:c3:b9:fc:f5:2e:7b:27:bf:ca:bc:18:55:fe:63: e0:78:3c:03:10:71:a5:d4:25:12:2a:81:23:96:fc: 3e:61:79:b7:37:d7:30:df:7e:77:1e:5b:4c:10:4a: 50:f7:4b:e9:5d:55:45:cb:30:c7:55:2f:57:fa:5b: 87:c9:8c:da:d1:96:61:e9:1a:a6:92:27:0d:27:0c: bb:1e:2e:fd:63:fe:54:0b:32:86:d4:b1:8a:50:e7: 4a:3c:28:fe:7e:43:0e:bf:8c:33:3a:43:33:23:f5: a5:d9:d7:1c:0a:6f:90:f2:08:c1:29:68:31:1c:46: e3:e5:a8:2e:d6:27:17:81:f5:cc:44:ef:24:23:8d: 3b:20:31:b1:a8:89:68:cf:cf:20:77:6f:8f:c2:c0: b4:69:52:ee:46:e4:47:0c:26:2a:f5:3a:22:ce:12: ac:b9:30:f7:a9:37:42:5a:b4:a4:2f:59:cb:14:af: a8:44:63:a8:1f:f0:26:eb:3e:bf:9d:31:bf:ff:7d: e3:fc:fe:22:4c:7f:3e:07:96:58:b9:a3:3d:bc:76: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6E:54:B1:99:A1:3A:B1:19:0B:F0:DD:44:AA:E2:4F:98:A0:C1:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/9b9b9c14-7c59-311c-b7c4-f4928230b433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.crl X509v3 Authority Key Identifier: keyid:AD:32:38:49:8D:26:D8:9D:B1:0C:72:87:DB:A6:C1:31:24:79:B9:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d182bd9-cdc4-4b65-b79d-8927691ae9c2.cer sbgp-ipAddrBlock: critical IPv4: 167.21.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:49:30:97:cd:13:c4:cf:3b:50:4b:d8:ff:f8:a4:6d:c8:43: 01:53:ee:5b:b5:2e:24:b8:9b:2c:ee:d8:41:f3:d3:9e:be:10: 4b:b8:de:a4:65:14:11:d1:c8:8c:52:e6:2b:3e:24:11:88:0a: 78:60:7b:2e:bd:e1:85:d0:0f:1b:44:b1:6d:26:e1:97:22:c3: 65:13:fe:8c:21:85:cb:53:00:bf:75:08:71:a8:eb:75:d4:79: 20:2d:87:51:dc:c5:bf:9e:e4:10:66:97:05:56:91:5b:85:08: 33:f8:fc:6c:65:34:ef:36:40:58:6f:df:8f:5f:2f:46:bd:a1: 38:90:6c:3b:6c:64:f6:03:af:8d:03:a2:37:14:a2:68:b5:04: 92:df:fd:a4:97:54:96:ea:f8:ac:e4:93:0b:5b:8a:1a:c8:df: 98:02:7b:2c:19:ef:f7:be:1c:47:d2:9d:51:28:b8:a2:46:06: bd:88:d9:12:73:60:91:6d:46:cd:43:8f:25:f1:c6:09:39:20: eb:5a:12:16:bc:a8:6e:8f:7a:29:b6:19:6e:e8:e5:02:16:9a: fc:d8:b2:7f:b6:52:50:39:15:34:96:c7:65:d8:60:c9:10:8c: ca:e5:8d:ca:56:fd:ea:b0:a2:ec:93:bf:ea:bc:a8:56:ec:ff: 9b:0e:bd:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe589YviaZ3/L34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxODJiZDktY2RjNC00YjY1LWI3OWQtODkyNzY5MWFl OWMyMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk ZmJiN2Q2NDctYjVhZS00MzI4LWJjNGItNGNiYmNhOTY4NGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2vpWEVNPxEG4i/nJVmk9q6ppLS4Iozvnzkx Ke/Pj8dvDVkLZnn1KZwzjPmdw7n89S57J7/KvBhV/mPgeDwDEHGl1CUSKoEjlvw+ YXm3N9cw3353HltMEEpQ90vpXVVFyzDHVS9X+luHyYza0ZZh6RqmkicNJwy7Hi79 Y/5UCzKG1LGKUOdKPCj+fkMOv4wzOkMzI/Wl2dccCm+Q8gjBKWgxHEbj5agu1icX gfXMRO8kI407IDGxqIloz88gd2+PwsC0aVLuRuRHDCYq9ToizhKsuTD3qTdCWrSk L1nLFK+oRGOoH/Am6z6/nTG//33j/P4iTH8+B5ZYuaM9vHbvAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFluVLGZoTqxGQvw3USq4k+YoMGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4 MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3NjkxYWU5YzIvOWI5YjljMTQtN2M1OS0z MTFjLWI3YzQtZjQ5MjgyMzBiNDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QxODJiZDktY2RjNC00YjY1LWI3 OWQtODkyNzY5MWFlOWMyLzNkMTgyYmQ5LWNkYzQtNGI2NS1iNzlkLTg5Mjc2OTFh ZTljMi5jcmwwHwYDVR0jBBgwFoAUrTI4SY0m2J2xDHKH26bBMSR5uQkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDE4MmJkOS1jZGM0LTRiNjUtYjc5ZC04OTI3 NjkxYWU5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhJMJfNE8TPO1BL2P/4pG3IQwFT7lu1LiS4myzu2EHz056+EEu43qRl FBHRyIxS5is+JBGICnhgey694YXQDxtEsW0m4Zciw2UT/owhhctTAL91CHGo63XU eSAth1Hcxb+e5BBmlwVWkVuFCDP4/GxlNO82QFhv349fL0a9oTiQbDtsZPYDr40D ojcUomi1BJLf/aSXVJbq+KzkkwtbihrI35gCeywZ7/e+HEfSnVEouKJGBr2I2RJz YJFtRs1DjyXxxgk5IOtaEha8qG6Peim2GW7o5QIWmvzYsn+2UlA5FTSWx2XYYMkQ jMrljcpW/eqwouyTv+q8qFbs/5sOvSI= -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:15 2025 by rpki-client