$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa File: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (raw, json) Hash identifier: BC5ozC5fhreKm/1NG9evP7h5ZQzcf4eDTdC+trrNfB8= Subject key identifier: 84:20:37:4C:3F:B7:1A:DC:05:9D:BA:DC:C4:3D:8E:26:67:73:73:11 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F432858488DAB52251BF2D66F7A017480 Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16509 IP address blocks: 216.120.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:52:25:1b:f2:d6:6f:7a:01:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=7a606a8f-66de-4161-8ede-14d22a03f5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ff:ee:4c:cd:74:5f:f3:8d:1a:79:49:bc:45: 17:00:7e:a3:86:ef:bf:06:3c:95:b2:d5:cf:3a:b5: 86:ec:0b:8a:cd:b7:ef:08:5d:f5:f2:7b:65:bf:e9: 2c:a2:c8:c5:27:f4:1b:4c:a4:5a:5e:a6:06:aa:bc: 54:fe:d3:29:c6:17:7f:75:06:dc:8b:62:28:24:a6: ad:cd:c1:95:74:23:ff:97:04:0b:3c:42:98:01:7e: 54:4f:80:3a:36:48:ae:a1:80:ca:28:14:36:50:98: 03:0e:a4:08:a6:a0:34:f2:0f:48:63:0f:5e:76:66: 33:df:51:63:0d:65:6e:86:83:19:98:14:93:da:6c: 4c:88:8f:62:a3:ad:5b:b0:e9:59:2e:ec:c8:c2:47: d8:7e:07:2d:be:54:f1:6f:07:f8:11:0d:8b:4b:28: f0:05:bb:44:45:fa:63:76:85:4f:22:ec:f9:36:ec: c3:22:07:9e:9a:aa:76:f4:3c:2d:86:d4:9a:e8:1a: b9:08:0e:05:65:d2:25:bb:02:63:07:fb:31:0b:c4: fc:03:5d:1a:bf:95:ba:11:ad:ea:16:3b:b2:57:72: fb:a3:56:8d:f3:08:5a:78:f0:6d:75:6f:20:e9:6d: fb:5b:73:3b:85:62:53:69:20:d8:88:5e:18:17:53: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:20:37:4C:3F:B7:1A:DC:05:9D:BA:DC:C4:3D:8E:26:67:73:73:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: 216.120.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:a3:d1:df:57:8f:4f:8d:01:f4:ce:bd:66:f3:6f:b7:c0:da: 0f:8a:02:ee:01:17:f3:0b:6b:60:60:11:9a:5a:6f:ef:e2:12: 60:ec:84:47:f0:09:98:33:c0:a9:09:69:b3:ae:bc:de:94:e2: 86:61:c4:71:26:44:04:b6:8e:66:a9:e6:74:43:66:8b:07:e9: 3f:4c:bf:9b:55:c1:c3:38:37:2f:58:4b:0c:f9:e5:ee:b4:36: ce:8f:d6:65:70:cb:e8:5d:ba:d7:86:33:0c:22:07:d3:49:1d: 07:c6:36:04:b5:2f:c4:f0:72:55:5c:fa:32:45:e0:9e:0f:cd: 0b:44:81:e0:76:e0:f5:9f:bb:c7:f3:66:9a:41:d6:5b:d3:17: b9:52:7c:74:65:77:d8:ad:c1:50:0f:d9:73:b5:80:14:33:11: 4a:b9:9b:03:21:b7:9b:a0:86:4a:ea:ae:82:4c:43:96:4d:e7: 52:10:29:48:ee:1b:e8:db:09:34:5b:3f:d3:97:36:49:5e:a5: 4a:fe:1c:4c:9c:f4:f0:91:f7:92:59:46:e7:12:88:83:50:21: 94:56:7d:08:0b:95:03:bf:66:2a:6c:f8:d2:4a:24:36:44:3d: 87:18:cb:f6:81:d6:e3:a0:b0:ef:47:c5:67:34:50:da:80:d3: 5a:fb:a6:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNq1IlG/LWb3oBdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk N2E2MDZhOGYtNjZkZS00MTYxLThlZGUtMTRkMjJhMDNmNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf/uTM10X/ONGnlJvEUXAH6jhu+/BjyVstXP OrWG7AuKzbfvCF318ntlv+ksosjFJ/QbTKRaXqYGqrxU/tMpxhd/dQbci2IoJKat zcGVdCP/lwQLPEKYAX5UT4A6NkiuoYDKKBQ2UJgDDqQIpqA08g9IYw9edmYz31Fj DWVuhoMZmBST2mxMiI9io61bsOlZLuzIwkfYfgctvlTxbwf4EQ2LSyjwBbtERfpj doVPIuz5NuzDIgeemqp29DwthtSa6Bq5CA4FZdIluwJjB/sxC8T8A10av5W6Ea3q FjuyV3L7o1aN8whaePBtdW8g6W37W3M7hWJTaSDYiF4YF1PPgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQgN0w/txrcBZ263MQ9jiZnc3MRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvMmU3MmQ1YmUtZjlmMi0z MzM5LWIzM2ItNGMxYmEyZjM1OGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HilMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSj0d9Xj0+NAfTOvWbzb7fA2g+KAu4BF/MLa2BgEZpab+/iEmDshEfw CZgzwKkJabOuvN6U4oZhxHEmRAS2jmap5nRDZosH6T9Mv5tVwcM4Ny9YSwz55e60 Ns6P1mVwy+hduteGMwwiB9NJHQfGNgS1L8TwclVc+jJF4J4PzQtEgeB24PWfu8fz ZppB1lvTF7lSfHRld9itwVAP2XO1gBQzEUq5mwMht5ughkrqroJMQ5ZN51IQKUju G+jbCTRbP9OXNklepUr+HEyc9PCR95JZRucSiINQIZRWfQgLlQO/Zips+NJKJDZE PYcYy/aB1uOgsO9HxWc0UNqA01r7pgo= -----END CERTIFICATE-----Generated at Fri Apr 4 16:14:13 2025 by rpki-client