$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa File: 43efa9da-f2bc-3983-a912-86d2468191e3.roa (raw, json) Hash identifier: l7PEzaXA3Vcc/6QYJxJx0EsOrLVXbWOJnjIS+NumO1o= Subject key identifier: 1C:35:8C:0B:5E:AC:2C:12:06:9E:1A:BC:1E:78:1A:42:35:68:45:5C Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584913AC21476F2C669858CE01E0 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 1239 IP address blocks: 65.181.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:21:47:6f:2c:66:98:58:ce:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=18cb4775-7740-462f-8d8c-dc82513f4b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1a:40:e9:0c:cb:dc:de:41:c2:32:b8:d2:f5: eb:f8:74:e9:0c:dc:6a:10:18:b3:f4:2d:9d:d2:c5: c1:c5:e5:a0:07:68:97:5b:31:be:f1:9f:87:18:9d: 2c:3e:61:8b:4a:84:ba:b2:b2:62:57:7c:4c:7e:d7: 8e:42:2f:0f:df:0d:57:dc:5a:5f:41:18:80:d9:87: 26:e1:59:f1:0f:89:0c:db:cd:b4:c3:12:e4:de:9a: bb:09:9c:bb:e8:7e:6e:b0:b3:98:23:e5:f7:32:74: 09:e9:8d:01:7e:5a:a3:cf:0a:67:62:ad:d4:ca:ae: 87:f2:70:ae:37:11:77:89:9a:aa:bb:d4:c5:1a:82: 98:5b:ae:e9:d4:7b:0c:39:e8:dc:76:70:3d:6b:b4: 31:9b:4b:b4:bf:d4:ac:82:80:40:56:74:61:1c:9a: a2:f8:e2:b6:68:91:ae:62:de:06:d9:d7:72:92:7c: 3e:fd:cd:9f:9c:09:4f:18:7b:e9:1a:d7:c7:77:03: 77:a8:8a:20:d7:08:4e:b0:03:b9:8f:17:cd:53:6d: 10:91:21:c3:86:63:5b:1a:5d:19:da:72:09:a6:1d: 1b:4f:36:f5:84:ab:78:71:22:b5:88:7a:17:7f:77: cc:31:c7:39:55:6a:60:c8:ff:82:aa:17:d2:33:a6: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:35:8C:0B:5E:AC:2C:12:06:9E:1A:BC:1E:78:1A:42:35:68:45:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/43efa9da-f2bc-3983-a912-86d2468191e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:ad:2e:12:16:93:95:8f:51:e6:e1:bb:66:c9:58:8d:ec:c1: c3:a2:24:52:1d:2c:2b:18:b2:34:e0:22:30:19:93:5b:58:7a: b2:5d:d3:7f:ce:5f:6d:c2:c1:38:45:4c:2b:85:00:ab:8b:51: 53:85:82:66:f0:50:86:fa:5c:ff:c3:73:86:e0:49:e4:38:b6: 48:cd:e4:05:58:e2:4c:18:e4:d3:db:37:be:3b:90:76:e4:33: 22:77:9e:59:ce:9e:45:fc:25:75:1f:c7:2f:3c:a4:3e:65:11: 38:4a:8f:1b:14:2c:58:50:48:1a:ec:70:8b:f0:b1:86:0a:af: 5b:dd:50:00:ca:a3:80:4a:16:8e:8d:c7:a4:c9:11:42:c3:c0: 22:6c:5e:89:82:b7:98:63:24:11:c0:3d:ef:e7:90:b9:c0:27: 14:4f:7a:19:cf:a9:61:0a:9f:d5:d4:4c:b6:ed:0c:03:e0:a7: fa:66:85:53:c7:48:b1:5b:e8:72:a7:20:20:71:9d:91:1a:c5: 16:db:63:b8:af:95:8d:2d:01:eb:34:30:50:4d:28:cc:3c:62: db:f5:cc:6a:e4:04:a3:86:63:64:93:4b:eb:16:3e:98:9f:3f: 71:3e:9f:53:1a:c7:e4:2a:bd:e8:96:a8:fc:0c:27:65:f5:38: 0e:fa:6b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCFHbyxmmFjOAeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MThjYjQ3NzUtNzc0MC00NjJmLThkOGMtZGM4MjUxM2Y0YjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhpA6QzL3N5BwjK40vXr+HTpDNxqEBiz9C2d 0sXBxeWgB2iXWzG+8Z+HGJ0sPmGLSoS6srJiV3xMfteOQi8P3w1X3FpfQRiA2Ycm 4VnxD4kM2820wxLk3pq7CZy76H5usLOYI+X3MnQJ6Y0BflqjzwpnYq3Uyq6H8nCu NxF3iZqqu9TFGoKYW67p1HsMOejcdnA9a7Qxm0u0v9SsgoBAVnRhHJqi+OK2aJGu Yt4G2ddyknw+/c2fnAlPGHvpGtfHdwN3qIog1whOsAO5jxfNU20QkSHDhmNbGl0Z 2nIJph0bTzb1hKt4cSK1iHoXf3fMMcc5VWpgyP+CqhfSM6bA2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw1jAterCwSBp4avB54GkI1aEVcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvNDNlZmE5ZGEtZjJiYy0z OTgzLWE5MTItODZkMjQ2ODE5MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQbWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+tLhIWk5WPUebhu2bJWI3swcOiJFIdLCsYsjTgIjAZk1tYerJd03/O X23CwThFTCuFAKuLUVOFgmbwUIb6XP/Dc4bgSeQ4tkjN5AVY4kwY5NPbN747kHbk MyJ3nlnOnkX8JXUfxy88pD5lEThKjxsULFhQSBrscIvwsYYKr1vdUADKo4BKFo6N x6TJEULDwCJsXomCt5hjJBHAPe/nkLnAJxRPehnPqWEKn9XUTLbtDAPgp/pmhVPH SLFb6HKnICBxnZEaxRbbY7ivlY0tAes0MFBNKMw8Ytv1zGrkBKOGY2STS+sWPpif P3E+n1Max+QqveiWqPwMJ2X1OA76aw4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:18 2025 by rpki-client