$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/011c8cd8-281d-317c-b66f-0fe8c16e848a.roa File: 011c8cd8-281d-317c-b66f-0fe8c16e848a.roa (raw, json) Hash identifier: tgV/0HDDp0vpeQPn6hk3BqOWaaxxdSElVVAnxaA/VqA= Subject key identifier: 6E:15:D5:56:8A:1C:28:94:E1:46:89:4D:B7:92:CA:63:62:69:E2:96 Certificate issuer: /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Certificate serial: 010D0C9F43285848B35B654E207F67087A144700 Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/011c8cd8-281d-317c-b66f-0fe8c16e848a.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 11472 IP address blocks: 208.65.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:65:4e:20:7f:67:08:7a:14:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=7891aa3c-45ae-4c27-bf39-e20f68a373e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e7:dd:c4:aa:7b:39:53:10:34:60:66:be:30: a2:fe:3e:35:ea:91:c6:ea:30:ad:90:39:d5:6b:bc: a6:6a:f9:37:22:65:cb:92:aa:e0:d3:0d:92:4c:03: 8d:10:35:fa:47:71:62:13:12:16:4c:2e:b9:e2:36: 1c:79:d7:12:ec:68:e9:c2:74:c9:99:af:13:f5:6c: 2e:98:4d:f9:8a:df:e1:4e:cf:b9:d4:54:23:82:d1: 91:44:3e:ae:7f:ec:44:27:cf:cd:5b:6b:ff:96:af: 38:4d:89:0f:46:47:34:a0:84:db:d6:3a:9f:30:2a: 70:85:87:4b:88:20:e1:3d:2d:35:93:05:0a:fa:3b: 37:75:4a:2f:07:3e:21:d6:3f:42:13:41:bb:30:5b: 96:d2:34:0f:d9:0b:36:dc:52:61:db:b4:f8:2a:31: 27:06:5a:54:9b:7d:4e:56:5e:2a:83:80:32:3f:df: 96:85:89:03:c7:8a:c5:8f:b3:a0:a5:89:cf:0a:79: 22:b5:82:d9:0f:3c:31:3f:25:ef:fa:db:ae:5c:32: ed:a5:d8:c1:02:e0:a9:36:6d:2c:06:dc:0e:88:fc: 1a:1b:45:11:f4:af:f9:73:4a:cc:ef:8d:e4:85:66: 97:8c:c3:95:97:43:e6:15:8f:a5:8e:c1:5e:fd:24: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:15:D5:56:8A:1C:28:94:E1:46:89:4D:B7:92:CA:63:62:69:E2:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/011c8cd8-281d-317c-b66f-0fe8c16e848a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl X509v3 Authority Key Identifier: keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer sbgp-ipAddrBlock: critical IPv4: 208.65.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:7a:3c:55:45:fc:81:a6:fb:a6:56:2e:04:38:4c:e6:d6:bd: d5:56:51:11:5e:71:52:4a:5c:d0:9a:5c:cf:0e:38:f8:fe:8d: 89:a7:e8:77:5a:fd:56:75:77:1c:19:e9:7a:e3:10:ea:e2:eb: 6b:7c:d2:14:c6:da:19:83:bf:79:b2:d6:4a:df:ac:3d:95:aa: 66:57:4e:39:ad:a6:36:80:45:2a:41:ac:88:92:f2:c7:5e:81: 44:c2:b6:00:4a:0b:27:41:38:fe:62:0b:cc:6c:9d:d6:69:d7: 0c:15:27:84:29:fc:3f:57:b5:9e:d4:fc:2a:90:f4:3a:31:dd: cb:9e:85:85:77:0e:3d:04:4e:66:ca:fe:b9:75:4c:5a:75:ff: 3e:47:69:9e:40:75:3d:c4:65:11:58:15:76:dd:ef:fa:51:d8: 48:eb:1b:a1:e7:3d:96:fc:30:ed:5c:e6:7a:54:22:97:ac:22: 2b:26:95:05:fa:7f:97:66:20:a7:78:f6:ed:a3:53:0b:a8:bc: 26:05:e9:27:9f:75:a8:91:51:68:ff:5c:da:ed:59:94:7a:e9: 80:ab:8f:86:39:0e:9d:09:da:1c:34:77:9d:68:94:23:76:19: 40:af:17:1c:4b:19:75:e1:92:bf:c3:49:1e:f1:53:93:b5:b5: 05:55:f0:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2VOIH9nCHoURwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE5NGE5ZWQtNjVlMS00ZGYxLTg1YWEtOWEzNWM1NzEy NTNiMB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk Nzg5MWFhM2MtNDVhZS00YzI3LWJmMzktZTIwZjY4YTM3M2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgefdxKp7OVMQNGBmvjCi/j416pHG6jCtkDnV a7ymavk3ImXLkqrg0w2STAONEDX6R3FiExIWTC654jYcedcS7GjpwnTJma8T9Wwu mE35it/hTs+51FQjgtGRRD6uf+xEJ8/NW2v/lq84TYkPRkc0oITb1jqfMCpwhYdL iCDhPS01kwUK+js3dUovBz4h1j9CE0G7MFuW0jQP2Qs23FJh27T4KjEnBlpUm31O Vl4qg4AyP9+WhYkDx4rFj7OgpYnPCnkitYLZDzwxPyXv+tuuXDLtpdjBAuCpNm0s BtwOiPwaG0UR9K/5c0rM743khWaXjMOVl0PmFY+ljsFe/SQi5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4V1VaKHCiU4UaJTbeSymNiaeKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0 YTllZC02NWUxLTRkZjEtODVhYS05YTM1YzU3MTI1M2IvMDExYzhjZDgtMjgxZC0z MTdjLWI2NmYtMGZlOGMxNmU4NDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjE5NGE5ZWQtNjVlMS00ZGYxLTg1 YWEtOWEzNWM1NzEyNTNiL2IxOTRhOWVkLTY1ZTEtNGRmMS04NWFhLTlhMzVjNTcx MjUzYi5jcmwwHwYDVR0jBBgwFoAUiRTq4jC8zw1lBsAefDSTsaNdzYcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0YTllZC02NWUxLTRkZjEtODVhYS05YTM1 YzU3MTI1M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV6PFVF/IGm+6ZWLgQ4TObWvdVWURFecVJKXNCaXM8OOPj+jYmn6Hda /VZ1dxwZ6XrjEOri62t80hTG2hmDv3my1krfrD2VqmZXTjmtpjaARSpBrIiS8sde gUTCtgBKCydBOP5iC8xsndZp1wwVJ4Qp/D9XtZ7U/CqQ9Dox3cuehYV3Dj0ETmbK /rl1TFp1/z5HaZ5AdT3EZRFYFXbd7/pR2EjrG6HnPZb8MO1c5npUIpesIismlQX6 f5dmIKd49u2jUwuovCYF6SefdaiRUWj/XNrtWZR66YCrj4Y5Dp0J2hw0d51olCN2 GUCvFxxLGXXhkr/DSR7xU5O1tQVV8Mw= -----END CERTIFICATE-----Generated at Fri Apr 11 23:39:38 2025 by rpki-client