$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c944d290-2cb7-3519-81ca-49e6c64203c5.roa File: c944d290-2cb7-3519-81ca-49e6c64203c5.roa (raw, json) Hash identifier: FxSY6mRYSwjjyIN0hIzCNv08kAoqx3K+pI39Qov/yjs= Subject key identifier: FA:68:D0:B9:CB:7B:A0:04:3C:E8:5C:A0:20:4B:60:FD:A3:F1:5E:7C Certificate issuer: /CN=c91a680c-10f9-4064-bc75-a0790274df80 Certificate serial: 010D0C9F43285848A0C35FE03F736ED3F4F17F10 Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c944d290-2cb7-3519-81ca-49e6c64203c5.roa Signing time: Wed 22 Jan 2025 10:09:53 +0000 ROA not before: Wed 22 Jan 2025 10:09:53 +0000 ROA not after: Tue 22 Apr 2025 09:09:53 +0000 asID: 834 IP address blocks: 216.180.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:c3:5f:e0:3f:73:6e:d3:f4:f1:7f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80 Validity Not Before: Jan 22 10:09:53 2025 GMT Not After : Apr 22 09:09:53 2025 GMT Subject: CN=11b71b0d-253e-405b-9049-4abda9fc54fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:d2:b0:c6:26:cd:8e:89:cb:35:fd:9f:3f: 14:29:d6:cd:68:04:90:c8:80:52:ab:ba:6c:f3:18: fc:3b:2c:c5:ad:f4:83:f1:9b:07:58:25:9f:2d:a1: ec:93:b4:48:b2:64:48:67:d2:f7:fe:0a:97:36:08: e5:55:3f:63:ec:bb:c9:0f:7f:fc:f8:e7:a5:ac:44: 50:9b:99:c4:33:e2:d3:33:2b:3b:c6:a6:f8:2f:81: 49:e9:0f:7b:74:85:e2:53:16:29:96:31:60:66:95: 19:47:7e:41:91:d5:9a:e2:0b:6d:c3:91:2d:0e:a9: 4f:77:4a:ec:f3:33:20:52:c2:80:54:21:1c:94:16: a4:b7:7a:e5:78:ee:0c:40:12:f3:ce:20:80:66:d8: 67:e6:61:cf:04:97:aa:73:df:43:02:7e:63:bc:0a: 0d:e0:92:be:15:29:60:5b:01:51:f4:cc:63:64:cb: a8:cb:a7:d6:e3:38:74:16:89:54:7b:ab:ec:cd:d4: 88:01:01:9c:60:af:39:cf:dd:4a:08:98:72:46:82: 27:09:42:7a:ff:48:a1:35:35:d7:4a:cc:75:d8:9b: da:17:f9:0c:63:d1:95:de:14:f2:0d:1e:43:5c:bc: c3:33:50:da:0f:13:bc:9c:8e:1d:40:51:ad:d6:09: b3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:68:D0:B9:CB:7B:A0:04:3C:E8:5C:A0:20:4B:60:FD:A3:F1:5E:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c944d290-2cb7-3519-81ca-49e6c64203c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl X509v3 Authority Key Identifier: keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer sbgp-ipAddrBlock: critical IPv4: 216.180.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9f:34:b0:9c:b7:c7:de:9d:98:f3:a4:af:2e:9c:ab:10:26: 3a:ac:34:a1:5b:71:88:d0:3e:91:60:c0:2d:d9:e3:6b:2e:e4: 46:cf:05:dc:5b:75:df:2e:66:3f:4a:ac:76:26:49:7e:ac:aa: fb:5e:ac:2c:02:45:5c:2d:a7:0c:1d:15:33:29:1e:d2:09:d2: af:05:a8:1f:49:ec:79:10:45:bc:51:00:53:b0:68:46:e8:09: 40:39:30:91:6b:19:69:66:19:db:8d:b3:2a:ad:a7:10:9c:b2: c1:d6:db:4e:84:c9:3f:c4:f8:dd:9c:35:4c:ca:6c:e4:04:a0: 9a:28:cc:9b:4b:3b:aa:22:99:0f:49:91:0b:8a:fb:1e:95:70: ab:66:f3:a0:8d:db:a0:98:d0:7c:10:cc:43:da:38:69:af:e5: 29:d5:a4:d2:04:10:f5:59:75:3d:cc:de:48:f6:41:bd:cf:f8: 59:7c:8c:e1:8e:73:db:e7:ca:64:56:50:ed:f2:84:a6:a8:ce: af:b9:fb:06:cf:0c:d8:f9:ba:34:c5:21:f9:d2:4e:45:c9:62: 9f:d0:b8:f1:00:8f:c9:55:1a:90:0a:d9:be:ca:bf:58:ec:4d: 95:63:91:f4:bf:31:e8:6c:bf:be:0d:39:e7:7b:5d:7c:b6:76: 32:fd:52:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigw1/gP3Nu0/TxfxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk ZjgwMB4XDTI1MDEyMjEwMDk1M1oXDTI1MDQyMjA5MDk1M1owLzEtMCsGA1UEAxMk MTFiNzFiMGQtMjUzZS00MDViLTkwNDktNGFiZGE5ZmM1NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaLSsMYmzY6JyzX9nz8UKdbNaASQyIBSq7ps 8xj8OyzFrfSD8ZsHWCWfLaHsk7RIsmRIZ9L3/gqXNgjlVT9j7LvJD3/8+OelrERQ m5nEM+LTMys7xqb4L4FJ6Q97dIXiUxYpljFgZpUZR35BkdWa4gttw5EtDqlPd0rs 8zMgUsKAVCEclBakt3rleO4MQBLzziCAZthn5mHPBJeqc99DAn5jvAoN4JK+FSlg WwFR9MxjZMuoy6fW4zh0FolUe6vszdSIAQGcYK85z91KCJhyRoInCUJ6/0ihNTXX Ssx12JvaF/kMY9GV3hTyDR5DXLzDM1DaDxO8nI4dQFGt1gmzhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpo0LnLe6AEPOhcoCBLYP2j8V58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvYzk0NGQyOTAtMmNiNy0z NTE5LTgxY2EtNDllNmM2NDIwM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0 ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5 MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LT/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHifNLCct8fenZjzpK8unKsQJjqsNKFbcYjQPpFgwC3Z42su5EbPBdxb dd8uZj9KrHYmSX6sqvterCwCRVwtpwwdFTMpHtIJ0q8FqB9J7HkQRbxRAFOwaEbo CUA5MJFrGWlmGduNsyqtpxCcssHW206EyT/E+N2cNUzKbOQEoJoozJtLO6oimQ9J kQuK+x6VcKtm86CN26CY0HwQzEPaOGmv5SnVpNIEEPVZdT3M3kj2Qb3P+Fl8jOGO c9vnymRWUO3yhKaozq+5+wbPDNj5ujTFIfnSTkXJYp/QuPEAj8lVGpAK2b7Kv1js TZVjkfS/Mehsv74NOed7XXy2djL9Uvk= -----END CERTIFICATE-----Generated at Fri Apr 4 21:03:54 2025 by rpki-client