$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa File: c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa (raw, json) Hash identifier: wZo70pqOpIgetm2TRwAY+yPf0eDHhzD509LQv5v24Ns= Subject key identifier: 51:A4:FC:D3:83:1A:D0:97:49:21:AA:81:F9:50:EF:BB:75:66:A9:2E Certificate issuer: /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Certificate serial: 010D0C9F432858493ED3D4E6ACB6645109596E80 Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 21559 IP address blocks: 72.46.158.0/23 maxlen: 23 199.116.62.0/24 maxlen: 24 208.81.58.0/23 maxlen: 23 208.81.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d4:e6:ac:b6:64:51:09:59:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=47342edc-f22d-4055-a92a-1df66cff462e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:65:c6:e6:2c:53:93:25:b4:c6:9d:13:ee: 53:1a:af:d2:2b:ed:b3:c0:df:80:3f:77:96:16:af: 7a:b6:94:56:39:fe:94:86:2c:fb:aa:dd:e2:de:51: 1d:e0:cf:bf:0d:1b:21:67:65:30:b5:a3:ed:f5:14: 0e:93:a3:ad:59:f4:81:92:a6:59:43:c7:bd:92:0e: 9d:a4:de:24:ce:cd:b0:81:59:1b:65:f6:07:30:76: 2e:a1:40:69:e6:aa:29:cf:26:74:a5:ea:88:b6:1d: a8:10:d0:ef:8b:ed:93:e6:19:e0:f6:13:cb:f1:45: a8:95:38:90:0a:d4:68:b4:dc:f0:25:87:9a:11:ad: 86:d0:4d:4b:4d:1a:d9:89:66:ef:ea:50:d3:47:65: db:ec:80:76:d0:46:4c:8b:94:dd:91:85:e0:99:2a: 36:66:26:50:d5:7e:a4:a2:27:5c:5b:9e:fe:58:88: f4:b6:86:58:bd:51:77:15:84:3e:92:68:5e:e2:5e: 28:3c:30:54:1a:d5:7e:23:ed:70:7c:46:bd:0a:64: d0:15:f8:d9:ba:b4:f3:0d:0e:a1:35:75:ff:d4:e0: 68:f9:fb:91:32:94:77:b1:5e:b1:a5:bd:c6:a9:b8: 82:ec:19:ca:8f:39:b1:0b:57:0c:c9:e0:75:f6:0e: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A4:FC:D3:83:1A:D0:97:49:21:AA:81:F9:50:EF:BB:75:66:A9:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl X509v3 Authority Key Identifier: keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer sbgp-ipAddrBlock: critical IPv4: 72.46.158.0/23 199.116.62.0/24 208.81.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ed:c1:d9:bc:51:c3:aa:49:26:19:c4:a7:69:6c:e9:1e:03: e8:1d:f2:72:09:f1:4e:a0:9d:39:89:bc:4b:5f:68:70:48:b8: b6:f9:f1:fc:29:a9:09:8a:e4:8d:3c:b0:06:36:7b:14:1c:af: 21:45:43:8a:94:d1:f5:7c:1a:44:0e:3f:af:ea:52:45:26:20: a4:48:f9:95:55:d7:55:7a:87:1e:6e:a1:ea:30:64:6c:3e:a9: 30:6c:74:a5:f0:c3:bf:be:18:9a:84:e1:75:9c:95:c3:07:c6: f9:41:3b:5e:4d:40:17:32:f3:91:79:b7:d6:24:3c:88:d7:a2: de:5f:13:d0:03:52:29:db:a2:f0:f4:4f:13:05:32:b9:03:d3: 18:7f:ae:c1:05:38:4f:99:a5:42:e6:68:2e:61:b6:a9:89:a5: a7:42:63:5c:96:4f:10:1f:19:2d:23:fc:f2:a6:ab:fd:be:a3: 2d:03:0c:14:21:80:be:44:5e:3d:49:6e:59:3a:4f:c7:ed:05: 39:4b:46:d1:84:47:d1:d2:99:bd:86:f2:3e:3b:bd:dd:6a:98: 98:96:bd:5d:09:5e:74:27:a3:3c:e6:78:ab:f7:dd:7f:3d:ef: 52:b2:57:74:05:8e:cf:37:9f:ce:af:eb:44:f6:39:48:2b:80: b8:f8:45:14 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEk+09TmrLZkUQlZboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh YTNjMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NDczNDJlZGMtZjIyZC00MDU1LWE5MmEtMWRmNjZjZmY0NjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L5lxuYsU5MltMadE+5TGq/SK+2zwN+AP3eW Fq96tpRWOf6Uhiz7qt3i3lEd4M+/DRshZ2UwtaPt9RQOk6OtWfSBkqZZQ8e9kg6d pN4kzs2wgVkbZfYHMHYuoUBp5qopzyZ0peqIth2oENDvi+2T5hng9hPL8UWolTiQ CtRotNzwJYeaEa2G0E1LTRrZiWbv6lDTR2Xb7IB20EZMi5TdkYXgmSo2ZiZQ1X6k oidcW57+WIj0toZYvVF3FYQ+kmhe4l4oPDBUGtV+I+1wfEa9CmTQFfjZurTzDQ6h NXX/1OBo+fuRMpR3sV6xpb3GqbiC7BnKjzmxC1cMyeB19g7SPQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFFGk/NODGtCXSSGqgflQ77t1ZqkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvYzhiYzBiYjgtYjliZS0z ODQ0LWEwNmItMWJlMjc5MWIzYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2 YmFlMGFhM2MuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBSC6eAwQA x3Q+AwQB0FE6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEDtwdm8UcOqSSYZxKdpbOkeA+gd8nIJ8U6gnTmJ vEtfaHBIuLb58fwpqQmK5I08sAY2exQcryFFQ4qU0fV8GkQOP6/qUkUmIKRI+ZVV 11V6hx5uoeowZGw+qTBsdKXww7++GJqE4XWclcMHxvlBO15NQBcy85F5t9YkPIjX ot5fE9ADUinbovD0TxMFMrkD0xh/rsEFOE+ZpULmaC5htqmJpadCY1yWTxAfGS0j /PKmq/2+oy0DDBQhgL5EXj1Jblk6T8ftBTlLRtGER9HSmb2G8j47vd1qmJiWvV0J XnQnozzmeKv33X8971KyV3QFjs83n86v60T2OUgrgLj4RRQ= -----END CERTIFICATE-----Generated at Sat Apr 12 14:58:37 2025 by rpki-client