$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/5901d2f9-3c55-30cc-aac2-a46df87388e6.roa File: 5901d2f9-3c55-30cc-aac2-a46df87388e6.roa (raw, json) Hash identifier: 5CdiI8NDM/a9UrKLnOFL1tKAHafNz8EDnGIIpW5YYIU= Subject key identifier: BA:83:AD:80:69:FD:D5:F1:07:2B:81:BB:76:31:EA:DA:B3:63:9E:5B Certificate issuer: /CN=1f54df1e-3d93-4ac5-b209-e24261193230 Certificate serial: 010D0C9F4328584962612DD6B4C5F48863112600 Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/5901d2f9-3c55-30cc-aac2-a46df87388e6.roa Signing time: Tue 01 Apr 2025 18:38:51 +0000 ROA not before: Tue 01 Apr 2025 18:38:51 +0000 ROA not after: Mon 30 Jun 2025 18:38:51 +0000 asID: 397324 IP address blocks: 158.51.4.0/22 maxlen: 32 163.123.148.0/22 maxlen: 32 184.169.96.0/20 maxlen: 32 192.173.14.0/23 maxlen: 32 2605:2540::/32 maxlen: 128 2607:c980::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:61:2d:d6:b4:c5:f4:88:63:11:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230 Validity Not Before: Apr 1 18:38:51 2025 GMT Not After : Jun 30 18:38:51 2025 GMT Subject: CN=6dfa67bf-4054-4c62-867d-b9277db2de99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:d6:7e:04:6a:6b:3d:a6:2a:90:3d:49:22: e9:8c:22:2c:5a:82:58:b1:c2:af:3e:18:eb:e6:4e: c7:d6:25:25:61:55:c7:94:e4:b5:a0:95:66:9a:ba: 0f:b1:b9:89:31:41:f8:28:e6:8f:b2:ad:30:72:10: 3b:97:4f:be:68:a4:8e:3b:19:fb:04:4e:b9:98:6c: a0:03:f8:79:87:3e:4b:61:54:d4:2b:e9:d0:43:32: 00:b8:97:59:0e:62:a0:fd:9b:94:18:4a:11:49:5a: e3:7b:93:5f:1d:6f:f4:18:7b:79:46:d6:13:08:d0: 63:3c:01:f3:78:6c:a4:16:a8:19:0b:6a:c3:14:e8: 78:c3:4d:27:55:49:af:7d:17:42:75:17:7c:96:a3: 28:ea:16:4c:bc:75:30:7b:c6:96:78:5d:7a:05:d5: 6f:3a:c9:96:5f:a5:f9:e2:98:f1:6d:75:c2:1f:ff: 33:84:2b:b7:36:43:47:7e:06:4a:e2:08:3c:74:80: 51:38:7a:fb:67:b4:bd:bb:0a:38:24:da:8d:9c:2e: 8c:44:77:9d:bc:0d:94:b8:31:2e:47:9c:45:c4:f7: 4a:7f:de:0c:2b:df:50:91:81:09:42:aa:87:b5:59: 73:60:00:78:4b:bc:cf:a8:aa:8c:ac:2e:98:ed:ad: cf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:83:AD:80:69:FD:D5:F1:07:2B:81:BB:76:31:EA:DA:B3:63:9E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/5901d2f9-3c55-30cc-aac2-a46df87388e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl X509v3 Authority Key Identifier: keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer sbgp-ipAddrBlock: critical IPv4: 158.51.4.0/22 163.123.148.0/22 184.169.96.0/20 192.173.14.0/23 IPv6: 2605:2540::/32 2607:c980::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:6b:c4:37:08:88:34:af:73:df:d3:99:17:1e:59:a3:0a:0d: aa:47:6c:fb:17:18:88:c5:cd:1a:91:13:22:cb:ab:f3:97:36: 81:62:dc:26:00:21:28:d9:49:00:57:5c:0f:1c:31:42:45:ac: 72:dc:55:dc:9d:c2:e5:99:36:dd:c7:64:e0:d1:ef:aa:23:cb: cd:32:60:b9:95:33:2d:ef:15:f4:db:17:f1:59:9e:fc:e9:ff: 44:5c:78:b5:ca:bf:a2:db:e3:35:31:26:37:06:39:ec:b4:16: 7d:1d:db:0a:80:ff:50:4c:cd:84:2a:e8:bf:95:0f:d7:39:f1: 06:1b:81:81:99:c3:94:f8:32:27:f0:87:ec:f4:b9:5b:95:94: fc:15:a1:f4:16:62:e9:40:27:85:dc:99:3e:99:dc:1b:ef:f1: 3f:b9:ed:40:47:90:12:a6:ac:37:64:03:0c:c2:ab:8b:d4:4f: ff:ca:b2:5d:9e:6d:6d:d2:47:50:ce:e1:2f:95:3d:d0:1d:22: 28:60:d6:e3:06:2f:73:44:15:c7:42:2b:87:5d:8d:1a:f5:0c: 4e:4b:fd:ce:c4:c8:b1:fb:37:8c:e2:41:51:f0:03:fc:67:9f: 31:1e:de:5c:5e:3c:0c:ba:bd:0c:4d:47:6f:3c:8d:57:bc:c4: 92:9e:c2:04 -----BEGIN CERTIFICATE----- MIIGazCCBVOgAwIBAgIUAQ0Mn0MoWEliYS3WtMX0iGMRJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1NGRmMWUtM2Q5My00YWM1LWIyMDktZTI0MjYxMTkz MjMwMB4XDTI1MDQwMTE4Mzg1MVoXDTI1MDYzMDE4Mzg1MVowLzEtMCsGA1UEAxMk NmRmYTY3YmYtNDA1NC00YzYyLTg2N2QtYjkyNzdkYjJkZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEnWfgRqaz2mKpA9SSLpjCIsWoJYscKvPhjr 5k7H1iUlYVXHlOS1oJVmmroPsbmJMUH4KOaPsq0wchA7l0++aKSOOxn7BE65mGyg A/h5hz5LYVTUK+nQQzIAuJdZDmKg/ZuUGEoRSVrje5NfHW/0GHt5RtYTCNBjPAHz eGykFqgZC2rDFOh4w00nVUmvfRdCdRd8lqMo6hZMvHUwe8aWeF16BdVvOsmWX6X5 4pjxbXXCH/8zhCu3NkNHfgZK4gg8dIBROHr7Z7S9uwo4JNqNnC6MRHedvA2UuDEu R5xFxPdKf94MK99QkYEJQqqHtVlzYAB4S7zPqKqMrC6Y7a3PxwIDAQABo4IDfTCC A3kwHQYDVR0OBBYEFLqDrYBp/dXxByuBu3Yx6tqzY55bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0 ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQyNjExOTMyMzAvNTkwMWQyZjktM2M1NS0z MGNjLWFhYzItYTQ2ZGY4NzM4OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWY1NGRmMWUtM2Q5My00YWM1LWIy MDktZTI0MjYxMTkzMjMwLzFmNTRkZjFlLTNkOTMtNGFjNS1iMjA5LWUyNDI2MTE5 MzIzMC5jcmwwHwYDVR0jBBgwFoAUwRjOhaCEySkN6DYj8bFiouq4dPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQy NjExOTMyMzAuY2VyMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCnjMEAwQC o3uUAwQEuKlgAwQBwK0OMBQEAgACMA4DBQAmBSVAAwUAJgfJgDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCE a8Q3CIg0r3Pf05kXHlmjCg2qR2z7FxiIxc0akRMiy6vzlzaBYtwmACEo2UkAV1wP HDFCRaxy3FXcncLlmTbdx2Tg0e+qI8vNMmC5lTMt7xX02xfxWZ786f9EXHi1yr+i 2+M1MSY3BjnstBZ9HdsKgP9QTM2EKui/lQ/XOfEGG4GBmcOU+DIn8Ifs9LlblZT8 FaH0FmLpQCeF3Jk+mdwb7/E/ue1AR5ASpqw3ZAMMwquL1E//yrJdnm1t0kdQzuEv lT3QHSIoYNbjBi9zRBXHQiuHXY0a9QxOS/3OxMix+zeM4kFR8AP8Z58xHt5cXjwM ur0MTUdvPI1XvMSSnsIE -----END CERTIFICATE-----Generated at Sat Apr 5 12:42:11 2025 by rpki-client