$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa File: cc943514-3509-33b3-b2dc-359af22b1dea.roa (raw, json) Hash identifier: ababzXb772GEtVFTXicsvZ9DqdDMyWhc1ATXFaFaiSo= Subject key identifier: 6D:47:F6:CA:7D:17:3D:4A:57:FB:47:73:8D:D3:AD:72:11:33:8C:AE Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Certificate serial: 010D0C9F43285849780F0F1F90B902CB62908CC0 Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 202 IP address blocks: 216.168.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:0f:1f:90:b9:02:cb:62:90:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=6d5fc852-0d7a-49f0-be27-080893682006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:a7:ba:52:2b:e1:59:d8:a3:70:29:15:af: 22:4c:98:5d:14:c7:9e:42:e0:89:c8:f3:c1:60:52: 91:91:c3:58:97:97:67:7d:77:33:77:17:7f:ef:cf: 23:59:47:a5:72:2c:81:ad:74:e9:89:58:27:59:82: 29:58:1f:2f:de:98:ea:ed:bf:87:02:a1:2b:5d:43: 2b:9c:44:c9:e8:53:00:3d:d9:04:07:ad:ea:4e:90: cd:40:39:b5:37:c9:73:d9:30:82:d1:1f:60:8e:b6: 12:21:8c:71:8f:f3:f5:67:91:48:a5:48:60:70:37: f9:07:58:19:7a:38:eb:c8:42:90:a7:a8:62:f0:8e: 52:61:4f:c1:fa:54:28:fd:05:2d:dc:b2:77:59:26: 29:35:41:5f:02:2f:b5:d9:9a:03:7d:35:ef:a4:e4: 1b:f9:f7:8c:aa:f3:74:0a:a3:53:3f:42:e3:1a:51: 25:15:06:53:c9:a1:70:d1:0e:4e:a0:aa:89:ff:d5: c9:3a:a8:bf:70:cd:fc:a4:3a:02:04:cb:f8:85:4a: a4:60:85:f1:54:42:6f:1c:86:5d:c6:b0:dc:47:98: 21:cf:ab:92:91:5b:12:63:7b:25:00:af:cd:bb:9f: bd:6a:e7:1d:78:70:fe:2a:00:1b:a2:d3:70:8a:b9: 58:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:F6:CA:7D:17:3D:4A:57:FB:47:73:8D:D3:AD:72:11:33:8C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/cc943514-3509-33b3-b2dc-359af22b1dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl X509v3 Authority Key Identifier: keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer sbgp-ipAddrBlock: critical IPv4: 216.168.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9e:57:5f:eb:c0:71:2e:89:7e:06:ab:da:d5:bb:c5:b1:3d: 61:1b:79:64:dd:fd:a1:4b:e4:03:64:1c:f7:cf:95:67:01:30: 57:3e:cf:47:bc:a7:8c:ba:0a:2e:8c:a5:77:21:0e:c3:a3:82: 8d:79:14:ca:09:35:64:da:4d:ae:4f:bc:ef:80:a2:25:72:34: 99:72:9b:48:21:c1:d3:4d:b6:82:37:25:b5:9b:3a:da:48:fc: d5:22:36:c4:0e:93:c8:e0:ac:48:f5:5c:bf:2e:d2:d4:9b:3b: 0f:0b:8a:ba:3c:75:2e:9b:39:f1:e4:51:85:9b:67:13:c2:bd: 78:49:bb:8b:25:a4:90:93:74:66:ec:d7:c3:16:05:f2:dd:1b: fb:82:bc:49:41:44:a0:bf:6d:51:90:6e:5c:ae:3a:83:af:4e: e8:dd:1b:d5:b7:6b:72:bc:5a:47:b3:df:89:03:f4:4f:ee:2e: 93:ec:53:b9:00:7a:ec:b7:a6:3f:61:47:0d:81:32:76:bb:3a: 23:7b:c3:aa:05:f7:ba:0f:1e:3d:35:a3:9f:ef:72:80:91:f2: fd:13:62:cd:73:3b:76:fe:60:0b:30:27:dc:e3:f4:54:bf:25: 54:99:46:38:92:f6:e6:80:3b:48:6b:d4:49:87:7a:43:a9:8f: ea:a9:f8:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dw8fkLkCy2KQjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTcxYzQyYTItM2RjNi00M2FmLWI3MzQtZTkxOTU2YmRm ZTE5MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk NmQ1ZmM4NTItMGQ3YS00OWYwLWJlMjctMDgwODkzNjgyMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojKnulIr4VnYo3ApFa8iTJhdFMeeQuCJyPPB YFKRkcNYl5dnfXczdxd/788jWUelciyBrXTpiVgnWYIpWB8v3pjq7b+HAqErXUMr nETJ6FMAPdkEB63qTpDNQDm1N8lz2TCC0R9gjrYSIYxxj/P1Z5FIpUhgcDf5B1gZ ejjryEKQp6hi8I5SYU/B+lQo/QUt3LJ3WSYpNUFfAi+12ZoDfTXvpOQb+feMqvN0 CqNTP0LjGlElFQZTyaFw0Q5OoKqJ/9XJOqi/cM38pDoCBMv4hUqkYIXxVEJvHIZd xrDcR5ghz6uSkVsSY3slAK/Nu5+9aucdeHD+KgAbotNwirlYnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1H9sp9Fz1KV/tHc43TrXIRM4yuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFj NDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5NTZiZGZlMTkvY2M5NDM1MTQtMzUwOS0z M2IzLWIyZGMtMzU5YWYyMmIxZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTcxYzQyYTItM2RjNi00M2FmLWI3 MzQtZTkxOTU2YmRmZTE5LzE3MWM0MmEyLTNkYzYtNDNhZi1iNzM0LWU5MTk1NmJk ZmUxOS5jcmwwHwYDVR0jBBgwFoAU67DVPKZW9lZPxRZwuO2JkN4PJtMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xNzFjNDJhMi0zZGM2LTQzYWYtYjczNC1lOTE5 NTZiZGZlMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6eV1/rwHEuiX4Gq9rVu8WxPWEbeWTd/aFL5ANkHPfPlWcBMFc+z0e8 p4y6Ci6MpXchDsOjgo15FMoJNWTaTa5PvO+AoiVyNJlym0ghwdNNtoI3JbWbOtpI /NUiNsQOk8jgrEj1XL8u0tSbOw8Liro8dS6bOfHkUYWbZxPCvXhJu4slpJCTdGbs 18MWBfLdG/uCvElBRKC/bVGQblyuOoOvTujdG9W3a3K8Wkez34kD9E/uLpPsU7kA euy3pj9hRw2BMna7OiN7w6oF97oPHj01o5/vcoCR8v0TYs1zO3b+YAswJ9zj9FS/ JVSZRjiS9uaAO0hr1EmHekOpj+qp+Cg= -----END CERTIFICATE-----Generated at Wed Apr 9 23:21:50 2025 by rpki-client