$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/7b4c53ed-fd1d-3730-a7d6-6db3425127e1.roa File: 7b4c53ed-fd1d-3730-a7d6-6db3425127e1.roa (raw, json) Hash identifier: kmfZcfmaHgxVzlqnBo9HO7eA0wEbTigjjSBBpyOgCsg= Subject key identifier: 42:1C:B4:4B:B1:46:A5:77:CF:AD:57:11:CE:07:DB:F2:08:18:28:5B Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342 Certificate serial: 010D0C9F432858496A19A025DEAB57E0061AFC00 Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/7b4c53ed-fd1d-3730-a7d6-6db3425127e1.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 13760 IP address blocks: 216.170.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:a0:25:de:ab:57:e0:06:1a:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55640631-1b52-4455-ab16-7633a452f342 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=11660925-5356-4d21-972b-b8d916b37510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:07:d0:4d:29:03:18:20:2c:82:f1:c7:e5:9f: a2:d2:02:c8:cb:ba:99:b3:3f:f4:b0:86:04:b2:c5: 94:e6:68:67:75:a9:b2:0a:6d:7a:1e:56:4d:15:12: 61:8e:b3:f4:0d:8a:5c:52:17:cd:88:99:47:53:cb: 76:e2:56:35:07:27:59:4c:d2:e3:23:54:db:aa:cf: 86:32:c9:2e:9b:b5:50:3b:fe:68:b6:43:ee:51:49: 94:8f:6d:d9:49:f8:14:66:de:e4:03:9e:6c:72:f9: 56:6a:6d:a1:f8:2a:e4:f3:a0:3e:4c:33:fa:f2:60: b6:da:bb:05:25:79:78:57:d0:04:fa:f3:0c:50:22: b6:be:31:02:fd:8d:50:73:50:fa:82:de:31:e2:97: 5f:75:44:bf:bc:65:57:dd:f2:41:a8:4e:18:d9:0c: fd:16:b4:77:ef:59:a5:a5:d1:0b:cb:ad:8b:32:e7: 2b:01:6a:a6:0b:b9:3f:ee:94:87:72:34:b4:2e:b8: 49:29:9a:41:01:83:06:be:05:07:8e:b4:a2:99:84: 0c:02:e2:b0:0c:57:48:b0:59:4c:07:ca:98:b3:61: 2b:30:45:06:f4:f3:9a:80:99:f3:01:98:28:e7:57: 7b:50:6b:db:ac:bf:98:92:4b:e5:ab:01:b4:7b:58: 01:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1C:B4:4B:B1:46:A5:77:CF:AD:57:11:CE:07:DB:F2:08:18:28:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/7b4c53ed-fd1d-3730-a7d6-6db3425127e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl X509v3 Authority Key Identifier: keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer sbgp-ipAddrBlock: critical IPv4: 216.170.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:02:cc:45:05:c2:2e:c8:ff:2d:6b:27:6a:5b:df:18:45:53: 70:5c:2d:b0:eb:fd:3d:8c:ff:49:40:12:a9:10:5d:95:02:d2: a9:42:c9:c3:bb:66:18:29:47:ef:e1:bc:76:92:c6:c3:73:53: 51:79:b7:ec:4c:71:6f:92:e1:c3:a6:e2:84:02:bd:c6:17:c3: 61:20:45:86:e0:1b:b1:1c:63:57:94:0b:f2:18:1b:ab:86:cc: e0:19:e6:08:b1:05:a6:27:80:12:9b:21:60:3e:07:dd:5b:84: 32:b2:5a:de:b3:a2:62:e0:da:6c:57:97:a4:08:6e:e1:ea:52: 4b:14:e2:80:7e:a5:5b:5a:27:16:e6:f5:0e:72:02:f0:db:ac: 30:5a:8e:6e:dc:cd:ed:1c:0f:16:9c:d5:6a:8f:16:0c:09:2d: 29:22:52:6e:0a:ba:9a:dd:00:85:34:d6:b4:d2:e3:9c:9a:07: 79:51:26:7b:4d:fd:8b:cc:aa:70:e3:bb:7f:9b:b7:2d:d5:2b: d9:d4:55:3e:92:59:49:b9:f9:6d:b0:a7:37:f8:40:19:6a:8f: 5c:0a:7d:40:2a:29:cc:a4:69:40:38:f8:ff:c3:d4:fc:b0:27: 22:ae:71:9e:58:44:0a:8e:eb:33:c7:93:cb:de:64:6b:7e:08: ef:ed:09:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGaAl3qtX4AYa/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm MzQyMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MTE2NjA5MjUtNTM1Ni00ZDIxLTk3MmItYjhkOTE2YjM3NTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgfQTSkDGCAsgvHH5Z+i0gLIy7qZsz/0sIYE ssWU5mhndamyCm16HlZNFRJhjrP0DYpcUhfNiJlHU8t24lY1BydZTNLjI1Tbqs+G Mskum7VQO/5otkPuUUmUj23ZSfgUZt7kA55scvlWam2h+Crk86A+TDP68mC22rsF JXl4V9AE+vMMUCK2vjEC/Y1Qc1D6gt4x4pdfdUS/vGVX3fJBqE4Y2Qz9FrR371ml pdELy62LMucrAWqmC7k/7pSHcjS0LrhJKZpBAYMGvgUHjrSimYQMAuKwDFdIsFlM B8qYs2ErMEUG9POagJnzAZgo51d7UGvbrL+YkkvlqwG0e1gBcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIctEuxRqV3z61XEc4H2/IIGChbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0 MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvN2I0YzUzZWQtZmQxZC0z NzMwLWE3ZDYtNmRiMzQyNTEyN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KpVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMACzEUFwi7I/y1rJ2pb3xhFU3BcLbDr/T2M/0lAEqkQXZUC0qlCycO7 ZhgpR+/hvHaSxsNzU1F5t+xMcW+S4cOm4oQCvcYXw2EgRYbgG7EcY1eUC/IYG6uG zOAZ5gixBaYngBKbIWA+B91bhDKyWt6zomLg2mxXl6QIbuHqUksU4oB+pVtaJxbm 9Q5yAvDbrDBajm7cze0cDxac1WqPFgwJLSkiUm4KuprdAIU01rTS45yaB3lRJntN /YvMqnDju3+bty3VK9nUVT6SWUm5+W2wpzf4QBlqj1wKfUAqKcykaUA4+P/D1Pyw JyKucZ5YRAqO6zPHk8veZGt+CO/tCQU= -----END CERTIFICATE-----Generated at Mon Apr 7 10:48:15 2025 by rpki-client