$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bd950343-6396-3a4b-8528-ff1446a5d3a2.roa File: bd950343-6396-3a4b-8528-ff1446a5d3a2.roa (raw, json) Hash identifier: wn20P8Hqzu6solrt/ycvlSLny6mnl53g6hERu2rcvZQ= Subject key identifier: 1F:23:C9:89:9B:A9:D3:13:4B:70:33:21:3D:CB:69:D3:A9:B4:67:DA Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F4328584913AC37CCB791AEC34130B500 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bd950343-6396-3a4b-8528-ff1446a5d3a2.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 7843 IP address blocks: 16.14.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:37:cc:b7:91:ae:c3:41:30:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=c600528c-c563-48dc-9812-2f6d9ca42e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:27:65:7b:a9:50:f2:42:9c:44:73:82:2a:9a: 38:52:02:14:30:92:c6:27:e6:53:cf:1c:8e:9f:97: bb:ab:02:98:51:91:64:fe:0b:4d:84:36:9f:67:a5: 80:2b:ca:6a:c4:17:8a:7b:8b:b4:ae:eb:07:b2:2c: 4d:53:ba:cc:32:5a:ac:26:5b:69:88:fe:3e:73:30: c3:c1:75:d4:6d:c1:b2:11:40:ec:20:82:68:27:e5: db:84:4c:41:5c:16:47:85:d8:75:f0:25:b6:e8:fa: e7:07:de:33:41:6e:d6:e9:6f:94:1e:0a:55:5b:d0: f7:d2:66:33:5b:16:d0:05:0e:fe:67:94:a0:52:9f: 15:d3:07:10:9f:97:17:b0:ec:82:8b:6c:a3:61:67: c6:be:d0:c7:cd:28:c8:9f:7e:d2:10:20:20:49:80: d8:ae:e0:e3:88:b1:5d:a7:f9:46:4b:2a:74:be:f5: 4c:5b:53:f6:cb:bb:56:b2:f3:51:d4:0a:f1:ae:24: dd:24:68:ef:87:75:23:28:4f:b0:57:44:ee:2a:82: e2:e2:a8:0f:a8:55:28:d8:00:96:e1:22:38:16:39: 83:0e:cd:eb:b8:2f:fc:7a:7c:ca:71:a0:a7:e4:cf: 3f:9a:a5:81:f9:7d:0a:38:09:33:fa:c7:d5:c7:ba: 6b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:23:C9:89:9B:A9:D3:13:4B:70:33:21:3D:CB:69:D3:A9:B4:67:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/bd950343-6396-3a4b-8528-ff1446a5d3a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 16.14.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:b8:4b:95:24:2e:b8:07:ec:1a:ee:02:cb:0e:20:06:70:79: 0f:52:8c:33:25:1c:26:96:4c:cb:26:a4:4f:ce:69:a6:7e:90: 36:48:a5:5e:56:92:d0:9c:fe:a8:34:82:60:fa:0c:02:38:6c: 9f:05:5f:04:9e:07:2a:ba:f6:9f:5e:c9:f8:1c:bc:7c:8f:84: 74:4a:48:4a:8e:24:b7:7c:24:3c:a3:03:60:58:17:4d:7d:86: f7:61:20:48:d6:26:62:10:a9:45:66:c2:72:6f:85:8e:03:f9: 92:62:d3:5e:67:6c:1b:ac:fa:5b:a0:4d:93:8b:44:0c:92:23: 4e:33:09:f7:03:92:bc:3b:ec:e1:79:8f:1d:37:61:b0:8b:a4: 10:4b:cd:63:af:fc:dc:0f:1f:92:8a:f9:85:ee:99:c5:d4:12: 02:3a:f9:43:1a:db:71:7f:20:2c:18:6f:fc:b2:e4:9a:12:66: 15:7d:08:f8:73:94:63:ff:0b:d9:44:05:de:c5:4e:2b:1f:70: f9:d1:23:0c:e9:63:0f:84:ca:7a:32:8c:ee:61:db:28:bb:2c: 88:f3:02:7c:40:cc:e9:cd:68:4d:a4:63:33:7e:19:2c:7c:d2: 9f:90:d9:d8:da:3d:c2:b4:65:e7:0e:aa:65:36:70:12:10:47: 26:ce:dc:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDfMt5Guw0EwtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YzYwMDUyOGMtYzU2My00OGRjLTk4MTItMmY2ZDljYTQyZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxydle6lQ8kKcRHOCKpo4UgIUMJLGJ+ZTzxyO n5e7qwKYUZFk/gtNhDafZ6WAK8pqxBeKe4u0rusHsixNU7rMMlqsJltpiP4+czDD wXXUbcGyEUDsIIJoJ+XbhExBXBZHhdh18CW26PrnB94zQW7W6W+UHgpVW9D30mYz WxbQBQ7+Z5SgUp8V0wcQn5cXsOyCi2yjYWfGvtDHzSjIn37SECAgSYDYruDjiLFd p/lGSyp0vvVMW1P2y7tWsvNR1ArxriTdJGjvh3UjKE+wV0TuKoLi4qgPqFUo2ACW 4SI4FjmDDs3ruC/8enzKcaCn5M8/mqWB+X0KOAkz+sfVx7pr2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8jyYmbqdMTS3AzIT3LadOptGfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYmQ5NTAzNDMtNjM5Ni0z YTRiLTg1MjgtZmYxNDQ2YTVkM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCEA7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy4S5UkLrgH7BruAssOIAZweQ9SjDMlHCaWTMsmpE/OaaZ+kDZIpV5W ktCc/qg0gmD6DAI4bJ8FXwSeByq69p9eyfgcvHyPhHRKSEqOJLd8JDyjA2BYF019 hvdhIEjWJmIQqUVmwnJvhY4D+ZJi015nbBus+lugTZOLRAySI04zCfcDkrw77OF5 jx03YbCLpBBLzWOv/NwPH5KK+YXumcXUEgI6+UMa23F/ICwYb/yy5JoSZhV9CPhz lGP/C9lEBd7FTisfcPnRIwzpYw+EynoyjO5h2yi7LIjzAnxAzOnNaE2kYzN+GSx8 0p+Q2djaPcK0ZecOqmU2cBIQRybO3ME= -----END CERTIFICATE-----Generated at Sat Apr 5 21:21:12 2025 by rpki-client