$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7901f39e-c07f-3b6b-b41a-95477156131f.roa File: 7901f39e-c07f-3b6b-b41a-95477156131f.roa (raw, json) Hash identifier: cnsXipT9hKt9mhstW9B2ii6/G4Cre2ZedcNf09sjkdM= Subject key identifier: E3:A5:7D:52:CC:76:09:CD:30:D3:D4:00:09:7B:78:23:71:44:EC:38 Certificate issuer: /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Certificate serial: 010D0C9F432858494CC945B3AD15F26777565C80 Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7901f39e-c07f-3b6b-b41a-95477156131f.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 19905 IP address blocks: 216.144.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Mar 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:45:b3:ad:15:f2:67:77:56:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=27ba7d12-17c8-43bb-a37c-aab45ddbf470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:cd:aa:3d:96:1a:85:80:e5:93:bb:f3:37: a4:f2:d5:30:97:76:f2:d0:68:c4:02:5e:22:c2:e0: 4d:b4:cc:6d:e4:1e:47:49:3c:23:09:94:7e:82:7a: 09:29:88:34:6f:95:3b:42:af:2c:7e:cd:be:8c:a3: 55:e9:06:b6:44:90:23:c4:d0:e4:82:51:5d:f7:4a: c4:1d:c9:a2:bc:6f:97:e4:e8:96:66:39:18:01:bf: c2:2c:42:cd:32:c5:bf:6d:cf:37:02:39:56:64:d2: 53:e3:d6:a0:ed:76:6c:d3:8c:91:d3:67:17:4b:7d: 8e:a6:d0:ba:c6:40:bf:5b:be:dd:4b:e2:b2:8b:71: e2:4f:2d:ee:ea:12:49:2d:de:f7:b7:0c:d1:79:18: 06:89:e7:d9:44:40:ad:28:70:8e:ea:f9:f3:5d:4e: 9a:ee:38:f5:6a:31:e5:54:98:5a:88:e6:5a:21:1d: 8f:15:a8:67:8a:13:43:86:3b:84:d7:bc:59:c0:32: 72:f9:5e:7d:fc:b8:bb:9c:02:69:92:5c:0f:5c:d4: ff:fd:03:e4:47:d8:d0:55:6c:86:d8:fe:fa:92:54: 1e:e8:06:c9:d4:9d:eb:cc:86:55:9f:a4:f4:75:a5: 83:65:0b:21:af:8d:03:0d:df:9c:8e:b2:34:02:c1: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A5:7D:52:CC:76:09:CD:30:D3:D4:00:09:7B:78:23:71:44:EC:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7901f39e-c07f-3b6b-b41a-95477156131f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl X509v3 Authority Key Identifier: keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer sbgp-ipAddrBlock: critical IPv4: 216.144.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:91:ac:be:af:82:93:58:ab:87:31:76:5f:79:76:6d:f6:c1: d3:60:0b:83:7e:5c:23:64:5e:91:b3:89:9c:f9:2a:96:49:20: 80:dd:85:d6:86:50:da:50:59:e0:35:c0:23:a5:b8:a2:64:47: 09:b9:a1:6d:a5:a7:ad:a2:de:ea:41:02:b6:dc:e9:47:c7:23: 09:fe:79:71:c2:b2:c2:9d:5a:0d:80:f5:02:f9:31:25:3e:a0: 6f:a7:be:eb:95:6e:d3:eb:46:dc:28:19:d0:7c:74:03:00:07: 2a:27:7e:cb:dd:fa:5c:6c:dc:94:91:bd:be:a7:a7:e5:08:02: d5:0b:c1:8b:ed:ce:a9:32:a4:99:31:d6:f1:39:e4:d3:d7:9f: 13:42:62:da:35:07:94:cb:eb:0b:1f:74:27:19:4d:dc:d3:ca: ac:d6:9e:a8:76:e3:c8:d4:c4:60:99:0c:62:67:3b:d0:d0:f2: c1:1b:4e:52:d7:dd:ba:36:3e:0a:8b:ab:32:a5:66:d6:b4:7f: 54:c4:56:cf:e5:ec:49:7e:e7:78:62:cf:be:2a:00:f9:17:81: 18:7c:e7:5b:d4:38:6c:19:dd:24:bb:3a:d2:81:f5:31:e8:b0: 64:73:0a:69:12:0f:0e:a9:21:7b:ff:11:cf:dc:85:49:37:0b: 81:5d:0b:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUWzrRXyZ3dWXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm NTZmMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MjdiYTdkMTItMTdjOC00M2JiLWEzN2MtYWFiNDVkZGJmNDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD7Nqj2WGoWA5ZO78zek8tUwl3by0GjEAl4i wuBNtMxt5B5HSTwjCZR+gnoJKYg0b5U7Qq8sfs2+jKNV6Qa2RJAjxNDkglFd90rE HcmivG+X5OiWZjkYAb/CLELNMsW/bc83AjlWZNJT49ag7XZs04yR02cXS32OptC6 xkC/W77dS+Kyi3HiTy3u6hJJLd73twzReRgGiefZRECtKHCO6vnzXU6a7jj1ajHl VJhaiOZaIR2PFahnihNDhjuE17xZwDJy+V59/Li7nAJpklwPXNT//QPkR9jQVWyG 2P76klQe6AbJ1J3rzIZVn6T0daWDZQshr40DDd+cjrI0AsEOMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOlfVLMdgnNMNPUAAl7eCNxROw4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvNzkwMWYzOWUtYzA3Zi0z YjZiLWI0MWEtOTU0NzcxNTYxMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1 NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0 ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5 YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2JCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFORrL6vgpNYq4cxdl95dm32wdNgC4N+XCNkXpGziZz5KpZJIIDdhdaG UNpQWeA1wCOluKJkRwm5oW2lp62i3upBArbc6UfHIwn+eXHCssKdWg2A9QL5MSU+ oG+nvuuVbtPrRtwoGdB8dAMAByonfsvd+lxs3JSRvb6np+UIAtULwYvtzqkypJkx 1vE55NPXnxNCYto1B5TL6wsfdCcZTdzTyqzWnqh248jUxGCZDGJnO9DQ8sEbTlLX 3bo2PgqLqzKlZta0f1TEVs/l7El+53hiz74qAPkXgRh851vUOGwZ3SS7OtKB9THo sGRzCmkSDw6pIXv/Ec/chUk3C4FdC7k= -----END CERTIFICATE-----Generated at Tue Mar 25 21:56:10 2025 by rpki-client