$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa File: 41901fb9-e852-38fe-9a4b-13a788c646db.roa (raw, json) Hash identifier: vcaaI5PJgZrTHe7dYuNbcehBmYxgoWT4n1u5+SOu+vU= Subject key identifier: 9C:C5:96:F3:FE:2C:64:18:21:D0:D7:B5:FA:A5:A2:54:56:21:28:7E Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F432858492CAE88EE637B4D59974ACF80 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 216.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:88:ee:63:7b:4d:59:97:4a:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=38c1299e-de14-4305-973c-d0883fd1bfb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:28:2d:b0:cb:58:17:09:06:7d:16:b4:56:5d: 87:b1:7f:b0:82:9a:67:6c:51:43:df:38:b0:a0:e9: 53:58:df:e8:9c:39:2b:d6:81:15:19:7e:f7:6a:68: 95:27:ed:d8:55:03:0e:23:01:e5:c2:12:18:be:d0: bf:2a:4c:ad:e0:5a:7d:95:e7:95:ff:2f:d0:82:ee: e8:ce:3d:b4:e5:58:c3:d8:50:de:30:32:d9:cd:a4: 67:ae:c0:e7:96:76:d0:62:86:8e:f3:74:61:14:40: 1a:5d:c8:e3:9d:ce:c2:37:76:c3:7a:fd:49:91:1a: e4:3b:37:43:c5:73:62:61:1f:1c:8f:f7:81:83:f8: 70:ba:33:f6:bb:36:05:05:16:66:24:61:98:e8:9b: 7a:95:1c:84:44:f1:23:de:58:e2:68:ec:43:99:54: 73:9d:ba:c2:12:33:aa:7e:39:30:81:04:2a:25:e3: 91:d3:f5:90:16:fe:11:e5:f5:04:ae:e4:46:07:f4: 39:35:74:d1:52:5b:c5:50:21:ee:7b:bd:ed:f3:aa: e7:2d:56:d1:2e:14:38:4a:8b:21:24:a9:f6:22:ac: bd:fa:f6:14:20:30:95:94:97:f0:54:8f:15:f5:56: 8d:0a:fd:18:63:bc:f1:14:7a:15:0c:67:cf:98:1f: 6f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C5:96:F3:FE:2C:64:18:21:D0:D7:B5:FA:A5:A2:54:56:21:28:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/41901fb9-e852-38fe-9a4b-13a788c646db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 216.245.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:52:a2:be:a8:92:d5:92:e7:fa:a1:6c:f8:d9:dc:15:56:4a: 31:a5:e4:f2:7a:a7:4a:99:51:94:a2:5d:d9:c4:b5:36:2a:5e: 8b:d5:14:7c:50:69:2f:0e:70:04:22:21:6b:f9:5c:d2:73:b4: cc:6d:eb:0a:65:ea:a9:41:3d:c3:6b:e5:bf:c7:b6:cf:bc:c2: b1:e7:d0:b5:4a:f8:2e:9a:03:52:21:3a:0a:33:3e:61:5f:f1: d2:6b:cc:ac:ea:a9:9b:d7:88:0d:b6:88:75:64:7b:54:e7:4a: 53:bc:b0:31:b5:7f:6c:4a:5f:bd:52:f7:c9:cf:90:66:f7:5e: 78:bf:01:49:12:1e:c6:0f:de:e5:df:f7:93:ca:58:14:60:b6: 77:43:a1:c2:39:b7:eb:37:1c:b7:6a:80:c9:27:ae:07:fd:55: 51:16:25:54:d1:92:d8:57:fd:27:44:31:e4:89:3e:18:bb:46: 17:b6:56:02:97:cf:9e:37:dd:72:9b:78:bc:cb:82:02:44:bb: e7:26:7a:3a:8a:20:32:0f:0c:2b:93:fe:05:89:5f:8a:b3:26: b9:4a:aa:98:a1:a1:e0:d6:f6:5f:ec:51:bb:d7:93:d3:67:6d: 7b:1f:33:fa:a0:59:88:a4:89:41:ec:32:4b:75:a5:a7:b9:e0: a3:34:af:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrojuY3tNWZdKz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzhjMTI5OWUtZGUxNC00MzA1LTk3M2MtZDA4ODNmZDFiZmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiygtsMtYFwkGfRa0Vl2HsX+wgppnbFFD3ziw oOlTWN/onDkr1oEVGX73amiVJ+3YVQMOIwHlwhIYvtC/Kkyt4Fp9leeV/y/Qgu7o zj205VjD2FDeMDLZzaRnrsDnlnbQYoaO83RhFEAaXcjjnc7CN3bDev1JkRrkOzdD xXNiYR8cj/eBg/hwujP2uzYFBRZmJGGY6Jt6lRyERPEj3ljiaOxDmVRznbrCEjOq fjkwgQQqJeOR0/WQFv4R5fUEruRGB/Q5NXTRUlvFUCHue73t86rnLVbRLhQ4Sosh JKn2Iqy9+vYUIDCVlJfwVI8V9VaNCv0YY7zxFHoVDGfPmB9vOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzFlvP+LGQYIdDXtfqlolRWISh+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvNDE5MDFmYjktZTg1Mi0z OGZlLTlhNGItMTNhNzg4YzY0NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PW1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJSor6oktWS5/qhbPjZ3BVWSjGl5PJ6p0qZUZSiXdnEtTYqXovVFHxQ aS8OcAQiIWv5XNJztMxt6wpl6qlBPcNr5b/Hts+8wrHn0LVK+C6aA1IhOgozPmFf 8dJrzKzqqZvXiA22iHVke1TnSlO8sDG1f2xKX71S98nPkGb3Xni/AUkSHsYP3uXf 95PKWBRgtndDocI5t+s3HLdqgMknrgf9VVEWJVTRkthX/SdEMeSJPhi7Rhe2VgKX z5433XKbeLzLggJEu+cmejqKIDIPDCuT/gWJX4qzJrlKqpihoeDW9l/sUbvXk9Nn bXsfM/qgWYikiUHsMkt1pae54KM0r1w= -----END CERTIFICATE-----Generated at Fri Mar 14 10:19:29 2025 by rpki-client