$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa File: bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa (raw, json) Hash identifier: /1+Tqfsrl1YtW1++NRBGlD9w362tvAtt7op6rEVvISM= Subject key identifier: D2:18:7F:5C:34:F6:4C:CE:3A:FF:41:36:29:87:5C:ED:D9:84:89:12 Certificate issuer: /CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Certificate serial: 010D0C9F43285848A18B50B136B31381B6F4DA00 Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa Signing time: Wed 22 Jan 2025 16:52:44 +0000 ROA not before: Wed 22 Jan 2025 16:52:44 +0000 ROA not after: Tue 22 Apr 2025 15:52:44 +0000 asID: 32709 IP address blocks: 168.92.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:8b:50:b1:36:b3:13:81:b6:f4:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486 Validity Not Before: Jan 22 16:52:44 2025 GMT Not After : Apr 22 15:52:44 2025 GMT Subject: CN=b867bba9-c6c8-48cf-ac90-b8e5f4b816b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:17:45:fe:93:2f:65:58:c5:c5:f6:ac:f7: 9a:07:98:e0:65:67:83:11:e5:36:32:b6:b5:0f:6d: dc:66:55:79:80:12:66:59:62:9c:2b:50:54:f6:9a: 8a:92:35:9b:c8:44:af:f6:2e:bf:9f:c6:fe:29:6d: 7a:fe:fd:47:bd:0a:f7:66:5a:c7:a7:5d:5e:31:10: 8d:1e:68:b7:b5:c1:12:bf:9b:8d:1d:2c:ae:34:80: e2:40:d0:64:f5:29:a8:38:59:52:b5:3c:c6:3d:ae: e6:45:de:0b:5b:b8:08:10:25:35:19:d4:47:ba:29: 75:e7:4a:5c:e1:16:86:b6:2f:11:60:ef:98:5b:77: 9c:39:39:fc:db:db:74:ee:3b:a1:f8:91:3e:52:25: 72:3d:af:4c:c6:ae:c7:4d:b2:bb:26:a7:24:c3:ce: 3f:35:37:4c:d8:30:99:91:72:1f:2f:a9:0f:4e:77: 0c:fb:76:f5:33:2f:d0:10:43:2f:60:71:e8:27:e1: fb:72:6f:03:a9:fa:81:8e:cf:cb:26:60:7e:a5:e1: e6:d2:03:d8:23:2b:07:fb:95:b2:8d:3b:1b:09:1d: cf:08:12:24:5c:a8:a0:7a:79:92:66:24:f8:ed:cd: 1b:8a:89:48:74:c7:a7:ba:eb:27:1b:02:2c:a6:e4: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:18:7F:5C:34:F6:4C:CE:3A:FF:41:36:29:87:5C:ED:D9:84:89:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/bffc227c-2348-3728-bfd1-cf442ec6c2e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl X509v3 Authority Key Identifier: keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer sbgp-ipAddrBlock: critical IPv4: 168.92.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:94:1e:dd:50:42:d1:75:02:01:6e:65:93:76:2f:a7:60:98: d3:0f:d8:e6:d3:06:eb:7c:56:53:46:41:df:0c:1f:08:1d:e7: c1:45:e1:63:1f:7d:8a:fb:47:08:a0:9b:e5:ff:91:cd:86:21: b9:40:cb:6c:45:8a:22:c2:02:b2:9f:97:a1:2e:02:e8:74:1d: e7:2a:c4:35:5c:0a:35:3c:61:7c:cd:1d:61:22:a5:df:59:b1: b2:9d:fa:72:a9:43:0c:a2:5a:f6:32:c8:ed:ef:15:d3:92:38: 4c:87:87:9e:2c:f2:b0:9a:f3:14:69:c9:f3:06:05:0d:b4:d1: 68:b7:19:a2:4f:10:90:86:c1:84:a2:a0:85:4a:67:55:43:e6: 88:64:34:a6:bf:6d:67:d6:57:bb:55:db:9e:02:1f:e6:5a:fb: 94:78:78:e8:73:67:cb:1b:d6:f4:59:52:ea:0c:72:2a:66:c4: a3:0b:e3:6e:0d:a0:f9:93:ed:5b:a0:f4:07:89:2d:52:3d:1c: e9:a7:98:b2:7e:bb:b5:02:64:4a:1f:6f:91:3f:a4:01:e5:9c: b3:c9:81:4e:7f:f2:7a:0f:8e:57:e2:8a:2a:ef:28:42:9a:d7: 89:ed:13:ef:bf:9b:b2:f0:4d:1d:ec:61:65:25:57:75:8d:70: 4f:11:66:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihi1CxNrMTgbb02gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhNWEyNTctYTEyMS00MWRlLWIwYmUtNmFiMTkxZmM0 NDg2MB4XDTI1MDEyMjE2NTI0NFoXDTI1MDQyMjE1NTI0NFowLzEtMCsGA1UEAxMk Yjg2N2JiYTktYzZjOC00OGNmLWFjOTAtYjhlNWY0YjgxNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgScXRf6TL2VYxcX2rPeaB5jgZWeDEeU2Mra1 D23cZlV5gBJmWWKcK1BU9pqKkjWbyESv9i6/n8b+KW16/v1HvQr3ZlrHp11eMRCN Hmi3tcESv5uNHSyuNIDiQNBk9SmoOFlStTzGPa7mRd4LW7gIECU1GdRHuil150pc 4RaGti8RYO+YW3ecOTn829t07juh+JE+UiVyPa9Mxq7HTbK7Jqckw84/NTdM2DCZ kXIfL6kPTncM+3b1My/QEEMvYHHoJ+H7cm8DqfqBjs/LJmB+peHm0gPYIysH+5Wy jTsbCR3PCBIkXKigenmSZiT47c0biolIdMenuusnGwIspuT+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIYf1w09kzOOv9BNimHXO3ZhIkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1 YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIxOTFmYzQ0ODYvYmZmYzIyN2MtMjM0OC0z NzI4LWJmZDEtY2Y0NDJlYzZjMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZThhNWEyNTctYTEyMS00MWRlLWIw YmUtNmFiMTkxZmM0NDg2L2U4YTVhMjU3LWExMjEtNDFkZS1iMGJlLTZhYjE5MWZj NDQ4Ni5jcmwwHwYDVR0jBBgwFoAUMoEBACTss5HVn2xikJ/BC2weBc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOGE1YTI1Ny1hMTIxLTQxZGUtYjBiZS02YWIx OTFmYzQ0ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGqFxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaUHt1QQtF1AgFuZZN2L6dgmNMP2ObTBut8VlNGQd8MHwgd58FF4WMf fYr7Rwigm+X/kc2GIblAy2xFiiLCArKfl6EuAuh0HecqxDVcCjU8YXzNHWEipd9Z sbKd+nKpQwyiWvYyyO3vFdOSOEyHh54s8rCa8xRpyfMGBQ200Wi3GaJPEJCGwYSi oIVKZ1VD5ohkNKa/bWfWV7tV254CH+Za+5R4eOhzZ8sb1vRZUuoMcipmxKML424N oPmT7Vug9AeJLVI9HOmnmLJ+u7UCZEofb5E/pAHlnLPJgU5/8noPjlfiiirvKEKa 14ntE++/m7LwTR3sYWUlV3WNcE8RZgs= -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:30 2025 by rpki-client