$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa File: ae285376-dfc4-32db-9a1c-cfac9e961d90.roa (raw, json) Hash identifier: +NPgvszHo/w0AWYcv6WqKU/K27d51yIQ+x7ya483hv4= Subject key identifier: 3E:0B:38:FF:6A:EC:5C:F4:DC:BE:D8:81:88:8C:CE:33:F0:56:6D:93 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F43285849446937B3AC8B66B366F01220 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 11702 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:37:b3:ac:8b:66:b3:66:f0:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=471abec7-ea5e-4e97-8589-6edc57a8f641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2f:5c:3a:1f:6c:cc:82:23:de:23:bb:a8:f5: cf:b5:96:18:9e:b9:20:71:13:55:b8:c1:db:58:bc: 17:13:23:1e:4e:c4:4d:2b:01:b9:18:9b:83:b0:4f: 7d:13:ed:ee:54:93:c5:10:87:92:50:53:9a:d7:4a: 4a:25:af:e6:d2:53:30:19:37:98:9e:cf:93:cd:ac: 01:8b:3c:2b:cb:0a:3d:9a:97:3a:0b:d4:be:42:d5: 55:a7:aa:17:13:66:d2:3d:c2:e9:e5:9c:df:dc:f4: 54:87:aa:81:bb:ef:8b:33:68:13:6e:fb:85:be:2b: a3:4a:00:2b:d9:26:bd:a7:e0:0a:a1:7a:57:32:57: 61:2b:a8:7a:53:32:2a:c0:6d:57:f6:15:6e:f5:a9: cb:0e:be:2a:75:6b:57:16:61:27:c0:c7:32:08:34: 9e:89:c1:6c:9c:07:a3:93:20:c7:4f:53:b6:ec:41: fc:41:7c:f7:50:3c:b4:df:65:17:84:56:63:a9:04: 5f:00:80:24:a8:81:08:53:c0:2c:88:8a:48:53:0b: ad:c0:36:fb:29:41:22:24:b4:d5:9c:18:18:7c:30: 11:59:ab:ba:04:da:99:ee:a3:79:cd:be:72:40:fd: 5a:d1:8f:21:30:70:b7:80:84:4b:9f:ec:8b:23:95: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0B:38:FF:6A:EC:5C:F4:DC:BE:D8:81:88:8C:CE:33:F0:56:6D:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:35:35:b5:5a:27:90:c7:7f:b7:8f:15:74:28:ea:e5:02:6e: 92:3b:9a:3d:c7:ca:87:ad:86:cc:aa:4e:93:08:94:f8:fa:1c: 13:14:ef:a5:f2:15:4c:69:11:5a:d5:6c:ff:d5:ee:bf:cd:da: 77:d0:dc:d6:b9:80:51:54:6a:21:81:bf:e5:da:54:d3:13:7c: d0:ab:ab:5f:10:a0:68:bd:f9:37:18:16:cb:f1:d2:95:de:6f: c2:2c:70:71:6f:6c:39:65:14:2f:0f:a2:0e:88:33:e3:e4:f1: fb:45:4a:48:7a:95:43:10:bd:ad:1f:43:b1:95:9a:fe:e0:32: 80:e0:20:74:4e:11:92:13:83:fc:1e:68:04:dd:be:64:40:b2: 26:7f:7d:e2:b9:6f:d0:77:7f:fc:74:42:18:6c:3e:48:c1:c6: 1e:fc:16:6a:d4:e3:5a:b5:89:1d:12:0a:a8:23:36:d4:3b:7b: d0:d4:de:0d:99:35:40:97:fd:4f:15:ec:9a:d4:26:82:5e:d2: f3:34:83:28:c7:1f:a5:d1:d7:51:5a:95:7f:2f:54:39:7b:08: 5a:3d:51:0e:ed:5c:29:3d:d8:c9:69:66:e1:e8:17:54:8c:9a: 9c:77:a1:f4:7a:ea:f2:8c:8e:2a:6b:db:dc:b4:7f:57:1b:ab: 07:a1:dd:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTezrItms2bwEiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk NDcxYWJlYzctZWE1ZS00ZTk3LTg1ODktNmVkYzU3YThmNjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS9cOh9szIIj3iO7qPXPtZYYnrkgcRNVuMHb WLwXEyMeTsRNKwG5GJuDsE99E+3uVJPFEIeSUFOa10pKJa/m0lMwGTeYns+TzawB izwrywo9mpc6C9S+QtVVp6oXE2bSPcLp5Zzf3PRUh6qBu++LM2gTbvuFviujSgAr 2Sa9p+AKoXpXMldhK6h6UzIqwG1X9hVu9anLDr4qdWtXFmEnwMcyCDSeicFsnAej kyDHT1O27EH8QXz3UDy032UXhFZjqQRfAIAkqIEIU8AsiIpIUwutwDb7KUEiJLTV nBgYfDARWau6BNqZ7qN5zb5yQP1a0Y8hMHC3gIRLn+yLI5VAXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4LOP9q7Fz03L7YgYiMzjPwVm2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYWUyODUzNzYtZGZjNC0z MmRiLTlhMWMtY2ZhYzllOTYxZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM1NbVaJ5DHf7ePFXQo6uUCbpI7mj3HyoethsyqTpMIlPj6HBMU76Xy FUxpEVrVbP/V7r/N2nfQ3Na5gFFUaiGBv+XaVNMTfNCrq18QoGi9+TcYFsvx0pXe b8IscHFvbDllFC8Pog6IM+Pk8ftFSkh6lUMQva0fQ7GVmv7gMoDgIHROEZITg/we aATdvmRAsiZ/feK5b9B3f/x0QhhsPkjBxh78FmrU41q1iR0SCqgjNtQ7e9DU3g2Z NUCX/U8V7JrUJoJe0vM0gyjHH6XR11FalX8vVDl7CFo9UQ7tXCk92MlpZuHoF1SM mpx3ofR66vKMjipr29y0f1cbqweh3Xo= -----END CERTIFICATE-----Generated at Sun Apr 27 20:56:58 2025 by rpki-client