$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/d1f459e0-e649-32e0-847d-1f51c79740a5.roa File: d1f459e0-e649-32e0-847d-1f51c79740a5.roa (raw, json) Hash identifier: 5OLdjucowecdef+hTQk+/2SdYxVF9HgH7PeHL3/ZWG4= Subject key identifier: 52:22:15:C0:AD:3D:ED:73:A1:33:51:26:83:3D:44:26:52:C3:7F:43 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584944693120FDE5761AAE0796E0 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/d1f459e0-e649-32e0-847d-1f51c79740a5.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 19905 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:31:20:fd:e5:76:1a:ae:07:96:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=97e0ff80-90ff-4fa6-8c7f-a268b453301b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5d:7d:c7:97:b5:69:f0:01:ba:52:1c:40:fb: 52:fa:94:5d:6c:f2:af:3b:2e:c8:83:e7:61:a7:cd: 77:30:a3:12:b4:00:0c:9b:9a:0c:0c:63:f8:52:17: 84:35:ef:fb:96:74:a8:08:2f:6e:c6:a9:c8:59:5b: df:d3:1f:7a:0a:45:a0:e1:60:83:48:fd:b2:a9:30: 90:de:8a:1b:eb:45:6f:37:58:ef:91:2c:18:3c:63: bc:ed:cf:1e:a9:cc:5d:27:4b:2e:f3:d1:a7:8a:25: a8:e4:cd:5f:bc:14:e5:85:1b:de:ff:0f:89:91:fd: ab:07:37:d4:e0:63:7c:cf:3a:49:86:38:c2:c6:5e: 31:16:09:55:83:df:31:4d:10:1e:20:ab:2c:d5:ab: c1:af:1b:cd:98:2c:6f:d8:af:29:18:43:87:13:1c: 44:47:ee:4e:86:f9:f5:f2:59:f2:50:5b:60:f1:51: 4c:72:dc:a7:65:f0:75:23:59:f0:cf:5a:41:99:fc: b9:a8:26:b3:58:fb:42:cb:30:b6:98:fa:f0:03:1c: 7e:f4:da:46:d1:ae:0b:02:dd:21:5c:5c:77:9e:ed: f6:4d:52:76:dd:80:77:da:82:ff:f9:0c:01:7e:5e: 68:05:82:c5:44:e7:f5:c3:18:27:1d:47:e7:65:c4: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:22:15:C0:AD:3D:ED:73:A1:33:51:26:83:3D:44:26:52:C3:7F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/d1f459e0-e649-32e0-847d-1f51c79740a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:73:50:bc:a3:a0:21:80:c6:56:69:9f:e1:49:45:e1:42:fe: c7:d2:f2:55:7b:6d:ff:4e:d1:b7:ed:f0:88:50:c3:31:9f:67: 6c:d6:7e:39:d8:b3:e3:2b:1c:b6:21:d7:be:09:fd:a0:8b:68: 30:50:7f:95:a5:43:a3:2f:91:8d:e8:a2:79:f1:cf:6b:de:bb: 64:d0:70:d2:0f:51:7a:8c:65:d9:11:0f:c7:01:0f:cd:69:a2: 6a:7e:08:1c:2c:03:19:c5:4e:e0:4c:2a:ae:41:fc:bc:32:78: e5:80:d1:ae:64:df:81:32:65:42:e6:21:57:1a:96:b8:7c:aa: 7e:3f:00:91:48:31:44:10:be:32:01:2d:93:87:53:be:69:1d: 91:f4:ca:40:b5:7d:52:f2:48:3e:95:91:7b:56:5c:90:8b:a7: f7:9a:b7:5c:48:29:47:f7:14:7f:4a:e9:e2:44:27:c3:d0:8b: 51:ae:f1:5e:8a:3e:0c:d0:92:89:54:56:14:31:f4:60:71:3e: be:f6:7e:34:0f:97:ef:36:04:e1:85:fd:ad:b5:73:0b:c1:1c: 93:f4:c7:c1:73:a4:e5:52:95:39:8c:b8:88:d7:99:c5:68:a3: b0:d1:48:61:b4:40:e7:ac:3c:6a:26:b1:b1:37:b2:1e:6f:df: 9d:56:52:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTEg/eV2Gq4HluAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk OTdlMGZmODAtOTBmZi00ZmE2LThjN2YtYTI2OGI0NTMzMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg119x5e1afABulIcQPtS+pRdbPKvOy7Ig+dh p813MKMStAAMm5oMDGP4UheENe/7lnSoCC9uxqnIWVvf0x96CkWg4WCDSP2yqTCQ 3oob60VvN1jvkSwYPGO87c8eqcxdJ0su89GniiWo5M1fvBTlhRve/w+Jkf2rBzfU 4GN8zzpJhjjCxl4xFglVg98xTRAeIKss1avBrxvNmCxv2K8pGEOHExxER+5Ohvn1 8lnyUFtg8VFMctynZfB1I1nwz1pBmfy5qCazWPtCyzC2mPrwAxx+9NpG0a4LAt0h XFx3nu32TVJ23YB32oL/+QwBfl5oBYLFROf1wxgnHUfnZcRwdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIiFcCtPe1zoTNRJoM9RCZSw39DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvZDFmNDU5ZTAtZTY0OS0z MmUwLTg0N2QtMWY1MWM3OTc0MGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxzULyjoCGAxlZpn+FJReFC/sfS8lV7bf9O0bft8IhQwzGfZ2zWfjnY s+MrHLYh174J/aCLaDBQf5WlQ6MvkY3oonnxz2veu2TQcNIPUXqMZdkRD8cBD81p omp+CBwsAxnFTuBMKq5B/LwyeOWA0a5k34EyZULmIVcalrh8qn4/AJFIMUQQvjIB LZOHU75pHZH0ykC1fVLySD6VkXtWXJCLp/eat1xIKUf3FH9K6eJEJ8PQi1Gu8V6K PgzQkolUVhQx9GBxPr72fjQPl+82BOGF/a21cwvBHJP0x8FzpOVSlTmMuIjXmcVo o7DRSGG0QOesPGomsbE3sh5v351WUtw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:55:59 2025 by rpki-client