$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa File: 27768a1c-4182-355f-8ed4-0217446693db.roa (raw, json) Hash identifier: gweAbVdOzIJxHmaQVsCFsXjmzNn5zJyAsJYuaaXM+ao= Subject key identifier: 17:BA:BD:79:39:BE:8E:EF:56:FF:75:91:7D:38:FB:35:6C:C8:50:D0 Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F432858499AF483235245B0F86D767500 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 63298 IP address blocks: 216.87.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:83:23:52:45:b0:f8:6d:76:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=73d3545e-5ed1-4b69-9e65-54b4c7cf87a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bd:31:08:d7:b9:76:b9:30:d9:12:47:ab:01: 40:35:34:f4:21:23:cb:56:1f:e4:ee:65:d7:d5:73: 99:58:08:bb:c9:4b:00:fa:f7:9d:f1:02:08:f1:f3: d2:16:ce:25:cb:d7:54:a7:e1:d4:c8:3c:b9:a2:d5: d0:3f:96:88:d5:1b:0b:0f:b1:1d:93:3a:d0:d1:6a: c2:86:81:f5:ef:35:44:fc:dd:28:bc:29:ed:e3:fa: 3d:5e:5a:ee:41:f1:dd:58:4b:ea:37:83:31:db:b9: 65:73:7f:1a:01:51:eb:00:03:7b:1e:3f:6c:95:fe: 08:ef:c9:fd:e6:b4:c5:ea:28:0c:00:77:4c:54:d9: b2:8a:f0:e2:1e:7d:a3:01:e2:e8:54:cf:ad:f7:db: 1b:f6:a7:63:fc:47:a5:7b:3f:43:9f:df:e0:cd:5d: 4c:f1:b1:76:6a:b0:60:df:5c:c7:ed:bd:cb:83:85: 19:d3:b0:8c:22:87:a3:e5:5e:66:26:86:95:70:dd: 43:88:3c:f2:ee:6e:f7:c9:6f:d5:36:d6:55:36:6a: f3:26:83:12:c5:3e:5a:01:a5:42:a9:de:a1:6d:39: e3:3c:25:34:aa:76:67:ef:05:f4:ca:f8:4f:b1:f0: cc:ed:fa:b6:5f:22:ff:a3:5f:54:5a:2e:52:7d:b0: 90:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BA:BD:79:39:BE:8E:EF:56:FF:75:91:7D:38:FB:35:6C:C8:50:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 216.87.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a6:fc:39:9c:bb:5c:a1:1f:2d:56:25:66:fa:13:c4:1c:fd: b2:64:a2:9e:de:16:ae:cc:9c:aa:ba:c7:46:41:12:57:3f:cc: cf:eb:2f:ad:66:02:ba:c8:c4:d5:fd:77:61:5d:04:bf:91:f8: cd:c1:15:7b:10:1c:b7:2f:5e:ea:e2:24:a3:6a:69:d7:55:f4: d5:16:4f:33:b6:78:36:2b:9b:64:ba:d1:84:0f:64:bd:67:aa: 01:d8:f1:22:49:c8:3d:67:1d:16:f1:fc:04:55:6d:96:30:2d: 81:46:29:5a:a9:d5:28:6b:7e:62:be:0c:75:e9:2f:07:03:e7: 7f:f3:df:9d:c3:e9:c1:fb:f3:a6:90:97:92:1c:84:a8:8b:93: 5e:91:37:b7:22:cf:23:0b:d4:77:db:b9:55:0f:f2:9e:3a:bf: 0e:ea:6d:d4:af:9e:b0:55:2b:6f:55:03:e1:c6:a8:ea:14:36: 11:65:ed:08:39:a7:d7:fb:34:3a:99:4c:96:f4:c6:c8:49:c2: e0:d8:a9:10:d1:cf:35:db:71:63:83:4e:02:8c:fc:dd:0f:76: c7:46:70:a2:48:bb:0c:d6:72:8f:5d:27:4f:1e:63:53:50:88: 73:be:63:a4:13:22:88:b5:cf:18:64:44:ab:13:81:44:de:c2: 6f:f8:45:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9IMjUkWw+G12dQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NzNkMzU0NWUtNWVkMS00YjY5LTllNjUtNTRiNGM3Y2Y4N2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj70xCNe5drkw2RJHqwFANTT0ISPLVh/k7mXX 1XOZWAi7yUsA+ved8QII8fPSFs4ly9dUp+HUyDy5otXQP5aI1RsLD7EdkzrQ0WrC hoH17zVE/N0ovCnt4/o9XlruQfHdWEvqN4Mx27llc38aAVHrAAN7Hj9slf4I78n9 5rTF6igMAHdMVNmyivDiHn2jAeLoVM+t99sb9qdj/Eelez9Dn9/gzV1M8bF2arBg 31zH7b3Lg4UZ07CMIoej5V5mJoaVcN1DiDzy7m73yW/VNtZVNmrzJoMSxT5aAaVC qd6hbTnjPCU0qnZn7wX0yvhPsfDM7fq2XyL/o19UWi5SfbCQ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe6vXk5vo7vVv91kX04+zVsyFDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMjc3NjhhMWMtNDE4Mi0z NTVmLThlZDQtMDIxNzQ0NjY5M2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2FcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCm/Dmcu1yhHy1WJWb6E8Qc/bJkop7eFq7MnKq6x0ZBElc/zM/rL61m ArrIxNX9d2FdBL+R+M3BFXsQHLcvXuriJKNqaddV9NUWTzO2eDYrm2S60YQPZL1n qgHY8SJJyD1nHRbx/ARVbZYwLYFGKVqp1ShrfmK+DHXpLwcD53/z353D6cH786aQ l5IchKiLk16RN7cizyML1HfbuVUP8p46vw7qbdSvnrBVK29VA+HGqOoUNhFl7Qg5 p9f7NDqZTJb0xshJwuDYqRDRzzXbcWODTgKM/N0PdsdGcKJIuwzWco9dJ08eY1NQ iHO+Y6QTIoi1zxhkRKsTgUTewm/4RUU= -----END CERTIFICATE-----Generated at Tue Apr 29 11:28:12 2025 by rpki-client