$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2200971b-7bfb-3f64-bdd7-8e3c3fb5e193.roa File: 2200971b-7bfb-3f64-bdd7-8e3c3fb5e193.roa (raw, json) Hash identifier: 1f6MrrPCNAinI4Dfw65dJDY7usnH6RVWv2rCYkW29SA= Subject key identifier: 20:41:56:80:A1:37:90:BB:49:31:F3:E7:D7:03:90:BF:F7:A2:1A:36 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5110D4E4C8FF7B1867060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2200971b-7bfb-3f64-bdd7-8e3c3fb5e193.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 7015 IP address blocks: 162.151.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:11:0d:4e:4c:8f:f7:b1:86:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=d6a9f9fc-7bd1-4502-a8d1-2eb0a67d5fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:b9:92:fb:1d:2e:57:80:e2:5b:c4:fd:37: 7a:55:64:9a:47:6a:bd:8f:64:cb:fd:9a:c4:48:66: 9e:2c:48:41:46:a0:8e:be:c9:58:4e:76:af:71:e6: 85:64:f3:8e:4b:2d:8d:30:64:6b:3b:12:8d:ec:d7: 00:58:a1:33:39:d5:03:e5:a7:8e:2f:a9:85:5f:c1: 95:5f:e2:d6:a7:84:af:70:3f:62:8c:73:b7:eb:cb: 85:54:0f:51:0f:43:39:5c:25:53:ee:75:1c:a3:98: c5:3f:de:f5:18:96:2d:f0:f3:52:46:bb:ef:a5:93: 3c:1f:77:cb:ac:54:ca:7f:59:94:52:d1:bd:ed:78: 21:57:3a:9d:c9:d8:65:a5:21:18:71:26:2c:5d:a0: 8b:dd:c4:fd:d9:7b:24:ac:1d:b1:48:76:78:d1:c6: 8c:80:2f:7e:20:e1:21:80:2e:2e:f2:be:7f:94:2e: df:b9:2d:c9:75:ad:d8:f0:9f:f3:90:43:6a:f4:db: 2a:73:1f:18:f8:75:6e:22:13:22:07:73:16:2c:1f: 4f:70:1b:a1:a6:1c:50:49:ed:cb:04:ca:28:a3:35: 42:45:f8:b5:eb:56:ff:fd:56:24:f0:53:9d:5f:2d: 08:1e:2c:48:f9:1a:b4:a3:fd:ef:61:05:41:82:5f: 37:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:41:56:80:A1:37:90:BB:49:31:F3:E7:D7:03:90:BF:F7:A2:1A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2200971b-7bfb-3f64-bdd7-8e3c3fb5e193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 162.151.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:45:f7:e8:cd:33:ad:91:93:77:6b:1f:5e:ec:93:5a:95:78: e5:3a:5c:9f:25:25:22:c1:d7:19:67:32:85:7b:f2:95:48:0b: 40:d7:8f:d6:42:88:07:cd:e6:10:4b:e1:bc:46:c6:13:2d:41: 81:3e:86:70:78:20:ea:fc:00:4a:ba:60:14:56:dd:d2:15:05: 30:b7:53:13:da:3a:7b:85:39:5b:f3:ca:1b:57:ee:6f:84:66: 85:fb:d7:2f:1e:d8:66:0e:14:eb:aa:f6:0a:dd:3e:1d:0e:f9: 0e:3b:24:12:15:1d:8b:83:09:bf:56:62:f4:df:83:64:34:c0: 3c:91:ad:f3:28:2c:e8:12:34:61:9f:16:7a:e1:f3:05:c8:bd: c0:51:58:e9:70:95:de:24:2e:99:de:d3:b8:77:68:d6:2b:2e: 99:b4:e9:53:e3:29:51:a5:a0:c3:bd:8b:10:11:f7:63:5e:83: c3:57:d5:27:c8:16:cb:8a:a8:02:1b:d2:86:b7:c0:e4:60:91: 64:d8:70:1d:03:19:67:4a:73:e8:8d:e8:bb:9c:c8:20:88:67: ef:5b:9d:53:2b:65:13:4b:15:a4:8a:15:02:7b:7a:08:df:cf: ea:01:4c:a2:ea:a4:90:02:55:38:7f:9a:ef:20:03:d3:6e:e6: 21:e1:ab:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pRENTkyP97GGcGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZDZhOWY5ZmMtN2JkMS00NTAyLWE4ZDEtMmViMGE2N2Q1ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucm5kvsdLleA4lvE/Td6VWSaR2q9j2TL/ZrE SGaeLEhBRqCOvslYTnavceaFZPOOSy2NMGRrOxKN7NcAWKEzOdUD5aeOL6mFX8GV X+LWp4SvcD9ijHO368uFVA9RD0M5XCVT7nUco5jFP971GJYt8PNSRrvvpZM8H3fL rFTKf1mUUtG97XghVzqdydhlpSEYcSYsXaCL3cT92XskrB2xSHZ40caMgC9+IOEh gC4u8r5/lC7fuS3Jda3Y8J/zkENq9Nsqcx8Y+HVuIhMiB3MWLB9PcBuhphxQSe3L BMooozVCRfi161b//VYk8FOdXy0IHixI+Rq0o/3vYQVBgl83gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBBVoChN5C7STHz59cDkL/3oho2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjIwMDk3MWItN2JmYi0z ZjY0LWJkZDctOGUzYzNmYjVlMTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCopfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENF9+jNM62Rk3drH17sk1qVeOU6XJ8lJSLB1xlnMoV78pVIC0DXj9ZC iAfN5hBL4bxGxhMtQYE+hnB4IOr8AEq6YBRW3dIVBTC3UxPaOnuFOVvzyhtX7m+E ZoX71y8e2GYOFOuq9grdPh0O+Q47JBIVHYuDCb9WYvTfg2Q0wDyRrfMoLOgSNGGf Fnrh8wXIvcBRWOlwld4kLpne07h3aNYrLpm06VPjKVGloMO9ixAR92Neg8NX1SfI FsuKqAIb0oa3wORgkWTYcB0DGWdKc+iN6LucyCCIZ+9bnVMrZRNLFaSKFQJ7egjf z+oBTKLqpJACVTh/mu8gA9Nu5iHhq0A= -----END CERTIFICATE-----Generated at Sun Apr 27 17:58:18 2025 by rpki-client