$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/654966e7-4171-3ec2-8448-3233091cbe98.roa File: 654966e7-4171-3ec2-8448-3233091cbe98.roa (raw, json) Hash identifier: fyED9XJaVaH1e9Kgqjhexar5i045ut+Gf5mwsebQ60A= Subject key identifier: 50:15:58:F4:DD:FC:97:0B:D4:5A:B2:22:D1:EA:39:BE:FA:60:39:20 Certificate issuer: /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Certificate serial: 010D0C9F4328584944693F2EED8C33A2D705AC40 Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/654966e7-4171-3ec2-8448-3233091cbe98.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 173.213.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:3f:2e:ed:8c:33:a2:d7:05:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=26cfabdc-8cc4-40b8-bfce-2fd352c3b09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8e:e8:8b:0a:bc:c7:99:6d:7d:d7:1b:dd:50: 1d:c1:71:cf:71:24:b2:f2:23:fa:17:93:40:a2:1d: fd:60:0a:b4:ab:50:8e:43:bc:4f:a5:7f:5b:e5:64: 5e:bf:61:7d:90:7b:91:2e:81:e1:4d:ad:b5:b4:32: 8f:45:98:73:a6:3b:10:35:19:c5:69:56:a3:b8:8f: f8:31:9f:c2:57:c5:ac:a5:2b:c9:4e:dc:4d:64:3d: c2:b0:f8:c0:14:a0:bb:4d:fa:b0:25:83:47:57:ac: 8d:33:b3:7a:d4:d6:3e:c8:f3:8d:09:9c:30:ec:81: 92:1d:e3:e2:fc:72:08:c4:2e:18:a1:46:f4:47:f1: a1:3a:15:40:d2:31:ea:7f:dc:cd:ba:ab:79:97:c2: dd:a1:0e:22:77:bf:d6:8f:3a:ed:17:6c:7d:db:3b: 35:6a:9c:f4:ea:5a:a2:cc:32:91:36:5d:21:6d:49: 2c:b7:95:36:e3:54:d1:92:e4:da:f4:cc:be:dc:5a: 29:5d:a2:a9:4a:79:25:f9:ab:a8:3e:b8:65:8f:a3: c4:e1:32:a4:05:43:ec:35:a2:91:a2:eb:34:1a:13: 96:fd:b1:96:02:29:2a:a9:24:b9:90:3f:a6:e9:35: 2c:7a:6b:bb:4a:66:b4:ad:cc:a1:91:21:4b:ad:25: 72:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:15:58:F4:DD:FC:97:0B:D4:5A:B2:22:D1:EA:39:BE:FA:60:39:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/654966e7-4171-3ec2-8448-3233091cbe98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl X509v3 Authority Key Identifier: keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer sbgp-ipAddrBlock: critical IPv4: 173.213.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:cf:d7:17:9c:c2:f8:70:a7:4b:9e:33:95:73:b4:34:b6:d8: 0c:6b:9a:9d:21:1b:60:b0:af:55:37:09:18:2f:2b:9e:6b:c4: de:93:b2:16:87:8e:69:b4:22:89:43:50:21:97:83:32:e1:f4: 32:3e:88:c4:41:4e:5f:d2:1e:8c:3f:b0:09:fd:f8:63:1a:8d: 36:e0:45:da:a5:c8:f3:a2:70:ed:6a:48:66:92:21:8b:c4:75: c3:3e:93:38:2f:1d:8d:d3:67:3c:be:5a:45:bb:38:5d:a6:95: 78:09:b8:31:d1:18:0b:fe:d6:17:73:0f:5d:dc:10:7b:0b:0b: 89:4e:b1:6f:c0:6c:57:a2:fa:24:b7:67:b0:9b:7e:68:88:ec: a2:2d:ff:f7:36:50:ea:c7:85:e2:fb:d8:3f:0f:d2:16:02:fd: 77:bf:c9:ce:df:15:84:55:b9:b8:72:6a:88:f4:83:4b:cd:02: d1:de:48:3a:2c:34:f6:9f:10:af:e0:c1:93:f5:29:44:4f:5a: e2:e4:e2:4e:4a:88:4d:4f:30:9a:5e:4d:15:64:db:38:0d:0c: db:4c:b1:de:63:e3:61:36:0d:fa:6d:62:4e:95:a4:ca:0c:9f: 7f:c6:c6:d3:ba:15:ac:2d:18:8e:31:37:50:a2:35:66:66:88: 43:bd:b6:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaT8u7YwzotcFrEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy ZTQxMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk MjZjZmFiZGMtOGNjNC00MGI4LWJmY2UtMmZkMzUyYzNiMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I7oiwq8x5ltfdcb3VAdwXHPcSSy8iP6F5NA oh39YAq0q1COQ7xPpX9b5WRev2F9kHuRLoHhTa21tDKPRZhzpjsQNRnFaVajuI/4 MZ/CV8WspSvJTtxNZD3CsPjAFKC7TfqwJYNHV6yNM7N61NY+yPONCZww7IGSHePi /HIIxC4YoUb0R/GhOhVA0jHqf9zNuqt5l8LdoQ4id7/WjzrtF2x92zs1apz06lqi zDKRNl0hbUkst5U241TRkuTa9My+3FopXaKpSnkl+auoPrhlj6PE4TKkBUPsNaKR ous0GhOW/bGWAikqqSS5kD+m6TUsemu7Sma0rcyhkSFLrSVyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAVWPTd/JcL1FqyItHqOb76YDkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvNjU0OTY2ZTctNDE3MS0z ZWMyLTg0NDgtMzIzMzA5MWNiZTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2 MGQxZDJlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrdUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3P1xecwvhwp0ueM5VztDS22Axrmp0hG2Cwr1U3CRgvK55rxN6TshaH jmm0IolDUCGXgzLh9DI+iMRBTl/SHow/sAn9+GMajTbgRdqlyPOicO1qSGaSIYvE dcM+kzgvHY3TZzy+WkW7OF2mlXgJuDHRGAv+1hdzD13cEHsLC4lOsW/AbFei+iS3 Z7CbfmiI7KIt//c2UOrHheL72D8P0hYC/Xe/yc7fFYRVubhyaoj0g0vNAtHeSDos NPafEK/gwZP1KURPWuLk4k5KiE1PMJpeTRVk2zgNDNtMsd5j42E2DfptYk6VpMoM n3/GxtO6FawtGI4xN1CiNWZmiEO9tl0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:26:52 2025 by rpki-client