$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa File: ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa (raw, json) Hash identifier: vp4IM5MniKykmXViTY4HNJDI/4c+TQ1W4Q+RFPCVPlc= Subject key identifier: 1B:D9:2B:A3:5D:B6:AB:9D:F2:C9:46:C6:84:FF:7B:23:79:B7:E2:49 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584993F9DD2CDEA4B7A812C12960 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 4213 IP address blocks: 216.176.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:dd:2c:de:a4:b7:a8:12:c1:29:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=ed2fab24-d200-4bf0-a6ad-2b37bf0f95c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e1:c2:03:c8:61:3e:d0:2e:91:f6:c5:1b:a7: b4:0d:da:3b:ef:b8:00:a2:b8:76:b4:f0:03:62:f9: 4f:5c:7d:79:da:44:0f:4a:ec:b3:d1:bc:c8:30:18: e0:c8:5c:1e:7e:af:06:c6:08:3e:b3:6b:a0:fb:07: 2b:20:d0:07:4f:c5:ae:69:40:f5:df:5f:b6:76:53: 20:3f:3f:c5:12:d9:7a:4f:49:04:48:0d:29:0f:5c: ab:ec:8d:e7:85:bf:ab:c3:5e:79:2b:f7:1c:ee:d7: 07:04:25:70:c7:5e:11:d3:bf:57:a9:b8:d7:8d:c4: cf:75:92:eb:3a:e8:ae:96:c6:d4:cc:f5:21:b9:55: 8e:82:e3:12:ef:a1:3b:81:24:48:31:4a:e4:1b:02: 6c:88:a6:65:73:81:6b:e7:f0:40:1d:b2:a4:19:4c: 86:12:7e:7b:34:20:b7:87:2e:47:1c:f6:f8:da:e8: c1:1d:ec:bb:e1:09:1f:1a:bc:ce:2d:9c:ba:b8:88: db:37:63:05:fc:62:ba:c6:6e:65:9f:f6:5b:74:a6: 70:92:e8:c6:66:25:ec:e6:a2:e6:37:e5:34:76:60: b9:3d:4c:f7:0b:8a:04:39:d8:b2:91:91:cf:88:7a: ae:32:f0:b3:31:c2:e6:76:6f:fb:86:cf:6c:f0:81: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D9:2B:A3:5D:B6:AB:9D:F2:C9:46:C6:84:FF:7B:23:79:B7:E2:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/ec53920a-a403-3eb2-9f0f-ae8b9f6aa61c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 216.176.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:00:01:00:a7:77:9b:69:27:b4:d3:08:58:e9:43:6b:c2:53: 17:e3:a7:f3:d0:48:14:f5:cb:b6:f3:bb:d3:96:cf:89:46:f9: 1f:c4:54:fb:1b:30:ae:fd:0b:ab:52:7b:eb:2d:04:fb:0d:dd: 53:50:86:ea:40:f2:33:e6:bb:7e:6e:60:2e:4a:e8:3c:2d:36: 75:e7:75:8f:b5:0e:f9:3a:1c:db:e1:70:b0:dd:15:33:93:57: ed:d8:60:9f:45:0c:4e:c5:80:c2:f9:e3:da:d1:9f:ec:8b:39: 44:25:01:95:6f:78:ba:64:f7:e1:85:42:6b:36:91:ad:8f:74: 39:8d:e7:20:81:9e:16:d4:87:6e:f0:c8:ae:a1:a3:44:0e:e7: 0c:a3:a6:7d:8a:32:5a:7a:e5:ec:30:af:b6:e0:6c:fa:8c:e5: 08:cd:82:5c:cc:d0:02:f4:81:b1:ec:fa:73:da:f2:09:bd:73: 95:46:e5:df:09:f5:a9:ed:cd:d7:49:72:9d:41:07:2f:6a:8e: 5d:37:80:ec:ec:fa:ec:c1:b6:e2:53:00:a0:5f:8e:7e:26:3b: 97:88:f2:45:79:96:0e:de:e9:1e:ab:2e:9c:3a:ad:47:a5:a8: 81:73:39:b7:c8:4a:9e:13:2f:03:57:64:48:4e:15:21:54:6c: 15:ef:94:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+d0s3qS3qBLBKWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk ZWQyZmFiMjQtZDIwMC00YmYwLWE2YWQtMmIzN2JmMGY5NWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+HCA8hhPtAukfbFG6e0Ddo777gAorh2tPAD YvlPXH152kQPSuyz0bzIMBjgyFwefq8Gxgg+s2ug+wcrINAHT8WuaUD131+2dlMg Pz/FEtl6T0kESA0pD1yr7I3nhb+rw155K/cc7tcHBCVwx14R079XqbjXjcTPdZLr OuiulsbUzPUhuVWOguMS76E7gSRIMUrkGwJsiKZlc4Fr5/BAHbKkGUyGEn57NCC3 hy5HHPb42ujBHey74QkfGrzOLZy6uIjbN2MF/GK6xm5ln/ZbdKZwkujGZiXs5qLm N+U0dmC5PUz3C4oEOdiykZHPiHquMvCzMcLmdm/7hs9s8IFt+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvZK6Ndtqud8slGxoT/eyN5t+JJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZWM1MzkyMGEtYTQwMy0z ZWIyLTlmMGYtYWU4YjlmNmFhNjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwAAQCnd5tpJ7TTCFjpQ2vCUxfjp/PQSBT1y7bzu9OWz4lG+R/EVPsb MK79C6tSe+stBPsN3VNQhupA8jPmu35uYC5K6DwtNnXndY+1Dvk6HNvhcLDdFTOT V+3YYJ9FDE7FgML549rRn+yLOUQlAZVveLpk9+GFQms2ka2PdDmN5yCBnhbUh27w yK6ho0QO5wyjpn2KMlp65ewwr7bgbPqM5QjNglzM0AL0gbHs+nPa8gm9c5VG5d8J 9antzddJcp1BBy9qjl03gOzs+uzBtuJTAKBfjn4mO5eI8kV5lg7e6R6rLpw6rUel qIFzObfISp4TLwNXZEhOFSFUbBXvlBo= -----END CERTIFICATE-----Generated at Sat Apr 26 20:49:46 2025 by rpki-client