$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa File: 9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa (raw, json) Hash identifier: wthdE2GqLsCl82J2wAX5y0tXuRor3GMnlyReDHLGFr8= Subject key identifier: 45:C1:08:5D:7A:B1:8B:FA:5A:3F:02:10:BF:69:DD:96:0E:D8:6C:9F Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F432858495ABEE518888C63003A3C4600 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 399185 IP address blocks: 16.0.56.192/27 maxlen: 27 16.1.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e5:18:88:8c:63:00:3a:3c:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=ead69a20-b52b-4e82-aba5-ec3ad451a20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f2:58:57:09:44:c2:72:a5:ba:c7:c1:8a:29: 97:88:df:98:ad:d5:b0:0f:39:e7:e0:53:ea:9b:27: 62:ab:58:84:50:ee:d8:34:06:00:3f:a9:c0:9b:9e: 3b:c0:a1:0f:c3:50:9b:bc:1d:a6:8a:50:c0:77:03: f0:31:c6:45:60:0f:04:ea:4d:15:b5:55:a4:db:d7: c2:30:ef:ca:1c:e5:0e:b5:02:51:20:15:8b:94:b3: a0:62:c5:05:37:11:6e:a0:26:31:3e:08:52:0b:af: d6:bc:4d:b9:80:0b:a0:bc:38:3c:a4:63:95:01:18: 96:ca:ff:b2:95:4b:a5:6c:e4:95:8e:20:f9:ff:ae: 0b:4b:4e:6d:09:b3:67:2c:90:10:39:9f:ef:41:82: 97:21:84:f3:ac:39:a0:37:be:5d:5a:71:d3:46:bf: 96:ec:b1:44:26:b6:d1:d7:29:8a:47:70:48:9d:64: cb:de:fe:07:67:2f:83:fd:70:98:a2:ac:40:d3:46: 51:0e:07:c9:68:4c:25:4d:3f:69:49:44:65:5e:6c: 6c:dc:9a:59:4b:3f:97:f4:4e:d7:c4:0b:f3:fa:11: f4:06:79:9c:3a:70:09:e6:9d:f5:9a:5f:8f:8b:91: 46:c1:ef:db:10:c1:bb:5b:7f:7e:6d:4c:cd:aa:93: 35:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C1:08:5D:7A:B1:8B:FA:5A:3F:02:10:BF:69:DD:96:0E:D8:6C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/9cd3f317-bab9-3e24-87ca-d8e7602bc9df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.0.56.192/27 16.1.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6a:4d:1d:96:93:5a:d9:0a:75:fa:e5:14:21:c5:27:8a:31: 63:3e:73:00:ae:66:4e:68:2b:0e:6a:f9:4b:d7:f0:3c:cd:ff: 43:37:a9:0a:90:1a:98:50:cd:3c:01:86:66:12:8a:92:04:b4: af:32:61:39:6e:af:41:82:29:ea:72:ec:d6:1b:93:0c:ac:9f: 1c:6e:fb:fa:f3:84:b0:53:6f:db:7d:3e:95:cd:2f:b6:77:ec: fa:ec:4f:d5:51:6a:20:1e:35:32:bb:d1:d2:44:ac:d2:e8:7b: 02:47:29:a2:84:2b:3e:03:dd:d2:6a:e0:dc:bf:8d:f4:77:63: 0f:dd:3b:14:a0:a0:ab:f2:4e:6c:f2:30:3d:e5:fc:ba:18:f9: dd:2e:97:44:ff:77:2e:05:f6:2c:6d:32:04:67:bd:b2:76:38: 4f:a0:e3:37:4f:bd:1c:6b:73:e8:44:69:9c:83:6d:0b:88:bd: e6:6c:b9:d5:7d:5d:48:f7:c5:5b:15:18:a3:58:42:24:b9:09: 5c:fb:ab:0a:e1:df:32:89:f9:87:3d:a1:a3:ec:bd:bd:6d:a6: 14:42:9e:a7:c0:07:e1:82:1f:1c:54:21:2a:a7:a8:29:26:d6: 3d:7c:eb:99:c2:a5:c9:6d:f8:58:58:2d:17:b4:ff:52:a5:b4: a5:6c:c2:a5 -----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgIUAQ0Mn0MoWElavuUYiIxjADo8RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZWFkNjlhMjAtYjUyYi00ZTgyLWFiYTUtZWMzYWQ0NTFhMjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovJYVwlEwnKlusfBiimXiN+YrdWwDznn4FPq mydiq1iEUO7YNAYAP6nAm547wKEPw1CbvB2milDAdwPwMcZFYA8E6k0VtVWk29fC MO/KHOUOtQJRIBWLlLOgYsUFNxFuoCYxPghSC6/WvE25gAugvDg8pGOVARiWyv+y lUulbOSVjiD5/64LS05tCbNnLJAQOZ/vQYKXIYTzrDmgN75dWnHTRr+W7LFEJrbR 1ymKR3BInWTL3v4HZy+D/XCYoqxA00ZRDgfJaEwlTT9pSURlXmxs3JpZSz+X9E7X xAvz+hH0BnmcOnAJ5p31ml+Pi5FGwe/bEMG7W39+bUzNqpM1qwIDAQABo4IDXDCC A1gwHQYDVR0OBBYEFEXBCF16sYv6Wj8CEL9p3ZYO2GyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvOWNkM2YzMTctYmFiOS0z ZTI0LTg3Y2EtZDhlNzYwMmJjOWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwUFEAA4wAME ABABeTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBPak0dlpNa2Qp1+uUUIcUnijFjPnMArmZOaCsOavlL1/A8 zf9DN6kKkBqYUM08AYZmEoqSBLSvMmE5bq9BginqcuzWG5MMrJ8cbvv684SwU2/b fT6VzS+2d+z67E/VUWogHjUyu9HSRKzS6HsCRymihCs+A93SauDcv430d2MP3TsU oKCr8k5s8jA95fy6GPndLpdE/3cuBfYsbTIEZ72ydjhPoOM3T70ca3PoRGmcg20L iL3mbLnVfV1I98VbFRijWEIkuQlc+6sK4d8yifmHPaGj7L29baYUQp6nwAfhgh8c VCEqp6gpJtY9fOuZwqXJbfhYWC0XtP9SpbSlbMKl -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:21 2025 by rpki-client