$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa File: de977a80-b422-3e83-bc77-25aec313c480.roa (raw, json) Hash identifier: wYGLyXFb038STgpXfbdVHq0gQZcdpNcpj6sCpnEfYUE= Subject key identifier: 68:91:6C:9A:48:79:D9:51:2A:D4:9E:DB:0B:C8:47:C6:9E:85:10:64 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F432858493ED3D9872CC21126E6422A00 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa Signing time: Thu 20 Mar 2025 01:00:39 +0000 ROA not before: Thu 20 Mar 2025 01:00:39 +0000 ROA not after: Wed 18 Jun 2025 01:00:39 +0000 asID: 8635 IP address blocks: 16.1.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3e:d3:d9:87:2c:c2:11:26:e6:42:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Mar 20 01:00:39 2025 GMT Not After : Jun 18 01:00:39 2025 GMT Subject: CN=5189f83e-6d6c-4368-ac40-f4fa0fb9574c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:18:16:8b:9a:0d:87:b3:65:5b:dc:2c:5a:ea: 51:97:c6:16:06:ab:ab:06:96:a3:23:49:9a:f9:f5: d5:06:b3:32:e2:4b:b1:f0:80:c1:6d:6d:31:b0:45: 51:dd:73:44:ce:44:b9:58:80:8a:1a:e5:41:7e:f1: 01:b4:03:68:22:68:76:96:5d:a8:ef:3d:1d:01:4f: 55:81:e0:cf:96:b7:7a:1c:18:e6:76:90:29:57:55: c2:2b:4c:be:a2:5a:16:02:d8:42:99:bc:b3:6c:35: ac:3c:9a:ff:a3:f8:dc:ed:15:1a:b0:33:43:e5:2d: e1:58:10:57:f9:44:1d:e3:a3:a8:8a:d7:4b:cb:42: 2a:30:ed:b9:dc:63:b0:d7:78:51:1f:ea:50:04:f1: a3:64:74:51:80:22:6b:6c:ca:10:f0:7d:98:24:9d: 65:37:8d:82:4f:ea:8a:b5:9f:3c:dc:d2:3a:6c:7c: 34:d3:9e:3d:8e:2d:fc:10:60:ca:ab:34:e1:e8:07: 47:85:29:fb:52:33:00:09:9a:c5:72:a0:9c:2a:96: 1d:82:63:37:b2:4d:5f:77:09:05:12:53:84:a0:e0: c4:81:5f:f6:1e:26:50:22:3f:a6:24:52:34:6f:7e: 92:cb:af:a2:87:e3:04:09:f9:de:56:3d:1a:b8:51: 7d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:91:6C:9A:48:79:D9:51:2A:D4:9E:DB:0B:C8:47:C6:9E:85:10:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/de977a80-b422-3e83-bc77-25aec313c480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.1.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9a:fe:7f:a0:c0:cd:53:28:e9:f8:02:7a:c1:85:16:ee:50: 6c:3d:2f:fe:84:c8:02:d4:c0:4a:3f:39:b0:e3:d0:22:a4:0a: 98:65:47:3f:5c:4d:98:da:9f:c4:c2:5e:24:f6:fb:5d:a7:7f: 1c:e0:f9:b0:cc:20:b8:9d:77:48:1a:c5:e5:fe:95:ad:ec:23: ab:37:62:4c:22:d6:01:0f:62:9f:d0:25:44:68:b0:69:f2:6c: 3a:47:7c:75:c1:c3:2d:c9:46:5e:df:6d:90:9b:ae:a2:e6:de: 04:6c:9c:9c:79:14:12:ca:98:6c:c3:30:66:22:e4:06:a5:24: 0a:99:0d:ee:36:1a:e8:1e:a4:0a:bb:25:69:03:f7:f3:75:75: ee:4d:23:75:a3:64:88:a5:c0:69:20:85:f7:fb:22:39:ae:1a: fd:87:78:a7:9d:0e:97:92:9c:6d:eb:9b:85:f9:8c:57:a1:a2: a3:84:cd:5e:7c:90:fd:f8:2e:ea:c4:5e:41:01:8e:89:a4:69: b3:37:a1:2c:b4:89:09:d0:9c:7a:65:dc:8e:4c:8e:33:47:44: 9c:f8:c4:a0:17:75:c7:d7:57:82:0b:cb:bb:0f:ab:67:59:b0: 0d:8f:69:ab:70:2b:d8:c4:10:36:d7:4d:87:f7:d4:e8:18:27: 8f:55:cf:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+09mHLMIRJuZCKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk NTE4OWY4M2UtNmQ2Yy00MzY4LWFjNDAtZjRmYTBmYjk1NzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xgWi5oNh7NlW9wsWupRl8YWBqurBpajI0ma +fXVBrMy4kux8IDBbW0xsEVR3XNEzkS5WICKGuVBfvEBtANoImh2ll2o7z0dAU9V geDPlrd6HBjmdpApV1XCK0y+oloWAthCmbyzbDWsPJr/o/jc7RUasDND5S3hWBBX +UQd46OoitdLy0IqMO253GOw13hRH+pQBPGjZHRRgCJrbMoQ8H2YJJ1lN42CT+qK tZ883NI6bHw00549ji38EGDKqzTh6AdHhSn7UjMACZrFcqCcKpYdgmM3sk1fdwkF ElOEoODEgV/2HiZQIj+mJFI0b36Sy6+ih+MECfneVj0auFF9iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiRbJpIedlRKtSe2wvIR8aehRBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvZGU5NzdhODAtYjQyMi0z ZTgzLWJjNzctMjVhZWMzMTNjNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAEAEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOa/n+gwM1TKOn4AnrBhRbuUGw9L/6EyALUwEo/ObDj0CKkCphlRz9c TZjan8TCXiT2+12nfxzg+bDMILidd0gaxeX+la3sI6s3Ykwi1gEPYp/QJURosGny bDpHfHXBwy3JRl7fbZCbrqLm3gRsnJx5FBLKmGzDMGYi5AalJAqZDe42GugepAq7 JWkD9/N1de5NI3WjZIilwGkghff7IjmuGv2HeKedDpeSnG3rm4X5jFehoqOEzV58 kP34LurEXkEBjomkabM3oSy0iQnQnHpl3I5MjjNHRJz4xKAXdcfXV4ILy7sPq2dZ sA2PaatwK9jEEDbXTYf31OgYJ49Vzx8= -----END CERTIFICATE-----Generated at Sun Apr 27 02:18:44 2025 by rpki-client