$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/101ecc3e-4162-3505-9f0d-feddd84a1fef.roa File: 101ecc3e-4162-3505-9f0d-feddd84a1fef.roa (raw, json) Hash identifier: Xheo2mIgYuf9FCnuF4imQ6uMV5azzUtSzVe6O9LoiVk= Subject key identifier: 0F:E3:C6:80:C4:E8:D9:0C:D2:18:14:D2:A3:D8:CA:8B:70:AB:62:0A Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F432858498B475A21BAB69ADEFBE592C0 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/101ecc3e-4162-3505-9f0d-feddd84a1fef.roa Signing time: Wed 16 Apr 2025 10:14:57 +0000 ROA not before: Wed 16 Apr 2025 10:14:57 +0000 ROA not after: Tue 15 Jul 2025 10:14:57 +0000 asID: 57043 IP address blocks: 65.75.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:47:5a:21:ba:b6:9a:de:fb:e5:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Apr 16 10:14:57 2025 GMT Not After : Jul 15 10:14:57 2025 GMT Subject: CN=6cc9eb57-7991-424a-8d69-058e31095080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:fd:90:ff:bb:60:41:60:ca:0a:3b:ce:7f: 9b:90:f0:06:c5:a9:4c:e2:a0:6d:1c:80:9a:05:7e: af:6e:68:d4:d7:46:87:84:e9:e1:fc:9c:07:44:5c: 46:48:31:78:39:54:3b:99:a5:02:4e:6d:ab:07:d9: ee:1d:98:a5:dc:55:ab:42:e7:8d:c3:d5:90:4a:1a: 9c:d7:c0:83:82:58:51:c8:f3:a9:8e:c8:7b:c0:4d: 05:d4:fb:db:40:b6:fe:cf:f1:c6:1c:e6:51:0e:d6: dd:04:55:ee:dc:66:6d:3b:c7:47:5a:70:90:30:d0: f1:c1:b5:8d:51:b5:c7:b7:19:4a:d8:c0:d7:7a:60: 39:db:a6:20:21:8f:21:31:6e:3c:53:a0:d8:1d:56: 73:d0:e7:53:2c:31:0a:99:41:78:69:87:dd:ae:13: ed:b4:66:fe:cc:0c:3e:a4:36:bb:d0:92:c6:d7:26: ad:f5:17:0a:9c:9a:02:91:5c:e8:5a:a7:6b:e1:ec: 7c:2a:28:32:76:b3:b9:d6:e6:f7:37:2a:b1:b5:94: 2b:8b:6e:f2:3d:38:b4:38:3a:42:39:61:20:b0:02: 32:ee:a5:2c:65:c5:e3:74:68:55:3e:5b:b7:48:b2: d6:bb:f3:d1:b7:91:97:17:c8:ab:7e:de:07:8f:7a: 78:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E3:C6:80:C4:E8:D9:0C:D2:18:14:D2:A3:D8:CA:8B:70:AB:62:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/101ecc3e-4162-3505-9f0d-feddd84a1fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:18:a0:f4:c8:59:80:ec:a8:cf:d0:d9:4a:f5:79:ee:ae:5c: 5c:5b:30:4f:1c:eb:b0:c5:81:78:3d:9c:d7:2c:ba:4f:4a:f7: a7:dd:88:a5:33:48:1a:5b:b8:56:f8:11:8a:da:f2:82:df:eb: a6:4f:bc:14:c7:66:f8:55:68:7e:44:c3:6a:63:49:a2:26:93: 29:c8:0d:b2:3d:bd:e5:e6:70:86:ae:18:49:d6:30:91:43:f5: 7d:6d:4b:5e:4a:66:76:c0:21:c9:c1:bd:13:0a:3e:d8:92:03: 69:4a:65:5d:88:22:f1:a0:df:a0:d4:7d:6b:1a:66:de:78:97: 3b:bb:19:a9:35:57:48:86:62:97:fb:17:cf:55:b7:00:d2:4f: c2:9a:fa:f5:94:c7:4c:be:fa:39:c9:0e:72:28:e3:bb:85:e1: 25:33:e3:17:f0:65:0d:2f:1e:7d:49:1a:c2:02:aa:96:32:3a: 24:7a:5a:64:de:5b:b4:88:23:9e:69:9c:29:64:ad:70:2b:e0: c0:28:5a:ee:28:b0:e5:34:6b:ab:cd:4b:d0:bf:17:e5:c0:e9: 20:79:0f:37:80:b6:ac:0a:d6:55:75:20:a0:90:e4:0b:84:a4: 5b:6c:51:0c:29:94:10:c8:b6:cd:23:0a:79:fc:c5:41:c7:45: 94:55:97:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmLR1ohuraa3vvlksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI1MDQxNjEwMTQ1N1oXDTI1MDcxNTEwMTQ1N1owLzEtMCsGA1UEAxMk NmNjOWViNTctNzk5MS00MjRhLThkNjktMDU4ZTMxMDk1MDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pP9kP+7YEFgygo7zn+bkPAGxalM4qBtHICa BX6vbmjU10aHhOnh/JwHRFxGSDF4OVQ7maUCTm2rB9nuHZil3FWrQueNw9WQShqc 18CDglhRyPOpjsh7wE0F1PvbQLb+z/HGHOZRDtbdBFXu3GZtO8dHWnCQMNDxwbWN UbXHtxlK2MDXemA526YgIY8hMW48U6DYHVZz0OdTLDEKmUF4aYfdrhPttGb+zAw+ pDa70JLG1yat9RcKnJoCkVzoWqdr4ex8KigydrO51ub3NyqxtZQri27yPTi0ODpC OWEgsAIy7qUsZcXjdGhVPlu3SLLWu/PRt5GXF8irft4Hj3p43QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/jxoDE6NkM0hgU0qPYyotwq2IKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvMTAxZWNjM2UtNDE2Mi0z NTA1LTlmMGQtZmVkZGQ4NGExZmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQUvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAYoPTIWYDsqM/Q2Ur1ee6uXFxbME8c67DFgXg9nNcsuk9K96fdiKUz SBpbuFb4EYra8oLf66ZPvBTHZvhVaH5Ew2pjSaImkynIDbI9veXmcIauGEnWMJFD 9X1tS15KZnbAIcnBvRMKPtiSA2lKZV2IIvGg36DUfWsaZt54lzu7Gak1V0iGYpf7 F89VtwDST8Ka+vWUx0y++jnJDnIo47uF4SUz4xfwZQ0vHn1JGsICqpYyOiR6WmTe W7SII55pnClkrXAr4MAoWu4osOU0a6vNS9C/F+XA6SB5DzeAtqwK1lV1IKCQ5AuE pFtsUQwplBDIts0jCnn8xUHHRZRVl5g= -----END CERTIFICATE-----Generated at Sat Apr 26 16:47:44 2025 by rpki-client