$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa File: 1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa (raw, json) Hash identifier: YFt91thmx5pNfS+GuaoFHycXx+5IoX/KEogCxL+lDPg= Subject key identifier: 68:48:0F:D2:28:11:A0:0D:86:A7:7F:FB:6F:1D:24:48:90:F2:36:EB Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858498CFF18583B753C2284809580 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 62929 IP address blocks: 216.234.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:18:58:3b:75:3c:22:84:80:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=5cb52046-ea36-4969-ab53-e8c8a00baab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:94:a2:7e:d0:fd:22:59:3b:91:a1:e8:4e: 61:1e:dd:77:b2:f5:81:72:70:4c:13:c2:1d:be:9f: 19:36:9c:fc:f1:70:eb:26:53:79:25:e7:3b:47:7c: 2e:68:a5:37:bb:75:56:4e:22:dc:1b:76:f7:67:5d: 53:26:f1:a7:26:83:5e:af:e0:f7:b0:67:32:53:cc: 42:f0:de:e0:c6:9a:be:48:b2:60:62:8e:6f:07:84: 54:be:5d:96:f4:16:65:ff:cc:fe:e4:54:2a:fd:7e: 84:a6:e6:74:08:5b:85:0a:04:9f:0a:ca:c9:be:0b: c4:fc:2f:0c:b2:89:32:36:d8:2f:99:12:21:a1:a3: 05:20:76:9b:4b:2b:f6:12:a2:38:12:e2:5a:da:06: c3:3e:f8:d7:ee:f4:9e:a5:8c:d1:56:df:0e:f5:2c: b0:06:c3:f0:cc:ac:1b:56:0e:5a:e7:b7:d2:ec:6c: 4d:9d:4b:8d:1b:b4:31:ce:7d:35:14:d7:6d:da:6f: 62:ae:9b:e7:23:6c:75:ed:7a:28:f7:b1:63:dc:34: da:24:d6:32:0b:14:68:18:fa:9f:70:29:48:e4:f8: 7d:be:eb:04:92:c2:a5:53:ef:44:53:ee:43:e8:89: 96:2e:61:a4:9b:a4:13:23:71:ef:28:5a:89:cf:e4: 92:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:48:0F:D2:28:11:A0:0D:86:A7:7F:FB:6F:1D:24:48:90:F2:36:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/1e1c3889-9a3b-32f7-a6f0-5bdcea194dfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.234.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5c:59:96:a4:4f:64:94:58:21:3c:06:f5:03:9a:0a:28:ec: d3:45:e7:d0:07:81:58:9f:73:ae:48:a3:35:8a:58:8f:f6:e5: 7d:57:aa:b8:49:4e:df:07:a6:b8:ea:37:5b:fa:83:e3:d6:ab: 89:df:f5:49:36:92:ac:9d:01:44:2d:c6:fc:dc:ba:8d:79:55: 77:3f:44:f6:ec:53:0b:6b:c5:31:83:a3:c6:13:ee:3b:e6:83: 1b:a7:84:41:ed:0c:7c:40:de:b7:76:b6:54:2c:e4:89:42:31: 63:96:7a:44:8d:3b:1b:2e:f1:24:ad:b7:6b:d2:6a:63:0f:79: a5:ad:58:f9:89:7f:3d:bf:b0:51:4d:2f:e7:d4:94:c7:32:26: 08:4f:60:80:e5:8d:02:bc:6e:80:e8:79:fb:0e:32:af:71:16: 92:ec:bd:75:63:f0:db:8f:a0:ea:0b:b7:b8:ab:a3:82:e9:8b: 8e:70:9c:7b:89:29:a5:ff:ee:eb:cc:1a:c4:bc:bb:09:09:63: 98:4f:ba:b1:4f:7c:1f:75:8a:55:5b:1d:45:ec:f3:da:9d:45: fd:da:b8:ed:f8:f6:64:4c:9b:52:8c:e5:83:5e:63:8b:5b:79: 88:33:1f:2b:a2:d0:72:0d:88:b2:bb:14:41:a2:b6:5f:ea:de: 81:d0:6b:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xhYO3U8IoSAlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk NWNiNTIwNDYtZWEzNi00OTY5LWFiNTMtZThjOGEwMGJhYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhyUon7Q/SJZO5Gh6E5hHt13svWBcnBME8Id vp8ZNpz88XDrJlN5Jec7R3wuaKU3u3VWTiLcG3b3Z11TJvGnJoNer+D3sGcyU8xC 8N7gxpq+SLJgYo5vB4RUvl2W9BZl/8z+5FQq/X6EpuZ0CFuFCgSfCsrJvgvE/C8M sokyNtgvmRIhoaMFIHabSyv2EqI4EuJa2gbDPvjX7vSepYzRVt8O9SywBsPwzKwb Vg5a57fS7GxNnUuNG7Qxzn01FNdt2m9irpvnI2x17Xoo97Fj3DTaJNYyCxRoGPqf cClI5Ph9vusEksKlU+9EU+5D6ImWLmGkm6QTI3HvKFqJz+SS+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhID9IoEaANhqd/+28dJEiQ8jbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvMWUxYzM4ODktOWEzYi0z MmY3LWE2ZjAtNWJkY2VhMTk0ZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2OqKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK1cWZakT2SUWCE8BvUDmgoo7NNF59AHgVifc65IozWKWI/25X1XqrhJ Tt8HprjqN1v6g+PWq4nf9Uk2kqydAUQtxvzcuo15VXc/RPbsUwtrxTGDo8YT7jvm gxunhEHtDHxA3rd2tlQs5IlCMWOWekSNOxsu8SStt2vSamMPeaWtWPmJfz2/sFFN L+fUlMcyJghPYIDljQK8boDoefsOMq9xFpLsvXVj8NuPoOoLt7iro4Lpi45wnHuJ KaX/7uvMGsS8uwkJY5hPurFPfB91ilVbHUXs89qdRf3auO349mRMm1KM5YNeY4tb eYgzHyui0HINiLK7FEGitl/q3oHQa1M= -----END CERTIFICATE-----Generated at Mon Apr 28 17:58:01 2025 by rpki-client