$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa File: 40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa (raw, json) Hash identifier: Ky3Tc2FbLSuqsswIIoA2q9ytNay8vQ6icbNiKjg5+FY= Subject key identifier: E4:D6:15:5D:CC:5D:B4:5E:CE:8D:23:21:62:9F:D7:2C:BA:58:79:E2 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858498CFF183B837F19CEE71B64C0 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 5738 IP address blocks: 216.114.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:18:3b:83:7f:19:ce:e7:1b:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=18364f34-1cf1-4cef-96df-25e4a09288c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:12:87:55:9e:5f:0d:d8:e6:09:1c:7c:b6: 9d:08:7a:32:5d:53:5b:cf:5b:ca:28:e0:6b:9b:4f: 6d:c3:e9:64:41:52:f0:4f:28:2a:42:df:57:ed:9f: 60:13:36:fe:ce:12:5d:03:fa:a0:da:58:b6:e2:43: 1d:79:ca:a8:f3:d2:8c:67:66:ec:c7:1b:8d:43:b4: 73:62:da:90:e2:29:d0:c1:bb:23:43:5c:f5:83:78: 69:0d:92:a5:07:a8:73:bf:83:13:63:ef:ef:c7:69: a2:19:01:be:34:ce:0c:dd:e7:bc:93:e1:0d:c6:db: 63:08:b6:45:c9:65:cd:e7:a0:cc:80:01:e1:64:ee: ce:82:58:7f:da:0c:07:62:41:0f:72:81:15:16:b9: 7f:5b:6f:bb:2d:13:d4:6a:c0:ef:2a:02:a2:f5:a0: 58:03:19:a9:52:81:a4:93:0b:6c:b1:36:50:bd:c7: b3:d4:3d:46:83:22:97:79:9f:3b:bd:d4:12:6f:88: 57:c1:75:68:9d:1a:5f:57:4d:fb:e1:b9:17:da:5a: 08:7b:d3:3b:ca:3d:11:1f:e9:6a:f1:0b:a4:cc:e2: 28:d4:6a:69:a2:19:61:f0:86:10:a2:70:7f:62:26: e0:03:71:18:5c:33:43:7d:7f:bc:50:d4:7c:a0:58: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D6:15:5D:CC:5D:B4:5E:CE:8D:23:21:62:9F:D7:2C:BA:58:79:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/40f3cbee-97ea-3cff-9aa1-9b3c1e3cc3b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:35:6f:02:2c:17:ac:0c:0e:d6:89:2f:1b:88:b3:5c:4c:bf: 87:5c:8b:5a:18:ef:f5:6d:ff:c4:b6:d0:7c:cc:37:0e:ab:fd: 7e:53:fa:40:6d:b5:79:44:df:9b:e8:8a:80:bf:d2:36:70:3f: fa:fc:7c:8d:46:4e:da:d9:d2:75:c1:b8:60:11:7b:4b:20:81: c0:34:53:84:7e:90:00:53:7a:53:84:ec:cb:93:4d:18:ba:72: b0:41:97:9e:6f:11:4a:28:48:68:f4:82:0f:39:86:ed:a2:3a: 51:2c:e6:f6:5a:0f:bf:8f:c8:e8:3b:9c:91:2e:f6:0c:f5:b4: fc:bf:e5:1d:a7:51:be:3d:be:b2:e7:c0:a1:d5:9f:cc:ed:b5: c2:b4:00:22:c4:39:48:a0:fb:b0:fa:0e:5e:e4:28:39:f9:75: ec:95:8c:17:30:fa:6c:e1:be:fe:90:50:a5:b3:ab:26:38:9c: 74:1a:4a:d4:7c:b8:25:d7:b7:0f:bc:83:8f:e2:e0:bc:1d:9c: 13:f1:1a:e7:d0:0f:e0:6c:30:56:ec:15:f1:91:63:a2:47:95: b6:25:46:54:7f:9f:75:1b:a6:79:f9:91:1b:00:d9:c1:5f:d2: 10:2c:fb:6a:80:da:a4:a0:2e:4c:b2:28:7d:51:be:6f:fa:ec: 15:a8:4d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/xg7g38ZzucbZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MTgzNjRmMzQtMWNmMS00Y2VmLTk2ZGYtMjVlNGEwOTI4OGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAoSh1WeXw3Y5gkcfLadCHoyXVNbz1vKKOBr m09tw+lkQVLwTygqQt9X7Z9gEzb+zhJdA/qg2li24kMdecqo89KMZ2bsxxuNQ7Rz YtqQ4inQwbsjQ1z1g3hpDZKlB6hzv4MTY+/vx2miGQG+NM4M3ee8k+ENxttjCLZF yWXN56DMgAHhZO7Oglh/2gwHYkEPcoEVFrl/W2+7LRPUasDvKgKi9aBYAxmpUoGk kwtssTZQvcez1D1GgyKXeZ87vdQSb4hXwXVonRpfV0374bkX2loIe9M7yj0RH+lq 8QukzOIo1Gppohlh8IYQonB/YibgA3EYXDNDfX+8UNR8oFgv7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTWFV3MXbRezo0jIWKf1yy6WHniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNDBmM2NiZWUtOTdlYS0z Y2ZmLTlhYTEtOWIzYzFlM2NjM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2HKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk1bwIsF6wMDtaJLxuIs1xMv4dci1oY7/Vt/8S20HzMNw6r/X5T+kBt tXlE35voioC/0jZwP/r8fI1GTtrZ0nXBuGARe0sggcA0U4R+kABTelOE7MuTTRi6 crBBl55vEUooSGj0gg85hu2iOlEs5vZaD7+PyOg7nJEu9gz1tPy/5R2nUb49vrLn wKHVn8zttcK0ACLEOUig+7D6Dl7kKDn5deyVjBcw+mzhvv6QUKWzqyY4nHQaStR8 uCXXtw+8g4/i4LwdnBPxGufQD+BsMFbsFfGRY6JHlbYlRlR/n3Ubpnn5kRsA2cFf 0hAs+2qA2qSgLkyyKH1Rvm/67BWoTds= -----END CERTIFICATE-----Generated at Mon Apr 28 21:28:25 2025 by rpki-client