$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/abf35ee1-4bf3-3a10-9b1b-187524745ba3.roa File: abf35ee1-4bf3-3a10-9b1b-187524745ba3.roa (raw, json) Hash identifier: tJYh4XdA5zXBrBWnGDDvZqwH8a4uKoLhEL2O769OcIM= Subject key identifier: 85:2D:E7:B4:C0:B5:B3:13:21:83:82:A1:23:94:A6:D4:B0:B5:FF:BB Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584988CF284296B6363AB53DC270 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/abf35ee1-4bf3-3a10-9b1b-187524745ba3.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397311 IP address blocks: 216.59.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:28:42:96:b6:36:3a:b5:3d:c2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=adf0d730-b579-42c2-b0e3-2ad1c149ed40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:47:7f:51:66:99:03:62:ed:38:fb:c8:3c:56: 1f:6b:f5:6f:be:bc:66:20:00:7a:5d:7d:13:9e:4a: 60:d9:42:1b:c7:d2:f6:61:7a:43:b8:10:d3:21:21: 4a:5e:1a:99:be:84:4c:75:aa:55:af:6b:78:9d:bf: 25:68:99:16:6e:95:c4:5d:cd:b8:df:81:0d:5c:f3: 53:71:2a:82:db:8d:67:79:42:b9:e4:e7:f5:10:1f: 81:b9:70:c3:1b:11:10:58:18:e7:da:1b:34:23:af: a1:fe:2f:c1:90:f3:58:f3:94:72:f6:26:4e:34:ca: cc:da:bf:58:36:c7:9d:5a:6e:82:fc:d0:1f:97:c5: 25:3b:8d:a5:59:53:ce:3c:de:d7:f9:67:b6:51:3d: 90:16:0a:20:dc:2d:70:9b:53:90:da:98:f6:d0:94: 8b:3c:d2:b1:b1:6f:63:5b:fc:fa:bd:b4:2f:d9:b2: f8:37:e9:51:00:38:c0:cf:ee:c6:38:1c:5e:ae:3b: 36:ee:c5:86:83:bd:ff:55:84:a0:6b:7e:6b:2c:99: e7:7f:d5:d3:9a:0a:1b:19:8a:8a:6f:c3:74:3c:c3: 23:13:f2:34:2f:2b:b9:94:51:a5:81:d8:8f:8c:39: 9c:db:59:d4:12:e9:15:81:4e:64:62:12:7f:91:24: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2D:E7:B4:C0:B5:B3:13:21:83:82:A1:23:94:A6:D4:B0:B5:FF:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/abf35ee1-4bf3-3a10-9b1b-187524745ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b9:c5:fb:ef:2b:ad:02:8f:05:ee:2c:3d:a1:e6:30:30:11: 3a:72:c9:91:7a:4b:f5:86:65:d7:71:12:a0:be:7b:53:47:72: 79:0a:f8:3a:2d:b0:ce:e6:87:7c:94:7b:e6:86:cd:cf:60:4a: 69:5b:68:68:d1:cd:fa:57:68:5c:73:7e:75:af:af:ab:cc:67: 69:93:50:a1:27:aa:dc:3d:c1:e3:14:4a:30:97:e8:87:ec:f6: 43:62:6f:a0:71:48:be:c3:e6:64:d3:d2:9c:f8:38:e4:e6:8a: 97:2d:83:0a:93:34:a3:61:a9:4f:29:ff:51:80:37:ce:6b:45: 57:79:f6:8b:b4:94:9b:db:87:e2:1f:fe:cd:67:48:f4:06:ba: 4f:23:16:79:43:5e:47:f6:90:1a:a3:8e:07:b6:36:d2:d4:ea: d8:4f:55:bd:c6:b9:20:79:b0:1f:82:d8:5f:4d:ae:a1:37:f5: f6:26:9d:3d:2b:0a:47:07:fa:0d:38:af:73:b6:b4:53:e7:12: 96:5b:00:cc:e2:f2:2d:35:cd:68:ba:8b:bf:a6:4b:14:b1:f6: e6:d4:43:d7:08:11:45:2d:e6:1f:e4:4d:45:8b:46:7c:97:9e: 38:93:b0:64:03:6a:8a:56:de:df:ef:e3:0d:3d:7b:a6:0c:a5: fd:e9:6e:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyhClrY2OrU9wnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk YWRmMGQ3MzAtYjU3OS00MmMyLWIwZTMtMmFkMWMxNDllZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0d/UWaZA2LtOPvIPFYfa/VvvrxmIAB6XX0T nkpg2UIbx9L2YXpDuBDTISFKXhqZvoRMdapVr2t4nb8laJkWbpXEXc2434ENXPNT cSqC241neUK55Of1EB+BuXDDGxEQWBjn2hs0I6+h/i/BkPNY85Ry9iZONMrM2r9Y NsedWm6C/NAfl8UlO42lWVPOPN7X+We2UT2QFgog3C1wm1OQ2pj20JSLPNKxsW9j W/z6vbQv2bL4N+lRADjAz+7GOBxerjs27sWGg73/VYSga35rLJnnf9XTmgobGYqK b8N0PMMjE/I0Lyu5lFGlgdiPjDmc21nUEukVgU5kYhJ/kSRzSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUt57TAtbMTIYOCoSOUptSwtf+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvYWJmMzVlZTEtNGJmMy0z YTEwLTliMWItMTg3NTI0NzQ1YmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DtBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG5xfvvK60CjwXuLD2h5jAwETpyyZF6S/WGZddxEqC+e1NHcnkK+Dot sM7mh3yUe+aGzc9gSmlbaGjRzfpXaFxzfnWvr6vMZ2mTUKEnqtw9weMUSjCX6Ifs 9kNib6BxSL7D5mTT0pz4OOTmipctgwqTNKNhqU8p/1GAN85rRVd59ou0lJvbh+If /s1nSPQGuk8jFnlDXkf2kBqjjge2NtLU6thPVb3GuSB5sB+C2F9NrqE39fYmnT0r CkcH+g04r3O2tFPnEpZbAMzi8i01zWi6i7+mSxSx9ubUQ9cIEUUt5h/kTUWLRnyX njiTsGQDaopW3t/v4w09e6YMpf3pbhI= -----END CERTIFICATE-----Generated at Mon Apr 28 22:31:33 2025 by rpki-client