$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa File: 34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa (raw, json) Hash identifier: dymwLXxCe4iyM2xhQPDD7tuFVu+BhLr0v4ubHQxELBU= Subject key identifier: EB:CC:07:58:63:05:D4:DD:E0:AC:1E:91:C8:86:A0:23:44:74:E3:14 Certificate issuer: /CN=b2456e11-ca83-4345-8884-0becc0831fb7 Certificate serial: 010D0C9F4328584940394F039C0891AF631A7480 Authority key identifier: E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 16509 IP address blocks: 216.181.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4f:03:9c:08:91:af:63:1a:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2456e11-ca83-4345-8884-0becc0831fb7 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=41398a32-cba5-4b8e-a9f9-2b2f1d40c255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8a:56:cf:61:03:12:3b:41:01:00:3d:38:5a: bb:47:59:5d:e7:02:27:b0:95:7a:93:44:e5:e3:f8: 01:22:b5:e6:dc:a0:0c:c6:51:c4:9c:80:f4:c6:16: bc:9d:85:ac:eb:fa:e8:a0:70:05:25:ca:b4:82:c8: 95:45:29:dc:bb:e4:49:1c:b2:79:4b:5b:ef:90:b6: 53:d7:10:de:c4:c3:aa:28:00:e2:39:d9:a9:09:f8: fa:19:65:03:36:14:04:9e:54:cf:6a:ec:49:f2:33: bf:76:93:66:dc:d0:05:4c:81:0a:50:15:c6:6f:a1: 73:03:8e:2e:b9:23:3a:d3:2b:9a:8b:2c:db:dc:f6: 7a:61:7e:46:b5:12:a5:8c:5e:d1:f6:84:95:1a:ae: a2:a2:70:62:d6:ce:76:a9:58:93:ad:a9:36:66:1b: 7c:d2:35:07:fc:27:7e:07:04:01:77:93:43:19:5e: 95:db:8a:84:0b:98:7b:24:d7:93:9c:25:f6:6b:7a: 8a:32:c3:3e:13:8c:d6:7f:93:d0:67:5d:51:1c:ea: d5:87:09:ad:5a:d9:22:15:9a:ed:a9:fc:cf:9b:a5: ee:ff:f7:89:88:db:e7:8c:4f:8f:0a:88:b8:78:c5: dd:8e:c0:48:30:e1:f8:88:2b:15:00:a1:1c:bd:6a: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CC:07:58:63:05:D4:DD:E0:AC:1E:91:C8:86:A0:23:44:74:E3:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/34f3aa16-2afb-39bb-a7ec-0cc8797e324a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7/b2456e11-ca83-4345-8884-0becc0831fb7.crl X509v3 Authority Key Identifier: keyid:E8:0D:FA:19:40:E1:CD:5A:C6:10:AE:B8:44:D8:0B:05:C4:18:0B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b2456e11-ca83-4345-8884-0becc0831fb7.cer sbgp-ipAddrBlock: critical IPv4: 216.181.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:18:63:03:db:68:ec:91:50:26:57:46:48:9f:78:94:1d:e9: 33:6c:75:74:13:5f:f6:2f:40:f8:57:e1:ee:cd:43:1d:41:d0: bb:8d:7d:cd:e6:da:16:70:7d:e2:14:5c:a3:58:31:9a:e0:8e: 22:b9:5e:58:d2:88:a5:72:28:9d:69:59:38:18:6a:56:a6:fe: 41:f9:1a:b2:0c:e3:c4:d8:6f:ee:4d:69:0f:68:37:53:c8:10: 2a:db:bd:82:9f:f1:b6:85:d9:78:5d:d0:94:33:c5:50:be:50: ca:ba:ce:78:29:f9:96:f7:7e:ec:63:80:6a:a8:d9:d0:a1:16: 56:e4:92:e8:96:18:05:15:6f:3d:54:b4:f0:c4:7a:37:9c:b6: 05:f8:24:90:6a:a8:13:4e:18:45:68:7b:54:d8:ce:0f:c4:76: 89:5e:dc:8e:11:8a:1d:ea:f0:92:24:ea:b9:e4:ba:33:d9:76: 52:26:03:20:8c:3b:8d:f6:a4:a6:8a:62:aa:af:bb:5e:16:de: 06:84:fe:fe:7d:5c:95:f9:42:be:42:6a:aa:0b:0e:c4:d9:0b: 20:40:95:a2:e6:80:a2:aa:a7:31:20:d1:cf:eb:98:43:b9:bb: 00:7c:46:44:31:98:84:9e:ca:e4:cd:f6:64:06:99:6f:30:f2: db:6e:ae:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOU8DnAiRr2MadIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0NTZlMTEtY2E4My00MzQ1LTg4ODQtMGJlY2MwODMx ZmI3MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NDEzOThhMzItY2JhNS00YjhlLWE5ZjktMmIyZjFkNDBjMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YpWz2EDEjtBAQA9OFq7R1ld5wInsJV6k0Tl 4/gBIrXm3KAMxlHEnID0xha8nYWs6/rooHAFJcq0gsiVRSncu+RJHLJ5S1vvkLZT 1xDexMOqKADiOdmpCfj6GWUDNhQEnlTPauxJ8jO/dpNm3NAFTIEKUBXGb6FzA44u uSM60yuaiyzb3PZ6YX5GtRKljF7R9oSVGq6ionBi1s52qViTrak2Zht80jUH/Cd+ BwQBd5NDGV6V24qEC5h7JNeTnCX2a3qKMsM+E4zWf5PQZ11RHOrVhwmtWtkiFZrt qfzPm6Xu//eJiNvnjE+PCoi4eMXdjsBIMOH4iCsVAKEcvWruKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvMB1hjBdTd4KwekciGoCNEdOMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1 NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVjYzA4MzFmYjcvMzRmM2FhMTYtMmFmYi0z OWJiLWE3ZWMtMGNjODc5N2UzMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjI0NTZlMTEtY2E4My00MzQ1LTg4 ODQtMGJlY2MwODMxZmI3L2IyNDU2ZTExLWNhODMtNDM0NS04ODg0LTBiZWNjMDgz MWZiNy5jcmwwHwYDVR0jBBgwFoAU6A36GUDhzVrGEK64RNgLBcQYCxUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMjQ1NmUxMS1jYTgzLTQzNDUtODg4NC0wYmVj YzA4MzFmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LUTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUYYwPbaOyRUCZXRkifeJQd6TNsdXQTX/YvQPhX4e7NQx1B0LuNfc3m 2hZwfeIUXKNYMZrgjiK5XljSiKVyKJ1pWTgYalam/kH5GrIM48TYb+5NaQ9oN1PI ECrbvYKf8baF2Xhd0JQzxVC+UMq6zngp+Zb3fuxjgGqo2dChFlbkkuiWGAUVbz1U tPDEejectgX4JJBqqBNOGEVoe1TYzg/Edole3I4Rih3q8JIk6rnkujPZdlImAyCM O432pKaKYqqvu14W3gaE/v59XJX5Qr5CaqoLDsTZCyBAlaLmgKKqpzEg0c/rmEO5 uwB8RkQxmISeyuTN9mQGmW8w8tturk0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:46:05 2025 by rpki-client