$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/5cb2448a-d5c9-3711-9241-690026d93ba9.roa File: 5cb2448a-d5c9-3711-9241-690026d93ba9.roa (raw, json) Hash identifier: gdgYJcCgaVyLhlqNsupvzhxKvzIp1ueHID/UesaUZbQ= Subject key identifier: 9F:11:02:39:6F:93:38:35:FE:CC:CD:8D:20:9C:50:0F:95:8D:58:76 Certificate issuer: /CN=fdccefde-032f-46cb-9138-30e7726ea619 Certificate serial: 010D0C9F432858492CAE80DE0E7B324F46B50980 Authority key identifier: 5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/5cb2448a-d5c9-3711-9241-690026d93ba9.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 205.147.81.0/24 maxlen: 24 2604:f700:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:80:de:0e:7b:32:4f:46:b5:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdccefde-032f-46cb-9138-30e7726ea619 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=42d95571-0879-41bd-82f0-0671aa363714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b0:15:0c:47:6b:37:00:82:0b:48:ac:3d:b4: 71:95:c1:e5:02:81:ac:77:98:d1:08:4d:5d:e1:c4: d4:3c:f0:a7:58:76:14:f9:65:c4:1a:a0:10:92:00: 37:81:31:8e:99:6b:cd:38:cf:d2:15:4e:62:98:75: 66:c0:55:b7:ae:82:1d:aa:bc:28:e0:63:74:0e:cc: 68:57:58:80:90:c1:30:44:db:40:9b:3d:bf:65:2a: f1:2f:20:08:50:52:bd:5f:7c:92:da:33:52:fa:48: ff:a1:f1:7b:d0:f6:c1:a4:c9:f4:3d:19:0d:43:7d: f1:16:c1:4c:83:e0:ce:d6:b6:d5:ad:5a:c4:65:a0: 03:b2:38:03:ba:4e:6e:ea:9f:91:e4:47:58:24:8e: 09:06:e8:8a:ab:ac:ca:c1:4a:39:17:aa:4e:16:df: 84:5b:6c:33:ec:1e:3a:f7:77:ae:e2:f7:44:a1:fc: 34:91:c1:92:ef:b1:b7:b9:e1:19:fc:a6:01:a3:be: b8:d7:d9:86:f8:50:be:f9:9a:ab:16:f0:1d:c8:12: 6e:eb:01:2a:e0:78:c3:93:93:77:5b:e0:a0:cb:6f: db:16:26:c9:3b:20:ee:99:ae:28:86:15:c9:04:7d: e1:ab:19:c4:4e:a9:cc:e4:32:74:31:79:c5:7d:71: ec:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:11:02:39:6F:93:38:35:FE:CC:CD:8D:20:9C:50:0F:95:8D:58:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/5cb2448a-d5c9-3711-9241-690026d93ba9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.crl X509v3 Authority Key Identifier: keyid:5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer sbgp-ipAddrBlock: critical IPv4: 205.147.81.0/24 IPv6: 2604:f700:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8e:62:52:1e:5f:db:ee:8c:cd:b9:dd:30:b6:7c:2f:ea:aa: b0:a9:6a:93:58:7e:de:b5:08:85:c4:b2:90:64:38:07:08:ce: 4b:76:41:56:79:53:ea:5d:73:9c:8b:03:87:68:4f:b6:8d:1f: a2:26:bb:2a:10:e8:65:6d:a1:3b:2e:9c:93:bc:07:df:86:f1: 37:84:bc:57:73:89:52:c0:c5:ec:a8:08:be:91:b5:d9:df:52: d9:2c:40:03:2a:b3:54:e8:d3:72:0b:8c:b4:cb:6c:b3:15:dc: 33:d0:04:33:0d:60:ef:89:28:59:cb:60:01:5b:ae:81:80:a7: 9b:c5:92:77:fd:84:51:fa:b6:07:f0:ac:c0:85:b8:fc:e3:d9: 91:91:2a:6f:69:e5:54:2c:46:f2:1e:14:85:52:ff:31:13:3b: 0b:6e:fe:92:f3:fc:0f:3e:5c:35:e6:4f:fd:98:7d:fa:59:ac: 5a:88:ea:71:82:81:da:73:39:a4:84:0d:5f:57:81:fe:47:96: e8:60:0d:71:97:a9:ec:38:79:0e:43:67:3c:71:9f:5d:56:e7: 3c:cd:49:24:f6:8d:85:5f:40:47:8a:9a:a9:89:f7:52:c8:1d: fd:09:a2:19:72:3f:b0:b7:f0:cf:4d:77:a1:68:bc:8f:86:cc: 1c:31:b9:42 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEksroDeDnsyT0a1CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRjY2VmZGUtMDMyZi00NmNiLTkxMzgtMzBlNzcyNmVh NjE5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDJkOTU1NzEtMDg3OS00MWJkLTgyZjAtMDY3MWFhMzYzNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrAVDEdrNwCCC0isPbRxlcHlAoGsd5jRCE1d 4cTUPPCnWHYU+WXEGqAQkgA3gTGOmWvNOM/SFU5imHVmwFW3roIdqrwo4GN0Dsxo V1iAkMEwRNtAmz2/ZSrxLyAIUFK9X3yS2jNS+kj/ofF70PbBpMn0PRkNQ33xFsFM g+DO1rbVrVrEZaADsjgDuk5u6p+R5EdYJI4JBuiKq6zKwUo5F6pOFt+EW2wz7B46 93eu4vdEofw0kcGS77G3ueEZ/KYBo76419mG+FC++ZqrFvAdyBJu6wEq4HjDk5N3 W+Cgy2/bFibJOyDuma4ohhXJBH3hqxnETqnM5DJ0MXnFfXHsDwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJ8RAjlvkzg1/szNjSCcUA+VjVh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZGNj ZWZkZS0wMzJmLTQ2Y2ItOTEzOC0zMGU3NzI2ZWE2MTkvNWNiMjQ0OGEtZDVjOS0z NzExLTkyNDEtNjkwMDI2ZDkzYmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmRjY2VmZGUtMDMyZi00NmNiLTkx MzgtMzBlNzcyNmVhNjE5L2ZkY2NlZmRlLTAzMmYtNDZjYi05MTM4LTMwZTc3MjZl YTYxOS5jcmwwHwYDVR0jBBgwFoAUWqUackcgNHuI3y9yCbu0gYTNeCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZGNjZWZkZS0wMzJmLTQ2Y2ItOTEzOC0zMGU3 NzI2ZWE2MTkuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzZNRMA8E AgACMAkDBwAmBPcAAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQY5iUh5f2+6MzbndMLZ8L+qqsKlqk1h+ 3rUIhcSykGQ4BwjOS3ZBVnlT6l1znIsDh2hPto0foia7KhDoZW2hOy6ck7wH34bx N4S8V3OJUsDF7KgIvpG12d9S2SxAAyqzVOjTcguMtMtssxXcM9AEMw1g74koWctg AVuugYCnm8WSd/2EUfq2B/CswIW4/OPZkZEqb2nlVCxG8h4UhVL/MRM7C27+kvP8 Dz5cNeZP/Zh9+lmsWojqcYKB2nM5pIQNX1eB/keW6GANcZep7Dh5DkNnPHGfXVbn PM1JJPaNhV9AR4qaqYn3Usgd/QmiGXI/sLfwz013oWi8j4bMHDG5Qg== -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:54 2025 by rpki-client