$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/c31c5333-9a1b-3cd8-b7f3-c2946668b384.roa File: c31c5333-9a1b-3cd8-b7f3-c2946668b384.roa (raw, json) Hash identifier: vrNWIz/OYxTAOiYRZT9D1dqH/PGshQhw6eaZ5HVaQ+k= Subject key identifier: 60:41:A4:FF:24:E2:2C:D5:77:D3:D1:F5:3D:A9:E8:A1:BB:73:B0:B0 Certificate issuer: /CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af Certificate serial: 010D0C9F43285849A784C1A99E311D06DEF3FA00 Authority key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/c31c5333-9a1b-3cd8-b7f3-c2946668b384.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 31782 IP address blocks: 205.189.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c1:a9:9e:31:1d:06:de:f3:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=22c413ac-834a-49be-898b-0ca1a50ad71b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:fa:8e:26:0e:bf:52:ee:c9:9a:77:46:05: 30:53:ca:d7:8d:01:e3:e3:63:52:da:7d:22:d2:f9: ed:a6:07:90:fa:75:74:90:8f:2b:d3:35:6e:75:2b: 19:67:4f:90:5b:5c:df:d2:1d:12:75:79:5e:8f:8a: c9:2a:ef:18:e1:97:27:c3:19:d6:44:2c:93:0c:b1: de:8a:b3:df:83:2d:d5:17:1d:05:40:4e:c7:3a:e3: e4:49:4d:d6:b4:28:28:47:5a:b7:46:8d:2e:8f:24: e7:bc:9e:d4:c7:ce:13:30:95:bc:07:25:b4:bb:30: 2d:14:6e:01:f3:77:47:c1:f9:bf:96:db:f1:0b:1b: c2:28:ba:79:17:d7:f0:42:d7:cf:e8:94:54:f6:c9: bc:e0:c1:80:6c:6f:59:14:2a:2e:92:ad:d3:d5:9e: 41:b1:bc:d4:04:70:22:ab:e8:62:24:c9:2c:48:e2: 34:92:3a:97:ad:53:c4:81:3f:50:49:ed:6a:9f:49: cf:1a:49:46:d8:6e:1d:64:c5:64:99:3e:30:60:d3: 50:cd:40:f0:cd:d5:d6:e2:09:ec:03:90:e5:de:6a: b8:03:36:07:06:ee:2f:90:10:a6:cb:df:b8:d1:a3: 18:d4:b8:54:78:96:72:85:49:f8:65:12:c1:17:1d: 16:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:41:A4:FF:24:E2:2C:D5:77:D3:D1:F5:3D:A9:E8:A1:BB:73:B0:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/c31c5333-9a1b-3cd8-b7f3-c2946668b384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl X509v3 Authority Key Identifier: keyid:B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer sbgp-ipAddrBlock: critical IPv4: 205.189.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c3:8b:b4:31:51:0f:07:31:ee:4f:68:be:d2:19:56:bb:98: df:8e:32:3a:4f:7f:af:33:47:df:0c:1a:02:b2:05:54:35:17: a8:a1:ac:98:56:37:5d:7e:99:26:ba:e7:35:a4:0b:9c:dc:1a: 6f:26:38:32:5b:02:60:f8:3e:b6:f3:54:e2:0f:2d:c2:3e:3e: 36:20:5c:18:32:2b:59:2c:5a:9d:3c:ed:a8:57:21:17:36:87: 83:54:43:c9:ae:2a:7b:7f:d8:91:50:b1:03:31:2d:6c:55:65: f1:89:ee:34:9d:2c:bb:fc:db:f5:4b:b7:c1:7d:fb:c7:07:57: 46:4a:fd:70:7b:c6:aa:82:52:4b:bb:09:23:9e:ab:94:19:a4: 73:3a:bc:73:18:5f:f1:9f:af:a6:2a:dc:20:1b:c1:a9:06:59: 44:8e:db:09:b9:7f:9c:c2:77:03:4d:75:ba:4a:04:6a:37:16: 23:2f:46:fe:8c:99:54:cc:f5:5a:08:8c:3d:dc:fb:bb:70:58: c7:d1:13:b1:29:8a:eb:e2:1b:21:16:95:eb:eb:20:2e:67:0a: d2:a3:4b:e3:2a:3d:03:71:91:0b:03:a1:73:80:42:b1:8c:da: e1:4c:f0:a4:a2:89:cf:be:ef:8e:a2:8a:95:e9:c5:55:c6:bd: 58:f0:ed:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMGpnjEdBt7z+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2MxNGVmN2MtMTI4OS00N2VkLTgxNDQtYzdiM2ZlYWNm NWFmMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk MjJjNDEzYWMtODM0YS00OWJlLTg5OGItMGNhMWE1MGFkNzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlur6jiYOv1LuyZp3RgUwU8rXjQHj42NS2n0i 0vntpgeQ+nV0kI8r0zVudSsZZ0+QW1zf0h0SdXlej4rJKu8Y4ZcnwxnWRCyTDLHe irPfgy3VFx0FQE7HOuPkSU3WtCgoR1q3Ro0ujyTnvJ7Ux84TMJW8ByW0uzAtFG4B 83dHwfm/ltvxCxvCKLp5F9fwQtfP6JRU9sm84MGAbG9ZFCoukq3T1Z5BsbzUBHAi q+hiJMksSOI0kjqXrVPEgT9QSe1qn0nPGklG2G4dZMVkmT4wYNNQzUDwzdXW4gns A5Dl3mq4AzYHBu4vkBCmy9+40aMY1LhUeJZyhUn4ZRLBFx0WZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBBpP8k4izVd9PR9T2p6KG7c7CwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83YzE0 ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVhY2Y1YWYvYzMxYzUzMzMtOWExYi0z Y2Q4LWI3ZjMtYzI5NDY2NjhiMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvN2MxNGVmN2MtMTI4OS00N2VkLTgx NDQtYzdiM2ZlYWNmNWFmLzdjMTRlZjdjLTEyODktNDdlZC04MTQ0LWM3YjNmZWFj ZjVhZi5jcmwwHwYDVR0jBBgwFoAUsN8Y7XkJwz2LZ31Fr9aB9mU8KxwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2Iz ZmVhY2Y1YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzb0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPDi7QxUQ8HMe5PaL7SGVa7mN+OMjpPf68zR98MGgKyBVQ1F6ihrJhW N11+mSa65zWkC5zcGm8mODJbAmD4PrbzVOIPLcI+PjYgXBgyK1ksWp087ahXIRc2 h4NUQ8muKnt/2JFQsQMxLWxVZfGJ7jSdLLv82/VLt8F9+8cHV0ZK/XB7xqqCUku7 CSOeq5QZpHM6vHMYX/Gfr6Yq3CAbwakGWUSO2wm5f5zCdwNNdbpKBGo3FiMvRv6M mVTM9VoIjD3c+7twWMfRE7EpiuviGyEWlevrIC5nCtKjS+MqPQNxkQsDoXOAQrGM 2uFM8KSiic++746iipXpxVXGvVjw7ag= -----END CERTIFICATE-----Generated at Mon Apr 28 19:45:06 2025 by rpki-client