$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa File: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (raw, json) Hash identifier: iixXbAAWJCKZ0uJJ7JfDulXNyhQ2Y9edZhUHf2PCSm8= Subject key identifier: 1D:A7:FF:A1:8B:72:C1:2B:23:21:0B:6E:AB:68:1D:31:34:E5:34:A6 Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Certificate serial: 010D0C9F43285849849EF814224B47EA60A34A00 Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 399673 IP address blocks: 216.25.96.0/20 maxlen: 24 216.147.64.0/19 maxlen: 24 2606:5640::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:f8:14:22:4b:47:ea:60:a3:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=026b6905-9063-4f56-9a2d-528bd1c89fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:82:75:56:97:c6:05:13:9f:31:86:e1:9c: 84:d2:e5:f5:84:b5:c0:9d:69:75:b4:ec:ec:7c:b6: 10:db:ea:c0:a5:89:75:a3:f0:f2:87:59:63:8a:50: ba:1f:5b:5d:88:11:5a:e9:e1:89:52:20:09:db:98: ee:f7:37:75:bd:79:f1:21:e2:d5:a8:2e:52:86:fc: b6:d5:1d:85:17:ee:76:9d:d8:f6:82:77:45:24:09: f0:02:4b:8a:84:5f:f5:b3:82:a9:81:08:1e:4d:ac: 1d:ba:8f:88:70:51:08:cc:02:ea:29:9d:af:1d:b8: 38:8f:c5:38:6a:e9:d0:0b:08:1b:34:9f:c2:c2:83: 0e:95:22:9f:15:23:77:b3:7d:c1:dc:56:41:66:f4: 97:6c:c4:96:7a:cd:6a:8f:1f:0d:76:d2:f3:a1:08: f7:aa:f8:12:bc:a6:fe:5d:98:a8:09:c1:01:5a:dd: 83:b0:4d:f7:a0:af:b1:30:99:10:ae:3f:1d:9b:78: 05:94:34:17:08:3a:d7:6c:1f:e3:45:d1:cb:8b:1b: 29:ca:9a:aa:b7:ec:fa:1d:dd:9a:64:13:ea:3a:d1: 94:89:d8:6f:fe:70:a1:ae:1b:70:18:b6:8c:41:f7: ff:fb:37:18:14:f1:2d:3c:b4:85:e8:44:47:52:ba: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A7:FF:A1:8B:72:C1:2B:23:21:0B:6E:AB:68:1D:31:34:E5:34:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl X509v3 Authority Key Identifier: keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer sbgp-ipAddrBlock: critical IPv4: 216.25.96.0/20 216.147.64.0/19 IPv6: 2606:5640::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:32:8d:21:6d:e4:90:e6:8e:b9:77:67:3f:68:22:a1:fb:0b: a7:db:77:c1:88:ce:bb:a1:77:c1:65:1a:a5:23:2e:b0:ac:bc: e3:a1:0e:25:a6:3b:f5:08:bc:91:73:f6:0b:eb:b2:06:a1:df: 60:d9:ca:64:dd:7b:bd:0d:94:0c:7b:63:d4:e7:bd:bd:3c:eb: 59:7e:88:bb:60:0a:3e:49:26:c5:71:74:0a:3d:07:28:d2:59: 3c:83:f9:6b:bb:4f:28:16:45:c9:15:10:a1:18:80:c8:71:e4: 4f:6b:80:42:9a:aa:8a:eb:97:fc:3d:b1:5d:b1:1f:9a:49:54: 7d:52:b5:ca:2d:5d:db:5a:d5:a4:22:30:6f:26:1f:94:fc:74: 03:fe:fc:52:a9:7d:95:80:9a:81:46:43:23:44:a9:a2:59:1e: 33:e6:9c:ed:e3:02:30:47:f5:03:d8:21:51:5a:4a:6f:35:7f: 47:c8:52:c7:df:13:52:11:19:87:6c:1e:b7:b9:90:01:25:fd: 71:73:b6:04:39:27:91:d6:90:9a:56:bd:d2:6a:67:e3:20:75: 45:e4:c5:67:1f:55:ed:a2:9f:e0:29:da:48:31:d0:ed:5e:88: d7:ef:8a:7c:9f:32:dc:a8:23:f8:36:a9:ba:2a:b6:3a:61:e9: 20:21:aa:e9 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEmEnvgUIktH6mCjSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTNmODItOWU5NS00N2FhLTk4OTctMDAyN2Y2YzVl M2Q0MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk MDI2YjY5MDUtOTA2My00ZjU2LTlhMmQtNTI4YmQxYzg5ZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE+CdVaXxgUTnzGG4ZyE0uX1hLXAnWl1tOzs fLYQ2+rApYl1o/Dyh1ljilC6H1tdiBFa6eGJUiAJ25ju9zd1vXnxIeLVqC5Shvy2 1R2FF+52ndj2gndFJAnwAkuKhF/1s4KpgQgeTawduo+IcFEIzALqKZ2vHbg4j8U4 aunQCwgbNJ/CwoMOlSKfFSN3s33B3FZBZvSXbMSWes1qjx8NdtLzoQj3qvgSvKb+ XZioCcEBWt2DsE33oK+xMJkQrj8dm3gFlDQXCDrXbB/jRdHLixspypqqt+z6Hd2a ZBPqOtGUidhv/nChrhtwGLaMQff/+zcYFPEtPLSF6ERHUrqCYwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFB2n/6GLcsErIyELbqtoHTE05TSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5 M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3ZjZjNWUzZDQvOWM0NmU5OTgtMTkwOC0z ZDRiLWExMTktM2Q5OThkYjdiODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjUzOTNmODItOWU5NS00N2FhLTk4 OTctMDAyN2Y2YzVlM2Q0LzI1MzkzZjgyLTllOTUtNDdhYS05ODk3LTAwMjdmNmM1 ZTNkNC5jcmwwHwYDVR0jBBgwFoAUOAgtINaveaoYgr9lJFwNdefJhm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNTM5M2Y4Mi05ZTk1LTQ3YWEtOTg5Ny0wMDI3 ZjZjNWUzZDQuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQE2BlgAwQF 2JNAMA0EAgACMAcDBQAmBlZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABIyjSFt5JDmjrl3Zz9oIqH7C6fb d8GIzruhd8FlGqUjLrCsvOOhDiWmO/UIvJFz9gvrsgah32DZymTde70NlAx7Y9Tn vb0861l+iLtgCj5JJsVxdAo9ByjSWTyD+Wu7TygWRckVEKEYgMhx5E9rgEKaqorr l/w9sV2xH5pJVH1StcotXdta1aQiMG8mH5T8dAP+/FKpfZWAmoFGQyNEqaJZHjPm nO3jAjBH9QPYIVFaSm81f0fIUsffE1IRGYdsHre5kAEl/XFztgQ5J5HWkJpWvdJq Z+MgdUXkxWcfVe2in+Ap2kgx0O1eiNfvinyfMtyoI/g2qboqtjph6SAhquk= -----END CERTIFICATE-----Generated at Fri May 2 19:24:14 2025 by rpki-client