$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa File: 8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (raw, json) Hash identifier: 46+3a7ewDj+nbcmZOzHy9Wm+OIPEgFanGeiL4FaBW0A= Subject key identifier: 04:1E:4B:36:9A:9D:E7:5C:63:8C:7B:98:56:C9:8C:D2:0E:68:0B:3D Certificate issuer: /CN=3bb72fa3-359e-464d-be35-978a12d62998 Certificate serial: 010D0C9F432858491A53E8FE9BCE693D547F5880 Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa Signing time: Thu 06 Mar 2025 23:13:55 +0000 ROA not before: Thu 06 Mar 2025 23:13:55 +0000 ROA not after: Wed 04 Jun 2025 22:13:55 +0000 asID: 18855 IP address blocks: 160.223.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:53:e8:fe:9b:ce:69:3d:54:7f:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998 Validity Not Before: Mar 6 23:13:55 2025 GMT Not After : Jun 4 22:13:55 2025 GMT Subject: CN=a3d06aa0-9852-4a52-9dbb-571d98c31cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:75:3f:20:12:d3:32:fb:7a:15:b6:94:a7: a1:62:2e:a8:3e:a5:8d:69:3d:e8:e2:69:7b:dd:2d: 8c:be:a6:1b:49:0c:a5:73:ba:25:8c:81:ed:66:b5: a9:fb:49:6d:4a:a4:cb:60:c8:47:af:9f:c9:0e:2a: 53:fc:0f:5a:64:b3:76:0a:64:25:a6:f9:48:89:8d: 40:3d:9d:12:90:01:8e:5b:89:0e:63:49:2d:94:6c: f3:b5:59:27:41:5f:08:0e:27:46:df:60:19:c2:65: 65:28:d9:87:c9:4c:1e:4f:d4:88:77:72:d4:20:02: c7:55:39:d8:ea:d8:b6:1b:4c:26:5d:5e:9e:f3:e0: 94:b4:ec:da:85:30:48:1c:28:80:e0:fe:b3:52:4e: eb:b9:a8:ac:4f:42:2a:08:6a:b5:33:3b:33:08:5c: 59:3e:d9:74:5e:db:26:1c:81:9c:be:e3:b6:6a:68: 46:37:03:1c:d9:bf:47:30:72:ec:0e:f5:c8:e2:e0: 2b:ee:31:59:74:50:36:d5:32:a0:ac:e6:8e:0f:4e: 80:e1:ff:13:04:02:1e:94:92:18:ce:0e:02:0a:6a: 9a:a6:39:3e:82:bc:b0:3d:4f:5b:3e:8e:b2:c1:d7: 94:7e:32:7c:9c:6a:fe:c7:c1:04:98:7b:53:f1:70: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1E:4B:36:9A:9D:E7:5C:63:8C:7B:98:56:C9:8C:D2:0E:68:0B:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/8a468e47-8a6e-3f96-b02e-a3434f12468a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl X509v3 Authority Key Identifier: keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer sbgp-ipAddrBlock: critical IPv4: 160.223.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:cf:6f:a4:5a:6b:7f:11:fb:be:9e:19:34:08:fa:46:a6:23: e9:ee:96:8a:42:09:58:3d:58:71:d6:d5:ca:4d:e6:60:6a:d9: 8c:c7:8c:e2:52:13:1c:20:72:78:55:c5:ef:bf:dd:ec:c9:90: 7d:6b:f2:b4:17:fe:ca:ab:89:eb:45:14:ed:20:11:a7:e3:f3: f7:d5:bc:6e:06:2a:ea:33:2d:d1:18:c8:a5:ab:64:9c:23:37: bf:f6:ff:7a:c1:69:f1:85:2d:4f:d0:ed:5d:20:0d:1c:06:13: 97:a2:22:a4:b9:0b:8a:04:1a:85:bf:7f:cd:07:16:4d:51:ec: 8b:23:a3:81:32:c1:e8:8b:3a:83:9b:25:9f:97:47:c6:a0:11: 3f:88:48:57:1f:19:e8:66:33:37:da:6b:6e:03:a6:55:38:ce: 50:2f:06:97:90:8d:fa:63:38:56:02:76:98:88:fa:25:a8:b2: 61:50:7d:3f:37:79:a9:72:e7:64:ac:e3:7c:06:7c:27:af:09: b5:2f:ac:19:28:4f:fc:b5:e7:c9:a2:2b:93:9c:2f:ae:19:68: f6:73:9d:c9:a8:a2:ef:a6:74:f0:ea:b7:c9:5d:09:ce:07:16: a5:98:77:6d:1c:c2:92:8f:d4:a4:f6:ce:65:69:8a:de:62:c8: ab:8f:1e:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaU+j+m85pPVR/WIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNzJmYTMtMzU5ZS00NjRkLWJlMzUtOTc4YTEyZDYy OTk4MB4XDTI1MDMwNjIzMTM1NVoXDTI1MDYwNDIyMTM1NVowLzEtMCsGA1UEAxMk YTNkMDZhYTAtOTg1Mi00YTUyLTlkYmItNTcxZDk4YzMxY2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm891PyAS0zL7ehW2lKehYi6oPqWNaT3o4ml7 3S2MvqYbSQylc7oljIHtZrWp+0ltSqTLYMhHr5/JDipT/A9aZLN2CmQlpvlIiY1A PZ0SkAGOW4kOY0ktlGzztVknQV8IDidG32AZwmVlKNmHyUweT9SId3LUIALHVTnY 6ti2G0wmXV6e8+CUtOzahTBIHCiA4P6zUk7ruaisT0IqCGq1MzszCFxZPtl0Xtsm HIGcvuO2amhGNwMc2b9HMHLsDvXI4uAr7jFZdFA21TKgrOaOD06A4f8TBAIelJIY zg4CCmqapjk+grywPU9bPo6ywdeUfjJ8nGr+x8EEmHtT8XA7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQeSzaanedcY4x7mFbJjNIOaAs9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3 MmZhMy0zNTllLTQ2NGQtYmUzNS05NzhhMTJkNjI5OTgvOGE0NjhlNDctOGE2ZS0z Zjk2LWIwMmUtYTM0MzRmMTI0NjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNzJmYTMtMzU5ZS00NjRkLWJl MzUtOTc4YTEyZDYyOTk4LzNiYjcyZmEzLTM1OWUtNDY0ZC1iZTM1LTk3OGExMmQ2 Mjk5OC5jcmwwHwYDVR0jBBgwFoAU6KpNDavZkpnzD6D/MKvaA2ZFkPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI3MmZhMy0zNTllLTQ2NGQtYmUzNS05Nzhh MTJkNjI5OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoN/VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzPb6Raa38R+76eGTQI+kamI+nulopCCVg9WHHW1cpN5mBq2YzHjOJS ExwgcnhVxe+/3ezJkH1r8rQX/sqrietFFO0gEafj8/fVvG4GKuozLdEYyKWrZJwj N7/2/3rBafGFLU/Q7V0gDRwGE5eiIqS5C4oEGoW/f80HFk1R7Isjo4EyweiLOoOb JZ+XR8agET+ISFcfGehmMzfaa24DplU4zlAvBpeQjfpjOFYCdpiI+iWosmFQfT83 ealy52Ss43wGfCevCbUvrBkoT/y158miK5OcL64ZaPZzncmoou+mdPDqt8ldCc4H FqWYd20cwpKP1KT2zmVpit5iyKuPHpk= -----END CERTIFICATE-----Generated at Tue Apr 29 07:12:10 2025 by rpki-client