$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b168ffdf-f7ea-3494-af80-713656ce5e8d.roa File: b168ffdf-f7ea-3494-af80-713656ce5e8d.roa (raw, json) Hash identifier: b3x1Dp+Xf3qQcUHJ0Jy4IxiXSsa0DU3Aqk+bwloCreA= Subject key identifier: 8F:CA:80:76:A5:46:8E:C0:64:F3:19:A3:51:85:29:2B:7E:9A:C7:19 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F43285849350EA32C37511575214F4A10 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b168ffdf-f7ea-3494-af80-713656ce5e8d.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 399575 IP address blocks: 216.205.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a3:2c:37:51:15:75:21:4f:4a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=54aa3778-510a-4693-ba75-06b9add09dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9b:1a:8e:79:b3:bf:83:13:ff:a6:33:b3:a8: fd:79:b2:5d:f7:0e:33:a7:c7:c3:6c:57:0b:27:5b: 20:16:ba:63:42:0b:bd:2b:21:5e:7c:5e:06:ef:05: c2:e6:ea:ca:92:61:13:02:f1:8d:74:95:cd:62:5e: 0d:2f:c8:5d:a6:3e:66:f0:ba:25:54:5a:3d:89:9f: d3:a0:84:e5:13:37:83:1c:c3:dd:2c:9e:ba:ae:01: f5:b6:d0:3b:74:03:a8:59:bc:f6:34:ab:9c:b2:3d: 68:fe:54:0c:a5:73:d9:c4:52:d1:f4:59:cd:6c:32: e6:ad:48:72:4f:7e:83:a6:b6:33:b6:55:68:8e:61: f0:f5:69:b4:e8:db:26:aa:5b:2a:d4:c3:7f:8f:48: 37:9b:5c:ec:d6:1b:99:72:ec:c0:6f:4d:b1:28:ae: 08:49:8c:2e:29:23:3d:6a:ef:74:b8:0f:cd:74:97: 55:55:3f:13:99:15:77:f1:f6:da:45:4c:27:0f:5a: 8b:91:80:86:df:91:41:98:42:76:04:c1:ae:91:ae: a6:1e:8c:7c:d1:28:25:b6:ee:da:96:30:7a:62:62: d9:70:b3:67:00:84:c5:94:13:a3:7a:ea:6a:d7:c9: e1:d7:be:1f:1d:8b:18:dd:2c:b1:15:5a:11:f3:93: a1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CA:80:76:A5:46:8E:C0:64:F3:19:A3:51:85:29:2B:7E:9A:C7:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/b168ffdf-f7ea-3494-af80-713656ce5e8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 216.205.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e1:f5:f5:5c:fa:56:59:65:dc:37:40:eb:9f:59:47:79:dc: 83:27:7e:a9:d0:ce:93:d0:dd:53:ae:85:af:82:2e:44:78:1c: 6d:fb:c9:eb:56:80:15:c9:4b:b2:c9:38:46:d5:b5:89:fd:0d: dc:9b:e6:3f:a1:81:82:84:9d:82:19:31:39:d5:4a:d2:99:a1: ac:d9:0b:6e:86:62:40:65:0c:14:87:df:86:9d:60:e7:9a:43: 9e:1e:47:12:0e:0c:3f:8c:36:d5:ee:1c:94:f4:45:b2:7e:d5: 9c:38:df:28:b3:05:c6:20:04:90:74:e8:22:b4:a2:7c:56:8b: 56:3f:20:45:8e:1c:ea:a9:96:13:d6:db:c8:a8:db:4c:3a:77: d9:eb:94:08:36:98:32:47:9e:99:fb:44:15:64:f4:36:14:7c: 86:71:39:35:b3:9a:71:92:1a:ab:3a:d3:d4:ec:52:a8:ee:38: 27:31:a9:4f:3d:08:bc:3b:d5:b7:a3:e5:f8:39:7a:a9:9a:49: af:b7:9f:7b:36:05:4d:01:c8:10:ba:09:6a:67:de:ea:e5:9a: 5e:0a:db:57:27:11:49:1b:9d:d3:d7:99:1f:f4:46:49:25:46: 5f:7a:8d:b9:ee:cf:4f:f8:91:bb:c3:b5:51:ea:5c:cc:d3:ca: a4:bb:1e:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqMsN1EVdSFPShAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NTRhYTM3NzgtNTEwYS00NjkzLWJhNzUtMDZiOWFkZDA5ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJsajnmzv4MT/6Yzs6j9ebJd9w4zp8fDbFcL J1sgFrpjQgu9KyFefF4G7wXC5urKkmETAvGNdJXNYl4NL8hdpj5m8LolVFo9iZ/T oITlEzeDHMPdLJ66rgH1ttA7dAOoWbz2NKucsj1o/lQMpXPZxFLR9FnNbDLmrUhy T36DprYztlVojmHw9Wm06Nsmqlsq1MN/j0g3m1zs1huZcuzAb02xKK4ISYwuKSM9 au90uA/NdJdVVT8TmRV38fbaRUwnD1qLkYCG35FBmEJ2BMGuka6mHox80Sgltu7a ljB6YmLZcLNnAITFlBOjeupq18nh174fHYsY3SyxFVoR85OhAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/KgHalRo7AZPMZo1GFKSt+mscZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYjE2OGZmZGYtZjdlYS0z NDk0LWFmODAtNzEzNjU2Y2U1ZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2M1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbh9fVc+lZZZdw3QOufWUd53IMnfqnQzpPQ3VOuha+CLkR4HG37yetW gBXJS7LJOEbVtYn9Ddyb5j+hgYKEnYIZMTnVStKZoazZC26GYkBlDBSH34adYOea Q54eRxIODD+MNtXuHJT0RbJ+1Zw43yizBcYgBJB06CK0onxWi1Y/IEWOHOqplhPW 28io20w6d9nrlAg2mDJHnpn7RBVk9DYUfIZxOTWzmnGSGqs609TsUqjuOCcxqU89 CLw71bej5fg5eqmaSa+3n3s2BU0ByBC6CWpn3urlml4K21cnEUkbndPXmR/0Rkkl Rl96jbnuz0/4kbvDtVHqXMzTyqS7Hhw= -----END CERTIFICATE-----Generated at Tue Apr 29 10:21:00 2025 by rpki-client