$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa File: 86604c1e-e526-334e-ab61-1fb3393fb181.roa (raw, json) Hash identifier: h0XMltHIXPHqSjg9a7g0D3dW2ItoAg6u/2GunbtJmAA= Subject key identifier: 45:88:36:B8:F7:A9:40:72:BB:71:36:F3:E9:1F:04:41:B2:19:FB:A7 Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611 Certificate serial: 010D0C9F4328584908816F8C7FDA8F332B6F0580 Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 12980 IP address blocks: 129.35.160.0/20 maxlen: 20 170.225.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6f:8c:7f:da:8f:33:2b:6f:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=65c71448-1ebd-4555-be77-44eebc98f7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fa:c6:77:1c:13:90:84:92:73:f5:53:91:d3: b3:da:cf:79:f3:66:23:d4:d6:6a:38:27:83:46:ee: 22:cb:6f:61:b8:de:30:78:20:18:1c:3b:e6:77:c3: 3b:45:d9:44:e2:b2:64:0b:75:8f:01:63:a2:77:c2: c1:fb:dd:e3:b3:23:3e:92:bd:be:14:4f:0f:f1:1f: 0f:e9:ed:2b:90:b2:ca:5b:fc:a1:46:eb:33:1c:13: 4f:2e:98:d3:87:e5:8f:ed:10:88:0d:fd:b6:62:83: f1:33:b5:6c:f9:35:15:79:43:37:90:11:04:d8:55: 46:cc:c3:9c:b7:ac:df:7e:1a:17:13:24:5f:07:8b: 8c:f7:04:c8:1d:4b:01:e8:b0:2c:67:f2:c2:16:65: 2c:0c:9b:60:cc:9b:3d:78:5a:cc:52:d7:b2:71:e7: f6:f7:45:13:c9:ac:8f:77:13:20:5e:15:8e:88:41: b1:22:a4:20:a7:32:05:62:54:7c:35:8f:0d:38:67: d3:9a:50:c2:77:5a:4a:c4:f1:70:fb:5e:85:80:47: 98:f9:36:43:cf:56:2b:50:24:98:9d:65:9c:e9:67: b7:9e:22:b3:68:ad:46:72:8d:f7:39:87:76:79:74: b8:14:f6:46:ee:76:78:0c:9c:24:da:2e:7d:2c:86: a0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:88:36:B8:F7:A9:40:72:BB:71:36:F3:E9:1F:04:41:B2:19:FB:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl X509v3 Authority Key Identifier: keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer sbgp-ipAddrBlock: critical IPv4: 129.35.160.0/20 170.225.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2b:99:ce:f9:6c:8f:d7:f9:05:10:e8:51:7d:27:c7:0b:3e: f4:8b:03:ec:63:bb:f1:ab:39:8c:72:cd:fa:98:00:76:4a:f3: 87:64:63:a2:08:35:51:dd:b8:c2:dc:c4:79:94:34:74:fd:d7: 16:fc:91:02:2f:34:7c:b1:32:55:51:7a:8b:bb:10:56:a1:af: 1a:ce:b7:ef:9f:2c:f0:e9:c6:71:ae:4c:86:c0:a5:34:1a:7c: 91:37:0b:ec:75:53:cf:36:31:19:f8:8c:ef:98:f2:1d:cd:a4: b3:83:27:b6:8e:ae:bb:d8:b0:46:2a:b5:7e:47:43:15:16:c5: 84:00:b7:72:31:90:6f:22:2c:75:41:15:a3:e3:6f:07:1e:58: 18:80:fd:24:74:5d:8b:18:3d:f2:49:77:26:bf:85:6f:3f:8f: 14:94:55:6a:82:67:e1:37:3b:91:30:41:79:47:65:96:ae:b7: e5:72:29:7a:96:62:72:dd:9f:be:5d:77:87:c7:a8:c2:7f:fc: eb:a6:79:66:09:71:a7:22:3d:a4:d4:d6:4a:4d:ea:5a:9d:a9: ea:97:ac:37:9a:4c:15:a4:02:d0:6f:cb:e3:3a:09:e9:00:32: 23:3e:74:31:93:4f:7c:09:f4:98:55:f1:4b:fc:77:f5:aa:7f: 75:31:0c:a6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkIgW+Mf9qPMytvBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy NjExMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NjVjNzE0NDgtMWViZC00NTU1LWJlNzctNDRlZWJjOThmN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/rGdxwTkISSc/VTkdOz2s9582Yj1NZqOCeD Ru4iy29huN4weCAYHDvmd8M7RdlE4rJkC3WPAWOid8LB+93jsyM+kr2+FE8P8R8P 6e0rkLLKW/yhRuszHBNPLpjTh+WP7RCIDf22YoPxM7Vs+TUVeUM3kBEE2FVGzMOc t6zffhoXEyRfB4uM9wTIHUsB6LAsZ/LCFmUsDJtgzJs9eFrMUteycef290UTyayP dxMgXhWOiEGxIqQgpzIFYlR8NY8NOGfTmlDCd1pKxPFw+16FgEeY+TZDz1YrUCSY nWWc6We3niKzaK1Gco33OYd2eXS4FPZG7nZ4DJwk2i59LIagPQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEWINrj3qUByu3E28+kfBEGyGfunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0 YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvODY2MDRjMWUtZTUyNi0z MzRlLWFiNjEtMWZiMzM5M2ZiMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3 NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4 MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4 MDk1ODI2MTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEgSOgAwQE quGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADYrmc75bI/X+QUQ6FF9J8cLPvSLA+xju/GrOYxyzfqYAHZK 84dkY6IINVHduMLcxHmUNHT91xb8kQIvNHyxMlVReou7EFahrxrOt++fLPDpxnGu TIbApTQafJE3C+x1U882MRn4jO+Y8h3NpLODJ7aOrrvYsEYqtX5HQxUWxYQAt3Ix kG8iLHVBFaPjbwceWBiA/SR0XYsYPfJJdya/hW8/jxSUVWqCZ+E3O5EwQXlHZZau t+VyKXqWYnLdn75dd4fHqMJ//OumeWYJcaciPaTU1kpN6lqdqeqXrDeaTBWkAtBv y+M6CekAMiM+dDGTT3wJ9JhV8Uv8d/Wqf3UxDKY= -----END CERTIFICATE-----Generated at Mon Apr 28 08:21:46 2025 by rpki-client