$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/41bd168f-011b-30a0-8316-e5ea4bc22185.roa File: 41bd168f-011b-30a0-8316-e5ea4bc22185.roa (raw, json) Hash identifier: X1ibzDzIdTvgjqz33KhUqwAg+SOznvkwKj65mjAVvBM= Subject key identifier: 0D:71:82:BC:75:02:53:61:66:79:B8:47:67:AF:DE:79:93:9B:D9:87 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584961B9A3B9E54E764F75942100 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/41bd168f-011b-30a0-8316-e5ea4bc22185.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 1239 IP address blocks: 216.177.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a3:b9:e5:4e:76:4f:75:94:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=ea004606-f3e2-4dcf-a92e-f021d6eb5404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:03:94:f5:ef:27:b0:4b:70:7f:8c:f3:3d:17: 2a:5b:59:af:e1:09:cb:da:46:e8:ec:5f:53:37:26: a5:57:69:6b:68:ec:8d:68:c7:2e:e5:63:08:66:0b: 21:6c:1e:02:50:5f:eb:29:b3:a7:ba:f7:3e:9d:c0: 50:8a:e5:22:2e:ad:9e:77:c7:cc:dd:b5:0e:b0:66: 01:b7:28:14:0e:61:00:df:ba:f2:34:7e:63:8c:65: 54:a5:1d:25:34:96:6e:c8:3c:83:13:9b:3c:52:b0: e3:b2:e2:75:34:d6:fe:7e:c7:0b:f2:0d:fb:34:73: e7:e3:cb:a4:76:e7:07:86:80:9b:e5:43:fa:a7:32: 00:7d:12:de:e6:15:fb:3b:9c:3c:b1:49:89:7d:0c: 5c:35:1c:7b:72:a6:40:4a:a9:6d:a6:58:89:96:39: 1c:ec:bf:f6:dc:15:ea:04:2a:6f:0f:18:94:49:a9: 6f:07:13:a9:0d:46:ef:05:ac:6c:d2:f1:63:8b:13: fd:3f:fd:07:de:36:a2:21:1a:84:48:1f:8b:75:ba: 4e:f7:02:90:74:12:f9:37:d9:c1:52:28:2b:bf:35: df:51:bc:ab:43:33:f7:d1:63:7e:b7:c1:02:b2:51: 89:1a:fe:6b:b5:54:98:e5:3c:8a:78:8e:80:b4:86: 75:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:71:82:BC:75:02:53:61:66:79:B8:47:67:AF:DE:79:93:9B:D9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/41bd168f-011b-30a0-8316-e5ea4bc22185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 216.177.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5e:5c:5a:a8:83:a9:63:c2:12:77:39:77:8f:4a:a1:b1:5c: 4c:27:d5:37:4c:86:ea:47:45:cc:a0:eb:89:a9:db:55:9b:b2: a2:97:c7:64:9d:9c:e1:55:05:2f:fc:5e:bf:27:e1:8b:7e:69: 64:20:30:44:c5:ee:32:21:b1:ef:b7:55:9a:d2:af:b8:49:33: 5d:96:88:ae:29:ed:d4:c8:58:64:b3:02:21:48:64:73:db:c2: 48:84:6f:fd:17:ca:33:f5:52:7b:22:b9:d0:59:0b:6c:da:65: 10:24:52:83:6a:16:59:69:b0:47:6a:8a:03:8b:f8:a7:f1:cc: 29:fa:19:e7:a0:b9:5b:19:1c:9b:5a:da:0c:23:f3:44:aa:94: a2:8c:4a:be:8d:e2:ba:60:ec:dd:76:51:04:a3:8e:21:f3:6c: 15:57:4c:51:50:3b:c4:0e:28:f0:13:f9:74:5b:34:48:0c:7b: 96:31:40:3f:ea:a4:b3:19:00:b8:5c:f2:b8:db:b0:35:d3:f6: b3:fb:e1:8b:75:2e:c9:33:4d:8b:d7:55:54:1e:57:15:de:59: af:f4:a5:32:49:a2:2e:1c:c3:89:56:99:ab:18:f6:7f:d1:9d: fd:7d:ee:9b:75:60:c6:65:83:52:4f:3b:d6:59:1c:c0:21:ab: 25:c4:7e:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaO55U52T3WUIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ZWEwMDQ2MDYtZjNlMi00ZGNmLWE5MmUtZjAyMWQ2ZWI1NDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQOU9e8nsEtwf4zzPRcqW1mv4QnL2kbo7F9T NyalV2lraOyNaMcu5WMIZgshbB4CUF/rKbOnuvc+ncBQiuUiLq2ed8fM3bUOsGYB tygUDmEA37ryNH5jjGVUpR0lNJZuyDyDE5s8UrDjsuJ1NNb+fscL8g37NHPn48uk ducHhoCb5UP6pzIAfRLe5hX7O5w8sUmJfQxcNRx7cqZASqltpliJljkc7L/23BXq BCpvDxiUSalvBxOpDUbvBaxs0vFjixP9P/0H3jaiIRqESB+LdbpO9wKQdBL5N9nB UigrvzXfUbyrQzP30WN+t8ECslGJGv5rtVSY5TyKeI6AtIZ1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1xgrx1AlNhZnm4R2ev3nmTm9mHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvNDFiZDE2OGYtMDExYi0z MGEwLTgzMTYtZTVlYTRiYzIyMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGleXFqog6ljwhJ3OXePSqGxXEwn1TdMhupHRcyg64mp21WbsqKXx2Sd nOFVBS/8Xr8n4Yt+aWQgMETF7jIhse+3VZrSr7hJM12WiK4p7dTIWGSzAiFIZHPb wkiEb/0XyjP1UnsiudBZC2zaZRAkUoNqFllpsEdqigOL+KfxzCn6GeeguVsZHJta 2gwj80SqlKKMSr6N4rpg7N12UQSjjiHzbBVXTFFQO8QOKPAT+XRbNEgMe5YxQD/q pLMZALhc8rjbsDXT9rP74Yt1LskzTYvXVVQeVxXeWa/0pTJJoi4cw4lWmasY9n/R nf197pt1YMZlg1JPO9ZZHMAhqyXEfg8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:25 2025 by rpki-client