$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa File: 5fc3e362-19d5-308a-8dcb-de8129446685.roa (raw, json) Hash identifier: 8zfJCLQbBwswNtv+3GjPGMCBKoIaldCqzg4jqhXbt2c= Subject key identifier: 19:71:A3:E3:29:55:17:86:8F:5C:5A:EC:E7:76:74:40:9E:03:5D:A4 Certificate issuer: /CN=32262fda-73b9-4875-8f83-9733217ce893 Certificate serial: 010D0C9F43285848F65BD29CFC90FD84B0D4D280 Authority key identifier: 96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 20278 IP address blocks: 167.88.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:d2:9c:fc:90:fd:84:b0:d4:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32262fda-73b9-4875-8f83-9733217ce893 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=6978b329-4a39-4bbe-8434-a64fc98620ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:02:9f:3c:f7:b6:02:8e:bf:03:21:99:9b: 7b:4b:d5:58:32:f3:6b:9e:46:fa:9e:56:af:cf:73: 5a:a3:04:aa:ed:fd:5f:24:de:5f:ec:61:28:ea:9c: f0:d9:fa:fd:d1:d3:26:7e:18:a1:4a:61:68:07:5c: 17:2b:92:62:ad:40:78:02:37:1a:20:25:68:42:7c: 22:eb:56:3d:a5:ae:c7:9d:ea:f1:f2:73:d7:53:be: 3e:46:4c:47:24:82:a3:cf:af:9c:9f:5f:50:80:81: 12:25:b3:1e:f3:4c:b5:89:7a:8d:ee:59:fb:0c:3d: 99:b3:43:89:dc:79:58:39:8b:44:3d:43:ed:aa:6b: 88:95:db:a5:36:5b:33:0a:83:8e:0b:16:42:6b:f6: a2:be:63:50:5f:2c:81:e7:5f:6c:27:52:a9:47:17: bb:0b:c9:de:93:1b:b8:de:25:63:ac:b9:20:2a:50: 5d:23:30:b6:b5:02:23:48:a0:4a:e7:19:62:3e:6a: 02:b1:f2:75:56:cf:48:f9:3c:7e:af:d5:6a:9f:84: c1:a7:8a:7a:70:f2:0a:79:50:84:9d:ab:2a:67:36: 8e:d6:4d:9d:52:02:9c:bd:5a:2a:2e:03:c5:a4:ea: 09:07:bc:4f:f0:9e:27:46:64:e4:d1:ab:e7:c7:82: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:71:A3:E3:29:55:17:86:8F:5C:5A:EC:E7:76:74:40:9E:03:5D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/5fc3e362-19d5-308a-8dcb-de8129446685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893/32262fda-73b9-4875-8f83-9733217ce893.crl X509v3 Authority Key Identifier: keyid:96:8A:8B:FA:38:8E:7C:56:02:1F:96:AB:4D:20:A4:4D:1B:FF:19:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32262fda-73b9-4875-8f83-9733217ce893.cer sbgp-ipAddrBlock: critical IPv4: 167.88.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:88:14:d0:44:ea:b4:b5:dc:1e:07:26:57:f7:a4:ce:6a:81: b8:6f:42:bc:07:57:60:f1:ff:63:e5:ab:f9:e6:04:6d:b4:60: 66:df:cd:ac:3a:c8:4a:7d:ee:3b:9c:b1:82:f7:a6:a3:d0:bf: 74:d1:a5:8d:24:3e:0a:48:14:5a:b0:e9:29:18:c9:70:0f:6e: 81:e6:5d:af:02:8b:6c:81:29:07:aa:39:fe:12:3d:bd:54:d6: b0:e1:8b:25:ad:1b:84:2d:07:d8:35:d0:e7:25:2a:66:03:7f: 58:1d:1a:75:ef:b8:14:29:bf:e8:b3:14:cc:5a:6f:99:88:b0: e3:65:9a:5d:a2:43:3f:d2:48:06:76:da:03:79:63:1e:95:79: c7:ce:22:39:02:a6:4e:b0:e7:70:08:e2:d5:3a:54:3f:d2:bd: c6:9d:1b:95:71:9a:e4:1f:50:d0:d9:e7:03:4f:e0:a2:7b:55: 7b:83:e5:53:50:6f:8b:37:44:39:15:2c:b2:10:0e:5d:ee:c4: d3:b7:1d:0d:1d:80:3d:2e:91:a8:1c:74:3a:4e:f3:e2:53:f4: c6:e7:14:7c:82:dd:16:65:02:ed:cd:f5:04:60:c4:5b:71:c6: 00:6d:04:4a:6c:48:4d:4a:1a:88:29:ba:0e:8c:1f:db:c5:92: 08:ec:3b:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9Kc/JD9hLDU0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzIyNjJmZGEtNzNiOS00ODc1LThmODMtOTczMzIxN2Nl ODkzMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk Njk3OGIzMjktNGEzOS00YmJlLTg0MzQtYTY0ZmM5ODYyMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCECnzz3tgKOvwMhmZt7S9VYMvNrnkb6nlav z3NaowSq7f1fJN5f7GEo6pzw2fr90dMmfhihSmFoB1wXK5JirUB4AjcaICVoQnwi 61Y9pa7Hnerx8nPXU74+RkxHJIKjz6+cn19QgIESJbMe80y1iXqN7ln7DD2Zs0OJ 3HlYOYtEPUPtqmuIldulNlszCoOOCxZCa/aivmNQXyyB519sJ1KpRxe7C8nekxu4 3iVjrLkgKlBdIzC2tQIjSKBK5xliPmoCsfJ1Vs9I+Tx+r9Vqn4TBp4p6cPIKeVCE nasqZzaO1k2dUgKcvVoqLgPFpOoJB7xP8J4nRmTk0avnx4J4kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlxo+MpVReGj1xa7Od2dECeA12kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2 MmZkYS03M2I5LTQ4NzUtOGY4My05NzMzMjE3Y2U4OTMvNWZjM2UzNjItMTlkNS0z MDhhLThkY2ItZGU4MTI5NDQ2Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzIyNjJmZGEtNzNiOS00ODc1LThm ODMtOTczMzIxN2NlODkzLzMyMjYyZmRhLTczYjktNDg3NS04ZjgzLTk3MzMyMTdj ZTg5My5jcmwwHwYDVR0jBBgwFoAUloqL+jiOfFYCH5arTSCkTRv/Ga0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjI2MmZkYS03M2I5LTQ4NzUtOGY4My05NzMz MjE3Y2U4OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEp1gAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2IFNBE6rS13B4HJlf3pM5qgbhvQrwHV2Dx/2Plq/nmBG20YGbfzaw6 yEp97jucsYL3pqPQv3TRpY0kPgpIFFqw6SkYyXAPboHmXa8Ci2yBKQeqOf4SPb1U 1rDhiyWtG4QtB9g10OclKmYDf1gdGnXvuBQpv+izFMxab5mIsONlml2iQz/SSAZ2 2gN5Yx6VecfOIjkCpk6w53AI4tU6VD/SvcadG5VxmuQfUNDZ5wNP4KJ7VXuD5VNQ b4s3RDkVLLIQDl3uxNO3HQ0dgD0ukagcdDpO8+JT9MbnFHyC3RZlAu3N9QRgxFtx xgBtBEpsSE1KGogpug6MH9vFkgjsO40= -----END CERTIFICATE-----Generated at Wed Apr 30 13:12:10 2025 by rpki-client