$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa File: 257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa (raw, json) Hash identifier: XVGxshgtPnCtL6UM4jW9TuUTlnGQdO+sR/leNWz5pRQ= Subject key identifier: 18:A5:DE:F8:26:59:43:DF:2E:E2:05:31:A9:65:3C:DE:A3:75:92:DF Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584909E6A354168EE0E6002E3100 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 136473 IP address blocks: 168.245.216.0/21 maxlen: 24 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a3:54:16:8e:e0:e6:00:2e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=12f33318-9eb9-466a-8676-7c838bd983f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:87:2b:47:c2:99:59:8b:9b:e1:09:80:75: a6:90:a3:c1:d7:0b:ab:53:b0:24:34:d2:6b:5c:81: 73:63:c7:f2:16:93:f5:03:c4:37:5d:e5:45:c3:e2: 93:cc:6a:95:c8:45:8b:8c:7b:76:49:97:ec:cf:42: 72:69:e8:8a:1d:28:4d:a4:04:9c:f5:89:f0:8d:ab: 4e:77:9f:4a:f6:fa:da:78:19:b4:aa:e2:1c:13:55: 87:01:2c:be:d1:87:48:06:d8:dd:f6:f7:50:af:61: 37:d1:1a:a0:28:75:62:26:f8:d2:81:9d:40:08:47: 1a:6b:ff:08:85:88:a0:62:52:62:4d:30:78:63:fc: 3e:62:ac:d4:66:99:ed:55:48:90:a6:07:8b:2c:48: 60:40:fc:17:58:7d:79:76:2d:8b:56:76:9a:aa:ff: 3b:e1:3e:84:25:63:c4:80:01:c4:62:92:a2:6d:cc: e6:a4:76:a0:b0:f0:8a:73:bb:84:92:df:98:1a:0f: 1d:4f:ac:47:4d:c8:f8:92:e8:98:91:da:31:3a:f4: d9:92:26:9a:3b:e0:fb:d4:4d:ed:b5:cf:5d:fc:dc: 42:86:af:6a:52:b5:bb:55:b7:0a:5b:3b:b1:46:8f: 4d:73:ad:f3:38:e1:e4:33:bd:9c:d7:1a:d5:55:d5: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A5:DE:F8:26:59:43:DF:2E:E2:05:31:A9:65:3C:DE:A3:75:92:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 168.245.216.0/21 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:c5:5f:5a:a9:49:31:37:01:38:e5:a1:3f:ec:18:63:54:f5: 1d:41:35:35:13:c8:45:99:e2:0a:b6:0b:55:2e:20:b7:50:01: 89:8b:32:19:5b:e6:6a:a8:d9:66:31:01:4a:59:56:56:c8:93: e2:a1:f0:a4:3c:48:b9:b4:72:c5:f8:18:d4:cf:6a:96:91:43: 93:47:12:b6:cf:72:ba:7c:f2:94:ec:a8:b2:b7:95:0f:fe:5b: 45:17:e1:33:78:51:8b:e4:c7:e2:9a:42:a7:39:db:2f:9d:39: cc:a3:6c:bb:55:95:19:75:a0:0a:a5:cb:f2:ca:ef:2e:12:18: f7:ef:0e:cd:30:59:a6:35:4a:43:3d:89:ca:96:a2:d8:bc:4a: 81:f4:d7:e5:27:73:89:dd:60:4f:57:f0:ed:52:f6:f7:90:a8: 47:36:ca:f7:5e:1f:eb:cf:42:29:17:d8:c8:8b:99:7d:af:da: 18:19:61:46:29:3b:80:f1:3c:e4:00:db:48:19:62:5f:67:ab: dc:19:2a:41:69:c8:01:6b:8c:5a:8c:a4:b5:83:67:02:6e:7c: e8:e3:49:2d:ab:0a:bf:34:3c:61:52:ea:35:fe:4a:b2:8c:36: 10:fd:4f:cf:f4:02:11:6b:8d:ce:5c:31:14:97:70:d2:7d:09: c3:d8:0e:39 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkJ5qNUFo7g5gAuMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MTJmMzMzMTgtOWViOS00NjZhLTg2NzYtN2M4MzhiZDk4M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcGHK0fCmVmLm+EJgHWmkKPB1wurU7AkNNJr XIFzY8fyFpP1A8Q3XeVFw+KTzGqVyEWLjHt2SZfsz0JyaeiKHShNpASc9YnwjatO d59K9vraeBm0quIcE1WHASy+0YdIBtjd9vdQr2E30RqgKHViJvjSgZ1ACEcaa/8I hYigYlJiTTB4Y/w+YqzUZpntVUiQpgeLLEhgQPwXWH15di2LVnaaqv874T6EJWPE gAHEYpKibczmpHagsPCKc7uEkt+YGg8dT6xHTcj4kuiYkdoxOvTZkiaaO+D71E3t tc9d/NxChq9qUrW7VbcKWzuxRo9Nc63zOOHkM72c1xrVVdWu3wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBil3vgmWUPfLuIFMallPN6jdZLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvMjU3ZTlhNDItNGVjMC0z YTg1LTg5YTktYTIwNWI4ZjllM2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDqPXYAwQG 0DgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABPFX1qpSTE3ATjloT/sGGNU9R1BNTUTyEWZ4gq2C1UuILdQ AYmLMhlb5mqo2WYxAUpZVlbIk+Kh8KQ8SLm0csX4GNTPapaRQ5NHErbPcrp88pTs qLK3lQ/+W0UX4TN4UYvkx+KaQqc52y+dOcyjbLtVlRl1oAqly/LK7y4SGPfvDs0w WaY1SkM9icqWoti8SoH01+Unc4ndYE9X8O1S9veQqEc2yvdeH+vPQikX2MiLmX2v 2hgZYUYpO4DxPOQA20gZYl9nq9wZKkFpyAFrjFqMpLWDZwJufOjjSS2rCr80PGFS 6jX+SrKMNhD9T8/0AhFrjc5cMRSXcNJ9CcPYDjk= -----END CERTIFICATE-----Generated at Sun Apr 27 20:09:41 2025 by rpki-client