$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/5e92e144-756e-3d55-94a2-0e992de2522a.roa File: 5e92e144-756e-3d55-94a2-0e992de2522a.roa (raw, json) Hash identifier: GkWDFC4CNym8plyeyp1ZO14abD3I8EFRNgMxmcEa9iY= Subject key identifier: C4:B9:3D:09:1C:98:D3:73:A9:BE:72:8C:73:04:30:CC:7C:73:43:FC Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Certificate serial: 010D0C9F432858495C244685126BB397B6CA55C0 Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/5e92e144-756e-3d55-94a2-0e992de2522a.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 14511 IP address blocks: 216.196.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:46:85:12:6b:b3:97:b6:ca:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=c9a97b51-6af1-40fe-823a-3d001ebe2370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:20:99:a5:a6:5f:f6:86:59:d2:8f:5d:fb: cb:79:e7:2d:bb:a9:7e:33:62:48:62:4b:fd:cf:5e: 9f:58:3e:4f:7a:14:90:08:c0:79:16:c4:d3:90:ae: c4:3b:f5:d1:4b:1f:96:41:09:6f:5a:b4:4b:8b:c5: ad:31:2a:81:75:73:f0:52:76:c2:a2:42:d8:67:60: d7:e7:f9:bc:a7:d9:40:29:a9:d9:8a:76:de:2c:49: f9:be:f3:7f:4f:0b:6d:e3:0d:0a:b7:b1:10:ad:6f: 44:ef:be:6e:a5:9d:ac:8f:8c:79:93:03:68:f8:ee: 46:23:25:ce:be:c6:0e:4f:ae:8b:51:91:c4:c2:9e: 59:a3:ec:af:8c:88:4f:1d:e6:e1:ca:ac:20:78:91: c1:82:d4:0d:5b:f9:59:77:e5:79:ac:4f:1f:35:51: 44:4a:e6:aa:d7:db:15:b5:42:4d:4d:b0:63:ba:0c: 62:5f:b6:78:dd:45:51:ad:f7:64:35:5c:98:1f:55: 08:f4:80:9c:e1:86:82:60:27:0c:15:62:a6:9d:d6: e6:d9:45:e2:0a:a9:3f:02:d4:c7:0c:ec:00:eb:06: b4:d8:6a:0a:0e:4f:c3:c3:c9:03:31:eb:08:76:ff: 2e:cb:80:f2:be:32:fa:1d:84:3c:7b:59:a6:52:e9: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B9:3D:09:1C:98:D3:73:A9:BE:72:8C:73:04:30:CC:7C:73:43:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/5e92e144-756e-3d55-94a2-0e992de2522a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl X509v3 Authority Key Identifier: keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer sbgp-ipAddrBlock: critical IPv4: 216.196.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:89:65:86:22:8f:ff:e1:0c:61:7f:99:ac:c9:13:b1:ab:45: ee:94:a7:d7:75:ac:ba:f8:c9:03:ca:d0:b5:f2:26:ee:98:f6: bb:91:2c:b6:02:ee:1b:fd:b8:07:31:89:c1:69:4a:af:63:b1: fe:72:53:bc:4e:c2:54:33:38:77:5c:f6:41:ac:b2:5f:65:5a: eb:69:ec:6c:4a:6c:eb:1c:62:21:34:52:6b:50:60:fb:11:69: cb:72:32:77:ce:61:68:46:ba:c1:39:33:59:63:14:63:3d:44: b5:7d:ed:99:7a:96:6c:76:67:c4:ae:12:af:52:d7:15:2f:f9: 8b:53:b0:37:b7:8e:0a:65:12:50:76:43:82:f7:4f:80:c9:ed: 48:74:90:d1:9e:78:5d:ec:be:81:42:94:16:42:ab:fe:0d:de: c4:86:f3:c6:fc:55:c0:43:73:8c:96:65:a1:7f:67:24:d9:19: bf:f2:45:d8:81:78:ea:c7:b1:85:7e:cd:31:a0:f6:81:b3:8c: 88:3e:21:a6:d1:b5:dc:4f:26:81:47:ab:31:90:ec:96:b7:43: 66:14:47:cd:3e:6d:6c:00:e2:41:05:57:1f:8c:3c:43:1c:56: d2:83:c5:e2:df:c0:1b:8e:0a:8a:0b:14:f7:45:26:8b:b2:82: aa:de:26:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEaFEmuzl7bKVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVjY2JkN2UtMDg0NC00OGIxLTg4ZDctMGE4ZWY0NmU4 MTY4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk YzlhOTdiNTEtNmFmMS00MGZlLTgyM2EtM2QwMDFlYmUyMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruMgmaWmX/aGWdKPXfvLeectu6l+M2JIYkv9 z16fWD5PehSQCMB5FsTTkK7EO/XRSx+WQQlvWrRLi8WtMSqBdXPwUnbCokLYZ2DX 5/m8p9lAKanZinbeLEn5vvN/Twtt4w0Kt7EQrW9E775upZ2sj4x5kwNo+O5GIyXO vsYOT66LUZHEwp5Zo+yvjIhPHebhyqwgeJHBgtQNW/lZd+V5rE8fNVFESuaq19sV tUJNTbBjugxiX7Z43UVRrfdkNVyYH1UI9ICc4YaCYCcMFWKmndbm2UXiCqk/AtTH DOwA6wa02GoKDk/Dw8kDMesIdv8uy4DyvjL6HYQ8e1mmUumNYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS5PQkcmNNzqb5yjHMEMMx8c0P8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNj YmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThlZjQ2ZTgxNjgvNWU5MmUxNDQtNzU2ZS0z ZDU1LTk0YTItMGU5OTJkZTI1MjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzVjY2JkN2UtMDg0NC00OGIxLTg4 ZDctMGE4ZWY0NmU4MTY4LzM1Y2NiZDdlLTA4NDQtNDhiMS04OGQ3LTBhOGVmNDZl ODE2OC5jcmwwHwYDVR0jBBgwFoAUMWdUtL8Wfq3x9BDB2dL62qqFPBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNWNjYmQ3ZS0wODQ0LTQ4YjEtODhkNy0wYThl ZjQ2ZTgxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2MRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiJZYYij//hDGF/mazJE7GrRe6Up9d1rLr4yQPK0LXyJu6Y9ruRLLYC 7hv9uAcxicFpSq9jsf5yU7xOwlQzOHdc9kGssl9lWutp7GxKbOscYiE0UmtQYPsR actyMnfOYWhGusE5M1ljFGM9RLV97Zl6lmx2Z8SuEq9S1xUv+YtTsDe3jgplElB2 Q4L3T4DJ7Uh0kNGeeF3svoFClBZCq/4N3sSG88b8VcBDc4yWZaF/ZyTZGb/yRdiB eOrHsYV+zTGg9oGzjIg+IabRtdxPJoFHqzGQ7Ja3Q2YUR80+bWwA4kEFVx+MPEMc VtKDxeLfwBuOCooLFPdFJouygqreJtw= -----END CERTIFICATE-----Generated at Mon Apr 28 16:00:18 2025 by rpki-client