$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa File: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (raw, json) Hash identifier: 6Ula2jDuNZ46Kt682CN+Yq0pQ9Rs1ygJCOWnS1vJVxo= Subject key identifier: 6A:91:A2:A6:18:9F:CD:2E:89:23:79:78:AA:12:79:AE:77:56:91:E0 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F432858496CE45CA3188D3EDF2C7084C0 Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 216.120.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:5c:a3:18:8d:3e:df:2c:70:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=86c5f301-6d14-40b9-9457-c0ce3a9e7c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:11:93:9f:3d:b6:10:2e:bf:11:4c:28:fc: 4b:2a:0b:1a:a8:2b:7b:6f:bf:9f:52:c8:40:13:e1: 10:05:c5:0f:e9:59:f3:65:2f:5d:d0:80:65:26:a9: 17:cd:0c:83:e0:b8:88:2b:c8:60:8c:ed:57:6b:85: 15:9b:9b:20:3f:a8:ac:a7:f6:1d:14:3a:6b:c6:ef: ef:87:b6:38:d2:68:6c:50:42:49:18:c1:22:88:65: cd:b4:42:b0:ef:ef:60:69:04:bb:4b:fb:b3:54:c9: af:2f:a1:81:4a:1e:eb:8c:b5:ce:63:dd:68:ae:01: b9:c7:fc:55:9b:c2:09:7e:e6:e6:cc:b0:2f:28:db: 28:e3:8b:4f:f2:58:a2:4a:f8:df:a0:6f:d2:8d:77: 75:88:7c:85:0e:82:c0:8b:97:83:2c:fe:e6:a2:33: 6a:63:e2:f1:02:90:5f:ef:1c:84:6c:f9:80:40:ea: 41:db:14:4f:54:b3:9a:b0:05:0f:a5:18:43:01:55: bd:94:b1:5a:d4:b4:dd:5c:88:aa:af:87:27:d1:16: c1:75:d1:af:32:c2:b3:fb:b5:9a:92:ea:f3:13:39: d1:8d:b3:63:a1:20:00:82:eb:10:1d:cd:8c:52:99: 42:b2:b8:f6:ea:c3:d5:16:5d:32:ef:1b:12:4c:ab: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:91:A2:A6:18:9F:CD:2E:89:23:79:78:AA:12:79:AE:77:56:91:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: 216.120.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:a0:1e:0c:65:dd:47:5f:73:8e:83:6d:2e:6e:29:96:31:cd: cc:83:46:f2:0a:45:98:c1:3e:f3:e6:75:dc:20:f5:60:b1:26: b4:70:00:fc:3d:0b:31:f2:56:99:18:ef:2b:8d:2b:22:0c:a0: 94:3c:f5:96:e1:1b:22:db:b7:4f:23:f4:ae:32:52:2e:d8:1f: 8c:4a:93:94:31:4e:59:71:79:63:ed:68:f5:54:24:35:09:c5: 70:78:f1:6b:12:55:81:ca:4c:66:19:b7:ca:59:fb:fb:be:c8: 55:cb:16:aa:a5:12:7d:16:ca:1c:c9:3e:d6:e2:05:e0:09:a5: f4:7d:a0:04:0e:2e:1c:18:31:ab:6f:18:7c:0a:ae:91:f9:58: bf:5e:ee:a3:5d:c5:b9:0e:ff:67:9d:1e:15:d8:92:a6:8d:6a: 2d:13:01:f3:24:28:86:64:d2:e2:eb:b3:46:4d:10:88:3b:12: 3e:bc:de:27:5b:5a:b3:af:89:ae:ad:04:c9:9d:b7:5c:fe:b0: 5e:8b:df:2b:1f:ed:4e:f3:a0:6d:65:83:53:9c:b9:1f:95:a1: f5:58:bb:1b:ac:57:80:97:10:e0:eb:e1:32:19:3e:b7:14:4b: 6f:55:81:83:33:a3:c3:e4:50:48:db:48:8a:0c:3a:f3:a2:c8: 5c:3c:8c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FyjGI0+3yxwhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk ODZjNWYzMDEtNmQxNC00MGI5LTk0NTctYzBjZTNhOWU3YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjwRk589thAuvxFMKPxLKgsaqCt7b7+fUshA E+EQBcUP6VnzZS9d0IBlJqkXzQyD4LiIK8hgjO1Xa4UVm5sgP6isp/YdFDprxu/v h7Y40mhsUEJJGMEiiGXNtEKw7+9gaQS7S/uzVMmvL6GBSh7rjLXOY91orgG5x/xV m8IJfubmzLAvKNso44tP8liiSvjfoG/SjXd1iHyFDoLAi5eDLP7mojNqY+LxApBf 7xyEbPmAQOpB2xRPVLOasAUPpRhDAVW9lLFa1LTdXIiqr4cn0RbBddGvMsKz+7Wa kurzEznRjbNjoSAAgusQHc2MUplCsrj26sPVFl0y7xsSTKtOwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqRoqYYn80uiSN5eKoSea53VpHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvMmU3MmQ1YmUtZjlmMi0z MzM5LWIzM2ItNGMxYmEyZjM1OGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HilMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOgHgxl3Udfc46DbS5uKZYxzcyDRvIKRZjBPvPmddwg9WCxJrRwAPw9 CzHyVpkY7yuNKyIMoJQ89ZbhGyLbt08j9K4yUi7YH4xKk5QxTllxeWPtaPVUJDUJ xXB48WsSVYHKTGYZt8pZ+/u+yFXLFqqlEn0WyhzJPtbiBeAJpfR9oAQOLhwYMatv GHwKrpH5WL9e7qNdxbkO/2edHhXYkqaNai0TAfMkKIZk0uLrs0ZNEIg7Ej683idb WrOvia6tBMmdt1z+sF6L3ysf7U7zoG1lg1OcuR+VofVYuxusV4CXEODr4TIZPrcU S29VgYMzo8PkUEjbSIoMOvOiyFw8jK0= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:04 2025 by rpki-client