$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa File: 4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa (raw, json) Hash identifier: siHK6xUjojYTRA4jmSYjtvXVM/7h12leRohl0S14b+4= Subject key identifier: 71:89:31:56:27:FA:CE:70:48:78:B5:D9:83:F9:0F:34:11:03:CE:31 Certificate issuer: /CN=688165c5-c42e-4c66-a760-e605ebd8b2a3 Certificate serial: 010D0C9F432858492CAE9A98089647C7A6241DC0 Authority key identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 395089 IP address blocks: 192.160.102.0/24 maxlen: 24 2620:132:3000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:9a:98:08:96:47:c7:a6:24:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688165c5-c42e-4c66-a760-e605ebd8b2a3 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8eaa3a9a-2401-493d-9b4a-cf15a1335c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:6d:e5:67:83:57:ee:a1:08:72:05:2c:15: 44:f9:da:e0:f1:77:80:04:85:3a:0a:a1:66:51:ed: 3d:96:51:0a:e0:fe:a7:b6:ec:3b:1e:78:da:30:83: 75:28:3f:d5:be:89:e9:c5:41:c9:d2:24:5a:cd:94: 04:da:b0:6a:3d:92:87:9d:d2:15:ee:68:cc:6a:c5: 63:19:b7:30:06:64:17:59:58:ec:1c:67:ad:4a:ea: cc:59:0a:a1:8d:32:25:5f:e8:d1:e5:0c:ba:2c:27: 33:53:46:e0:ee:99:d1:7f:dd:0e:30:28:6e:e3:bc: e4:12:d6:bd:8f:97:80:17:60:1b:61:85:39:09:be: e4:b4:38:0a:25:41:c3:02:3a:d2:5d:69:bf:5f:65: 78:77:83:c7:84:05:6d:b0:5f:94:e5:f0:1c:f5:fd: ae:b8:35:39:a2:76:53:53:02:05:7f:bf:21:f0:82: 9a:69:10:43:78:84:3d:4b:22:39:2c:a2:9f:eb:0d: 5b:bf:cf:36:73:ae:61:d9:27:67:cf:c1:fc:70:63: b3:8d:92:23:98:06:1c:3f:6b:21:c2:ad:f3:38:68: d7:17:a9:0e:0c:e0:63:bf:62:6b:76:e5:99:c1:f2: 38:1c:e6:56:c6:d8:92:3d:41:16:c3:6f:48:20:0a: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:89:31:56:27:FA:CE:70:48:78:B5:D9:83:F9:0F:34:11:03:CE:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl X509v3 Authority Key Identifier: keyid:08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer sbgp-ipAddrBlock: critical IPv4: 192.160.102.0/24 IPv6: 2620:132:3000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c4:20:0c:e7:5b:7e:57:61:9c:47:c5:ed:a2:08:69:aa:c2: 5a:24:12:76:32:27:09:c3:6a:c2:d8:af:a8:f2:50:57:28:cb: 96:7b:5a:d5:4f:d9:93:77:6e:39:79:20:1e:19:a2:df:07:a1: 56:67:db:8e:4b:c6:ef:f4:f9:23:87:11:3e:d8:89:75:18:ab: 5e:da:49:e3:e8:e1:d5:fc:0e:07:57:08:81:27:6c:9a:91:38: 54:93:ed:9f:1d:71:e0:24:e9:8c:21:55:da:69:c3:26:2d:5e: cb:c3:2b:91:ca:e3:22:24:88:5a:2e:ca:d2:10:51:a7:20:5f: d8:77:3e:2d:91:db:8e:c2:27:f7:35:de:ef:d7:3d:8b:fa:50: 1e:b9:c0:37:90:2e:fc:9a:52:e7:b1:c9:79:d0:17:22:93:2f: 6b:2e:d1:dc:0d:bb:9c:d7:59:59:9a:a8:c1:c0:f1:50:26:4e: fa:dc:05:3b:1d:cd:7e:7c:05:df:d2:ce:a8:d4:42:ee:26:dc: 42:d5:e4:b7:3d:8e:c6:ed:c5:20:0d:f1:4c:80:90:91:b2:ac: c5:66:d2:56:e0:00:d4:96:e7:5b:1b:47:bb:0d:94:04:70:0d: 8d:29:48:db:08:a4:42:7f:5e:c1:29:18:ee:d4:f8:aa:6a:13: cf:ee:e9:a0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEksrpqYCJZHx6YkHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4MTY1YzUtYzQyZS00YzY2LWE3NjAtZTYwNWViZDhi MmEzMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OGVhYTNhOWEtMjQwMS00OTNkLTliNGEtY2YxNWExMzM1YzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjNt5WeDV+6hCHIFLBVE+drg8XeABIU6CqFm Ue09llEK4P6ntuw7HnjaMIN1KD/VvonpxUHJ0iRazZQE2rBqPZKHndIV7mjMasVj GbcwBmQXWVjsHGetSurMWQqhjTIlX+jR5Qy6LCczU0bg7pnRf90OMChu47zkEta9 j5eAF2AbYYU5Cb7ktDgKJUHDAjrSXWm/X2V4d4PHhAVtsF+U5fAc9f2uuDU5onZT UwIFf78h8IKaaRBDeIQ9SyI5LKKf6w1bv882c65h2Sdnz8H8cGOzjZIjmAYcP2sh wq3zOGjXF6kODOBjv2JrduWZwfI4HOZWxtiSPUEWw29IIApWJQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHGJMVYn+s5wSHi12YP5DzQRA84xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82ODgx NjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1ZWJkOGIyYTMvNGM2ZTFlNWUtMmQ0ZC0z MzkzLThlN2QtNjEyZmQ1MDJhY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjg4MTY1YzUtYzQyZS00YzY2LWE3 NjAtZTYwNWViZDhiMmEzLzY4ODE2NWM1LWM0MmUtNGM2Ni1hNzYwLWU2MDVlYmQ4 YjJhMy5jcmwwHwYDVR0jBBgwFoAUCFKxuE4ZQXgKoxCx1kEM56sit2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82ODgxNjVjNS1jNDJlLTRjNjYtYTc2MC1lNjA1 ZWJkOGIyYTMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwKBmMA4E AgACMAgDBgAmIAEyMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArxCAM51t+V2GcR8XtoghpqsJaJBJ2MicJ w2rC2K+o8lBXKMuWe1rVT9mTd245eSAeGaLfB6FWZ9uOS8bv9PkjhxE+2Il1GKte 2knj6OHV/A4HVwiBJ2yakThUk+2fHXHgJOmMIVXaacMmLV7LwyuRyuMiJIhaLsrS EFGnIF/Ydz4tkduOwif3Nd7v1z2L+lAeucA3kC78mlLnscl50Bciky9rLtHcDbuc 11lZmqjBwPFQJk763AU7Hc1+fAXf0s6o1ELuJtxC1eS3PY7G7cUgDfFMgJCRsqzF ZtJW4ADUludbG0e7DZQEcA2NKUjbCKRCf17BKRju1PiqahPP7umg -----END CERTIFICATE-----Generated at Mon Apr 28 16:01:20 2025 by rpki-client