$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa File: 7f659af6-1d84-34e3-9205-6190389bd336.roa (raw, json) Hash identifier: /5CE6fkeBCgDi38z0UrrFc7b0q0PDt6CPmtbObevCTI= Subject key identifier: CD:DD:62:FC:44:02:08:68:EA:65:13:9E:2C:08:F0:D0:7B:DC:65:55 Certificate issuer: /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b Certificate serial: 010D0C9F432858498769B6863C6E31C517D58F80 Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 216.205.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b6:86:3c:6e:31:c5:17:d5:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=20ad656d-8b3f-46cf-8182-1e48f8b75a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f6:5f:99:c8:8f:ca:b5:9c:37:8e:34:a2:54: 40:76:c1:89:e1:15:1b:41:e6:c1:94:e6:44:cc:54: 82:bf:53:ef:ef:48:79:71:b2:23:07:1f:21:91:87: 31:ea:6e:e6:88:66:37:6f:85:24:f0:35:4e:55:2e: c6:c4:83:e9:f1:65:52:7a:9d:29:d7:2a:39:eb:d9: 86:95:5c:d4:a3:0b:46:f5:dc:bb:42:70:26:cf:50: 04:17:51:c2:99:1b:ec:b1:20:9d:c0:8b:71:aa:8a: f2:dc:3d:5c:df:14:6d:d8:50:8a:93:ec:5b:a3:37: 1a:33:d4:29:cf:b3:eb:95:6d:f6:bb:c2:70:29:f1: 1c:0c:54:99:2e:e6:50:30:6d:b0:fb:85:e1:73:60: b9:52:b3:8d:99:14:fb:99:39:9d:46:68:2e:44:99: 36:29:76:83:ec:b4:04:be:57:57:50:a0:9f:d2:22: 03:a3:2f:cb:45:f4:9a:73:b5:cf:1f:a0:2a:32:2d: d5:c8:17:9a:7f:08:76:df:e4:b3:51:6c:23:11:cc: 3c:66:bb:7a:df:b1:3c:54:eb:d2:05:0b:8c:11:26: b4:6a:1f:ef:3e:af:d0:1e:67:5b:2f:0d:c2:6a:a7: 0a:fd:4a:3a:b3:e2:fc:49:23:0d:f6:91:21:53:82: 33:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DD:62:FC:44:02:08:68:EA:65:13:9E:2C:08:F0:D0:7B:DC:65:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/7f659af6-1d84-34e3-9205-6190389bd336.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl X509v3 Authority Key Identifier: keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer sbgp-ipAddrBlock: critical IPv4: 216.205.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:71:ef:41:7f:d6:d6:ca:82:ae:4a:0a:18:aa:aa:cc:5f:e2: 48:e0:1a:1a:5c:8b:30:00:ce:9a:d7:71:b8:cb:4b:19:41:5a: c7:c1:b2:ec:77:00:5f:48:1f:8b:1f:ef:e6:03:51:e8:6e:90: 2e:19:eb:45:dc:3a:54:3f:b2:9e:73:3e:a8:d5:d7:d8:09:5c: c7:c6:f9:6f:79:6f:06:7d:fe:2b:ea:da:9c:e9:3e:f7:37:7d: a1:3f:80:51:64:1c:b8:08:90:e3:fd:c9:2d:d3:fa:34:ef:91: 12:2a:87:28:a1:7a:8c:7a:39:2d:2a:ec:dd:b6:96:11:4f:53: 03:00:d4:fb:bd:06:75:cb:dd:e3:07:4c:fd:9c:0e:13:85:cc: 63:d5:05:34:fe:02:36:80:29:ce:64:37:47:46:1f:9a:c3:a8: 91:4c:cc:7f:ac:74:be:2d:34:6d:e0:8c:85:91:0b:c5:ed:8f: 5d:6c:6d:d3:4c:a4:9d:a5:72:90:a7:ea:ba:49:df:2d:93:39: 92:58:3a:ba:6d:c9:94:f4:0f:60:46:ab:5c:98:4c:25:32:c2: fb:3c:66:02:63:f3:f5:fe:55:2b:c3:a4:76:08:df:ed:fb:dd: c7:c7:08:e8:5c:87:c9:98:dd:09:70:b9:f3:b7:d0:66:c1:89: c6:8e:70:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabaGPG4xxRfVj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl YTJiMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MjBhZDY1NmQtOGIzZi00NmNmLTgxODItMWU0OGY4Yjc1YTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPZfmciPyrWcN440olRAdsGJ4RUbQebBlOZE zFSCv1Pv70h5cbIjBx8hkYcx6m7miGY3b4Uk8DVOVS7GxIPp8WVSep0p1yo569mG lVzUowtG9dy7QnAmz1AEF1HCmRvssSCdwItxqory3D1c3xRt2FCKk+xbozcaM9Qp z7PrlW32u8JwKfEcDFSZLuZQMG2w+4Xhc2C5UrONmRT7mTmdRmguRJk2KXaD7LQE vldXUKCf0iIDoy/LRfSac7XPH6AqMi3VyBeafwh23+SzUWwjEcw8Zrt637E8VOvS BQuMESa0ah/vPq/QHmdbLw3CaqcK/Uo6s+L8SSMN9pEhU4IzhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3dYvxEAgho6mUTniwI8NB73GVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2 OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvN2Y2NTlhZjYtMWQ4NC0z NGUzLTkyMDUtNjE5MDM4OWJkMzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3 NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M02MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNx70F/1tbKgq5KChiqqsxf4kjgGhpcizAAzprXcbjLSxlBWsfBsux3 AF9IH4sf7+YDUehukC4Z60XcOlQ/sp5zPqjV19gJXMfG+W95bwZ9/ivq2pzpPvc3 faE/gFFkHLgIkOP9yS3T+jTvkRIqhyiheox6OS0q7N22lhFPUwMA1Pu9BnXL3eMH TP2cDhOFzGPVBTT+AjaAKc5kN0dGH5rDqJFMzH+sdL4tNG3gjIWRC8Xtj11sbdNM pJ2lcpCn6rpJ3y2TOZJYOrptyZT0D2BGq1yYTCUywvs8ZgJj8/X+VSvDpHYI3+37 3cfHCOhch8mY3QlwufO30GbBicaOcP4= -----END CERTIFICATE-----Generated at Sat Apr 26 14:50:19 2025 by rpki-client