$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa File: 7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa (raw, json) Hash identifier: S9lYi1eDOsJAAXrzYEw9sF+7uBl+nND9N3Nlv3Ddp78= Subject key identifier: 43:9D:E9:7E:23:09:6C:3C:FF:33:B9:27:E1:6C:8C:EB:C5:B0:1F:0C Certificate issuer: /CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Certificate serial: 010D0C9F4328584988CF297D03445A3D7198ED60 Authority key identifier: 4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 398777 IP address blocks: 24.233.144.0/20 maxlen: 20 149.137.160.0/19 maxlen: 19 192.173.152.0/21 maxlen: 21 2605:ec40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:29:7d:03:44:5a:3d:71:98:ed:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c890eefb-1c55-4cd8-adb6-e612c8d0f999 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=fa395c15-4fb8-43cc-820b-db2893ba5617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:bd:b3:c6:cc:62:d7:d1:64:57:5f:33:04: e3:9b:9d:21:b1:ba:a2:ee:6f:14:ca:7d:16:7c:05: a5:dd:19:6a:a3:ee:bf:2e:61:c6:7c:47:28:f6:5c: 37:64:04:bf:c2:af:8a:f9:26:96:da:03:d0:fd:5c: 90:81:31:a1:0e:44:4b:3c:65:7c:b9:42:2f:af:95: e0:73:d6:af:af:a3:bf:21:c9:30:ad:d6:5e:78:c4: b4:f8:50:7d:be:d4:1f:27:77:60:53:9b:b8:7a:58: e4:8f:a6:47:59:ae:bc:b6:a9:c1:6e:eb:8b:88:ef: 21:de:2d:6b:0c:6a:16:90:5a:7a:16:f0:87:2e:29: 58:14:88:d2:5d:e8:29:14:65:2a:e2:5e:eb:0f:a6: 9e:32:5c:c9:2c:8b:2c:03:26:db:9e:8a:b0:64:1c: 2f:88:00:d6:d2:8f:9c:7d:6a:64:a1:4a:43:b5:fb: 44:82:2a:cc:d0:1b:0e:f2:72:34:76:ba:c6:f6:c7: fc:77:9c:af:63:1f:08:69:01:f2:e4:bf:a9:4b:dd: 08:a9:5d:10:48:d4:f0:16:24:0a:3c:55:fa:41:c0: 8e:4a:c2:11:e8:34:dc:32:86:13:72:aa:3d:1b:91: ad:7c:67:d9:9a:ae:41:f6:bd:2a:14:dd:63:01:52: d0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9D:E9:7E:23:09:6C:3C:FF:33:B9:27:E1:6C:8C:EB:C5:B0:1F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/7545fa96-8f73-34f9-97b0-3d0fa2b370a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999/c890eefb-1c55-4cd8-adb6-e612c8d0f999.crl X509v3 Authority Key Identifier: keyid:4E:EF:72:5B:BE:EB:8C:12:C6:3A:41:D9:09:C3:93:B1:BE:29:7D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c890eefb-1c55-4cd8-adb6-e612c8d0f999.cer sbgp-ipAddrBlock: critical IPv4: 24.233.144.0/20 149.137.160.0/19 192.173.152.0/21 IPv6: 2605:ec40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:14:aa:91:ad:68:89:4b:5b:4a:02:e0:1e:12:9b:7a:76:53: 00:8a:6d:79:08:3a:90:93:91:6a:cf:fc:32:6a:cb:12:98:3e: 26:63:0e:83:37:e6:46:72:84:9e:a1:70:a3:2a:03:85:d4:d7: d7:aa:3a:80:f5:59:a4:56:a4:ce:77:4a:58:d2:eb:cb:ef:93: f6:d1:25:60:0d:9b:b6:b2:8a:9e:7c:8f:ed:c6:da:0c:b7:cb: cf:87:68:d5:72:e8:56:20:3c:ea:c1:96:f2:1b:06:e1:87:ac: 41:3d:66:7c:ee:83:c9:a8:21:3d:71:ab:b8:5e:fe:03:4a:27: d4:30:86:73:fc:f4:ca:64:63:0c:77:ea:a7:59:cd:1e:77:88: 47:4e:44:c4:a6:0c:e1:0e:0d:e3:ed:c2:58:e5:54:a9:71:23: aa:df:b9:c9:63:cc:27:09:d6:48:2f:15:52:19:d1:af:6f:5f: 4a:87:6a:d9:b5:b2:77:02:e2:d9:fe:b5:a6:6b:62:40:df:e6: dc:60:20:38:37:c6:79:fc:5f:b3:2c:55:86:bc:c6:19:5e:01: d3:29:2b:ac:39:22:a1:bb:cf:31:d7:78:1c:c5:26:25:f4:e7: 46:7a:27:04:60:ef:b9:c9:1b:2d:55:3c:8e:0f:74:d0:c7:7c: 31:a9:d7:34 -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEmIzyl9A0RaPXGY7WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg5MGVlZmItMWM1NS00Y2Q4LWFkYjYtZTYxMmM4ZDBm OTk5MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZmEzOTVjMTUtNGZiOC00M2NjLTgyMGItZGIyODkzYmE1NjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCG9s8bMYtfRZFdfMwTjm50hsbqi7m8Uyn0W fAWl3Rlqo+6/LmHGfEco9lw3ZAS/wq+K+SaW2gPQ/VyQgTGhDkRLPGV8uUIvr5Xg c9avr6O/IckwrdZeeMS0+FB9vtQfJ3dgU5u4eljkj6ZHWa68tqnBbuuLiO8h3i1r DGoWkFp6FvCHLilYFIjSXegpFGUq4l7rD6aeMlzJLIssAybbnoqwZBwviADW0o+c fWpkoUpDtftEgirM0BsO8nI0drrG9sf8d5yvYx8IaQHy5L+pS90IqV0QSNTwFiQK PFX6QcCOSsIR6DTcMoYTcqo9G5GtfGfZmq5B9r0qFN1jAVLQGwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFEOd6X4jCWw8/zO5J+FsjOvFsB8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkw ZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEyYzhkMGY5OTkvNzU0NWZhOTYtOGY3My0z NGY5LTk3YjAtM2QwZmEyYjM3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzg5MGVlZmItMWM1NS00Y2Q4LWFk YjYtZTYxMmM4ZDBmOTk5L2M4OTBlZWZiLTFjNTUtNGNkOC1hZGI2LWU2MTJjOGQw Zjk5OS5jcmwwHwYDVR0jBBgwFoAUTu9yW77rjBLGOkHZCcOTsb4pffgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jODkwZWVmYi0xYzU1LTRjZDgtYWRiNi1lNjEy YzhkMGY5OTkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEGOmQAwQF lYmgAwQDwK2YMA0EAgACMAcDBQAmBexAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIgUqpGtaIlLW0oC4B4S m3p2UwCKbXkIOpCTkWrP/DJqyxKYPiZjDoM35kZyhJ6hcKMqA4XU19eqOoD1WaRW pM53SljS68vvk/bRJWANm7ayip58j+3G2gy3y8+HaNVy6FYgPOrBlvIbBuGHrEE9 Znzug8moIT1xq7he/gNKJ9QwhnP89MpkYwx36qdZzR53iEdORMSmDOEODePtwljl VKlxI6rfucljzCcJ1kgvFVIZ0a9vX0qHatm1sncC4tn+taZrYkDf5txgIDg3xnn8 X7MsVYa8xhleAdMpK6w5IqG7zzHXeBzFJiX050Z6JwRg77nJGy1VPI4PdNDHfDGp 1zQ= -----END CERTIFICATE-----Generated at Mon Apr 28 15:27:20 2025 by rpki-client