$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/96b514fc-da6f-332e-8a0f-fb13840308a2.roa File: 96b514fc-da6f-332e-8a0f-fb13840308a2.roa (raw, json) Hash identifier: RdRu1F5ABAKd9lo5HQUC02Mhmy68Cevjwyp/mjh0ay0= Subject key identifier: 4F:43:62:EB:EB:4B:34:EC:08:0D:A4:57:9F:D6:B7:4B:B7:46:16:33 Certificate issuer: /CN=d1b34fba-8d1c-4ddc-aab4-aab30862f676 Certificate serial: 010D0C9F432858498769B8CACFAEC1A3058C1380 Authority key identifier: 58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/96b514fc-da6f-332e-8a0f-fb13840308a2.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 63023 IP address blocks: 172.81.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:b8:ca:cf:ae:c1:a3:05:8c:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b34fba-8d1c-4ddc-aab4-aab30862f676 Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c0e94d21-04d0-49fb-b7a4-582bb02fa9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:23:0b:9e:af:09:32:16:f2:b9:96:26:0a: 23:3a:9b:c7:66:11:c9:10:8b:1b:86:45:73:6e:9e: b5:73:ad:fb:93:28:d1:b6:76:e5:90:ae:99:47:10: 07:ab:d8:6c:20:b7:08:bf:6f:77:40:95:0c:57:72: 0c:eb:d3:83:8f:0e:2a:0d:b1:e0:0c:a5:b9:39:c9: 2e:15:8c:fe:fe:29:29:b4:a3:a0:90:b8:d3:0e:23: 9f:c3:05:a4:48:33:36:9b:e2:a2:f4:7d:04:ac:e4: a6:4e:bc:4d:89:67:eb:9c:0e:38:08:ac:af:0b:8a: 50:80:5a:85:46:10:94:38:0f:58:82:fd:0f:ee:18: 74:3e:b6:0a:cb:56:8a:7b:a6:a8:8e:89:48:48:d4: 43:49:ff:3f:95:f0:28:d5:b6:99:c3:e7:7c:ea:43: e7:cb:2d:3b:f6:5d:60:2c:73:ad:cd:44:10:93:6b: 81:c7:cb:c6:2d:66:05:3f:bc:79:ce:64:a7:71:e9: cf:69:f9:a7:2a:86:16:72:52:66:f7:10:b1:4b:04: 88:64:b3:be:d4:91:a5:80:53:77:22:ad:24:54:91: 4d:10:de:c3:c0:a8:27:29:20:ae:fd:ff:98:d2:65: 0b:97:96:18:7c:9b:d7:5f:7a:da:ed:75:14:5c:ad: 66:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:62:EB:EB:4B:34:EC:08:0D:A4:57:9F:D6:B7:4B:B7:46:16:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/96b514fc-da6f-332e-8a0f-fb13840308a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676/d1b34fba-8d1c-4ddc-aab4-aab30862f676.crl X509v3 Authority Key Identifier: keyid:58:EB:76:7E:B7:F6:24:7B:4D:79:C3:23:DA:28:45:31:8E:97:ED:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1b34fba-8d1c-4ddc-aab4-aab30862f676.cer sbgp-ipAddrBlock: critical IPv4: 172.81.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f5:b3:56:04:6d:15:8f:19:82:fb:72:a5:17:39:57:a8:9f: d6:54:34:b8:b2:ad:f1:89:4e:7a:91:b1:e2:c4:76:cb:82:23: 7f:37:d8:b7:4b:e6:aa:ff:25:cd:3e:44:14:39:bf:a2:44:fc: 2f:6e:4c:3e:ec:81:5d:74:a0:94:09:80:3a:86:98:47:06:57: 2a:74:46:a8:8c:53:56:45:75:45:fc:a4:c3:3b:eb:64:88:64: 90:4c:ac:0d:7b:67:61:35:51:2c:4e:7f:35:f3:02:a8:01:96: 7c:02:8f:ed:f1:cd:03:e0:02:2b:2c:51:5d:d8:a6:c7:b8:3a: a8:97:ff:86:7e:76:24:50:45:90:a1:a7:26:58:a1:2e:a6:49: 64:40:17:8e:3c:66:72:e4:35:04:72:0e:f4:3c:6b:bb:06:2c: 78:86:62:74:4d:f6:d5:df:f9:c0:de:6c:25:a9:a9:64:04:e0: 8b:97:cf:43:18:72:36:e2:f0:b7:41:b6:67:b5:9b:19:a4:2f: c8:13:98:54:5c:a6:4b:e1:41:b5:41:ae:0d:84:0f:9a:34:e8: f4:24:8f:7b:9a:1b:c1:da:10:d2:b0:94:96:35:74:39:ae:5e: d0:e4:f9:e1:56:37:66:b9:ce:a1:92:f8:b6:dc:6f:97:81:f8: 92:35:76:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabjKz67BowWME4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFiMzRmYmEtOGQxYy00ZGRjLWFhYjQtYWFiMzA4NjJm Njc2MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk YzBlOTRkMjEtMDRkMC00OWZiLWI3YTQtNTgyYmIwMmZhOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqwjC56vCTIW8rmWJgojOpvHZhHJEIsbhkVz bp61c637kyjRtnblkK6ZRxAHq9hsILcIv293QJUMV3IM69ODjw4qDbHgDKW5Ocku FYz+/ikptKOgkLjTDiOfwwWkSDM2m+Ki9H0ErOSmTrxNiWfrnA44CKyvC4pQgFqF RhCUOA9Ygv0P7hh0PrYKy1aKe6aojolISNRDSf8/lfAo1baZw+d86kPnyy079l1g LHOtzUQQk2uBx8vGLWYFP7x5zmSncenPafmnKoYWclJm9xCxSwSIZLO+1JGlgFN3 Iq0kVJFNEN7DwKgnKSCu/f+Y0mULl5YYfJvXX3ra7XUUXK1mmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9DYuvrSzTsCA2kV5/Wt0u3RhYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWIz NGZiYS04ZDFjLTRkZGMtYWFiNC1hYWIzMDg2MmY2NzYvOTZiNTE0ZmMtZGE2Zi0z MzJlLThhMGYtZmIxMzg0MDMwOGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDFiMzRmYmEtOGQxYy00ZGRjLWFh YjQtYWFiMzA4NjJmNjc2L2QxYjM0ZmJhLThkMWMtNGRkYy1hYWI0LWFhYjMwODYy ZjY3Ni5jcmwwHwYDVR0jBBgwFoAUWOt2frf2JHtNecMj2ihFMY6X7bAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMWIzNGZiYS04ZDFjLTRkZGMtYWFiNC1hYWIz MDg2MmY2NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFGUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/1s1YEbRWPGYL7cqUXOVeon9ZUNLiyrfGJTnqRseLEdsuCI3832LdL 5qr/Jc0+RBQ5v6JE/C9uTD7sgV10oJQJgDqGmEcGVyp0RqiMU1ZFdUX8pMM762SI ZJBMrA17Z2E1USxOfzXzAqgBlnwCj+3xzQPgAissUV3Ypse4OqiX/4Z+diRQRZCh pyZYoS6mSWRAF448ZnLkNQRyDvQ8a7sGLHiGYnRN9tXf+cDebCWpqWQE4IuXz0MY cjbi8LdBtme1mxmkL8gTmFRcpkvhQbVBrg2ED5o06PQkj3uaG8HaENKwlJY1dDmu XtDk+eFWN2a5zqGS+Lbcb5eB+JI1dtk= -----END CERTIFICATE-----Generated at Sun Apr 27 09:26:19 2025 by rpki-client