$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa File: 0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa (raw, json) Hash identifier: +SEik9lqzqwce/P58Srph8JP3xUa/npvG6/glT38obo= Subject key identifier: A9:67:9D:48:FE:A2:6C:CC:72:8E:F0:E1:B3:B7:7B:13:1F:FE:4C:44 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339DBC86E6ABC8CFC9CBFC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 192.119.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:db:c8:6e:6a:bc:8c:fc:9c:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=c83dde24-a318-41ad-9884-2d9f703b823a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:c0:f0:88:09:de:a7:61:d1:19:40:67:de: b2:2d:71:4c:92:0d:c5:c8:63:b9:36:2f:b1:4c:a9: 9f:cd:5c:0f:bc:cb:2a:ef:9b:47:3b:28:96:a1:8b: 10:34:42:42:23:07:0b:47:46:5d:04:1e:d1:70:fe: 9c:df:36:3a:96:51:ed:8f:b7:e5:22:fb:b3:91:35: bf:4d:a1:47:75:6d:b7:ad:f0:9e:b6:eb:eb:9c:64: c1:f1:49:f2:70:36:56:f1:2d:bf:72:ff:4b:ce:3e: d7:1d:12:37:b9:25:9f:4a:df:b0:80:8e:7e:ea:ea: 88:92:24:03:91:e8:64:68:39:e6:9e:ac:97:2a:c2: 12:80:0c:1e:44:a2:4b:ca:de:11:28:cb:74:29:23: ee:30:25:8f:ae:44:6a:e0:d3:01:18:c5:b6:ae:31: 7f:99:83:b8:08:6e:34:80:f6:f0:13:b5:0a:ed:6b: 6b:4a:ab:eb:e8:f3:ba:0c:1d:d8:5a:db:6d:cd:6b: c3:3e:eb:02:ee:e5:a1:4c:60:94:5a:54:3b:e0:9a: 69:d5:ed:bb:b0:ab:e6:bb:db:56:90:60:40:2f:e0: 89:f0:91:ad:77:07:5f:f0:32:87:35:5f:6e:2a:59: e2:e1:50:39:d4:98:cf:44:bc:5d:95:ac:f9:cc:8e: 72:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:67:9D:48:FE:A2:6C:CC:72:8E:F0:E1:B3:B7:7B:13:1F:FE:4C:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0b8fa757-4a53-31a5-9a91-dac11b836ffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 192.119.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f8:b9:ec:dd:9c:f6:4d:f7:1e:99:57:74:f1:84:7d:a6:a0: d0:f8:f4:8f:74:24:bf:a3:86:44:eb:a8:e5:6b:30:3b:c4:de: 41:a0:1a:68:cb:4c:db:e5:b1:e1:41:54:25:cf:ad:cb:32:f4: 6b:06:b5:eb:06:dd:fc:db:61:2c:cb:22:a6:13:27:78:d4:d8: 63:e4:82:cc:d5:c7:06:b9:36:0e:2d:70:f5:22:1d:d0:05:14: ee:54:e0:a1:1a:86:2b:b8:10:19:94:81:1e:25:5a:24:00:21: c0:56:b8:83:a0:e0:37:08:91:1a:1a:bb:c2:67:1b:93:af:b1: 15:4f:40:25:7e:97:19:ed:c7:46:37:d5:49:06:af:f4:dc:4e: 87:80:1e:1a:0d:9b:81:ea:db:ef:ac:cd:ab:b9:34:92:f6:4f: a8:b3:9f:78:5a:11:c7:04:21:93:14:25:77:4f:83:92:76:e7: 44:98:b4:8d:4e:76:1f:d2:34:2c:b4:66:1e:1c:ba:88:64:34: 84:cd:4d:93:d9:a1:09:d4:28:f3:b7:e6:56:21:7e:5a:68:3f: 30:a1:ef:c8:1a:ab:21:d2:d6:9d:10:49:f8:fd:72:b4:73:d7: d2:3d:9d:5e:86:e1:12:17:30:25:17:00:ef:09:6f:27:74:55: 4c:75:f7:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdvIbmq8jPycv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YzgzZGRlMjQtYTMxOC00MWFkLTk4ODQtMmQ5ZjcwM2I4MjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsTA8IgJ3qdh0RlAZ96yLXFMkg3FyGO5Ni+x TKmfzVwPvMsq75tHOyiWoYsQNEJCIwcLR0ZdBB7RcP6c3zY6llHtj7flIvuzkTW/ TaFHdW23rfCetuvrnGTB8UnycDZW8S2/cv9Lzj7XHRI3uSWfSt+wgI5+6uqIkiQD kehkaDnmnqyXKsISgAweRKJLyt4RKMt0KSPuMCWPrkRq4NMBGMW2rjF/mYO4CG40 gPbwE7UK7WtrSqvr6PO6DB3YWtttzWvDPusC7uWhTGCUWlQ74Jpp1e27sKvmu9tW kGBAL+CJ8JGtdwdf8DKHNV9uKlni4VA51JjPRLxdlaz5zI5ybQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlnnUj+omzMco7w4bO3exMf/kxEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGI4ZmE3NTctNGE1My0z MWE1LTlhOTEtZGFjMTFiODM2ZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwHcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA74uezdnPZN9x6ZV3TxhH2moND49I90JL+jhkTrqOVrMDvE3kGgGmjL TNvlseFBVCXPrcsy9GsGtesG3fzbYSzLIqYTJ3jU2GPkgszVxwa5Ng4tcPUiHdAF FO5U4KEahiu4EBmUgR4lWiQAIcBWuIOg4DcIkRoau8JnG5OvsRVPQCV+lxntx0Y3 1UkGr/TcToeAHhoNm4Hq2++szau5NJL2T6izn3haEccEIZMUJXdPg5J250SYtI1O dh/SNCy0Zh4cuohkNITNTZPZoQnUKPO35lYhflpoPzCh78gaqyHS1p0QSfj9crRz 19I9nV6G4RIXMCUXAO8Jbyd0VUx1914= -----END CERTIFICATE-----Generated at Tue Apr 29 10:26:52 2025 by rpki-client