$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa File: 141291a2-0ed7-3337-b072-e0411a6bdf5c.roa (raw, json) Hash identifier: 1K0roZE4lSePMsaYSJ8wYXeFKpxtqxthoTvnbLnTngk= Subject key identifier: B1:4D:73:AF:F2:8F:98:A5:51:E0:09:C5:49:B5:F2:0B:0E:CE:49:55 Certificate issuer: /CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Certificate serial: 010D0C9F432858495EEEE3688DBF409A9DA5C480 Authority key identifier: A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 30029 IP address blocks: 64.137.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e3:68:8d:bf:40:9a:9d:a5:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da1b383-f975-4fb1-9ce6-e43611eafa1a Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=eca9ec6d-0271-4108-9aa2-b01a07638e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:ef:ac:7c:bf:44:4a:40:45:32:9c:b6:c0: 37:2d:91:dd:7d:07:22:67:08:3b:83:5f:0b:50:b2: 08:08:ab:48:18:7c:cb:7d:4c:81:44:d0:0f:84:58: 4c:7b:e2:73:5f:09:b1:cd:38:e4:2d:03:89:35:f8: a1:11:27:67:b0:6d:25:8f:0a:a4:53:16:2b:9e:18: 56:81:84:ff:a3:2c:fe:1d:65:b1:ea:2f:10:1d:11: 40:9e:b8:18:f5:2c:2a:7d:01:70:22:6d:a7:48:04: bb:73:30:6a:e4:84:0d:b0:d3:93:49:ec:b8:76:49: 5f:0d:f6:05:f9:22:14:91:26:c4:04:1a:eb:ee:15: 4d:15:27:6d:72:2f:b6:ff:0a:b2:aa:9a:19:9a:1d: b3:27:b1:3d:f4:ef:59:1e:bd:3b:4a:f5:1a:46:da: 19:fd:81:db:cc:f7:24:d3:3a:b4:eb:0c:7a:8a:d5: 7c:13:47:fa:e7:27:20:67:85:ad:be:e1:5c:ba:bf: 7d:dd:86:b1:34:f8:6c:e2:5b:ba:1f:62:80:86:4d: 06:b0:75:86:75:82:18:9c:d7:68:58:2c:cd:b5:22: 6d:ce:70:2d:e4:cc:9e:6b:93:37:b1:94:dd:d9:91: 07:53:5e:cc:4e:23:88:25:a2:d9:b7:69:c1:9c:4f: 85:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4D:73:AF:F2:8F:98:A5:51:E0:09:C5:49:B5:F2:0B:0E:CE:49:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/141291a2-0ed7-3337-b072-e0411a6bdf5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a/5da1b383-f975-4fb1-9ce6-e43611eafa1a.crl X509v3 Authority Key Identifier: keyid:A2:6C:1C:4F:B6:21:94:6F:FA:A6:86:8E:E6:28:2B:79:CE:34:1F:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5da1b383-f975-4fb1-9ce6-e43611eafa1a.cer sbgp-ipAddrBlock: critical IPv4: 64.137.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:8f:99:58:73:ac:44:8a:ec:a6:dc:cd:86:56:3e:a3:ed:22: 6f:ae:39:0e:47:77:fa:d5:ff:97:b3:4f:b7:ab:71:9a:03:d0: 60:cf:da:75:43:96:40:fd:c5:39:11:4a:db:38:91:cd:92:85: 11:a9:20:02:2f:1a:5e:f0:a2:b2:83:39:52:f6:57:bc:8f:c1: 19:d2:eb:1d:0a:80:08:a9:23:e4:8c:f6:9e:20:4c:0b:b8:29: 48:77:da:27:f4:a9:2f:da:af:10:6e:eb:76:d4:ab:57:23:a5: 4f:7e:e1:ee:15:c2:f2:85:31:65:41:da:72:78:f9:00:de:3c: 39:3f:12:d0:52:6f:bc:c5:0f:e2:38:bf:7f:77:d5:40:f0:56: c6:41:d9:cb:c7:9d:99:b9:7c:37:27:5e:4d:b1:9e:39:75:3e: ab:84:e4:5f:9a:e1:fb:e4:41:84:ee:a5:b2:08:3c:73:b8:0e: 69:40:a2:ac:e3:3f:c5:69:16:83:e3:54:cf:dc:5f:f1:c3:9e: 37:85:0c:10:d9:b6:76:0d:99:83:dd:5b:66:d3:34:10:f1:97: 39:2f:95:2c:80:72:11:a8:c7:dd:4a:bf:f5:d5:c9:16:91:74: 6f:5e:da:22:75:c8:ae:69:ff:43:e0:be:c8:18:52:89:80:90: a9:ff:6f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEle7uNojb9Amp2lxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhMWIzODMtZjk3NS00ZmIxLTljZTYtZTQzNjExZWFm YTFhMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk ZWNhOWVjNmQtMDI3MS00MTA4LTlhYTItYjAxYTA3NjM4ZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbfvrHy/REpARTKctsA3LZHdfQciZwg7g18L ULIICKtIGHzLfUyBRNAPhFhMe+JzXwmxzTjkLQOJNfihESdnsG0ljwqkUxYrnhhW gYT/oyz+HWWx6i8QHRFAnrgY9SwqfQFwIm2nSAS7czBq5IQNsNOTSey4dklfDfYF +SIUkSbEBBrr7hVNFSdtci+2/wqyqpoZmh2zJ7E99O9ZHr07SvUaRtoZ/YHbzPck 0zq06wx6itV8E0f65ycgZ4WtvuFcur993YaxNPhs4lu6H2KAhk0GsHWGdYIYnNdo WCzNtSJtznAt5Myea5M3sZTd2ZEHU17MTiOIJaLZt2nBnE+FNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFNc6/yj5ilUeAJxUm18gsOzklVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZGEx YjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2MTFlYWZhMWEvMTQxMjkxYTItMGVkNy0z MzM3LWIwNzItZTA0MTFhNmJkZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWRhMWIzODMtZjk3NS00ZmIxLTlj ZTYtZTQzNjExZWFmYTFhLzVkYTFiMzgzLWY5NzUtNGZiMS05Y2U2LWU0MzYxMWVh ZmExYS5jcmwwHwYDVR0jBBgwFoAUomwcT7YhlG/6poaO5igrec40Hx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81ZGExYjM4My1mOTc1LTRmYjEtOWNlNi1lNDM2 MTFlYWZhMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQImgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWPmVhzrESK7KbczYZWPqPtIm+uOQ5Hd/rV/5ezT7ercZoD0GDP2nVD lkD9xTkRSts4kc2ShRGpIAIvGl7worKDOVL2V7yPwRnS6x0KgAipI+SM9p4gTAu4 KUh32if0qS/arxBu63bUq1cjpU9+4e4VwvKFMWVB2nJ4+QDePDk/EtBSb7zFD+I4 v3931UDwVsZB2cvHnZm5fDcnXk2xnjl1PquE5F+a4fvkQYTupbIIPHO4DmlAoqzj P8VpFoPjVM/cX/HDnjeFDBDZtnYNmYPdW2bTNBDxlzkvlSyAchGox91Kv/XVyRaR dG9e2iJ1yK5p/0PgvsgYUomAkKn/byM= -----END CERTIFICATE-----Generated at Sun Apr 27 18:30:02 2025 by rpki-client