$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/9739ae72-b6a3-376c-b189-0b1a00079f84.roa File: 9739ae72-b6a3-376c-b189-0b1a00079f84.roa (raw, json) Hash identifier: DPq+U4KbgFKwfwecd2f30xHkV3ibQdnRQjSHA8vfivk= Subject key identifier: 48:A8:19:B6:52:47:B5:E6:18:38:C7:BB:F9:C7:08:B4:4D:DC:75:56 Certificate issuer: /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Certificate serial: 010D0C9F4328584949FE95F3BB10EA3FF6822300 Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/9739ae72-b6a3-376c-b189-0b1a00079f84.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 7018 IP address blocks: 65.181.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:95:f3:bb:10:ea:3f:f6:82:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=040d7a32-cba1-4147-9e10-52e0a134d6a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1c:38:72:c6:fd:c0:dd:a5:f2:fd:4d:76:ff: 5c:f9:fd:a8:74:eb:07:73:b6:c2:93:1d:e7:db:55: 50:5d:80:a7:ef:ef:07:28:79:0d:8b:f9:8a:f9:14: e7:0e:1f:6b:a0:ec:a0:7e:7d:91:d8:ec:f3:54:5b: 85:b7:17:94:f7:cc:35:25:1d:3c:fa:1d:e5:c3:67: 34:7d:a0:b3:24:19:31:59:31:8d:d4:fc:c7:c4:95: 37:3f:e0:9f:a0:77:c1:f2:a8:13:ad:fd:14:c0:22: a5:e8:92:43:bf:dd:4c:64:4a:f5:29:18:18:e7:18: 87:70:a2:ea:6a:12:42:6e:d2:69:17:7d:22:7b:cf: cd:43:ae:98:af:ad:db:76:41:a1:87:de:dd:20:27: 85:3e:f3:c9:11:af:69:b0:9a:56:fe:9e:05:ac:cb: 44:8d:bd:a8:a7:dc:3b:31:1e:8c:56:3b:12:21:e9: f3:cf:2f:91:ef:8d:9c:c0:e6:52:97:a7:06:bf:fb: f6:db:56:09:74:2d:9b:17:01:6b:cd:1c:95:57:23: 80:a1:45:29:2c:29:9c:1b:03:a1:d4:13:43:22:8d: 4d:82:e7:03:c0:9f:3a:4a:67:9c:7a:f3:dc:38:af: 89:03:f1:6f:2a:cd:b7:a0:63:74:ae:47:32:9d:0a: 64:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A8:19:B6:52:47:B5:E6:18:38:C7:BB:F9:C7:08:B4:4D:DC:75:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/9739ae72-b6a3-376c-b189-0b1a00079f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl X509v3 Authority Key Identifier: keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer sbgp-ipAddrBlock: critical IPv4: 65.181.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e0:89:3a:09:62:aa:0b:9e:87:ca:fa:72:e1:03:78:0d:0c: 29:62:3d:f5:ef:a0:ba:32:be:12:bc:a8:4d:88:78:1d:c1:95: 54:8e:70:2b:af:b0:bc:3b:12:81:e9:34:5d:45:ea:49:0b:5f: bf:b2:cb:7b:08:33:4a:28:96:a8:5e:1d:90:6f:0b:1d:28:23: 0c:29:2c:c7:89:fb:61:4d:3a:fe:3f:90:bf:31:18:4a:c1:81: 63:ad:a2:8e:e5:37:0a:7c:09:53:41:95:b9:62:41:b0:f2:32: 97:17:72:ce:92:68:42:70:1f:fe:99:9a:6a:e5:44:d9:93:d7: 5d:9d:ed:2e:2b:87:46:ec:07:7d:0a:ef:40:0d:90:43:48:fb: 28:8d:67:8c:05:9b:f1:de:c5:fc:93:29:ed:25:8e:74:19:6f: 97:2c:fb:e4:0e:70:55:73:fc:44:c4:d6:a6:18:e2:30:aa:c5: f3:c4:19:e7:37:c2:a6:5c:4c:34:c9:fa:c5:02:11:7e:91:22: 09:ef:a1:c3:5f:8a:32:16:f5:9c:69:6d:28:0f:fe:3e:17:f7: 77:5b:f7:c1:29:3d:9e:12:bc:c1:ea:ad:9e:27:93:44:75:3a: 02:74:dc:7d:3b:0e:b8:a3:81:c0:6e:b5:02:e6:7c:93:a5:fd: b0:42:9c:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pXzuxDqP/aCIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj YTM4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk MDQwZDdhMzItY2JhMS00MTQ3LTllMTAtNTJlMGExMzRkNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxw4csb9wN2l8v1Ndv9c+f2odOsHc7bCkx3n 21VQXYCn7+8HKHkNi/mK+RTnDh9roOygfn2R2OzzVFuFtxeU98w1JR08+h3lw2c0 faCzJBkxWTGN1PzHxJU3P+CfoHfB8qgTrf0UwCKl6JJDv91MZEr1KRgY5xiHcKLq ahJCbtJpF30ie8/NQ66Yr63bdkGhh97dICeFPvPJEa9psJpW/p4FrMtEjb2op9w7 MR6MVjsSIenzzy+R742cwOZSl6cGv/v221YJdC2bFwFrzRyVVyOAoUUpLCmcGwOh 1BNDIo1NgucDwJ86SmecevPcOK+JA/FvKs23oGN0rkcynQpkywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEioGbZSR7XmGDjHu/nHCLRN3HVWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2 ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvOTczOWFlNzItYjZhMy0z NzZjLWIxODktMGIxYTAwMDc5Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3 ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4 Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQbWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrgiToJYqoLnofK+nLhA3gNDCliPfXvoLoyvhK8qE2IeB3BlVSOcCuv sLw7EoHpNF1F6kkLX7+yy3sIM0oolqheHZBvCx0oIwwpLMeJ+2FNOv4/kL8xGErB gWOtoo7lNwp8CVNBlbliQbDyMpcXcs6SaEJwH/6ZmmrlRNmT112d7S4rh0bsB30K 70ANkENI+yiNZ4wFm/HexfyTKe0ljnQZb5cs++QOcFVz/ETE1qYY4jCqxfPEGec3 wqZcTDTJ+sUCEX6RIgnvocNfijIW9ZxpbSgP/j4X93db98EpPZ4SvMHqrZ4nk0R1 OgJ03H07DrijgcButQLmfJOl/bBCnDc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:17:14 2025 by rpki-client