$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa File: 065f485a-2efe-31d5-8788-a9a1e337735d.roa (raw, json) Hash identifier: S3FeX+gOsuo00/oCrEakLyTCDwQ0mRtQZJRmHB2jJ68= Subject key identifier: EE:F4:95:99:9A:38:40:60:4E:56:E5:F0:92:DF:EA:A9:E0:B3:89:AE Certificate issuer: /CN=ff45396e-5aed-48af-b337-95d4dc567afb Certificate serial: 010D0C9F432858498769AEE36B54125A77100A80 Authority key identifier: 6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 6377 IP address blocks: 158.165.0.0/16 maxlen: 16 192.135.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:ae:e3:6b:54:12:5a:77:10:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff45396e-5aed-48af-b337-95d4dc567afb Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=c75184fa-aa68-4c80-9e5c-45988c532a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:07:79:c1:70:99:c9:24:ab:83:30:e6:ca:93: 9a:ba:f2:1b:66:33:63:64:5d:33:f8:7a:6c:54:54: 19:fd:8b:c7:e4:e4:2a:5b:ae:4d:9a:cd:54:16:e9: e1:16:91:c9:05:a1:8e:6e:df:25:97:30:aa:cd:36: 0d:32:5a:47:c9:37:30:3c:d5:d0:64:4b:a3:b8:7d: 88:98:9b:e0:d7:10:16:3e:0b:0b:c0:05:b9:2a:61: 54:a5:22:d5:fb:3a:43:36:40:53:a8:98:f8:b2:cb: d5:b6:1c:b5:45:c1:6a:f7:c8:e8:19:20:d7:34:86: d0:e9:ff:82:57:b9:df:67:4d:8f:30:10:03:08:00: 4f:2a:f5:44:18:8d:a4:5d:39:55:28:9d:62:b2:04: 4b:a0:b0:82:68:fb:4f:be:cf:e8:42:be:58:0c:e0: c4:c1:f6:37:03:d5:33:4f:f4:0c:96:d4:8e:ba:65: 32:04:65:d5:70:ca:ab:86:42:75:0f:16:04:55:63: 2b:81:26:11:d6:6a:a5:df:0d:b0:96:a0:c2:be:0a: d6:06:7f:3a:d4:49:a6:13:4a:5a:a4:b6:5d:22:21: 3c:bb:f4:82:ce:b7:66:31:45:06:f8:2d:40:9e:f9: fe:d9:6b:0c:ea:e4:2f:fd:1b:4b:41:45:6d:c8:f4: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F4:95:99:9A:38:40:60:4E:56:E5:F0:92:DF:EA:A9:E0:B3:89:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl X509v3 Authority Key Identifier: keyid:6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer sbgp-ipAddrBlock: critical IPv4: 158.165.0.0/16 192.135.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:43:92:cb:63:60:3a:91:35:07:bd:f1:6a:87:95:a3:a3:1a: 5f:f2:e3:fb:35:30:2c:a2:1b:19:af:93:d6:77:01:94:a5:a1: 27:c0:2b:2d:7b:52:a9:59:65:49:1b:9a:b8:90:28:e8:db:dd: a9:8e:bc:2d:78:55:c0:14:5e:57:0d:d0:90:c8:ec:bf:dc:29: e7:58:c3:ce:53:73:77:d6:85:9c:49:9b:6c:86:96:f3:3c:d5: 56:a4:6c:fb:cf:cc:17:37:fe:ac:1f:9f:db:26:3e:05:9e:b8: 8e:63:82:10:3d:30:6a:4e:7c:6f:65:c2:38:d0:ca:01:52:51: 3e:26:5b:6a:0c:54:34:9b:11:cf:2e:ca:40:a6:ce:84:54:e5: 82:bf:d3:e6:2d:10:a0:52:24:55:15:be:03:3b:7f:3a:ff:47: 91:f4:c6:fa:0f:11:fe:96:45:52:de:40:74:bf:74:a0:af:a7: b9:fd:af:cd:4e:b1:1c:8f:ab:51:9d:5a:1b:f3:82:05:91:9b: a8:14:75:fb:fe:62:f9:e5:ca:d2:0d:3c:cd:bb:34:fb:5c:d1: 10:5e:f5:8a:84:f8:9b:d9:fc:df:6e:0d:f5:33:78:29:d9:fb: b0:77:ae:0a:e8:64:c6:95:c6:81:29:e2:ec:25:68:8a:08:1d: c5:62:95:bc -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEmHaa7ja1QSWncQCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY0NTM5NmUtNWFlZC00OGFmLWIzMzctOTVkNGRjNTY3 YWZiMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk Yzc1MTg0ZmEtYWE2OC00YzgwLTllNWMtNDU5ODhjNTMyYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwd5wXCZySSrgzDmypOauvIbZjNjZF0z+Hps VFQZ/YvH5OQqW65Nms1UFunhFpHJBaGObt8llzCqzTYNMlpHyTcwPNXQZEujuH2I mJvg1xAWPgsLwAW5KmFUpSLV+zpDNkBTqJj4ssvVthy1RcFq98joGSDXNIbQ6f+C V7nfZ02PMBADCABPKvVEGI2kXTlVKJ1isgRLoLCCaPtPvs/oQr5YDODEwfY3A9Uz T/QMltSOumUyBGXVcMqrhkJ1DxYEVWMrgSYR1mql3w2wlqDCvgrWBn861EmmE0pa pLZdIiE8u/SCzrdmMUUG+C1Anvn+2WsM6uQv/RtLQUVtyPRdgwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFO70lZmaOEBgTlbl8JLf6qngs4muMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1 Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0ZGM1NjdhZmIvMDY1ZjQ4NWEtMmVmZS0z MWQ1LTg3ODgtYTlhMWUzMzc3MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmY0NTM5NmUtNWFlZC00OGFmLWIz MzctOTVkNGRjNTY3YWZiL2ZmNDUzOTZlLTVhZWQtNDhhZi1iMzM3LTk1ZDRkYzU2 N2FmYi5jcmwwHwYDVR0jBBgwFoAUbdoY/gxSm/xACX4/13WI5aH9XLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0 ZGM1NjdhZmIuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAnqUDBADA h7cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAO0OSy2NgOpE1B73xaoeVo6MaX/Lj+zUwLKIbGa+T1ncBlKWh J8ArLXtSqVllSRuauJAo6NvdqY68LXhVwBReVw3QkMjsv9wp51jDzlNzd9aFnEmb bIaW8zzVVqRs+8/MFzf+rB+f2yY+BZ64jmOCED0wak58b2XCONDKAVJRPiZbagxU NJsRzy7KQKbOhFTlgr/T5i0QoFIkVRW+Azt/Ov9HkfTG+g8R/pZFUt5AdL90oK+n uf2vzU6xHI+rUZ1aG/OCBZGbqBR1+/5i+eXK0g08zbs0+1zREF71ioT4m9n8324N 9TN4Kdn7sHeuCuhkxpXGgSni7CVoiggdxWKVvA== -----END CERTIFICATE-----Generated at Tue Apr 29 19:18:17 2025 by rpki-client