$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa File: 03d609bb-e0d2-3ffa-8996-b2eac543f536.roa (raw, json) Hash identifier: jWZuDJweAB5sMvPc6AE0zSVHlesm5JEoI0dWIjJs7ak= Subject key identifier: 35:79:F1:A7:57:A7:E1:7A:73:E9:B0:74:8A:87:70:2E:05:0C:B8:CB Certificate issuer: /CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Certificate serial: 010D0C9F43285849A5974EB6AA60AFDE4E9C44B0 Authority key identifier: C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa Signing time: Fri 25 Apr 2025 20:27:04 +0000 ROA not before: Fri 25 Apr 2025 20:27:04 +0000 ROA not after: Thu 24 Jul 2025 20:27:04 +0000 asID: 30417 IP address blocks: 172.81.4.0/22 maxlen: 24 192.64.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a5:97:4e:b6:aa:60:af:de:4e:9c:44:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Validity Not Before: Apr 25 20:27:04 2025 GMT Not After : Jul 24 20:27:04 2025 GMT Subject: CN=abb75eef-6ba2-4ef6-b8ac-961fc26dda80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:be:c8:d9:d2:54:ca:e3:e8:0c:71:c9:d8: a9:c7:fd:e2:03:4b:a4:a1:35:8b:c4:53:52:10:38: 6b:97:e0:6c:be:3c:cb:85:1c:40:5c:f3:bb:b0:eb: 46:a1:03:6f:35:df:07:de:48:7e:ff:c9:e7:2d:1b: d8:fc:d7:80:c1:b1:2a:07:e7:74:5a:2e:a4:38:88: 31:14:eb:1e:4a:0b:e9:b2:e2:91:ee:26:8b:b3:1e: f3:af:3b:90:28:5d:bf:74:c4:2d:92:18:13:8b:54: 5e:b3:6d:fc:81:75:24:b0:56:b5:06:f0:6b:54:11: 75:ea:c1:58:0a:73:0c:10:4f:11:1c:04:2d:c6:be: 3e:0b:b3:06:1d:63:8e:3d:dd:8e:8e:bb:99:14:6b: 84:76:98:b3:8a:a1:97:8d:41:6b:09:74:1a:70:d9: 3a:a8:dd:0a:db:2a:ce:08:28:7a:73:c8:a8:c1:67: c4:ce:ea:39:c9:82:b6:01:eb:c5:66:ed:7a:ef:74: e7:73:a3:f8:d4:ca:b9:c2:3f:53:79:a9:b4:8c:05: 33:3b:d7:d1:a2:11:58:b3:28:20:e5:12:62:cf:69: b8:43:a3:93:45:f7:fe:a1:a5:ac:a8:cf:76:39:e3: 64:7f:74:25:ff:2f:3d:24:0a:ca:79:99:03:9a:9f: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:79:F1:A7:57:A7:E1:7A:73:E9:B0:74:8A:87:70:2E:05:0C:B8:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl X509v3 Authority Key Identifier: keyid:C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer sbgp-ipAddrBlock: critical IPv4: 172.81.4.0/22 192.64.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:64:94:c8:08:3d:4d:79:f2:39:44:5b:c6:e0:7f:15:fc:b4: a6:d2:2e:aa:bf:18:90:73:45:ff:96:a4:00:7a:c4:72:e0:22: f7:7f:4a:41:80:ad:f9:7a:fb:a8:ee:cd:9c:9a:6f:e2:b6:40: 1a:f2:03:d8:de:b2:47:c4:30:78:bc:38:d7:9d:78:88:4e:13: d0:ef:12:11:79:0f:2d:8f:87:ab:13:24:dd:fa:54:ce:b4:3f: c6:af:c7:85:a7:d2:14:d9:e3:12:11:0f:94:ba:2e:38:3d:34: 33:3c:c4:67:5f:e7:fc:9d:d9:28:df:86:98:12:40:3b:d0:02: 6b:4f:0d:78:2a:23:75:bf:f6:95:63:d4:c0:28:ef:09:77:63: 28:4c:aa:9d:a9:3c:ab:55:c1:ba:0e:d6:7b:6b:61:6d:52:80: 0b:02:d5:c3:b5:a7:e3:8e:af:7c:1e:8a:5d:da:aa:20:d0:c4: ae:e7:09:49:85:a3:e9:f5:45:63:54:98:48:7a:77:c1:9b:f3: 22:f8:5c:ee:5b:ec:d5:cf:42:0a:f1:9b:5f:d5:e8:2f:da:79: a9:d8:88:5a:17:0e:f0:6c:4c:b1:24:25:80:bf:a0:4a:b6:a9: c5:2d:f6:9d:8b:d3:a7:7f:c5:16:02:af:32:6b:61:fc:f5:64: b5:94:72:9e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmll062qmCv3k6cRLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkZjcyYTUtZjBkYS00YzY0LTk1M2EtMTVhNjJkNWNh M2IwMB4XDTI1MDQyNTIwMjcwNFoXDTI1MDcyNDIwMjcwNFowLzEtMCsGA1UEAxMk YWJiNzVlZWYtNmJhMi00ZWY2LWI4YWMtOTYxZmMyNmRkYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTC+yNnSVMrj6Axxydipx/3iA0ukoTWLxFNS EDhrl+BsvjzLhRxAXPO7sOtGoQNvNd8H3kh+/8nnLRvY/NeAwbEqB+d0Wi6kOIgx FOseSgvpsuKR7iaLsx7zrzuQKF2/dMQtkhgTi1Res238gXUksFa1BvBrVBF16sFY CnMMEE8RHAQtxr4+C7MGHWOOPd2OjruZFGuEdpiziqGXjUFrCXQacNk6qN0K2yrO CCh6c8iowWfEzuo5yYK2AevFZu1673Tnc6P41Mq5wj9Team0jAUzO9fRohFYsygg 5RJiz2m4Q6OTRff+oaWsqM92OeNkf3Ql/y89JArKeZkDmp/ktwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDV58adXp+F6c+mwdIqHcC4FDLjLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NWRm NzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2MmQ1Y2EzYjAvMDNkNjA5YmItZTBkMi0z ZmZhLTg5OTYtYjJlYWM1NDNmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjVkZjcyYTUtZjBkYS00YzY0LTk1 M2EtMTVhNjJkNWNhM2IwLzY1ZGY3MmE1LWYwZGEtNGM2NC05NTNhLTE1YTYyZDVj YTNiMC5jcmwwHwYDVR0jBBgwFoAUw/ftawHjYye8m7oJ+guJtIPPlyIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NWRmNzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2 MmQ1Y2EzYjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCrFEEAwQB wEDEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACxklMgIPU158jlEW8bgfxX8tKbSLqq/GJBzRf+WpAB6xHLg Ivd/SkGArfl6+6juzZyab+K2QBryA9jeskfEMHi8ONedeIhOE9DvEhF5Dy2Ph6sT JN36VM60P8avx4Wn0hTZ4xIRD5S6Ljg9NDM8xGdf5/yd2SjfhpgSQDvQAmtPDXgq I3W/9pVj1MAo7wl3YyhMqp2pPKtVwboO1ntrYW1SgAsC1cO1p+OOr3weil3aqiDQ xK7nCUmFo+n1RWNUmEh6d8Gb8yL4XO5b7NXPQgrxm1/V6C/aeanYiFoXDvBsTLEk JYC/oEq2qcUt9p2L06d/xRYCrzJrYfz1ZLWUcp4= -----END CERTIFICATE-----Generated at Tue Apr 29 08:36:05 2025 by rpki-client