$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa File: f984caa1-48ee-3a26-8d40-a1b14e45f110.roa (raw, json) Hash identifier: 6Y+MypoJT6WZm2q9260l+cUxKs6hutr/R/mcmS04yPo= Subject key identifier: 6E:14:4E:D9:B1:73:43:52:5B:10:E0:8A:5E:68:56:D6:90:6F:50:3A Certificate issuer: /CN=74a39a1b-8414-451d-8610-7af7342dc8f6 Certificate serial: 010D0C9F43285849350EA4B6EA3678EDD4290580 Authority key identifier: 88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 21976 IP address blocks: 192.16.204.0/24 maxlen: 24 192.108.106.0/24 maxlen: 24 2620:45:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a4:b6:ea:36:78:ed:d4:29:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a39a1b-8414-451d-8610-7af7342dc8f6 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=fb20ff0f-0e46-4054-a660-b4b2ef84fafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3f:1c:3d:33:27:5e:4c:a5:ea:9b:33:e6:77: 00:3e:3f:8c:5a:59:cf:65:cb:fd:56:d0:2f:1c:32: 36:5a:d6:78:ef:6e:47:2b:bf:8e:56:28:d2:96:1a: de:36:c2:46:2f:cd:76:88:75:b0:f6:c9:63:f6:51: fb:55:3f:0c:73:df:6f:11:c3:b6:c1:8f:97:ce:83: 1c:8f:f7:89:d7:75:02:24:6d:80:7c:a4:ef:9c:d4: 2a:b4:dc:cd:4e:f2:22:e0:7b:a8:e9:b8:52:16:8f: fb:6d:fd:04:8f:a3:0d:6c:74:ab:21:4b:d4:ad:c4: 79:d0:18:12:3a:bf:4d:32:3f:82:63:be:96:4a:08: e6:35:8e:5a:75:8b:92:01:09:1b:ea:35:a5:b1:a7: cc:29:21:94:7c:2a:d3:a3:f0:09:ff:5f:fc:db:62: 87:e2:f0:8c:8c:cb:d3:33:fb:6c:c0:f3:83:8b:63: 0f:57:94:0e:5f:cd:e2:5c:d9:8f:27:b9:c4:91:80: f4:4d:17:aa:d5:0a:1e:1b:bb:2d:c9:21:27:23:19: 80:3c:63:bb:93:27:a8:4d:e8:4b:f7:b9:11:70:b6: 5b:4b:72:7e:8c:3a:96:09:81:29:53:b8:eb:fa:83: c4:3c:c7:53:98:6a:48:ae:36:fc:55:d6:c3:cd:49: 7c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:14:4E:D9:B1:73:43:52:5B:10:E0:8A:5E:68:56:D6:90:6F:50:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/f984caa1-48ee-3a26-8d40-a1b14e45f110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6/74a39a1b-8414-451d-8610-7af7342dc8f6.crl X509v3 Authority Key Identifier: keyid:88:75:5D:06:26:22:ED:1A:A5:7A:D7:55:4B:CC:AE:C4:D8:8C:3A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a39a1b-8414-451d-8610-7af7342dc8f6.cer sbgp-ipAddrBlock: critical IPv4: 192.16.204.0/24 192.108.106.0/24 IPv6: 2620:45:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:29:6f:6c:54:31:3c:7e:87:2c:43:33:d8:6e:ea:34:7d:6d: 8f:4a:57:b8:f3:a7:2c:02:ae:24:2c:d8:fd:15:e5:0c:49:6a: ae:cd:2b:5d:ca:4e:48:67:0c:35:40:5d:53:7e:64:d7:d6:93: e6:fe:60:a2:08:1a:ae:94:f4:9e:1e:88:60:a2:59:fe:3c:92: e0:7c:f2:37:d8:1f:f5:00:3f:ae:91:44:dc:f6:8d:fc:ec:23: 7e:5e:ab:64:81:58:fd:7a:a4:5d:a9:94:6b:8e:d7:bc:66:7c: 2e:97:3d:1c:58:a5:c2:2f:6e:81:e8:f5:a2:c2:85:be:3c:58: 98:3b:e6:59:52:56:7e:22:fa:23:cf:9c:b0:1b:65:51:d5:4b: 11:53:e6:35:48:d9:8d:c2:c7:63:3b:88:b6:75:89:50:dc:2f: b7:6a:f6:b8:2c:87:89:2f:86:25:0b:4e:bb:51:0b:81:af:35: 8f:2f:aa:e5:60:f5:2e:d0:ad:e5:09:5c:38:b3:c3:47:51:3d: 5f:96:2d:14:1c:ba:0e:46:5a:6e:e7:53:e3:0e:d1:06:b0:d2: 95:83:27:51:ba:fe:f8:b5:64:73:77:4b:5b:41:be:5b:c3:e2: 2a:2f:4d:8d:2b:3c:47:b0:bb:34:0f:2b:0c:e7:e7:0d:93:b1: 3c:71:d1:ee -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEk1DqS26jZ47dQpBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhMzlhMWItODQxNC00NTFkLTg2MTAtN2FmNzM0MmRj OGY2MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZmIyMGZmMGYtMGU0Ni00MDU0LWE2NjAtYjRiMmVmODRmYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz8cPTMnXkyl6psz5ncAPj+MWlnPZcv9VtAv HDI2WtZ4725HK7+OVijSlhreNsJGL812iHWw9slj9lH7VT8Mc99vEcO2wY+XzoMc j/eJ13UCJG2AfKTvnNQqtNzNTvIi4Huo6bhSFo/7bf0Ej6MNbHSrIUvUrcR50BgS Or9NMj+CY76WSgjmNY5adYuSAQkb6jWlsafMKSGUfCrTo/AJ/1/822KH4vCMjMvT M/tswPODi2MPV5QOX83iXNmPJ7nEkYD0TReq1QoeG7stySEnIxmAPGO7kyeoTehL 97kRcLZbS3J+jDqWCYEpU7jr+oPEPMdTmGpIrjb8VdbDzUl8QwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFG4UTtmxc0NSWxDgil5oVtaQb1A6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGEz OWExYi04NDE0LTQ1MWQtODYxMC03YWY3MzQyZGM4ZjYvZjk4NGNhYTEtNDhlZS0z YTI2LThkNDAtYTFiMTRlNDVmMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhMzlhMWItODQxNC00NTFkLTg2 MTAtN2FmNzM0MmRjOGY2Lzc0YTM5YTFiLTg0MTQtNDUxZC04NjEwLTdhZjczNDJk YzhmNi5jcmwwHwYDVR0jBBgwFoAUiHVdBiYi7RqletdVS8yuxNiMOj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NGEzOWExYi04NDE0LTQ1MWQtODYxMC03YWY3 MzQyZGM4ZjYuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwBDMAwQA wGxqMA8EAgACMAkDBwAmIABFwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUylvbFQxPH6HLEMz2G7qNH1t j0pXuPOnLAKuJCzY/RXlDElqrs0rXcpOSGcMNUBdU35k19aT5v5goggarpT0nh6I YKJZ/jyS4HzyN9gf9QA/rpFE3PaN/Owjfl6rZIFY/XqkXamUa47XvGZ8Lpc9HFil wi9ugej1osKFvjxYmDvmWVJWfiL6I8+csBtlUdVLEVPmNUjZjcLHYzuItnWJUNwv t2r2uCyHiS+GJQtOu1ELga81jy+q5WD1LtCt5QlcOLPDR1E9X5YtFBy6DkZabudT 4w7RBrDSlYMnUbr++LVkc3dLW0G+W8PiKi9NjSs8R7C7NA8rDOfnDZOxPHHR7g== -----END CERTIFICATE-----Generated at Mon Apr 28 10:20:11 2025 by rpki-client