$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa File: 5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa (raw, json) Hash identifier: MD9ruS5RB7vSJDVI2hXesX1Ya+5M9czb9pHnPw2eP4c= Subject key identifier: 92:3E:FF:5A:1A:48:19:35:D5:A2:4B:01:44:4A:1F:BF:F5:ED:56:0E Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Certificate serial: 010D0C9F432858494469338480C51A3E0A9520C0 Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 21766 IP address blocks: 152.97.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:33:84:80:c5:1a:3e:0a:95:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=9d8be8e9-9254-4c9a-84c5-76fe1c04a91d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bb:09:b4:db:8f:05:56:c9:96:ca:46:08:de: b0:88:95:9b:20:62:73:9b:0e:b9:05:12:44:81:fa: f9:dd:57:30:78:bc:a3:35:8e:5a:42:19:46:42:c3: 43:b4:b7:69:39:0d:2d:c6:19:38:d0:04:6b:12:31: e0:a9:15:c4:e4:cb:b3:e6:db:5c:06:02:5d:ee:e2: 4a:67:a5:1e:a2:6c:c8:6f:c4:9f:3e:0b:88:8a:fc: d2:df:3c:91:1e:c0:37:7c:99:44:9b:cb:ae:a7:cc: 3b:31:2c:c4:ec:b6:a0:2d:0f:a5:c6:33:ec:be:50: 3f:f7:5f:7c:51:1a:4c:3d:02:b9:22:82:b7:b4:5c: 42:d5:b4:cf:dc:7a:59:69:0b:00:58:78:ed:3d:0e: 7e:37:9c:ab:18:5b:a8:98:13:3f:36:33:f3:4c:e3: 39:d9:82:d4:32:8e:6c:8e:ab:b8:e4:4f:42:da:3b: 5b:b3:3a:5f:3b:49:ce:89:c4:69:6b:e8:a7:39:65: 8d:ed:a2:bd:c7:74:85:56:0c:8a:81:51:e1:02:79: 2f:c9:4e:3e:48:89:93:dc:2c:ee:8d:ac:96:e1:0b: 4e:1d:0b:fb:ff:ad:86:3f:64:7e:24:5a:47:f6:85: d1:0f:89:f4:99:59:37:17:11:c9:cb:9f:8c:6c:45: b1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3E:FF:5A:1A:48:19:35:D5:A2:4B:01:44:4A:1F:BF:F5:ED:56:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl X509v3 Authority Key Identifier: keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer sbgp-ipAddrBlock: critical IPv4: 152.97.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e1:43:42:2e:6b:67:80:dd:13:49:16:fb:c0:0e:ba:e5:50: b2:0b:74:bc:d2:38:5e:4d:cf:61:f3:8b:9b:e8:50:9c:bf:6d: 30:54:05:73:ca:52:8e:0f:bb:22:1f:32:a2:25:83:85:59:03: 94:73:68:9d:bb:19:f7:0a:ef:87:63:b2:e6:59:f8:ba:9e:16: ee:ec:f8:33:df:cd:04:09:2d:d4:cd:2a:c6:33:da:cd:b7:e2: 17:ea:08:e3:ba:1d:33:cb:7f:37:2d:e5:96:f6:f4:67:b9:7f: d4:9c:26:d3:eb:87:30:b6:62:60:06:71:a6:16:8b:bc:6a:12: 6d:87:7c:b1:27:57:ee:87:5b:ce:dc:9b:25:1e:cb:b9:34:0d: 7b:db:c4:2d:f0:50:16:14:f3:32:53:fe:b3:3b:64:d2:77:af: 90:31:4b:cd:d5:8d:56:fc:75:7c:39:2b:76:9f:34:30:3b:ab: fb:5f:71:df:4d:64:ac:58:e3:62:e5:fa:3d:5b:5b:1b:29:2c: ee:b3:bd:c7:a0:f5:19:4e:91:ae:c7:e2:a6:10:37:d7:48:71: d7:da:80:04:da:9e:bd:24:22:0c:22:e0:15:4f:51:fd:51:4d: 76:77:4b:c0:58:84:78:a8:89:1c:0a:50:6b:9e:51:53:49:e4: 4a:7d:6d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaTOEgMUaPgqVIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdkN2YxNGUtNzJjNC00N2U0LWFkMDYtYTFiNzJmOTRj N2IxMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk OWQ4YmU4ZTktOTI1NC00YzlhLTg0YzUtNzZmZTFjMDRhOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibsJtNuPBVbJlspGCN6wiJWbIGJzmw65BRJE gfr53VcweLyjNY5aQhlGQsNDtLdpOQ0txhk40ARrEjHgqRXE5Muz5ttcBgJd7uJK Z6UeomzIb8SfPguIivzS3zyRHsA3fJlEm8uup8w7MSzE7LagLQ+lxjPsvlA/9198 URpMPQK5IoK3tFxC1bTP3HpZaQsAWHjtPQ5+N5yrGFuomBM/NjPzTOM52YLUMo5s jqu45E9C2jtbszpfO0nOicRpa+inOWWN7aK9x3SFVgyKgVHhAnkvyU4+SImT3Czu jayW4QtOHQv7/62GP2R+JFpH9oXRD4n0mVk3FxHJy5+MbEWxpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI+/1oaSBk11aJLAURKH7/17VYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3 ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3MmY5NGM3YjEvNWFjZjU3YTktNmQ1ZC0z MmQ5LThlOWItOWEyMmNjZTFmZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdkN2YxNGUtNzJjNC00N2U0LWFk MDYtYTFiNzJmOTRjN2IxL2E3ZDdmMTRlLTcyYzQtNDdlNC1hZDA2LWExYjcyZjk0 YzdiMS5jcmwwHwYDVR0jBBgwFoAUXtwOAtpu5BW/4iOR5NyjJ1ELeg0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Q3ZjE0ZS03MmM0LTQ3ZTQtYWQwNi1hMWI3 MmY5NGM3YjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmGFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXhQ0Iua2eA3RNJFvvADrrlULILdLzSOF5Nz2Hzi5voUJy/bTBUBXPK Uo4PuyIfMqIlg4VZA5RzaJ27GfcK74djsuZZ+LqeFu7s+DPfzQQJLdTNKsYz2s23 4hfqCOO6HTPLfzct5Zb29Ge5f9ScJtPrhzC2YmAGcaYWi7xqEm2HfLEnV+6HW87c myUey7k0DXvbxC3wUBYU8zJT/rM7ZNJ3r5AxS83VjVb8dXw5K3afNDA7q/tfcd9N ZKxY42Ll+j1bWxspLO6zvceg9RlOka7H4qYQN9dIcdfagATanr0kIgwi4BVPUf1R TXZ3S8BYhHioiRwKUGueUVNJ5Ep9baY= -----END CERTIFICATE-----Generated at Mon Apr 28 15:21:48 2025 by rpki-client