$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/a0ea587d-3661-3a92-985e-52bc85f90a1c.roa File: a0ea587d-3661-3a92-985e-52bc85f90a1c.roa (raw, json) Hash identifier: 4VY37HkiOAJVvqGz1zCXSsdyGMfecKKAIWjuc0D1xHE= Subject key identifier: 4B:D1:2C:5B:27:10:0F:DA:C3:DF:3A:1B:2C:28:45:E0:F0:C4:1F:02 Certificate issuer: /CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Certificate serial: 010D0C9F432858492093FC639B42B63CD67361C0 Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/a0ea587d-3661-3a92-985e-52bc85f90a1c.roa Signing time: Sun 09 Mar 2025 04:57:52 +0000 ROA not before: Sun 09 Mar 2025 04:57:52 +0000 ROA not after: Sat 07 Jun 2025 03:57:52 +0000 asID: 64199 IP address blocks: 198.178.119.64/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:93:fc:63:9b:42:b6:3c:d6:73:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7 Validity Not Before: Mar 9 04:57:52 2025 GMT Not After : Jun 7 03:57:52 2025 GMT Subject: CN=bd274862-94dc-40da-9f8f-4a5b03b79968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:27:93:9c:e6:6d:35:d6:f4:0c:2c:55:0d: ee:ac:5c:3b:cd:16:2a:67:61:3e:ea:92:a8:7c:dc: 71:08:e5:25:4e:b2:a8:19:db:9a:81:5e:b4:4d:13: 2c:f7:96:1c:29:20:fb:d8:d4:cf:6c:6d:f2:54:b4: 58:af:34:05:7f:74:14:56:78:70:33:be:68:cf:31: 88:03:80:16:e4:a3:7f:8c:71:ac:b5:aa:ae:14:18: 40:2f:8f:c0:ae:e8:cb:9d:b1:84:27:1c:ed:c6:f2: 82:b0:85:d9:c0:68:e4:88:24:90:e0:9a:ae:84:f4: 83:00:23:6d:96:db:9b:83:98:10:3d:aa:36:d3:48: 95:73:e0:3b:7f:7d:91:b9:b8:ca:c9:8c:f2:16:4a: 5b:98:03:67:e5:54:86:6d:a7:f5:77:91:be:c1:7b: 23:4f:78:05:a8:e8:51:38:f5:2f:8c:12:df:6b:55: e9:28:b8:d5:4c:0a:f8:94:e5:3f:98:56:84:a3:93: 8a:04:ad:a6:34:20:c3:c0:5c:7a:0f:14:07:ea:74: ca:00:a4:8f:5d:1c:f4:e2:25:4c:4f:c3:f5:40:88: 35:81:80:7d:0c:42:4f:00:a3:90:2b:db:ca:6a:56: 1d:e1:41:ff:86:eb:12:d1:e0:08:d8:4a:b7:f0:b8: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D1:2C:5B:27:10:0F:DA:C3:DF:3A:1B:2C:28:45:E0:F0:C4:1F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/a0ea587d-3661-3a92-985e-52bc85f90a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl X509v3 Authority Key Identifier: keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer sbgp-ipAddrBlock: critical IPv4: 198.178.119.64/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9b:f5:aa:c7:f3:0e:4a:bf:6e:de:58:2b:05:70:d3:cf:37: f7:03:8f:cf:24:38:6e:75:2c:fd:cb:81:8d:95:d7:9c:4f:9e: 04:2a:6f:24:98:d7:67:88:c1:1e:34:f5:3d:62:34:41:0a:43: db:a2:24:e1:16:8d:e2:d0:9f:34:96:a6:e2:f6:3e:47:c4:d6: 2d:03:86:a4:b1:62:e8:27:b0:9c:a9:67:b0:7b:93:c7:f0:c4: 98:b6:45:f6:63:fb:72:f7:d2:96:e7:58:11:df:a6:87:50:4b: c0:7a:b9:0c:70:02:70:53:3c:85:56:83:c6:f0:4d:96:c0:8e: 7c:06:4f:52:21:06:c4:82:db:e4:b2:d4:a2:ac:79:ad:bd:5e: d6:93:64:f4:48:b5:a4:ea:2b:cf:08:5f:f4:da:9c:57:e8:41: 40:79:61:18:78:bf:a3:cc:24:27:38:c1:93:89:df:e4:97:86: 39:54:26:c2:25:b9:fc:29:12:29:16:c8:9d:b5:ed:5a:50:8f: 60:5f:29:39:09:08:66:ce:08:d2:02:d6:68:64:78:8c:b1:dd: ea:7c:b6:2f:32:8f:7c:fa:76:c2:fc:93:dc:ce:ca:4c:fc:15: 01:07:23:50:d4:8c:3f:28:d9:77:72:57:be:f7:e0:bf:b2:eb: 1f:6c:b3:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkgk/xjm0K2PNZzYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh N2M3MB4XDTI1MDMwOTA0NTc1MloXDTI1MDYwNzAzNTc1MlowLzEtMCsGA1UEAxMk YmQyNzQ4NjItOTRkYy00MGRhLTlmOGYtNGE1YjAzYjc5OTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKMnk5zmbTXW9AwsVQ3urFw7zRYqZ2E+6pKo fNxxCOUlTrKoGduagV60TRMs95YcKSD72NTPbG3yVLRYrzQFf3QUVnhwM75ozzGI A4AW5KN/jHGstaquFBhAL4/ArujLnbGEJxztxvKCsIXZwGjkiCSQ4JquhPSDACNt ltubg5gQPao200iVc+A7f32RubjKyYzyFkpbmANn5VSGbaf1d5G+wXsjT3gFqOhR OPUvjBLfa1XpKLjVTAr4lOU/mFaEo5OKBK2mNCDDwFx6DxQH6nTKAKSPXRz04iVM T8P1QIg1gYB9DEJPAKOQK9vKalYd4UH/husS0eAI2Eq38LgvPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEvRLFsnEA/aw986GywoReDwxB8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3 YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvYTBlYTU4N2QtMzY2MS0z YTkyLTk4NWUtNTJiYzg1ZjkwYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4 NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4 YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm YjUwOGE3YzcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFxrJ3QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBnm/Wqx/MOSr9u3lgrBXDTzzf3A4/PJDhudSz9y4GNldecT54EKm8k mNdniMEeNPU9YjRBCkPboiThFo3i0J80lqbi9j5HxNYtA4aksWLoJ7CcqWewe5PH 8MSYtkX2Y/ty99KW51gR36aHUEvAerkMcAJwUzyFVoPG8E2WwI58Bk9SIQbEgtvk stSirHmtvV7Wk2T0SLWk6ivPCF/02pxX6EFAeWEYeL+jzCQnOMGTid/kl4Y5VCbC Jbn8KRIpFsidte1aUI9gXyk5CQhmzgjSAtZoZHiMsd3qfLYvMo98+nbC/JPczspM /BUBByNQ1Iw/KNl3cle+9+C/susfbLPQ -----END CERTIFICATE-----Generated at Tue May 13 20:55:06 2025 by rpki-client