$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa File: 65cdfa75-652e-3198-9d41-4b83dc5660e1.roa (raw, json) Hash identifier: kjxPxU3i4FQk1/Fkvw++0F0E6II4DMGICz+7MXbaBw4= Subject key identifier: B5:F3:97:A5:98:B1:C6:66:01:3B:F3:80:A8:68:AB:3A:21:50:8F:D6 Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5 Certificate serial: 010D0C9F43285849A1EF7283511249D38C366600 Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 8075 IP address blocks: 168.137.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:72:83:51:12:49:d3:8c:36:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=4698f9c0-2e74-4a1d-8a1c-6e0d4bf2d09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:46:33:07:46:6b:e1:f2:4e:b2:87:ba:49: 59:fa:1b:7e:64:34:b5:1e:cf:d8:b2:f1:d4:3c:17: b0:ee:36:2f:1d:b9:25:d6:83:97:8a:f1:79:9e:f1: c6:ab:ff:6d:97:f6:c7:0f:60:6a:78:73:e1:6e:08: 00:d6:cb:dd:3d:f0:bf:58:fc:9c:08:d7:5c:a5:b3: 5c:6e:c8:bb:d1:b2:0d:03:de:73:f7:5f:cb:c2:2f: 64:8a:d4:25:84:2c:0d:5c:fa:e9:5f:01:20:ec:48: b6:98:a2:30:4e:9e:b1:8b:c1:74:7c:03:26:61:6e: 54:e3:c5:2b:66:b7:54:ea:d8:8e:de:ee:ad:2c:47: 64:e5:42:59:cc:ba:fc:ad:5c:40:a3:11:2c:1a:6e: 17:2c:0e:da:ad:74:44:8e:da:9a:0d:68:e0:8d:20: 7a:67:f2:e1:26:a3:35:79:ce:a4:61:74:9e:2a:e8: 0b:0b:33:87:d8:2e:1f:c8:f2:a3:c3:1f:c3:de:10: ab:2d:c1:03:ee:c0:24:3b:ec:52:86:5f:0e:a8:eb: 3f:52:70:d2:4b:08:8f:44:3e:3f:a5:66:2a:1b:ac: e7:4d:41:8a:bf:99:a0:1d:38:93:42:06:2e:f0:f4: b5:03:8a:1f:a9:3b:1d:f6:85:23:aa:ee:93:aa:3d: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:F3:97:A5:98:B1:C6:66:01:3B:F3:80:A8:68:AB:3A:21:50:8F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl X509v3 Authority Key Identifier: keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer sbgp-ipAddrBlock: critical IPv4: 168.137.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:3c:d8:6e:8e:3e:ed:a5:10:56:af:85:96:eb:54:8c:70:95: d4:cd:9b:57:16:3a:98:6f:04:7e:c8:4d:7b:5e:15:b7:6c:02: eb:02:9c:2b:53:c5:9e:15:28:38:c3:ea:a0:1c:8b:ea:4d:f2: 2f:27:61:83:db:ca:32:61:7f:a2:01:17:a0:f0:81:6e:f9:ef: 1f:41:76:31:a8:49:48:8d:a1:d9:83:51:93:78:bb:ac:8f:55: 07:e1:d3:4f:a7:0e:c4:b2:ae:e6:f9:aa:97:3e:ba:22:84:7c: 84:b6:2d:96:25:1b:c1:f8:3b:72:d6:f0:69:83:35:94:00:ee: 36:bc:c1:0b:64:9a:c2:7c:b5:90:7f:35:69:79:d0:39:e2:d2: 71:18:d0:c2:83:26:73:fd:08:e5:7a:60:7f:3c:82:80:c9:74: 94:1f:ba:84:57:4e:8e:80:62:ec:ee:91:90:85:c6:ff:e6:08: da:72:3d:41:ad:1b:f5:a2:88:11:5e:c1:ff:17:07:0a:fd:25: 1f:7a:a4:80:90:0d:ac:a5:55:83:a6:6b:eb:f7:7d:1b:50:22: 3f:b0:9f:cb:aa:64:a3:aa:b1:13:f2:5a:ef:f1:72:89:ad:d6: d0:d6:43:91:e2:3b:1f:e8:11:b6:2b:8a:67:d5:e9:18:0e:03: 06:df:79:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73KDURJJ04w2ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRlMzk0MTctZTkzMS00NTE0LTg5ZGMtYTQyYjViNDU4 ZmI1MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk NDY5OGY5YzAtMmU3NC00YTFkLThhMWMtNmUwZDRiZjJkMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoehGMwdGa+HyTrKHuklZ+ht+ZDS1Hs/YsvHU PBew7jYvHbkl1oOXivF5nvHGq/9tl/bHD2BqeHPhbggA1svdPfC/WPycCNdcpbNc bsi70bINA95z91/Lwi9kitQlhCwNXPrpXwEg7Ei2mKIwTp6xi8F0fAMmYW5U48Ur ZrdU6tiO3u6tLEdk5UJZzLr8rVxAoxEsGm4XLA7arXREjtqaDWjgjSB6Z/LhJqM1 ec6kYXSeKugLCzOH2C4fyPKjwx/D3hCrLcED7sAkO+xShl8OqOs/UnDSSwiPRD4/ pWYqG6znTUGKv5mgHTiTQgYu8PS1A4ofqTsd9oUjqu6Tqj0V0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXzl6WYscZmATvzgKhoqzohUI/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NGUz OTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJiNWI0NThmYjUvNjVjZGZhNzUtNjUyZS0z MTk4LTlkNDEtNGI4M2RjNTY2MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDRlMzk0MTctZTkzMS00NTE0LTg5 ZGMtYTQyYjViNDU4ZmI1LzQ0ZTM5NDE3LWU5MzEtNDUxNC04OWRjLWE0MmI1YjQ1 OGZiNS5jcmwwHwYDVR0jBBgwFoAURJ2ytRzKTIx3RJxmd0dmhKLGX/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NGUzOTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJi NWI0NThmYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGI82G6OPu2lEFavhZbrVIxwldTNm1cWOphvBH7ITXteFbdsAusCnCtT xZ4VKDjD6qAci+pN8i8nYYPbyjJhf6IBF6DwgW757x9BdjGoSUiNodmDUZN4u6yP VQfh00+nDsSyrub5qpc+uiKEfIS2LZYlG8H4O3LW8GmDNZQA7ja8wQtkmsJ8tZB/ NWl50Dni0nEY0MKDJnP9COV6YH88goDJdJQfuoRXTo6AYuzukZCFxv/mCNpyPUGt G/WiiBFewf8XBwr9JR96pICQDaylVYOma+v3fRtQIj+wn8uqZKOqsRPyWu/xcomt 1tDWQ5HiOx/oEbYrimfV6RgOAwbfeaA= -----END CERTIFICATE-----Generated at Sun May 11 04:55:01 2025 by rpki-client