$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2989c075-16ad-3a9b-897b-49fa16151d29.roa File: 2989c075-16ad-3a9b-897b-49fa16151d29.roa (raw, json) Hash identifier: PeUNsax7I8caWDl8OMd/u7iCUieStvznHkWtm4O8IFk= Subject key identifier: D1:5E:24:DD:91:2F:77:80:61:58:53:C6:6B:E9:D4:29:A1:12:56:08 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F43285849C0A4D29AD8DC7237B38DD600 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2989c075-16ad-3a9b-897b-49fa16151d29.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 21928 IP address blocks: 173.96.0.0/11 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d2:9a:d8:dc:72:37:b3:8d:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=5d121ab3-1cd0-41b7-9ef5-4e8de3614d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:47:bf:1a:4c:66:c8:55:f1:9c:7b:b5:c5: 3b:95:82:41:e5:76:08:06:f0:b3:69:67:72:d9:c4: c5:cf:13:63:fa:92:b7:07:45:f6:e0:cb:90:c7:eb: b7:56:87:ce:5f:b0:e4:c9:d1:9f:ae:3c:5e:bf:6a: 82:d0:91:00:54:a6:b6:8f:38:23:6a:c0:b4:c2:d6: 1c:f4:e0:29:39:b2:6c:0f:72:f9:13:46:e0:5f:19: 63:67:c1:92:ba:f0:6b:cb:6e:16:07:f4:42:dd:54: ea:6d:45:62:e8:32:1b:94:0a:2f:56:21:98:26:cf: b0:fa:19:09:f1:69:f5:b3:7e:80:4e:ad:9e:9f:a0: 37:cd:4b:c5:06:b2:60:9b:ee:23:61:d6:60:7a:c0: 0b:72:09:fa:e5:e5:d4:f2:0a:f7:24:8c:db:4d:44: 7c:9e:83:18:d6:f5:48:bc:a2:c1:55:53:5a:26:4b: 52:a2:32:8a:84:e5:2d:a0:78:a5:cf:0e:86:79:8d: 2b:98:1e:87:d3:bf:94:e5:7b:0c:a3:88:03:ab:46: 0a:1f:67:37:19:9e:ef:a8:2f:85:6e:42:4d:5c:74: 52:17:d4:2b:27:af:0e:a7:47:6a:d8:e7:0b:a5:6c: d3:5a:15:2a:d5:b2:d5:2f:74:c7:ec:b9:ac:8f:16: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5E:24:DD:91:2F:77:80:61:58:53:C6:6B:E9:D4:29:A1:12:56:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2989c075-16ad-3a9b-897b-49fa16151d29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 173.96.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8f:ab:c8:4e:c9:57:66:c0:a4:da:04:de:4a:b9:5c:20:57: dd:b4:d4:ec:60:77:07:08:a7:d1:20:6f:dd:15:1a:28:35:8e: 7e:cc:04:c2:0e:27:f4:2e:cc:8e:ca:24:22:38:11:ab:c6:fd: f6:66:aa:fe:c0:94:28:a6:ff:e9:cd:27:92:b1:16:51:2c:bc: 6f:8a:67:ba:3a:c0:82:63:31:ae:c1:50:00:60:0c:75:2e:94: f2:6a:26:6e:9c:4a:3e:c9:c5:3b:33:e8:dd:25:89:6e:2a:eb: 7d:6c:77:d3:be:39:a4:bf:31:0a:ee:5a:6b:e7:1b:6b:bc:6f: 8c:70:f9:44:fb:a4:42:a1:11:8b:d4:59:d6:25:6d:de:f4:40: e3:75:29:01:a4:71:5a:3a:29:cc:7b:a8:85:96:b3:e6:8e:8f: 03:5d:b3:9f:1f:80:3b:b4:67:dc:8d:bb:35:ea:a4:fb:80:a8: cb:3e:a6:2f:8f:fd:d4:fe:a5:da:ce:2e:95:b0:b2:95:26:bb: 89:10:4f:e6:45:96:56:74:a7:50:7a:05:42:4b:da:f6:4e:ae: eb:d3:61:e5:ce:0e:8b:dd:0c:7c:67:48:a8:28:c9:1b:4d:04: 54:fa:d7:b4:a1:fa:af:13:6a:e9:eb:36:df:68:90:23:37:37: b6:b2:dd:d4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnApNKa2NxyN7ON1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NWQxMjFhYjMtMWNkMC00MWI3LTllZjUtNGU4ZGUzNjE0ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQNHvxpMZshV8Zx7tcU7lYJB5XYIBvCzaWdy 2cTFzxNj+pK3B0X24MuQx+u3VofOX7DkydGfrjxev2qC0JEAVKa2jzgjasC0wtYc 9OApObJsD3L5E0bgXxljZ8GSuvBry24WB/RC3VTqbUVi6DIblAovViGYJs+w+hkJ 8Wn1s36ATq2en6A3zUvFBrJgm+4jYdZgesALcgn65eXU8gr3JIzbTUR8noMY1vVI vKLBVVNaJktSojKKhOUtoHilzw6GeY0rmB6H07+U5XsMo4gDq0YKH2c3GZ7vqC+F bkJNXHRSF9QrJ68Op0dq2OcLpWzTWhUq1bLVL3TH7Lmsjxag8wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNFeJN2RL3eAYVhTxmvp1CmhElYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvMjk4OWMwNzUtMTZhZC0z YTliLTg5N2ItNDlmYTE2MTUxZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFrWAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUY+ryE7JV2bApNoE3kq5XCBX3bTU7GB3Bwin0SBv3RUaKDWOfswEwg4n 9C7MjsokIjgRq8b99maq/sCUKKb/6c0nkrEWUSy8b4pnujrAgmMxrsFQAGAMdS6U 8mombpxKPsnFOzPo3SWJbirrfWx30745pL8xCu5aa+cba7xvjHD5RPukQqERi9RZ 1iVt3vRA43UpAaRxWjopzHuohZaz5o6PA12znx+AO7Rn3I27Neqk+4Coyz6mL4/9 1P6l2s4ulbCylSa7iRBP5kWWVnSnUHoFQkva9k6u69Nh5c4Oi90MfGdIqCjJG00E VPrXtKH6rxNq6es232iQIzc3trLd1A== -----END CERTIFICATE-----Generated at Sat May 10 13:45:27 2025 by rpki-client