$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa File: e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa (raw, json) Hash identifier: I43eTWfoTX4aZOS+c/BZuyooYJ00tJPzmXi/gY5jw5c= Subject key identifier: A4:61:24:6E:C0:1C:94:03:73:5D:39:5E:DA:C7:B7:EC:17:0C:F5:60 Certificate issuer: /CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Certificate serial: 010D0C9F43285849955F25807CA37BB31377D400 Authority key identifier: 98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 25222 IP address blocks: 216.129.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:25:80:7c:a3:7b:b3:13:77:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a5a8909-3aaf-44e8-b0d6-c507e550d054 Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=4e2014d7-8e34-4498-ada9-cf87bcfba9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:35:cb:b0:7a:5a:38:02:8e:e7:11:99:62:ef: 49:30:2f:89:94:38:57:17:b9:34:26:30:72:2d:f9: d4:e9:15:95:b5:ad:c1:a7:e6:2b:d5:3e:7f:a3:46: 30:49:55:5f:c0:13:08:db:b2:d7:2e:af:98:5e:64: a2:7c:b5:b9:e4:59:bf:31:19:7f:f1:90:6c:f6:98: e1:6e:8d:a8:e1:f3:1f:72:da:a1:89:fa:67:1c:4b: 9a:cf:4b:ee:77:b4:e0:14:22:90:e3:54:27:6e:fb: 68:a2:2a:1f:23:48:ac:f7:97:a0:f0:92:56:8b:92: 8f:56:78:77:f9:e8:ba:62:2a:e0:0b:ef:6b:4e:14: ba:45:04:2f:75:21:b5:21:45:75:49:1e:a5:49:db: cf:40:16:76:88:c0:c8:00:36:8a:d1:4d:da:00:1a: 06:01:11:dc:6a:45:fb:a0:41:16:6d:ad:16:03:a4: 38:37:79:ce:71:07:09:ec:fc:f5:d2:83:23:dc:19: 41:b0:05:06:d9:56:59:98:1e:6c:1a:e1:89:99:bb: 29:98:75:6f:66:3c:50:21:93:d4:36:21:3a:9c:63: 73:5e:f5:08:b2:49:b5:e9:3e:ea:6c:95:af:f6:16: d1:62:07:e7:87:c8:3e:1a:e1:5b:db:28:e1:e1:03: be:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:61:24:6E:C0:1C:94:03:73:5D:39:5E:DA:C7:B7:EC:17:0C:F5:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/e7e2d6b2-e5e3-37b5-ad49-cd0423e6e47e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054/0a5a8909-3aaf-44e8-b0d6-c507e550d054.crl X509v3 Authority Key Identifier: keyid:98:6D:03:AF:2A:72:D8:45:26:FB:66:A1:A7:50:69:46:6C:8B:DB:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a5a8909-3aaf-44e8-b0d6-c507e550d054.cer sbgp-ipAddrBlock: critical IPv4: 216.129.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:02:ab:22:25:dd:16:33:39:02:86:32:84:12:92:44:7b:97: 36:cb:ad:70:d8:f4:29:a7:0e:1c:6f:a7:62:73:d5:bc:d5:08: bd:d6:05:61:84:e9:58:8c:44:30:ee:59:37:cf:ba:4f:41:0f: b0:10:ee:1f:ca:2a:40:a1:59:dc:c5:aa:3a:07:7c:a8:73:42: 1a:5a:29:c3:dc:0a:cd:06:8e:c1:39:e7:76:f2:4e:e6:6d:fb: 14:ac:5d:18:e9:86:07:e6:fc:50:8e:2b:b4:e4:71:46:b2:e0: 25:09:6d:1e:32:f7:d1:19:1b:f4:ca:db:fb:2d:eb:a2:14:42: 74:c6:07:fa:8b:6c:0c:5c:ae:55:e4:32:bb:7c:4f:4e:bd:5a: d6:b9:2c:7c:13:d9:97:bf:66:ee:8f:d3:52:8a:ca:f4:fc:3b: 7b:3c:07:d9:48:ec:1b:64:12:30:fe:70:3c:fc:21:a3:3e:da: fb:96:c7:da:45:24:11:60:1d:b1:73:0b:59:aa:b0:4a:07:e3: 22:4a:82:83:6d:e0:3b:e5:0c:ab:cd:d5:b4:39:27:f8:bb:c5: 5b:06:59:25:95:5f:75:9f:4f:a5:47:cd:70:8c:1e:3c:94:56: a9:12:30:cf:1c:6e:76:14:76:c8:5f:8c:e1:83:ef:b9:75:52: 26:34:43:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXyWAfKN7sxN31AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1YTg5MDktM2FhZi00NGU4LWIwZDYtYzUwN2U1NTBk MDU0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk NGUyMDE0ZDctOGUzNC00NDk4LWFkYTktY2Y4N2JjZmJhOWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzXLsHpaOAKO5xGZYu9JMC+JlDhXF7k0JjBy LfnU6RWVta3Bp+Yr1T5/o0YwSVVfwBMI27LXLq+YXmSifLW55Fm/MRl/8ZBs9pjh bo2o4fMfctqhifpnHEuaz0vud7TgFCKQ41QnbvtooiofI0is95eg8JJWi5KPVnh3 +ei6YirgC+9rThS6RQQvdSG1IUV1SR6lSdvPQBZ2iMDIADaK0U3aABoGARHcakX7 oEEWba0WA6Q4N3nOcQcJ7Pz10oMj3BlBsAUG2VZZmB5sGuGJmbspmHVvZjxQIZPU NiE6nGNzXvUIskm16T7qbJWv9hbRYgfnh8g+GuFb2yjh4QO+/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRhJG7AHJQDc105XtrHt+wXDPVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVh ODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3ZTU1MGQwNTQvZTdlMmQ2YjItZTVlMy0z N2I1LWFkNDktY2QwNDIzZTZlNDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE1YTg5MDktM2FhZi00NGU4LWIw ZDYtYzUwN2U1NTBkMDU0LzBhNWE4OTA5LTNhYWYtNDRlOC1iMGQ2LWM1MDdlNTUw ZDA1NC5jcmwwHwYDVR0jBBgwFoAUmG0Drypy2EUm+2ahp1BpRmyL21swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTVhODkwOS0zYWFmLTQ0ZTgtYjBkNi1jNTA3 ZTU1MGQwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2IGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALQCqyIl3RYzOQKGMoQSkkR7lzbLrXDY9CmnDhxvp2Jz1bzVCL3WBWGE 6ViMRDDuWTfPuk9BD7AQ7h/KKkChWdzFqjoHfKhzQhpaKcPcCs0GjsE553byTuZt +xSsXRjphgfm/FCOK7TkcUay4CUJbR4y99EZG/TK2/st66IUQnTGB/qLbAxcrlXk Mrt8T069Wta5LHwT2Ze/Zu6P01KKyvT8O3s8B9lI7BtkEjD+cDz8IaM+2vuWx9pF JBFgHbFzC1mqsEoH4yJKgoNt4DvlDKvN1bQ5J/i7xVsGWSWVX3WfT6VHzXCMHjyU VqkSMM8cbnYUdshfjOGD77l1UiY0Q/M= -----END CERTIFICATE-----Generated at Sun May 11 05:27:57 2025 by rpki-client