$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa File: 5d5e9cfa-65df-3536-bd71-8854db468e18.roa (raw, json) Hash identifier: OhuKz3pttbnBFVoE5lBGNkvZ1bMf6902ccI92ihV+0w= Subject key identifier: 7A:90:4B:C4:66:5A:22:C9:DE:F8:50:77:ED:87:FA:60:60:92:B6:5A Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584988CF285FE4C1A28BA8CA1480 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 13536 IP address blocks: 216.59.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:28:5f:e4:c1:a2:8b:a8:ca:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=d3ecbe68-51e9-4dee-9344-230fa70290e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a1:f5:8b:6e:94:bd:95:3d:11:7d:21:67:eb: 93:a8:d7:7d:db:a4:64:a0:61:f9:a1:be:67:66:a0: b3:36:cc:3d:c3:07:9f:d6:e4:ca:c8:b2:9d:8f:b2: 94:03:aa:0b:40:d3:6d:fc:62:6c:d1:6c:9a:1e:a4: 17:27:54:0d:a4:27:bc:ba:35:c0:f8:a7:8f:86:39: 77:99:49:d6:b2:0b:d8:5b:65:3c:02:40:aa:98:3e: 73:fb:64:bb:f0:8b:f4:41:9e:14:db:c2:33:46:65: c6:b5:96:35:69:02:c4:05:ec:b7:e0:14:27:a3:50: 6c:b1:65:e3:74:51:6a:37:99:7a:55:69:bc:4b:57: d5:00:f8:c3:62:39:94:89:54:80:72:1a:af:9f:b7: d7:e4:7a:5d:5a:a0:fe:8c:f8:ee:04:9c:bd:55:1a: f9:ce:3e:57:44:bb:0d:7b:43:55:b7:f5:9a:ee:de: d0:ae:21:f5:99:5d:7d:e6:c6:13:ad:02:3a:f8:bd: 70:f9:87:be:93:47:93:94:42:7e:89:01:c0:71:fc: 58:e3:e0:96:c0:49:21:44:93:fc:f0:0a:b6:59:16: d5:09:d0:97:41:14:ca:bb:68:a6:34:40:76:38:db: f0:65:3d:74:54:6c:3e:49:f7:00:0b:84:47:45:63: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:90:4B:C4:66:5A:22:C9:DE:F8:50:77:ED:87:FA:60:60:92:B6:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/5d5e9cfa-65df-3536-bd71-8854db468e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.59.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:cc:f7:06:83:c9:c5:74:44:d5:62:f4:9c:f4:c1:58:02:30: 56:75:7f:b8:02:50:2f:18:50:3a:06:ce:59:31:bc:91:ec:ad: bb:3e:7c:60:ae:2c:0c:5d:22:e4:25:69:f7:f4:9f:6f:a7:ae: d1:f2:78:99:7f:5a:f3:05:41:3b:ab:65:2c:0a:d5:28:44:ca: 7a:77:f0:01:74:88:ef:a8:bf:71:90:aa:bb:36:cb:f9:ea:fb: d6:6e:b5:a2:8e:5f:cc:9a:31:fd:1f:6a:0d:6e:02:bf:5b:3b: 11:40:10:e6:ef:6f:03:43:2f:b5:da:da:5a:03:8d:a8:66:52: 43:66:d7:1b:b9:94:8c:97:b8:28:5b:d1:92:3b:3e:ac:75:e7: a1:1a:75:cd:2e:78:3c:35:82:0b:d3:cf:b1:45:28:47:f1:90: 00:c0:01:13:a2:f2:10:1d:4c:65:d3:42:bc:2f:f7:68:89:a5: 15:93:d9:e5:5b:57:f2:dd:c6:08:ed:0d:ca:7d:9e:19:67:08: d6:9a:f8:07:21:1f:69:bc:e2:ee:04:3f:8c:8b:ce:12:aa:de: 6c:97:4e:f9:b6:61:2d:c0:2b:db:57:44:5e:b6:5b:e0:9b:1f: 84:23:29:c2:b9:43:26:79:5a:b3:32:07:93:52:be:6b:3e:7b: 3b:d0:41:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyhf5MGii6jKFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZDNlY2JlNjgtNTFlOS00ZGVlLTkzNDQtMjMwZmE3MDI5MGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKH1i26UvZU9EX0hZ+uTqNd926RkoGH5ob5n ZqCzNsw9wwef1uTKyLKdj7KUA6oLQNNt/GJs0WyaHqQXJ1QNpCe8ujXA+KePhjl3 mUnWsgvYW2U8AkCqmD5z+2S78Iv0QZ4U28IzRmXGtZY1aQLEBey34BQno1BssWXj dFFqN5l6VWm8S1fVAPjDYjmUiVSAchqvn7fX5HpdWqD+jPjuBJy9VRr5zj5XRLsN e0NVt/Wa7t7QriH1mV195sYTrQI6+L1w+Ye+k0eTlEJ+iQHAcfxY4+CWwEkhRJP8 8Aq2WRbVCdCXQRTKu2imNEB2ONvwZT10VGw+SfcAC4RHRWN7BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqQS8RmWiLJ3vhQd+2H+mBgkrZaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNWQ1ZTljZmEtNjVkZi0z NTM2LWJkNzEtODg1NGRiNDY4ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2DtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLM9waDycV0RNVi9Jz0wVgCMFZ1f7gCUC8YUDoGzlkxvJHsrbs+fGCu LAxdIuQlaff0n2+nrtHyeJl/WvMFQTurZSwK1ShEynp38AF0iO+ov3GQqrs2y/nq +9ZutaKOX8yaMf0fag1uAr9bOxFAEObvbwNDL7Xa2loDjahmUkNm1xu5lIyXuChb 0ZI7Pqx156Eadc0ueDw1ggvTz7FFKEfxkADAAROi8hAdTGXTQrwv92iJpRWT2eVb V/LdxgjtDcp9nhlnCNaa+AchH2m84u4EP4yLzhKq3myXTvm2YS3AK9tXRF62W+Cb H4QjKcK5QyZ5WrMyB5NSvms+ezvQQYk= -----END CERTIFICATE-----Generated at Sat May 10 19:49:15 2025 by rpki-client