$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa File: d2408c5f-d225-32f4-9f6c-82686c9fa438.roa (raw, json) Hash identifier: trIhKRxry2rWH6DkeAyqzv0uMGAu1VMwRAa/mj/9lzk= Subject key identifier: A0:61:E5:5B:D4:E9:C2:38:FE:A4:16:96:3A:68:D4:C8:7A:9E:C6:5E Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F432858495D896B2E99CAAFC377E349A0 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa Signing time: Mon 31 Mar 2025 01:00:47 +0000 ROA not before: Mon 31 Mar 2025 01:00:47 +0000 ROA not after: Sun 29 Jun 2025 01:00:47 +0000 asID: 32058 IP address blocks: 216.147.192.0/20 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:89:6b:2e:99:ca:af:c3:77:e3:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Mar 31 01:00:47 2025 GMT Not After : Jun 29 01:00:47 2025 GMT Subject: CN=d4bd001d-8522-4534-8e4a-8913f888b149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:e4:74:8b:30:46:28:c8:a4:51:86:45:f9: 48:5f:a0:4a:2c:27:86:1c:51:d1:fc:6b:b1:40:ed: 0c:59:6b:86:70:19:45:50:8f:4e:54:b8:a6:6e:82: 5e:10:87:db:c8:0a:40:d7:c2:c8:e2:32:74:eb:aa: aa:86:91:9a:b1:82:66:7e:84:81:b8:85:3b:54:ce: 75:85:78:68:64:72:b1:e5:17:3f:75:63:04:07:84: d8:77:dc:0d:40:32:46:f9:6a:ca:b6:bb:1c:7e:05: 34:08:11:ea:16:87:0b:1e:0e:99:f0:75:a8:b0:d7: 44:8d:56:0f:b2:02:12:0f:72:c7:59:46:51:0a:b4: ea:6d:c4:53:2c:69:3f:72:46:ab:f5:05:6f:da:fd: 8e:b1:d4:c4:7a:3a:2a:3b:d3:30:78:f3:13:63:49: ad:71:13:be:f6:31:33:36:70:af:23:7e:f0:d4:2f: 93:90:f2:64:80:6c:61:66:c6:a8:b8:73:22:ce:3e: f9:54:c0:61:7a:ae:a8:c8:bc:c4:6b:c8:f4:e8:03: 0f:02:54:fb:af:46:8f:2a:8f:63:fe:90:8a:ed:df: 4d:ad:d7:44:48:53:ad:21:83:30:7f:5e:bb:a5:64: de:79:43:dc:13:5f:60:e2:c4:8f:fe:83:5e:0a:3f: 82:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:61:E5:5B:D4:E9:C2:38:FE:A4:16:96:3A:68:D4:C8:7A:9E:C6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d2408c5f-d225-32f4-9f6c-82686c9fa438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 216.147.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:61:62:59:41:3c:d6:4b:23:a8:f3:0b:f0:bc:9b:9c:5b:0e: e4:ed:4e:61:95:d6:8f:e9:dc:4a:d2:c1:ec:90:00:00:1f:ad: 45:41:55:44:00:27:6b:53:80:08:11:85:9c:4b:f7:62:83:4d: 78:21:c3:c1:dc:ca:bf:bb:1f:d8:dd:2d:51:e1:cc:35:2b:96: 55:f6:3a:2d:ba:b1:24:48:34:c3:52:e3:02:51:fa:5a:24:74: be:9c:85:13:72:85:a2:2c:36:c8:54:8b:1c:0f:b3:a3:7c:ea: 67:c9:de:07:77:d5:c6:14:a8:21:c3:c5:b8:a5:8e:d2:6d:c1: 9f:eb:9d:1c:93:d7:6e:b8:7c:30:a6:07:68:2d:93:60:5b:06: 11:31:7d:88:0e:9b:d1:e8:a5:a3:75:10:75:00:39:b9:ca:7d: 4e:4c:23:e2:b8:3f:09:43:1a:f6:02:25:01:f6:ed:fe:14:86: 53:a6:2b:d9:4e:3f:69:5e:f9:7d:ac:90:0e:16:a3:ab:f7:d2: 76:cc:a1:1f:b5:cd:f7:8b:c4:59:02:b3:11:3f:fc:a5:45:83: 44:06:57:11:b5:b2:f8:08:4f:13:f7:ce:71:ee:9c:39:c3:74: c4:29:c4:f7:82:d3:d4:a7:a7:07:1e:46:4b:22:49:29:4a:f6: 50:a4:fd:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEldiWsumcqvw3fjSaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDRiZDAwMWQtODUyMi00NTM0LThlNGEtODkxM2Y4ODhiMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbbkdIswRijIpFGGRflIX6BKLCeGHFHR/Gux QO0MWWuGcBlFUI9OVLimboJeEIfbyApA18LI4jJ066qqhpGasYJmfoSBuIU7VM51 hXhoZHKx5Rc/dWMEB4TYd9wNQDJG+WrKtrscfgU0CBHqFocLHg6Z8HWosNdEjVYP sgISD3LHWUZRCrTqbcRTLGk/ckar9QVv2v2OsdTEejoqO9MwePMTY0mtcRO+9jEz NnCvI37w1C+TkPJkgGxhZsaouHMizj75VMBheq6oyLzEa8j06AMPAlT7r0aPKo9j /pCK7d9NrddESFOtIYMwf167pWTeeUPcE19g4sSP/oNeCj+CMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBh5VvU6cI4/qQWljpo1Mh6nsZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDI0MDhjNWYtZDIyNS0z MmY0LTlmNmMtODI2ODZjOWZhNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2JPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFphYllBPNZLI6jzC/C8m5xbDuTtTmGV1o/p3ErSweyQAAAfrUVBVUQA J2tTgAgRhZxL92KDTXghw8Hcyr+7H9jdLVHhzDUrllX2Oi26sSRINMNS4wJR+lok dL6chRNyhaIsNshUixwPs6N86mfJ3gd31cYUqCHDxbiljtJtwZ/rnRyT1264fDCm B2gtk2BbBhExfYgOm9HopaN1EHUAObnKfU5MI+K4PwlDGvYCJQH27f4UhlOmK9lO P2le+X2skA4Wo6v30nbMoR+1zfeLxFkCsxE//KVFg0QGVxG1svgITxP3znHunDnD dMQpxPeC09SnpwceRksiSSlK9lCk/dQ= -----END CERTIFICATE-----Generated at Sun May 11 08:31:04 2025 by rpki-client