$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/47fcec64-59e8-3c81-8626-3164e6f6db85.roa File: 47fcec64-59e8-3c81-8626-3164e6f6db85.roa (raw, json) Hash identifier: FimJwxKYQ6TE6qr677uAP8D2pqJJ3yPmw24qztGFrm8= Subject key identifier: B5:8B:FD:45:54:DE:50:2A:A7:2A:34:AD:3F:CF:37:0A:11:91:4E:10 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F43285849350E81B684A915F1A8E07D80 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/47fcec64-59e8-3c81-8626-3164e6f6db85.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 33208 IP address blocks: 216.99.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:81:b6:84:a9:15:f1:a8:e0:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=f71d0946-ba6d-439b-8218-88c65de97149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:4c:34:b9:a0:d9:1e:07:12:cc:f1:f6:91: b9:ac:07:3b:eb:a1:40:3a:1e:a6:20:c5:e9:ed:4c: d8:ad:6c:8a:21:eb:b2:bd:3b:f1:ce:95:18:1d:59: 6d:0a:af:bf:86:ec:15:84:45:0f:85:05:c8:36:9e: 9a:a1:7c:ea:0e:2e:50:33:81:06:bd:ac:2a:ea:82: fe:77:69:02:25:54:6e:1a:29:e4:22:9b:76:38:dc: 30:84:90:24:36:2b:86:dc:6a:2d:ba:b9:45:53:27: 0c:db:ed:ca:42:b6:2a:c9:ee:d7:1e:34:3f:6e:28: 63:e3:64:4a:11:d3:b6:20:d4:b8:32:bb:e2:70:14: 1a:01:64:b3:02:1c:11:4d:57:ad:4b:47:0a:8f:32: 5a:06:de:2d:51:01:6c:81:f9:4e:85:f2:df:00:41: 98:5a:70:43:fb:4c:e9:00:81:31:ed:d8:d8:6d:b9: bf:e6:7d:85:c5:f2:91:dc:2f:76:8e:d5:0f:53:e2: 36:a1:2b:d5:b6:87:e1:6c:1b:94:75:3b:0a:0a:27: 91:59:26:fe:1e:77:a9:64:b9:d1:c0:21:a6:b2:7c: b9:c4:f2:66:01:e9:1a:91:c5:20:42:94:6d:37:03: c5:4a:f7:c8:01:f1:6b:45:ee:9b:d9:a5:6d:c8:10: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8B:FD:45:54:DE:50:2A:A7:2A:34:AD:3F:CF:37:0A:11:91:4E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/47fcec64-59e8-3c81-8626-3164e6f6db85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 216.99.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d0:17:44:6f:80:21:c3:9f:4d:1d:b8:7e:a8:29:63:d4:59: e5:66:a7:fc:33:66:8f:4f:49:3b:2b:7b:b5:1b:2f:08:e5:6b: 90:79:1e:65:46:5a:e5:66:9f:97:75:e7:24:30:33:fb:17:cd: ab:ad:de:0d:88:50:a9:0a:e5:f8:4a:ac:77:17:d5:d1:a1:01: 1d:3b:86:01:ef:5d:31:09:0d:4f:58:1d:b8:6c:ee:08:cc:db: 38:9e:6d:e4:ce:e3:b1:da:98:64:fc:55:e3:d8:6c:09:a3:28: dd:46:6d:cd:40:1d:1b:03:50:f6:89:b6:b4:c6:76:d7:ef:79: f5:38:d3:eb:c8:75:96:ab:54:96:ec:ef:7f:eb:63:48:31:7f: aa:9f:32:0a:a0:c8:1a:43:66:d7:49:cc:ab:f7:9a:a5:e5:85: 18:a0:6d:b3:19:c2:61:4c:f9:32:cb:c4:9d:74:cd:a6:78:d5: b7:41:0e:48:75:11:c6:96:19:19:26:1f:94:52:f3:b3:80:96: 94:98:af:33:a2:48:23:08:74:74:1c:00:c9:9e:3e:b2:8a:ca: 6b:fd:53:9a:56:ea:ef:29:30:68:e2:86:cf:fd:75:5e:fc:a9: 03:ae:1b:61:bf:cf:be:06:31:32:4e:10:77:67:48:34:51:d4: 78:8a:e1:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DoG2hKkV8ajgfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZjcxZDA5NDYtYmE2ZC00MzliLTgyMTgtODhjNjVkZTk3MTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWFMNLmg2R4HEszx9pG5rAc766FAOh6mIMXp 7UzYrWyKIeuyvTvxzpUYHVltCq+/huwVhEUPhQXINp6aoXzqDi5QM4EGvawq6oL+ d2kCJVRuGinkIpt2ONwwhJAkNiuG3GoturlFUycM2+3KQrYqye7XHjQ/bihj42RK EdO2INS4MrvicBQaAWSzAhwRTVetS0cKjzJaBt4tUQFsgflOhfLfAEGYWnBD+0zp AIEx7djYbbm/5n2FxfKR3C92jtUPU+I2oSvVtofhbBuUdTsKCieRWSb+HnepZLnR wCGmsny5xPJmAekakcUgQpRtNwPFSvfIAfFrRe6b2aVtyBDdQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWL/UVU3lAqpyo0rT/PNwoRkU4QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNDdmY2VjNjQtNTllOC0z YzgxLTg2MjYtMzE2NGU2ZjZkYjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3QF0RvgCHDn00duH6oKWPUWeVmp/wzZo9PSTsre7UbLwjla5B5HmVG WuVmn5d15yQwM/sXzaut3g2IUKkK5fhKrHcX1dGhAR07hgHvXTEJDU9YHbhs7gjM 2ziebeTO47HamGT8VePYbAmjKN1Gbc1AHRsDUPaJtrTGdtfvefU40+vIdZarVJbs 73/rY0gxf6qfMgqgyBpDZtdJzKv3mqXlhRigbbMZwmFM+TLLxJ10zaZ41bdBDkh1 EcaWGRkmH5RS87OAlpSYrzOiSCMIdHQcAMmePrKKymv9U5pW6u8pMGjihs/9dV78 qQOuG2G/z74GMTJOEHdnSDRR1HiK4Qw= -----END CERTIFICATE-----Generated at Sat May 10 10:29:04 2025 by rpki-client