$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa File: b4e78078-a443-3edc-9dba-d33315b67c0b.roa (raw, json) Hash identifier: bSqgf3KO5XEOr7pdXoIjEfqV5+3VKmHd48YTFg/HZJA= Subject key identifier: 4D:18:04:81:90:DE:08:93:A2:1D:75:AF:82:DF:74:2C:8A:DA:CC:84 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F43285849350E87BBAE11FB132F8BC480 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 33208 IP address blocks: 170.133.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:87:bb:ae:11:fb:13:2f:8b:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=4dc61280-6970-41dc-ad47-a417ec81b21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:c6:55:fe:f2:28:76:35:8a:83:7e:10:4a: 20:54:e7:0b:e5:34:80:a1:d4:df:58:0f:86:8f:12: f9:5b:05:eb:9b:fb:91:0c:98:ca:f5:87:2c:4f:c5: 04:8e:9d:f0:ed:e9:74:1e:70:e5:91:2f:9a:4b:65: ca:77:3f:44:d8:54:f1:56:db:6e:e1:f7:fa:92:40: 10:70:2c:2f:12:8d:8a:7e:20:fd:9a:92:f0:d5:75: ea:cc:31:c8:4a:34:8f:1a:06:bf:74:80:22:2f:13: bb:6d:3e:dd:b0:2a:34:94:61:9f:92:12:04:97:8d: 25:6f:47:42:d1:a9:bf:ec:85:2d:82:7d:ea:d2:fb: 14:86:81:a2:16:f8:f8:57:50:0b:c4:f6:ed:86:58: f4:10:70:d8:7b:5d:2c:91:c5:71:09:fa:8a:4e:68: e0:30:c0:fe:96:58:0a:5f:d4:2e:c7:8e:31:41:a6: ef:d6:cb:82:b2:58:c4:9e:c8:74:23:ae:55:b4:b9: 27:4c:29:6d:b0:73:92:ed:26:a6:a9:d3:bb:a4:15: 69:25:59:e6:bd:71:14:31:c5:c2:30:13:de:ef:b1: 33:5b:7f:79:31:f0:80:de:7f:12:ed:00:c7:7e:2e: 48:53:68:2c:13:7a:01:da:b0:3a:4d:88:0c:55:d6: 1f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:18:04:81:90:DE:08:93:A2:1D:75:AF:82:DF:74:2C:8A:DA:CC:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 170.133.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8f:7b:65:08:a5:ba:8a:36:f9:9d:2a:55:ee:db:00:4d:49: 44:0c:06:9e:a6:5a:d4:9b:46:c7:b3:d6:ea:f2:dc:b2:8a:a3: 30:00:7b:c9:1b:1c:8d:77:78:ea:b8:f1:3b:c1:fa:66:20:ff: a3:37:a9:d3:24:14:25:c4:39:db:fb:72:1e:92:5c:9f:33:dd: dd:c9:05:bc:ec:c7:7d:60:c1:1c:a7:c0:57:17:88:d5:0b:75: b6:be:9c:6b:f3:a2:4d:ec:29:e1:5c:82:83:a5:a4:c3:5d:5c: 7e:f1:94:e8:29:22:00:84:0b:4d:37:ca:e0:6a:52:a9:d5:53: f3:e9:bc:84:ff:0f:c9:2d:a2:89:33:24:51:65:cb:95:08:c6: 2e:be:28:6b:eb:66:a9:4c:f4:51:6e:df:38:22:df:1b:26:40: 27:2e:47:59:ca:8c:67:d1:f9:2c:60:07:e5:48:4e:c8:a4:77: 48:dc:33:fd:96:7d:aa:29:b1:43:0e:a3:ab:d6:34:86:b3:13: 77:38:d7:69:e5:bc:d1:b8:c6:1e:ea:57:e3:c1:23:45:90:ae: 4f:6d:90:45:13:ce:72:c2:eb:fd:04:67:20:9f:28:a3:4b:e7: 98:52:b0:2c:07:0e:ac:23:b6:9c:3a:fe:8c:2e:a3:60:6c:9e: b0:00:df:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Doe7rhH7Ey+LxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NGRjNjEyODAtNjk3MC00MWRjLWFkNDctYTQxN2VjODFiMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr7GVf7yKHY1ioN+EEogVOcL5TSAodTfWA+G jxL5WwXrm/uRDJjK9YcsT8UEjp3w7el0HnDlkS+aS2XKdz9E2FTxVttu4ff6kkAQ cCwvEo2KfiD9mpLw1XXqzDHISjSPGga/dIAiLxO7bT7dsCo0lGGfkhIEl40lb0dC 0am/7IUtgn3q0vsUhoGiFvj4V1ALxPbthlj0EHDYe10skcVxCfqKTmjgMMD+llgK X9Qux44xQabv1suCsljEnsh0I65VtLknTCltsHOS7SamqdO7pBVpJVnmvXEUMcXC MBPe77EzW395MfCA3n8S7QDHfi5IU2gsE3oB2rA6TYgMVdYfkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0YBIGQ3giToh11r4LfdCyK2syEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvYjRlNzgwNzgtYTQ0My0z ZWRjLTlkYmEtZDMzMzE1YjY3YzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEqoXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESPe2UIpbqKNvmdKlXu2wBNSUQMBp6mWtSbRsez1ury3LKKozAAe8kb HI13eOq48TvB+mYg/6M3qdMkFCXEOdv7ch6SXJ8z3d3JBbzsx31gwRynwFcXiNUL dba+nGvzok3sKeFcgoOlpMNdXH7xlOgpIgCEC003yuBqUqnVU/PpvIT/D8ktookz JFFly5UIxi6+KGvrZqlM9FFu3zgi3xsmQCcuR1nKjGfR+SxgB+VITsikd0jcM/2W faopsUMOo6vWNIazE3c412nlvNG4xh7qV+PBI0WQrk9tkEUTznLC6/0EZyCfKKNL 55hSsCwHDqwjtpw6/owuo2BsnrAA31g= -----END CERTIFICATE-----Generated at Thu May 8 00:20:22 2025 by rpki-client