$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/63981179-b36d-3c41-a7d2-9adb722f494c.roa File: 63981179-b36d-3c41-a7d2-9adb722f494c.roa (raw, json) Hash identifier: LDxViAdSSrXGnQf1AJqk8Eo00hiXaZ3MzYyQ6kFubuY= Subject key identifier: B9:87:69:29:20:E9:00:E9:F7:51:8C:60:E9:6A:AE:27:3B:55:9A:89 Certificate issuer: /CN=6ec5d668-721f-4186-82e6-1391fb7784bb Certificate serial: 010D0C9F43285849AD1A092B766046A2454A1280 Authority key identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/63981179-b36d-3c41-a7d2-9adb722f494c.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 212238 IP address blocks: 172.81.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:09:2b:76:60:46:a2:45:4a:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ec5d668-721f-4186-82e6-1391fb7784bb Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=9d2fe5e6-cdfc-4cd6-83de-2fbd6c545580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8d:2c:6a:4b:66:3a:5d:81:be:87:6c:65:67: 0e:6d:11:d7:4a:d4:73:05:15:91:28:a5:f7:70:78: e5:48:e3:b1:20:8a:01:c2:34:69:61:78:56:51:e5: 30:c5:be:bb:c8:61:c3:d3:b2:1c:0d:e8:02:8e:1e: 18:80:87:6f:43:80:68:75:a1:ba:ca:28:37:09:bc: 10:39:f1:28:18:e0:94:61:f7:b9:0a:63:ce:60:ab: 79:94:91:fe:2f:59:fa:71:ad:70:8d:f7:e7:9b:01: 20:25:d8:3c:6d:98:e2:d4:5a:35:9a:cd:ca:76:fa: 86:51:9d:c3:6c:cf:da:87:cb:c5:58:d4:4a:bf:65: 1c:6c:d9:69:20:ff:e8:40:83:d9:4d:e9:f5:7b:03: a7:a2:50:5f:65:4f:94:a7:69:4b:ef:bf:50:39:fc: 9f:cd:f4:08:b8:af:7e:eb:9b:6b:87:f8:43:e3:dc: 1f:a4:4c:c5:7d:74:35:af:8a:ee:ef:09:78:b9:50: 18:6b:35:1d:9a:e5:5a:95:1b:2b:d1:71:c4:6e:4f: 79:ba:4e:8f:4d:bd:3a:10:eb:d8:d3:1d:d8:f4:4d: 3f:d0:61:a4:f0:c5:57:53:56:f0:0a:30:8e:f3:30: 96:a3:a7:67:57:0c:2a:ba:99:8d:e7:db:f3:18:08: 65:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:87:69:29:20:E9:00:E9:F7:51:8C:60:E9:6A:AE:27:3B:55:9A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/63981179-b36d-3c41-a7d2-9adb722f494c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl X509v3 Authority Key Identifier: keyid:7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer sbgp-ipAddrBlock: critical IPv4: 172.81.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:4e:67:9e:a5:f8:ef:03:da:32:24:d8:90:94:0b:6e:6e:c8: 52:bd:2c:84:21:d5:e8:f6:3b:a1:f5:f4:ba:19:48:6c:52:79: db:f3:8a:6e:db:7d:30:12:cc:a2:fa:f3:d5:c5:a5:17:07:6b: 2c:40:d6:ab:f6:9c:9c:a6:6c:4c:fc:53:38:c9:5a:83:2f:d3: d1:cc:74:17:ed:09:5e:ac:32:7d:b6:f1:9b:3e:5d:cb:8a:f7: 94:73:6d:df:9c:fc:b6:84:89:79:64:3e:61:42:23:18:66:b5: 00:ec:31:58:cc:af:82:e9:c4:e3:63:57:10:14:ae:d2:7b:d1: 75:1e:15:de:c6:87:b6:59:39:c1:64:bf:f3:75:8b:d3:c4:9f: d8:1a:ed:44:db:9e:02:65:57:ff:5d:a6:3b:90:64:7a:1e:32: c1:b4:57:ef:3c:fc:4f:9c:e4:64:ee:fb:f2:33:73:81:23:c4: 1c:89:6a:f7:19:c0:35:83:38:94:39:69:9e:02:ca:54:41:24: b4:16:c7:07:31:fb:8d:c4:29:e9:27:23:53:7e:b6:d8:60:f2: a5:c0:17:0f:1c:46:30:16:c6:9a:49:d7:1e:e3:0f:0e:b3:fa: 86:07:e8:b1:20:f3:d3:93:64:ce:c0:e7:0f:67:60:2e:86:30: 0c:63:28:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgkrdmBGokVKEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVjNWQ2NjgtNzIxZi00MTg2LTgyZTYtMTM5MWZiNzc4 NGJiMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OWQyZmU1ZTYtY2RmYy00Y2Q2LTgzZGUtMmZiZDZjNTQ1NTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAho0saktmOl2BvodsZWcObRHXStRzBRWRKKX3 cHjlSOOxIIoBwjRpYXhWUeUwxb67yGHD07IcDegCjh4YgIdvQ4BodaG6yig3CbwQ OfEoGOCUYfe5CmPOYKt5lJH+L1n6ca1wjffnmwEgJdg8bZji1Fo1ms3KdvqGUZ3D bM/ah8vFWNRKv2UcbNlpIP/oQIPZTen1ewOnolBfZU+Up2lL779QOfyfzfQIuK9+ 65trh/hD49wfpEzFfXQ1r4ru7wl4uVAYazUdmuValRsr0XHEbk95uk6PTb06EOvY 0x3Y9E0/0GGk8MVXU1bwCjCO8zCWo6dnVwwqupmN59vzGAhlpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmHaSkg6QDp91GMYOlqric7VZqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82ZWM1 ZDY2OC03MjFmLTQxODYtODJlNi0xMzkxZmI3Nzg0YmIvNjM5ODExNzktYjM2ZC0z YzQxLWE3ZDItOWFkYjcyMmY0OTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmVjNWQ2NjgtNzIxZi00MTg2LTgy ZTYtMTM5MWZiNzc4NGJiLzZlYzVkNjY4LTcyMWYtNDE4Ni04MmU2LTEzOTFmYjc3 ODRiYi5jcmwwHwYDVR0jBBgwFoAUfSvF5k6kejDyAfc3R/vTR7cUYyQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82ZWM1ZDY2OC03MjFmLTQxODYtODJlNi0xMzkx ZmI3Nzg0YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFOZ56l+O8D2jIk2JCUC25uyFK9LIQh1ej2O6H19LoZSGxSedvzim7b fTASzKL689XFpRcHayxA1qv2nJymbEz8UzjJWoMv09HMdBftCV6sMn228Zs+XcuK 95Rzbd+c/LaEiXlkPmFCIxhmtQDsMVjMr4LpxONjVxAUrtJ70XUeFd7Gh7ZZOcFk v/N1i9PEn9ga7UTbngJlV/9dpjuQZHoeMsG0V+88/E+c5GTu+/Izc4EjxByJavcZ wDWDOJQ5aZ4CylRBJLQWxwcx+43EKeknI1N+tthg8qXAFw8cRjAWxppJ1x7jDw6z +oYH6LEg89OTZM7A5w9nYC6GMAxjKA8= -----END CERTIFICATE-----Generated at Sat May 10 09:44:38 2025 by rpki-client