$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa File: b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa (raw, json) Hash identifier: YsIiRzIRDcbLlGwxGZUhVSsDfyezpbGbzWo+AIg3N8E= Subject key identifier: E9:FA:D2:50:77:0C:6A:27:B7:55:FF:BD:9F:3E:67:3D:52:C4:92:70 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F432858494CC94DDF9FA9EF7873BF3B20 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 19740 IP address blocks: 172.84.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4d:df:9f:a9:ef:78:73:bf:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=04e3d034-8aa8-46a0-92d2-b43d0bda611d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:5c:cd:b4:4a:b2:61:54:88:86:d6:11:29: a2:1a:26:d6:65:f7:00:0b:75:05:57:0a:f2:2b:08: e8:b3:91:2b:89:2f:e3:a9:7b:18:32:a1:5a:a3:a0: 84:86:1e:62:cb:e9:a3:8f:1a:73:a0:57:e5:89:39: 66:1a:de:34:03:51:5a:ad:e7:fa:54:cf:9c:f8:5d: 08:cf:af:b9:4e:5f:0e:f1:ee:2a:d1:26:28:c7:11: a2:05:19:7f:df:75:56:09:c0:91:41:46:8a:86:88: 02:d3:40:b8:72:10:1c:14:d2:58:c6:dc:5e:42:8d: 8c:f3:ea:e9:eb:81:6e:f5:fc:29:d1:db:ff:86:a5: 30:3c:b7:e4:f4:b2:7c:a9:46:6a:bb:f2:90:d2:e8: 67:5c:ae:b8:00:ec:72:88:cb:a8:9a:5f:dd:cf:9a: 6c:3e:99:43:af:58:9f:2f:06:11:6f:4f:9d:ec:dc: 53:b3:56:bc:23:1e:35:9c:97:cd:55:88:61:e8:34: 84:53:ec:2b:46:7a:2c:0e:ac:42:fd:69:92:0e:fb: fd:bc:de:01:7b:19:fa:e2:25:1a:cf:6b:3d:b2:b8: 1e:5e:9b:28:75:27:42:71:26:a9:0f:e1:dc:a3:e0: 13:04:a9:72:18:23:20:88:8b:53:88:bf:fb:44:01: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FA:D2:50:77:0C:6A:27:B7:55:FF:BD:9F:3E:67:3D:52:C4:92:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/b0271ad2-a6bb-35cd-a80d-2a438833d55b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e8:58:7c:50:d3:c5:4c:be:7b:dd:80:89:d0:fa:fb:f0:b7: 7e:e6:39:7d:fe:f6:ce:2e:6a:b6:b3:f6:3e:92:aa:33:b7:6f: b9:f6:21:3d:04:2d:d1:f7:54:0c:ea:93:8c:b0:cd:61:e4:10: 91:12:5e:2a:41:c7:82:05:f4:fe:2b:8e:45:36:1a:30:94:47: 26:11:fe:0f:4a:bb:6c:81:31:04:9d:6e:74:49:0f:90:32:20: 8a:70:eb:5a:73:58:52:b8:1d:03:72:13:86:4e:8b:be:ef:a7: 6a:27:f0:60:7d:49:94:5d:78:bb:6f:fc:a1:25:0c:20:31:8b: 51:be:9c:ab:85:12:6e:96:a8:da:39:96:67:0e:d8:5f:11:40: f6:36:4a:73:fa:fd:40:fa:3a:57:da:d2:b4:46:d4:5c:88:0c: 7c:32:6b:bc:a1:3c:75:6f:9f:99:f3:fa:04:f1:b7:35:32:9e: 9d:63:9f:6f:00:e5:c2:b7:83:00:58:a4:e1:08:d7:15:b1:f0: 80:d3:f7:74:a3:08:53:ee:32:8a:a9:22:12:ad:4a:c2:94:d6: da:69:6d:cd:10:de:ff:e1:b6:47:d1:02:33:e0:1a:3f:72:db: 23:d2:38:07:bd:9d:52:19:fd:3b:2d:5f:e1:05:85:fa:df:53: de:8f:04:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyU3fn6nveHO/OyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MDRlM2QwMzQtOGFhOC00NmEwLTkyZDItYjQzZDBiZGE2MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskRczbRKsmFUiIbWESmiGibWZfcAC3UFVwry Kwjos5EriS/jqXsYMqFao6CEhh5iy+mjjxpzoFfliTlmGt40A1Faref6VM+c+F0I z6+5Tl8O8e4q0SYoxxGiBRl/33VWCcCRQUaKhogC00C4chAcFNJYxtxeQo2M8+rp 64Fu9fwp0dv/hqUwPLfk9LJ8qUZqu/KQ0uhnXK64AOxyiMuoml/dz5psPplDr1if LwYRb0+d7NxTs1a8Ix41nJfNVYhh6DSEU+wrRnosDqxC/WmSDvv9vN4Bexn64iUa z2s9srgeXpsodSdCcSapD+Hco+ATBKlyGCMgiItTiL/7RAF2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn60lB3DGont1X/vZ8+Zz1SxJJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvYjAyNzFhZDItYTZiYi0z NWNkLWE4MGQtMmE0Mzg4MzNkNTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADToWHxQ08VMvnvdgInQ+vvwt37mOX3+9s4uaraz9j6SqjO3b7n2IT0E LdH3VAzqk4ywzWHkEJESXipBx4IF9P4rjkU2GjCURyYR/g9Ku2yBMQSdbnRJD5Ay IIpw61pzWFK4HQNyE4ZOi77vp2on8GB9SZRdeLtv/KElDCAxi1G+nKuFEm6WqNo5 lmcO2F8RQPY2SnP6/UD6Olfa0rRG1FyIDHwya7yhPHVvn5nz+gTxtzUynp1jn28A 5cK3gwBYpOEI1xWx8IDT93SjCFPuMoqpIhKtSsKU1tppbc0Q3v/htkfRAjPgGj9y 2yPSOAe9nVIZ/TstX+EFhfrfU96PBKs= -----END CERTIFICATE-----Generated at Wed May 7 13:34:20 2025 by rpki-client