$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa File: 1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa (raw, json) Hash identifier: XWfNGqHw6dYFpsCl+EruZu6LK/eEkpo2gFVGcjtFB9w= Subject key identifier: F3:35:97:B0:1A:B2:EB:6A:94:73:7C:E7:C9:79:FA:6C:A2:5F:73:52 Certificate issuer: /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Certificate serial: 010D0C9F43285849176D0D5207DF3FB96DDA9F00 Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa Signing time: Wed 05 Mar 2025 22:17:09 +0000 ROA not before: Wed 05 Mar 2025 22:17:09 +0000 ROA not after: Tue 03 Jun 2025 21:17:09 +0000 asID: 33164 IP address blocks: 172.97.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:6d:0d:52:07:df:3f:b9:6d:da:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50 Validity Not Before: Mar 5 22:17:09 2025 GMT Not After : Jun 3 21:17:09 2025 GMT Subject: CN=193bd4ac-0ad8-43e6-a60c-cff56cde40af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3d:61:22:46:4c:28:c6:62:b0:32:87:f9:8e: 00:64:35:d5:88:a5:2e:10:89:ae:c9:ae:8d:a9:31: 81:af:1f:ca:d3:e7:a9:b3:f4:1b:fb:87:2f:4c:10: 15:0e:10:ad:22:a7:54:7f:34:8d:24:7c:80:54:74: 5d:ae:a0:7f:14:e1:b3:4a:71:5c:d6:62:90:77:39: c0:ec:1e:4b:89:6c:a7:82:0f:3e:92:3d:39:42:05: 14:76:30:28:02:7c:5a:84:2f:2b:e8:d0:10:4d:63: eb:5e:e2:1d:f8:66:6f:24:c5:6c:75:b9:46:ef:2f: 16:1d:3a:37:c4:18:be:a9:49:81:b0:bd:e6:52:79: 26:ad:a7:5d:d7:e1:fb:ab:7d:81:a0:4f:32:af:76: 5d:65:b5:4d:b5:a1:7b:fa:db:e9:9b:32:c8:55:44: 3b:4f:1c:4f:b3:cc:93:9e:31:31:81:2b:6c:3b:fa: 55:6e:f3:58:17:5f:80:4a:5c:cf:5b:19:95:86:ca: 5c:27:30:b6:a2:e5:5a:7c:0d:43:9a:6b:05:04:bc: e0:0a:f8:41:8d:3f:2f:95:9a:62:9e:17:ff:7e:43: 1a:79:ad:3b:4b:a6:bb:05:08:d9:7c:ed:f9:f5:e6: e3:6c:cb:5f:06:ed:1a:6a:f7:47:65:1c:84:47:c7: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:35:97:B0:1A:B2:EB:6A:94:73:7C:E7:C9:79:FA:6C:A2:5F:73:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/1d7fb1c4-c967-34b2-b14f-95206db75b1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl X509v3 Authority Key Identifier: keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer sbgp-ipAddrBlock: critical IPv4: 172.97.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7d:ac:08:ab:c6:ed:f8:fa:dc:ca:44:3f:1f:af:90:dc:14: dc:91:39:e0:0d:ea:16:46:61:15:04:db:6f:ae:3f:41:44:a2: 63:16:6d:e9:70:53:9a:73:75:03:d7:19:08:14:e2:a5:9a:4c: 17:47:fe:e0:45:dd:ce:be:bf:44:50:f1:82:03:bc:33:9d:9d: b7:f7:da:a3:dc:f6:44:c1:3d:cc:6d:58:f7:ed:15:aa:e9:38: e9:d4:89:8f:2d:85:5c:e1:94:b2:c4:45:24:af:f1:16:d6:1a: 26:6b:cb:1f:f8:eb:d3:84:6a:fe:07:22:ce:d3:ab:32:34:85: f3:cf:2d:39:5d:16:83:c0:9d:10:c7:b7:ab:4b:ae:e4:50:4f: 2b:d3:53:91:b7:d0:bf:73:a7:73:f5:1a:47:d7:ad:c8:ed:cc: 85:e9:ff:d9:72:11:be:99:63:bd:f7:d3:2b:6d:35:38:55:09: 74:9b:e1:f3:1c:bb:88:2a:de:00:94:28:b0:6d:b3:b0:e6:0a: 2c:b1:5f:bc:60:9c:2a:4d:5f:2f:c5:ff:cd:e2:25:ee:28:c6: c5:a1:00:65:b0:86:a0:d0:23:5e:29:1a:cf:6d:92:cb:88:e2: e7:ad:db:a6:62:f3:59:83:71:c5:2c:10:1c:37:3b:1f:98:49: 39:94:c7:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkXbQ1SB98/uW3anwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQyZWY5OWMtYzAwYy00MzFiLTg1MTktY2FiYjlkMmE0 ZDUwMB4XDTI1MDMwNTIyMTcwOVoXDTI1MDYwMzIxMTcwOVowLzEtMCsGA1UEAxMk MTkzYmQ0YWMtMGFkOC00M2U2LWE2MGMtY2ZmNTZjZGU0MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4j1hIkZMKMZisDKH+Y4AZDXViKUuEImuya6N qTGBrx/K0+eps/Qb+4cvTBAVDhCtIqdUfzSNJHyAVHRdrqB/FOGzSnFc1mKQdznA 7B5LiWyngg8+kj05QgUUdjAoAnxahC8r6NAQTWPrXuId+GZvJMVsdblG7y8WHTo3 xBi+qUmBsL3mUnkmradd1+H7q32BoE8yr3ZdZbVNtaF7+tvpmzLIVUQ7TxxPs8yT njExgStsO/pVbvNYF1+ASlzPWxmVhspcJzC2ouVafA1DmmsFBLzgCvhBjT8vlZpi nhf/fkMaea07S6a7BQjZfO359ebjbMtfBu0aavdHZRyER8ePuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM1l7AasutqlHN858l5+myiX3NSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mZDJl Zjk5Yy1jMDBjLTQzMWItODUxOS1jYWJiOWQyYTRkNTAvMWQ3ZmIxYzQtYzk2Ny0z NGIyLWIxNGYtOTUyMDZkYjc1YjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmQyZWY5OWMtYzAwYy00MzFiLTg1 MTktY2FiYjlkMmE0ZDUwL2ZkMmVmOTljLWMwMGMtNDMxYi04NTE5LWNhYmI5ZDJh NGQ1MC5jcmwwHwYDVR0jBBgwFoAUOQF+i31ACX9kDx3DLqvfnnmLytUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mZDJlZjk5Yy1jMDBjLTQzMWItODUxOS1jYWJi OWQyYTRkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGEIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZ9rAirxu34+tzKRD8fr5DcFNyROeAN6hZGYRUE22+uP0FEomMWbelw U5pzdQPXGQgU4qWaTBdH/uBF3c6+v0RQ8YIDvDOdnbf32qPc9kTBPcxtWPftFarp OOnUiY8thVzhlLLERSSv8RbWGiZryx/469OEav4HIs7TqzI0hfPPLTldFoPAnRDH t6tLruRQTyvTU5G30L9zp3P1GkfXrcjtzIXp/9lyEb6ZY7330yttNThVCXSb4fMc u4gq3gCUKLBts7DmCiyxX7xgnCpNXy/F/83iJe4oxsWhAGWwhqDQI14pGs9tksuI 4uet26Zi81mDccUsEBw3Ox+YSTmUx4w= -----END CERTIFICATE-----Generated at Mon May 12 13:41:06 2025 by rpki-client