$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4e87abc2-70e9-3d43-b866-1496a6621e10.roa File: 4e87abc2-70e9-3d43-b866-1496a6621e10.roa (raw, json) Hash identifier: 8mHFOxPs90bV/AOGz56b14HBohN/3vPftI9Q3ac683k= Subject key identifier: AF:D9:F4:0A:F4:AD:D2:41:44:F7:D0:8D:5C:7F:B9:BB:63:A1:4C:7C Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584909E69242C3FFC95BFACC0200 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4e87abc2-70e9-3d43-b866-1496a6621e10.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 62651 IP address blocks: 173.245.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:92:42:c3:ff:c9:5b:fa:cc:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=092a8aa6-22e5-4cc0-a928-79c41e255f48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:23:4f:b3:6f:70:af:3b:9d:a6:a7:43:83:2e: 24:88:f6:8b:1f:f2:98:38:95:5c:2b:c7:95:44:28: 2f:da:76:62:07:54:e6:f2:ca:b0:f7:64:8c:83:4e: e7:c3:96:f3:e8:46:ac:df:d5:43:4b:48:a9:88:93: ac:6b:72:16:fa:db:73:d0:e7:2e:5d:05:75:6a:68: df:7b:81:8a:aa:65:b7:c6:55:6b:cd:54:cb:80:ab: e3:f2:a7:e2:95:75:4d:ec:14:65:fd:53:fc:58:74: 2d:8d:34:c0:23:6f:c3:4d:4c:a2:f1:e4:88:4e:bc: 1e:ed:f6:4d:5e:63:fb:97:09:76:50:e3:36:1e:a8: 1a:49:a0:64:50:ae:be:f7:b8:5c:11:b9:09:59:29: 87:50:3a:17:6e:12:4c:d3:e9:73:8e:53:0e:53:7f: 85:a9:3b:2f:1d:91:f9:1e:f6:66:f4:2e:7a:06:2b: da:1a:54:89:6a:88:9e:6b:0e:0b:08:3c:55:49:6f: c6:69:6f:cf:18:6f:42:26:d8:27:40:0f:81:65:f6: 64:05:46:6b:df:fd:38:a1:be:9d:19:dc:66:52:b6: d5:79:da:59:aa:27:dc:bc:de:71:57:a5:2f:cd:43: eb:79:f3:93:85:da:06:c3:62:3e:32:35:07:8c:15: b2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D9:F4:0A:F4:AD:D2:41:44:F7:D0:8D:5C:7F:B9:BB:63:A1:4C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4e87abc2-70e9-3d43-b866-1496a6621e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:32:61:f2:94:47:65:03:62:ef:26:74:86:3a:fc:12:0f:c7: 71:d0:f8:20:42:e7:cf:35:8c:17:5b:cb:43:40:1e:d2:1c:01: 06:b7:87:1a:a1:ba:0a:6b:0c:72:26:bf:3b:f7:20:eb:cc:a2: 3b:72:a1:30:3a:88:1b:61:13:21:7a:03:a3:13:1d:1a:6d:05: 3f:03:9f:a9:d9:b5:1c:b7:5b:f5:02:38:5c:73:cb:fc:3b:e5: 09:c2:1c:30:d3:d0:76:4c:7a:ba:7b:ee:f8:7f:71:fc:4c:c3: 32:2e:da:72:62:e3:e7:cb:4e:f6:53:ef:bb:d8:e2:42:17:4f: 33:2b:2c:98:38:2f:1a:88:9d:4a:27:09:b4:4d:14:37:99:cc: 82:0d:2a:f4:14:80:b2:a1:b4:92:fd:23:2b:5e:0f:13:8e:d4: 87:36:28:d2:09:2b:f0:f9:9e:cc:48:92:17:b4:b0:7d:16:2d: 73:1d:ac:44:67:d2:d9:74:b0:1d:71:a9:ad:a6:ac:ea:a5:d8: 75:4f:c9:30:45:ab:c2:e1:3b:b1:e4:b5:94:86:ce:9e:31:5b: b8:96:22:c2:2b:2a:6b:51:45:96:bd:4a:8a:9b:46:82:04:ac: 2e:e1:4e:f1:d8:44:27:76:a6:fa:77:1b:82:84:6e:41:7e:59: ae:b3:46:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5pJCw//JW/rMAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MDkyYThhYTYtMjJlNS00Y2MwLWE5MjgtNzljNDFlMjU1ZjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CNPs29wrzudpqdDgy4kiPaLH/KYOJVcK8eV RCgv2nZiB1Tm8sqw92SMg07nw5bz6Eas39VDS0ipiJOsa3IW+ttz0OcuXQV1amjf e4GKqmW3xlVrzVTLgKvj8qfilXVN7BRl/VP8WHQtjTTAI2/DTUyi8eSITrwe7fZN XmP7lwl2UOM2HqgaSaBkUK6+97hcEbkJWSmHUDoXbhJM0+lzjlMOU3+FqTsvHZH5 HvZm9C56BivaGlSJaoieaw4LCDxVSW/GaW/PGG9CJtgnQA+BZfZkBUZr3/04ob6d GdxmUrbVedpZqifcvN5xV6UvzUPrefOThdoGw2I+MjUHjBWyBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/Z9Ar0rdJBRPfQjVx/ubtjoUx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvNGU4N2FiYzItNzBlOS0z ZDQzLWI4NjYtMTQ5NmE2NjIxZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsyYfKUR2UDYu8mdIY6/BIPx3HQ+CBC5881jBdby0NAHtIcAQa3hxqh ugprDHImvzv3IOvMojtyoTA6iBthEyF6A6MTHRptBT8Dn6nZtRy3W/UCOFxzy/w7 5QnCHDDT0HZMerp77vh/cfxMwzIu2nJi4+fLTvZT77vY4kIXTzMrLJg4LxqInUon CbRNFDeZzIINKvQUgLKhtJL9IyteDxOO1Ic2KNIJK/D5nsxIkhe0sH0WLXMdrERn 0tl0sB1xqa2mrOql2HVPyTBFq8LhO7HktZSGzp4xW7iWIsIrKmtRRZa9SoqbRoIE rC7hTvHYRCd2pvp3G4KEbkF+Wa6zRkE= -----END CERTIFICATE-----Generated at Sun Apr 27 05:50:35 2025 by rpki-client