$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/3b0adfcb-841b-360d-b808-c58d891a93d9.roa File: 3b0adfcb-841b-360d-b808-c58d891a93d9.roa (raw, json) Hash identifier: 8AME9HDSfBQVYIBpQ4zNRQETk4uQ4seNqeqw40aUWtE= Subject key identifier: 24:CF:DE:89:EB:21:00:9C:4D:C6:4F:20:03:DB:5D:71:99:5B:E3:C7 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F432858494B641216612BEC5438195380 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/3b0adfcb-841b-360d-b808-c58d891a93d9.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 16509 IP address blocks: 204.77.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:12:16:61:2b:ec:54:38:19:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=1bc9a17d-72e3-4f60-bfc9-d13a3a2cf645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3e:02:c9:ca:5f:d4:70:9e:c0:33:f9:ee:1b: 93:b9:60:ba:e0:fa:8b:46:09:51:dc:11:ed:dc:c5: a6:97:8f:b7:be:e7:18:35:86:23:7a:17:dd:35:d7: 9a:77:75:25:60:25:60:41:21:21:6d:c1:f0:f4:6b: 3e:17:4a:c8:95:49:4d:54:fa:17:16:1b:a3:d8:b8: 8f:06:ef:18:ed:a7:dc:09:77:fd:fa:5c:97:4a:2a: 15:8d:10:35:dd:b1:d7:17:e0:1b:4a:95:fe:e0:9a: 04:3a:45:d0:1b:a5:da:58:7e:7a:c3:b2:cc:f8:c8: ee:35:c1:31:e8:a1:ad:bc:01:12:17:69:af:ea:66: 9c:3c:a8:4d:9c:4d:ed:ad:45:18:98:3b:37:8c:6d: 5d:de:2f:0e:23:5e:18:de:81:db:63:e9:52:07:b9: db:75:f5:53:bf:8c:8f:bf:9f:86:61:85:41:83:aa: 67:aa:1f:57:a1:73:eb:f8:63:ab:a7:8c:6f:37:f4: 83:89:49:de:77:15:48:c4:ac:c1:7e:88:9c:5a:5f: d4:2e:bd:55:b9:07:e3:44:4c:ef:32:75:e3:42:95: c9:0e:02:c0:11:38:fa:2b:b6:1e:32:c9:75:0f:8a: 67:d2:d8:88:b6:bd:5c:14:f0:ab:72:c8:b8:c6:78: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CF:DE:89:EB:21:00:9C:4D:C6:4F:20:03:DB:5D:71:99:5B:E3:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/3b0adfcb-841b-360d-b808-c58d891a93d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:43:32:c3:6c:a6:da:2a:ad:53:14:8d:e7:1f:ec:2b:5a:aa: b5:ca:df:1f:07:bb:63:c3:de:38:58:0a:47:1f:87:9b:17:4e: 83:56:e3:27:e0:1f:2e:5b:51:58:a8:9c:4f:57:91:93:b3:10: 1a:9f:e3:3e:ca:99:53:0b:59:b7:0a:87:22:d0:ca:25:ba:97: 0f:2d:5b:06:59:0d:c3:6b:27:6f:8b:0a:d5:ed:a2:ff:60:d5: e8:fa:17:06:24:a9:e1:9f:ca:bf:ff:c4:13:f3:95:30:2c:77: f0:81:a9:59:f4:8b:77:93:35:7b:d7:63:ba:f6:ca:fe:da:b8: 24:a1:5e:4d:9f:a3:88:09:18:bc:7f:c3:a8:3b:20:88:f9:eb: a2:54:1e:3a:65:95:5d:35:f8:a9:70:f1:d4:72:03:62:6e:98: 12:39:9f:09:79:16:89:be:be:98:1d:9a:03:10:c5:82:70:96: a8:41:66:ab:3d:19:23:6c:90:11:9f:26:7b:f1:8b:88:d3:4c: d1:28:eb:5f:6e:b1:a2:b1:9d:23:d8:c2:4b:d9:34:66:0a:e1: 18:34:e7:d4:5c:19:86:56:b1:a1:eb:d2:73:ff:2e:1f:bd:61: d5:6b:95:b3:bd:25:36:20:4b:2f:51:66:e2:e3:45:1c:01:a4: 41:dc:5d:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBIWYSvsVDgZU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MWJjOWExN2QtNzJlMy00ZjYwLWJmYzktZDEzYTNhMmNmNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz4Cycpf1HCewDP57huTuWC64PqLRglR3BHt 3MWml4+3vucYNYYjehfdNdead3UlYCVgQSEhbcHw9Gs+F0rIlUlNVPoXFhuj2LiP Bu8Y7afcCXf9+lyXSioVjRA13bHXF+AbSpX+4JoEOkXQG6XaWH56w7LM+MjuNcEx 6KGtvAESF2mv6macPKhNnE3trUUYmDs3jG1d3i8OI14Y3oHbY+lSB7nbdfVTv4yP v5+GYYVBg6pnqh9XoXPr+GOrp4xvN/SDiUnedxVIxKzBfoicWl/ULr1VuQfjREzv MnXjQpXJDgLAETj6K7YeMsl1D4pn0tiItr1cFPCrcsi4xnjEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTP3onrIQCcTcZPIAPbXXGZW+PHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvM2IwYWRmY2ItODQxYi0z NjBkLWI4MDgtYzU4ZDg5MWE5M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBDMsNsptoqrVMUjecf7CtaqrXK3x8Hu2PD3jhYCkcfh5sXToNW4yfg Hy5bUVionE9XkZOzEBqf4z7KmVMLWbcKhyLQyiW6lw8tWwZZDcNrJ2+LCtXtov9g 1ej6FwYkqeGfyr//xBPzlTAsd/CBqVn0i3eTNXvXY7r2yv7auCShXk2fo4gJGLx/ w6g7IIj566JUHjpllV01+Klw8dRyA2JumBI5nwl5Fom+vpgdmgMQxYJwlqhBZqs9 GSNskBGfJnvxi4jTTNEo619usaKxnSPYwkvZNGYK4Rg059RcGYZWsaHr0nP/Lh+9 YdVrlbO9JTYgSy9RZuLjRRwBpEHcXfg= -----END CERTIFICATE-----Generated at Sun Apr 27 01:11:49 2025 by rpki-client