$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa File: ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa (raw, json) Hash identifier: JfIehkQ3tG+nHtCsQCDkYo64Y0d3nOXpalJJ56sinjY= Subject key identifier: 6C:A5:D0:A2:9D:F9:9F:62:2F:18:6C:B4:88:5B:67:AB:7E:8B:15:BA Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F432858494B64120844A0B15B2D012E00 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 14618 IP address blocks: 204.77.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:12:08:44:a0:b1:5b:2d:01:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=fb180efd-ee14-4332-9807-dc30b48c84be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8d:76:5a:56:92:77:3d:4b:6d:74:36:3a:ff: 3c:a7:ce:5e:7f:62:37:33:a9:f2:54:77:90:d0:6c: 17:6c:a3:97:78:29:5d:fd:fc:84:cb:cb:e0:e5:f5: e8:6a:fb:a4:12:46:24:7a:fe:30:97:82:10:25:3b: f4:a0:52:81:0c:48:b5:ab:01:2e:1a:38:70:9f:50: 04:55:e3:19:32:d4:ee:ca:ac:5e:b1:57:93:6d:70: 64:88:a9:ed:5e:1f:85:e6:32:d0:61:0e:37:bc:fc: 19:f0:d8:2b:de:50:15:1f:53:c4:34:c8:3e:ef:4f: b9:ce:a4:9e:60:10:6b:3e:b6:50:32:2a:0c:fd:89: 16:35:12:dc:81:0e:40:2b:75:c4:40:9a:67:23:d6: d2:cc:80:27:b7:0a:af:6a:da:7b:6e:67:78:73:53: 8b:02:f1:7d:84:75:57:b8:2e:c9:e9:85:e3:c2:95: b7:90:c9:f6:23:5b:2c:1f:db:fc:0c:16:c0:62:5e: 77:eb:58:b2:13:20:c3:68:92:35:96:a3:59:27:2a: 8c:97:6a:52:67:50:51:4a:d1:65:96:fb:7b:50:ce: 3e:ca:09:a5:b5:b7:b4:f2:27:72:0a:4c:90:0e:5a: 6b:51:fe:5b:56:6b:ff:77:36:4b:f1:df:30:c1:b4: 21:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A5:D0:A2:9D:F9:9F:62:2F:18:6C:B4:88:5B:67:AB:7E:8B:15:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:d1:2e:cf:42:89:ff:51:ef:c2:86:b6:f2:a0:30:99:34:f2: e8:e9:56:47:ac:2e:14:1c:ca:f8:29:1d:df:d5:92:55:38:dc: 29:cd:c1:05:d1:cb:62:d9:fc:9a:ae:ae:f8:e6:79:db:69:4e: 1b:97:d7:97:ea:a3:25:47:8c:d5:16:a6:57:18:64:4f:c2:3b: f8:45:cf:8b:b8:4c:86:4c:18:f8:d2:5a:95:47:dc:07:a0:27: 4e:9c:7d:8f:33:1c:b2:98:6d:9d:f3:29:e2:a8:89:ba:98:f8: 73:98:4b:02:03:4f:1b:8b:1f:48:95:55:90:56:44:b3:08:44: ee:17:e6:bd:cb:a4:f6:ff:83:f4:fd:91:47:98:e4:cd:73:22: 7b:38:e1:4f:86:18:ba:9d:fa:17:45:8a:54:54:05:89:ba:9e: d1:52:7f:eb:ef:7a:0b:81:b9:ce:0b:ec:a1:f0:13:86:c0:b2: cd:b9:07:a8:86:34:2a:21:15:ce:0c:7c:2e:72:f7:82:d2:a3: 05:06:fe:45:38:8d:6f:85:d8:ff:55:56:32:bc:25:31:46:38: 7e:cf:13:fc:ed:17:73:1f:18:67:44:c6:53:9b:b5:3b:7b:47: fe:2e:45:ed:4d:70:7c:91:04:b9:20:03:db:19:72:b4:25:8f: 6e:55:97:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBIIRKCxWy0BLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ZmIxODBlZmQtZWUxNC00MzMyLTk4MDctZGMzMGI0OGM4NGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY12WlaSdz1LbXQ2Ov88p85ef2I3M6nyVHeQ 0GwXbKOXeCld/fyEy8vg5fXoavukEkYkev4wl4IQJTv0oFKBDEi1qwEuGjhwn1AE VeMZMtTuyqxesVeTbXBkiKntXh+F5jLQYQ43vPwZ8Ngr3lAVH1PENMg+70+5zqSe YBBrPrZQMioM/YkWNRLcgQ5AK3XEQJpnI9bSzIAntwqvatp7bmd4c1OLAvF9hHVX uC7J6YXjwpW3kMn2I1ssH9v8DBbAYl5361iyEyDDaJI1lqNZJyqMl2pSZ1BRStFl lvt7UM4+ygmltbe08idyCkyQDlprUf5bVmv/dzZL8d8wwbQh2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyl0KKd+Z9iLxhstIhbZ6t+ixW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvY2UzODEyMmQtNWEyYy0z YzkwLTkxZjctNGM5YzMzMjY3NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7RLs9Cif9R78KGtvKgMJk08ujpVkesLhQcyvgpHd/VklU43CnNwQXR y2LZ/JqurvjmedtpThuX15fqoyVHjNUWplcYZE/CO/hFz4u4TIZMGPjSWpVH3Aeg J06cfY8zHLKYbZ3zKeKoibqY+HOYSwIDTxuLH0iVVZBWRLMIRO4X5r3LpPb/g/T9 kUeY5M1zIns44U+GGLqd+hdFilRUBYm6ntFSf+vveguBuc4L7KHwE4bAss25B6iG NCohFc4MfC5y94LSowUG/kU4jW+F2P9VVjK8JTFGOH7PE/ztF3MfGGdExlObtTt7 R/4uRe1NcHyRBLkgA9sZcrQlj25Vl/c= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:49 2025 by rpki-client