$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa File: 480969e7-5db5-391b-a687-2a4105fe0786.roa (raw, json) Hash identifier: eQ7udNdmLVsEYcG9hW4cQVQOPQa4hSUefAY6OjCJrOw= Subject key identifier: 65:8F:F3:DB:73:88:9F:3E:A7:02:B4:CD:CD:A8:CE:75:47:3A:A7:F0 Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F43285849780F14B03156064CE14D9840 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 168.203.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:14:b0:31:56:06:4c:e1:4d:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=1ba30af6-39fe-4769-9496-216cdafb869a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d4:a7:d5:67:43:1f:7c:20:dc:b2:cf:c8:4d: 4e:98:78:e7:c0:b8:ac:de:8a:72:d3:a7:bd:c4:29: 6a:fb:12:ac:d3:b6:1c:25:20:6a:b6:39:a0:5c:f9: 6c:bb:e7:31:04:2c:b9:da:9a:0b:5c:5f:d5:3f:72: f4:13:50:ad:1d:05:e0:40:11:d3:6c:79:ce:d7:36: 5b:84:42:b8:7b:f0:66:6c:22:7c:03:53:eb:fa:4a: 3c:40:b1:6e:12:01:00:99:26:4d:f4:25:b2:4d:ec: 59:38:b1:ed:f3:22:56:78:a6:a9:0d:73:b5:0c:f4: d3:79:76:a5:9f:f1:87:00:52:fe:a6:00:23:d5:ae: 0d:86:54:70:20:19:c4:34:0c:47:32:0f:2e:9c:b9: 04:9e:00:df:94:82:84:9c:10:26:7c:0c:b3:3d:44: 1f:cc:13:88:e0:80:01:96:c6:5a:aa:7c:ff:b3:a1: de:51:53:bb:1d:df:da:f5:82:06:9d:ba:c0:f2:ed: 58:6b:3e:3e:50:98:07:2b:5d:2d:e0:32:4c:be:a7: 24:c5:f1:08:68:a4:86:8d:41:98:0e:7e:f3:87:bb: ec:d3:00:84:95:3c:b0:79:76:4c:dc:6b:37:12:97: b8:13:85:df:3c:74:8f:ec:2e:bd:e2:9c:4c:60:ab: ee:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8F:F3:DB:73:88:9F:3E:A7:02:B4:CD:CD:A8:CE:75:47:3A:A7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/480969e7-5db5-391b-a687-2a4105fe0786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d9:fd:f4:3d:fc:71:5d:06:3c:19:6b:ff:34:ad:29:ca:ae: 32:9e:3d:b2:ba:4c:5a:51:3e:70:7a:5d:d0:89:5d:d2:d1:02: 76:43:60:98:98:5b:38:f2:8e:e8:ab:d9:f9:40:d2:af:08:3e: 38:58:aa:19:a9:ee:3b:75:f3:c9:f2:cf:01:98:bf:1e:34:c2: d3:76:ba:ac:b9:a3:47:98:86:8a:86:ef:c7:3a:9e:32:86:06: 01:4f:70:52:22:47:a8:0b:b9:d7:b5:a0:9d:d3:ba:1b:04:15: 0e:ec:9d:98:21:82:15:27:5f:55:e2:bd:bc:58:06:92:e2:cd: 1d:0d:fc:fd:e1:8d:2e:9b:98:f0:00:a6:80:06:94:65:14:c0: f5:7e:b5:1e:6e:d7:3d:94:f9:bd:51:44:ed:01:65:81:90:97: b1:41:15:cb:7b:02:70:68:5a:06:73:f3:9e:d5:e9:e5:07:07: 74:4f:3f:45:41:de:47:6e:5d:4c:8c:f5:cc:4b:ff:7a:2a:91: 6c:9d:f2:88:a7:30:9f:ad:3f:38:2f:d4:e8:29:0b:03:31:45: f6:86:5a:3f:2d:54:d0:91:fa:a2:9a:3b:d4:a5:26:33:76:a2: 27:d3:f3:c9:ea:15:f3:a8:da:b7:5d:d9:81:a4:59:e0:09:75: aa:24:55:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DxSwMVYGTOFNmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MWJhMzBhZjYtMzlmZS00NzY5LTk0OTYtMjE2Y2RhZmI4NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtSn1WdDH3wg3LLPyE1OmHjnwLis3opy06e9 xClq+xKs07YcJSBqtjmgXPlsu+cxBCy52poLXF/VP3L0E1CtHQXgQBHTbHnO1zZb hEK4e/BmbCJ8A1Pr+ko8QLFuEgEAmSZN9CWyTexZOLHt8yJWeKapDXO1DPTTeXal n/GHAFL+pgAj1a4NhlRwIBnENAxHMg8unLkEngDflIKEnBAmfAyzPUQfzBOI4IAB lsZaqnz/s6HeUVO7Hd/a9YIGnbrA8u1Yaz4+UJgHK10t4DJMvqckxfEIaKSGjUGY Dn7zh7vs0wCElTyweXZM3Gs3Epe4E4XfPHSP7C694pxMYKvuCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWP89tziJ8+pwK0zc2oznVHOqfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvNDgwOTY5ZTctNWRiNS0z OTFiLWE2ODctMmE0MTA1ZmUwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqMsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfZ/fQ9/HFdBjwZa/80rSnKrjKePbK6TFpRPnB6XdCJXdLRAnZDYJiY Wzjyjuir2flA0q8IPjhYqhmp7jt188nyzwGYvx40wtN2uqy5o0eYhoqG78c6njKG BgFPcFIiR6gLude1oJ3TuhsEFQ7snZghghUnX1XivbxYBpLizR0N/P3hjS6bmPAA poAGlGUUwPV+tR5u1z2U+b1RRO0BZYGQl7FBFct7AnBoWgZz857V6eUHB3RPP0VB 3kduXUyM9cxL/3oqkWyd8oinMJ+tPzgv1OgpCwMxRfaGWj8tVNCR+qKaO9SlJjN2 oifT88nqFfOo2rdd2YGkWeAJdaokVXw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:29:55 2025 by rpki-client