$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa File: 2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa (raw, json) Hash identifier: TGnOqNgdAEsc9y065LinwyEpAjq7QAsndT+rGwK8o2A= Subject key identifier: C3:C6:82:91:FD:13:98:DE:7D:51:39:B6:23:06:FE:5B:7E:59:1C:A7 Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F432858496A199AA09D12FE94AC685B40 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 21777 IP address blocks: 204.144.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:9a:a0:9d:12:fe:94:ac:68:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=07c8ab30-cd59-4cf3-83f0-f312980b8e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:90:13:d5:f3:6d:bd:67:d2:cc:6e:a1:c3:a1: 04:43:e8:83:30:a1:53:5f:9e:cf:fd:45:9d:94:1f: 5b:00:06:a1:d3:53:1b:06:08:38:ea:51:bb:1c:3b: cc:08:9c:af:0f:bc:49:d7:e4:ef:6a:52:03:32:89: 33:b7:bd:9e:95:75:1b:57:9d:73:34:51:85:5e:a6: 69:44:fb:3a:23:2e:c8:52:d1:04:53:62:4f:ba:be: 99:0c:a5:6a:f8:ea:99:38:3d:f0:6f:1f:85:b2:72: 84:5b:fe:4b:12:0f:78:06:6b:1d:95:58:d9:f6:20: d6:ea:bc:73:b9:3c:2d:72:af:3c:36:96:c3:52:0d: d2:c5:f4:3a:de:20:ec:55:24:c5:8f:07:ab:01:77: 58:68:72:d2:8a:51:23:71:27:03:4c:52:8e:12:43: f9:55:04:c0:08:8b:2b:33:f1:e1:77:b7:34:c8:b3: 48:ab:74:33:b9:de:d8:69:a5:b2:87:b5:75:ef:a2: d3:d0:0a:33:d8:91:fb:29:96:cb:e8:0d:81:d2:08: 21:d1:95:9d:f5:c8:57:da:fb:4d:18:b9:32:dd:6c: 71:da:4c:40:ef:d2:85:ec:7a:32:87:b0:2b:0e:8a: 8d:d8:01:20:ef:b9:57:f0:cc:82:b8:a9:0f:6b:0b: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C6:82:91:FD:13:98:DE:7D:51:39:B6:23:06:FE:5B:7E:59:1C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/2d1421ca-d4ed-38a6-8a46-2d6c0aaa9d37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 204.144.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c5:c2:6a:b3:86:51:da:b4:16:73:97:83:1f:2d:4d:d8:b0: 84:19:b3:3e:bf:79:d7:06:26:a4:f3:1f:cf:84:25:0e:86:2c: 1b:a8:2e:df:fb:af:97:35:b8:9e:2f:da:b9:fc:e7:c9:b4:f1: 19:6c:0c:66:e1:6d:43:02:f1:87:22:4f:0a:cf:11:43:2e:18: 78:4c:62:6b:e1:d7:72:54:34:0b:58:59:02:30:ad:e9:98:4d: 86:f8:92:07:0f:cb:a4:58:48:17:6d:d7:e3:a2:06:c0:14:a9: 8b:a0:dd:83:19:79:b7:ff:e1:5b:51:3d:04:9c:bf:aa:82:59: a8:e4:65:72:7d:55:3a:3c:4e:83:75:66:72:0a:8b:44:15:5a: 9f:0d:8a:a5:e2:93:0e:78:34:8c:52:13:32:05:a8:fd:e4:cf: f1:d2:c4:01:e9:1d:2c:00:53:c9:b8:24:6f:6b:92:2d:df:28: f0:e5:27:93:61:ae:a7:87:7b:36:d7:18:24:38:b5:1c:af:cb: 1a:42:3b:ff:14:cc:a3:f4:74:05:a4:7c:9f:a1:0c:cc:af:a8: 52:e0:22:81:c7:4e:0e:c9:7a:de:96:f0:75:4e:44:57:d5:72: 8e:21:52:39:aa:bc:4c:50:28:e9:39:d8:b6:d1:c7:35:ca:10: fb:85:a1:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZqgnRL+lKxoW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MDdjOGFiMzAtY2Q1OS00Y2YzLTgzZjAtZjMxMjk4MGI4ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JAT1fNtvWfSzG6hw6EEQ+iDMKFTX57P/UWd lB9bAAah01MbBgg46lG7HDvMCJyvD7xJ1+TvalIDMokzt72elXUbV51zNFGFXqZp RPs6Iy7IUtEEU2JPur6ZDKVq+OqZOD3wbx+FsnKEW/5LEg94BmsdlVjZ9iDW6rxz uTwtcq88NpbDUg3SxfQ63iDsVSTFjwerAXdYaHLSilEjcScDTFKOEkP5VQTACIsr M/Hhd7c0yLNIq3Qzud7YaaWyh7V176LT0Aoz2JH7KZbL6A2B0ggh0ZWd9chX2vtN GLky3Wxx2kxA79KF7Hoyh7ArDoqN2AEg77lX8MyCuKkPawtNFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPGgpH9E5jefVE5tiMG/lt+WRynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvMmQxNDIxY2EtZDRlZC0z OGE2LThhNDYtMmQ2YzBhYWE5ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHFwmqzhlHatBZzl4MfLU3YsIQZsz6/edcGJqTzH8+EJQ6GLBuoLt/7 r5c1uJ4v2rn858m08RlsDGbhbUMC8YciTwrPEUMuGHhMYmvh13JUNAtYWQIwremY TYb4kgcPy6RYSBdt1+OiBsAUqYug3YMZebf/4VtRPQScv6qCWajkZXJ9VTo8ToN1 ZnIKi0QVWp8NiqXikw54NIxSEzIFqP3kz/HSxAHpHSwAU8m4JG9rki3fKPDlJ5Nh rqeHezbXGCQ4tRyvyxpCO/8UzKP0dAWkfJ+hDMyvqFLgIoHHTg7Jet6W8HVORFfV co4hUjmqvExQKOk52LbRxzXKEPuFoew= -----END CERTIFICATE-----Generated at Wed Apr 30 02:54:49 2025 by rpki-client