$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa File: b343567e-a49e-3300-8a5b-72a22b6d70aa.roa (raw, json) Hash identifier: 6oZGhWerg3ZK0A+NithWLJtUdf37nOoqb7qN0sSgBQA= Subject key identifier: 48:D9:77:37:F8:7F:20:F4:3D:47:EF:99:97:08:90:B9:26:55:A5:23 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584988CF23D0365C1FB75787C600 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 1239 IP address blocks: 172.84.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:23:d0:36:5c:1f:b7:57:87:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=ff71c915-016e-42fb-ae4b-6ec9848c5bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:73:3d:83:51:ec:2d:8d:e9:50:a6:2e:5a: 0a:0f:e2:45:70:82:a4:42:3d:4c:b4:a7:9d:11:91: 3a:99:7e:88:47:50:d3:01:0f:23:e4:10:a5:be:95: bc:05:21:37:c9:81:0b:07:52:87:7e:81:25:19:c1: 4b:37:23:70:f2:7d:3d:f6:6f:78:54:f3:e8:dd:e3: 77:19:40:3b:78:2c:8a:fb:f1:2b:ee:31:96:d6:60: 49:4a:e7:08:9c:30:25:3f:98:80:6e:46:05:2d:56: 87:4b:8c:23:f0:f6:5c:53:37:90:f9:32:04:f8:90: da:fd:6f:8a:7e:a7:01:b4:02:19:bf:17:08:1f:d5: eb:c5:15:f1:68:64:47:e4:2d:65:55:a7:55:c2:bc: f3:b2:26:3f:7d:84:0e:e8:20:fc:44:95:cb:90:9f: b8:9b:67:9b:5b:05:a9:be:75:00:1b:78:2a:32:89: 4f:fe:a5:2c:4f:3f:a0:39:ba:37:d7:7f:2b:b0:30: 5b:61:f2:a2:33:5c:81:b0:5e:64:4b:43:19:da:c7: 92:08:4e:37:04:b9:70:1c:bc:8f:68:65:6b:68:27: 52:85:50:d8:ce:f5:1c:f5:ca:d9:7a:08:3b:92:44: 18:dc:fc:40:37:be:ec:5d:a5:7b:28:78:32:8c:2b: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D9:77:37:F8:7F:20:F4:3D:47:EF:99:97:08:90:B9:26:55:A5:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:91:27:9b:04:9f:47:8d:95:33:ae:25:d7:c1:c9:79:09:76: 6b:0f:58:82:fa:db:ec:03:41:f6:05:6e:1f:99:d7:19:a0:1d: d0:cf:eb:cd:07:72:64:19:5f:2d:d4:77:87:80:ad:ed:59:93: 3b:37:63:92:c2:48:06:f3:20:c2:1b:ce:00:9f:a9:69:d6:eb: d2:9c:fc:10:9d:92:5c:b7:49:b8:16:93:5b:22:5a:61:be:b1: f4:41:9e:6d:c7:73:33:3a:5d:8c:27:29:de:4c:05:bc:8e:cf: e3:d0:f5:3f:15:eb:ca:f2:36:4d:77:b4:5f:a4:44:6c:46:7d: 05:36:09:fa:68:2a:58:1c:6d:46:8c:8c:30:b8:6f:39:91:88: e2:af:76:2f:cf:a8:71:80:f6:4c:b5:d9:ce:28:dd:2c:e0:3f: d3:dd:d7:86:d5:4b:dd:5e:95:3f:fa:75:56:c8:f0:d4:55:c0: f2:e1:ed:06:9b:07:a3:66:da:f9:a6:66:95:24:b6:2d:32:63: e4:c3:5b:17:d2:b7:f5:f9:07:b5:7f:41:c3:10:10:a7:bc:bc: 74:72:91:b8:8a:70:b1:a6:3e:88:36:ab:6e:70:55:2f:f6:50: c3:76:8c:8d:31:63:3a:4b:53:24:0e:3a:c2:75:84:ec:22:43: 8e:bc:78:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyPQNlwft1eHxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk ZmY3MWM5MTUtMDE2ZS00MmZiLWFlNGItNmVjOTg0OGM1YmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJlzPYNR7C2N6VCmLloKD+JFcIKkQj1MtKed EZE6mX6IR1DTAQ8j5BClvpW8BSE3yYELB1KHfoElGcFLNyNw8n099m94VPPo3eN3 GUA7eCyK+/Er7jGW1mBJSucInDAlP5iAbkYFLVaHS4wj8PZcUzeQ+TIE+JDa/W+K fqcBtAIZvxcIH9XrxRXxaGRH5C1lVadVwrzzsiY/fYQO6CD8RJXLkJ+4m2ebWwWp vnUAG3gqMolP/qUsTz+gObo3138rsDBbYfKiM1yBsF5kS0MZ2seSCE43BLlwHLyP aGVraCdShVDYzvUc9crZegg7kkQY3PxAN77sXaV7KHgyjCvhLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjZdzf4fyD0PUfvmZcIkLkmVaUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYjM0MzU2N2UtYTQ5ZS0z MzAwLThhNWItNzJhMjJiNmQ3MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFS9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSRJ5sEn0eNlTOuJdfByXkJdmsPWIL62+wDQfYFbh+Z1xmgHdDP680H cmQZXy3Ud4eAre1Zkzs3Y5LCSAbzIMIbzgCfqWnW69Kc/BCdkly3SbgWk1siWmG+ sfRBnm3HczM6XYwnKd5MBbyOz+PQ9T8V68ryNk13tF+kRGxGfQU2CfpoKlgcbUaM jDC4bzmRiOKvdi/PqHGA9ky12c4o3SzgP9Pd14bVS91elT/6dVbI8NRVwPLh7Qab B6Nm2vmmZpUkti0yY+TDWxfSt/X5B7V/QcMQEKe8vHRykbiKcLGmPog2q25wVS/2 UMN2jI0xYzpLUyQOOsJ1hOwiQ468eNE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:28:46 2025 by rpki-client