$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/86e2c39d-d166-3f9f-b4b9-e70794a93110.roa File: 86e2c39d-d166-3f9f-b4b9-e70794a93110.roa (raw, json) Hash identifier: WrZnEfwV+Ezw0U7SBO4Nn957VsIHDTLoa9TuV8jsslE= Subject key identifier: 35:DD:EA:DA:B5:2E:55:26:CF:EA:FC:42:1B:06:4F:EF:BA:38:EE:96 Certificate issuer: /CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4 Certificate serial: 010D0C9F4328584993F9E29D9131A667E2941400 Authority key identifier: A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/86e2c39d-d166-3f9f-b4b9-e70794a93110.roa Signing time: Sat 19 Apr 2025 13:01:02 +0000 ROA not before: Sat 19 Apr 2025 13:01:02 +0000 ROA not after: Fri 18 Jul 2025 13:01:02 +0000 asID: 14618 IP address blocks: 204.154.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:93:f9:e2:9d:91:31:a6:67:e2:94:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6dcaaff-4250-4357-98e7-c0c322cd2ad4 Validity Not Before: Apr 19 13:01:02 2025 GMT Not After : Jul 18 13:01:02 2025 GMT Subject: CN=42363fb9-e631-4517-b6d9-d159302a35b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:df:d5:20:88:64:78:00:88:6d:da:85:b8: 5b:dc:3c:44:f7:89:71:2e:26:ff:5d:fa:9b:59:7b: c6:09:67:02:12:b5:05:04:f7:89:b3:0e:31:53:5b: f4:f2:fd:fd:27:32:3c:70:02:eb:d1:a8:95:ae:4e: cb:f2:65:8e:60:56:fd:a5:6d:2a:d4:d8:35:46:4d: fe:25:33:8b:87:4a:a8:bf:90:bd:38:4c:5c:58:71: 8d:ce:dc:90:a1:1e:cc:3c:c2:cd:19:a3:7f:69:59: 79:d4:0f:6e:5d:b9:87:c5:e9:46:92:9c:2e:66:0d: 87:61:ba:d6:b4:29:aa:6b:b8:70:61:b2:90:f7:76: d5:8d:7f:b5:5e:23:f4:cd:4d:60:e8:d2:8b:ab:af: bc:27:04:6b:88:90:41:76:4f:33:3d:36:0f:9e:2a: 53:c7:ed:eb:96:65:5b:b7:94:4e:85:79:d4:12:3f: 7e:81:d6:08:e6:63:f7:5c:e2:a1:39:04:66:4f:10: 0e:06:b5:b6:58:e6:f7:7e:3b:1d:f2:2d:92:46:3b: 0a:c5:6c:da:e5:8d:95:44:f1:d5:c7:74:3b:78:e8: cd:cc:19:6a:55:19:a9:5b:54:29:51:a2:09:85:ad: 9d:03:d0:18:af:43:ac:1d:f1:e6:b3:27:30:e3:78: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DD:EA:DA:B5:2E:55:26:CF:EA:FC:42:1B:06:4F:EF:BA:38:EE:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/86e2c39d-d166-3f9f-b4b9-e70794a93110.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.crl X509v3 Authority Key Identifier: keyid:A2:DC:FB:F7:3D:84:5F:DA:7C:C1:DF:FA:5D:4B:69:AE:FD:AD:3C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e6dcaaff-4250-4357-98e7-c0c322cd2ad4.cer sbgp-ipAddrBlock: critical IPv4: 204.154.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:32:bc:7f:b5:7a:28:75:5b:f5:de:d6:f7:36:83:70:c5:9a: 70:42:91:47:04:22:b8:97:0e:f1:3c:c2:7b:d3:38:02:ee:4d: a1:94:af:5d:ca:6e:19:40:cf:c9:f0:cc:88:e8:63:78:13:34: 70:bc:07:55:1b:04:d9:b1:24:fd:6d:eb:d2:33:87:95:46:df: cb:f7:41:b7:0d:a9:1f:f2:e2:18:af:0b:5a:14:e0:d9:a2:d6: d6:9a:e0:d0:e5:1f:ae:ff:d7:e4:dc:de:c1:7d:81:c2:6f:7f: 14:fb:54:8d:d0:11:4c:24:c5:3f:d1:38:88:33:4a:a2:33:57: 23:7f:64:5d:02:d3:38:fe:14:21:45:29:56:7d:9e:a9:d6:30: 20:f3:e2:be:23:cd:9c:df:43:fb:44:80:14:0f:e1:9d:01:4c: 89:0a:1f:2b:93:d6:eb:b6:83:5b:5d:2e:00:fe:14:06:5a:93: 2c:44:6a:ba:4e:c6:0e:ab:71:fc:c9:e8:b4:8b:ca:ec:fd:7e: a7:9c:50:05:3e:4e:a6:ba:62:ef:ad:0f:a3:bf:67:e8:a6:94: 2e:90:0e:fa:ba:c1:35:4f:aa:d5:f4:b4:33:8d:cf:18:2a:aa: bd:eb:7d:6c:bc:0f:1f:db:eb:c8:8c:3b:d8:33:0d:17:13:04: 33:af:c9:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eKdkTGmZ+KUFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTZkY2FhZmYtNDI1MC00MzU3LTk4ZTctYzBjMzIyY2Qy YWQ0MB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk NDIzNjNmYjktZTYzMS00NTE3LWI2ZDktZDE1OTMwMmEzNWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCbf1SCIZHgAiG3ahbhb3DxE94lxLib/Xfqb WXvGCWcCErUFBPeJsw4xU1v08v39JzI8cALr0aiVrk7L8mWOYFb9pW0q1Ng1Rk3+ JTOLh0qov5C9OExcWHGNztyQoR7MPMLNGaN/aVl51A9uXbmHxelGkpwuZg2HYbrW tCmqa7hwYbKQ93bVjX+1XiP0zU1g6NKLq6+8JwRriJBBdk8zPTYPnipTx+3rlmVb t5ROhXnUEj9+gdYI5mP3XOKhOQRmTxAOBrW2WOb3fjsd8i2SRjsKxWza5Y2VRPHV x3Q7eOjNzBlqVRmpW1QpUaIJha2dA9AYr0OsHfHmsycw43hVbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXd6tq1LlUmz+r8QhsGT++6OO6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lNmRj YWFmZi00MjUwLTQzNTctOThlNy1jMGMzMjJjZDJhZDQvODZlMmMzOWQtZDE2Ni0z ZjlmLWI0YjktZTcwNzk0YTkzMTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTZkY2FhZmYtNDI1MC00MzU3LTk4 ZTctYzBjMzIyY2QyYWQ0L2U2ZGNhYWZmLTQyNTAtNDM1Ny05OGU3LWMwYzMyMmNk MmFkNC5jcmwwHwYDVR0jBBgwFoAUotz79z2EX9p8wd/6XUtprv2tPMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lNmRjYWFmZi00MjUwLTQzNTctOThlNy1jMGMz MjJjZDJhZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJrnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMUyvH+1eih1W/Xe1vc2g3DFmnBCkUcEIriXDvE8wnvTOALuTaGUr13K bhlAz8nwzIjoY3gTNHC8B1UbBNmxJP1t69Izh5VG38v3QbcNqR/y4hivC1oU4Nmi 1taa4NDlH67/1+Tc3sF9gcJvfxT7VI3QEUwkxT/ROIgzSqIzVyN/ZF0C0zj+FCFF KVZ9nqnWMCDz4r4jzZzfQ/tEgBQP4Z0BTIkKHyuT1uu2g1tdLgD+FAZakyxEarpO xg6rcfzJ6LSLyuz9fqecUAU+Tqa6Yu+tD6O/Z+imlC6QDvq6wTVPqtX0tDONzxgq qr3rfWy8Dx/b68iMO9gzDRcTBDOvyRE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:20 2025 by rpki-client