$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9771c943-4148-3f5a-bfa6-1361d78e20eb.roa File: 9771c943-4148-3f5a-bfa6-1361d78e20eb.roa (raw, json) Hash identifier: W6ZiihSQUcJ5nA83kbagvAUlX5HOc/k/8EsbGNoMR8E= Subject key identifier: 8F:C7:E1:F6:EF:E8:87:BA:64:D5:D4:E9:78:61:94:DB:60:42:3D:C3 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F432858496A19ADA6D3DA792D1AF89910 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9771c943-4148-3f5a-bfa6-1361d78e20eb.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 209 IP address blocks: 204.167.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:ad:a6:d3:da:79:2d:1a:f8:99:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=e393bccf-5805-4790-beff-11080e6f8b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9b:f1:85:4b:f2:79:79:f8:53:ff:73:1c:0f: 08:90:35:4c:0b:73:09:49:e9:64:73:81:f9:4e:e2: d3:b2:fb:f8:5d:8e:bd:17:b2:f9:57:3b:36:b0:a4: de:e9:c5:30:8a:09:21:32:49:03:86:18:ee:8b:e3: 57:3f:04:09:4a:73:11:0e:09:bf:86:30:fb:c1:f0: 97:18:82:da:85:d4:cb:51:97:d1:61:7e:71:69:98: cd:78:51:c4:84:b3:4a:f2:38:c1:1a:91:13:2c:58: c2:28:6f:3a:10:62:cb:fe:b7:a4:67:f7:12:e4:11: 9d:33:51:e9:35:e0:d3:6c:00:97:eb:b3:c7:5e:3b: 53:a2:94:1b:d7:6a:91:49:2a:a7:98:f8:5c:06:ce: 79:30:9c:bd:76:79:e4:d7:11:a8:41:45:75:2b:c2: 0b:c2:b0:a3:0d:4e:8a:5a:3b:eb:b3:78:e5:2d:e5: b9:e3:85:7d:01:29:f3:c8:f7:5b:ad:8d:9a:df:13: e9:83:16:66:c2:df:80:3c:23:b5:cf:a1:c0:f0:29: a3:ae:4d:f6:d8:1c:e5:92:d0:31:17:fa:37:9f:11: 65:2b:99:c6:1a:34:61:6d:22:ab:c2:2a:42:3d:26: d9:69:17:1c:65:5a:65:2f:b2:a7:62:c2:01:a1:3a: 69:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C7:E1:F6:EF:E8:87:BA:64:D5:D4:E9:78:61:94:DB:60:42:3D:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9771c943-4148-3f5a-bfa6-1361d78e20eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 204.167.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d1:d7:41:a1:f2:05:bb:d3:ac:3f:0e:e5:85:91:1d:e0:2a: ec:d5:65:43:60:86:4c:1c:bb:ce:ef:77:fa:6b:ce:28:aa:31: 60:88:27:2e:64:fa:2a:81:74:69:a4:f2:c2:ed:40:16:91:ba: 95:60:1b:11:24:d6:db:ca:a8:d0:01:bf:fa:6e:97:e7:bd:7f: 67:e5:80:73:8c:cc:67:d6:90:f8:8d:d6:3b:47:4a:df:6b:62: 2c:4f:cb:29:11:8c:59:a0:4d:b3:dd:71:08:cc:1a:84:05:3b: d5:81:bb:c3:c8:a5:57:94:fb:54:85:7d:f7:c8:4c:0c:d7:bb: 81:90:b7:7d:e4:2e:88:b1:06:2c:05:3d:a0:09:c3:fa:4b:00: ee:73:96:5b:45:87:19:b8:d8:d6:7b:7e:b4:ec:9f:e0:30:40: e5:6a:db:80:0d:46:5b:c6:6b:fb:b1:bd:de:99:31:b9:7f:c6: 96:0e:c2:93:c0:44:19:64:63:8a:ab:50:f3:81:72:91:04:de: 57:37:83:4f:41:d9:3a:6b:c3:8e:5f:44:38:da:ca:d0:fb:91: 9b:c2:3c:f1:42:8b:1a:b8:aa:eb:9f:9a:ed:f1:e0:fa:1f:df: b3:95:0e:6d:c6:53:9e:bd:35:1b:d1:ae:1c:2e:80:f6:2b:45: 11:46:78:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGa2m09p5LRr4mRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZTM5M2JjY2YtNTgwNS00NzkwLWJlZmYtMTEwODBlNmY4YjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JvxhUvyeXn4U/9zHA8IkDVMC3MJSelkc4H5 TuLTsvv4XY69F7L5Vzs2sKTe6cUwigkhMkkDhhjui+NXPwQJSnMRDgm/hjD7wfCX GILahdTLUZfRYX5xaZjNeFHEhLNK8jjBGpETLFjCKG86EGLL/rekZ/cS5BGdM1Hp NeDTbACX67PHXjtTopQb12qRSSqnmPhcBs55MJy9dnnk1xGoQUV1K8ILwrCjDU6K Wjvrs3jlLeW544V9ASnzyPdbrY2a3xPpgxZmwt+APCO1z6HA8Cmjrk322BzlktAx F/o3nxFlK5nGGjRhbSKrwipCPSbZaRccZVplL7KnYsIBoTppKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/H4fbv6Ie6ZNXU6XhhlNtgQj3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOTc3MWM5NDMtNDE0OC0z ZjVhLWJmYTYtMTM2MWQ3OGUyMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzKfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLR10Gh8gW706w/DuWFkR3gKuzVZUNghkwcu87vd/prziiqMWCIJy5k +iqBdGmk8sLtQBaRupVgGxEk1tvKqNABv/pul+e9f2flgHOMzGfWkPiN1jtHSt9r YixPyykRjFmgTbPdcQjMGoQFO9WBu8PIpVeU+1SFfffITAzXu4GQt33kLoixBiwF PaAJw/pLAO5zlltFhxm42NZ7frTsn+AwQOVq24ANRlvGa/uxvd6ZMbl/xpYOwpPA RBlkY4qrUPOBcpEE3lc3g09B2Tprw45fRDjaytD7kZvCPPFCixq4quufmu3x4Pof 37OVDm3GU569NRvRrhwugPYrRRFGeIQ= -----END CERTIFICATE-----Generated at Mon Apr 28 17:36:45 2025 by rpki-client