$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/cf2344fd-ae0f-376c-bb1c-dc7230820578.roa File: cf2344fd-ae0f-376c-bb1c-dc7230820578.roa (raw, json) Hash identifier: Cr5j1iWldlz5Z7O3yBdcN9/YxbBI/vJxnVpVNJjHhgc= Subject key identifier: 22:2C:B5:BF:58:96:22:0E:3F:5C:FD:41:B9:6A:75:70:47:A4:21:D2 Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F432858492E13C0FFBBA529D51A496900 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/cf2344fd-ae0f-376c-bb1c-dc7230820578.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 400400 IP address blocks: 205.234.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:c0:ff:bb:a5:29:d5:1a:49:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=f0f8a8fd-027f-4bab-8812-a6e2831b92b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:b3:c6:38:69:db:e1:7c:15:df:64:a7:2f: 5d:27:45:84:24:4a:2d:9a:76:50:bb:f4:35:a9:71: 48:eb:1a:75:44:3b:0e:a1:3f:09:b7:b8:49:5e:3b: 1f:5b:e2:a2:de:e2:1f:4e:cf:0b:41:92:00:75:3d: e7:cb:1e:07:55:50:5a:fd:49:0d:f2:88:f0:e8:10: 93:49:5f:87:5e:8e:69:97:26:ba:17:87:ce:c0:71: ae:0d:d5:e8:b6:69:ac:a4:d4:91:08:c2:9c:dc:86: f1:82:94:3e:73:65:69:c0:40:dc:d6:82:7d:92:8e: 5f:81:b3:ce:e1:b2:6d:da:54:ff:36:77:62:08:36: 49:c7:c6:5d:1c:58:35:30:ea:af:c4:30:0c:1a:b6: 46:84:a5:f6:54:d6:cd:e6:13:53:ce:ca:d4:74:f3: 52:7d:83:28:8f:4b:1f:57:8c:ad:a3:24:a7:c9:f4: 95:fe:16:d3:b7:00:e2:1e:4c:01:09:e9:ea:88:3a: 40:13:b1:9e:34:45:69:9c:4a:d3:ff:aa:d3:85:51: af:a3:7a:0d:83:e7:2b:d7:59:4f:46:a4:ec:a8:01: 15:6f:ed:99:8b:a2:cc:8c:ab:82:3d:0a:b9:34:54: 43:4f:0e:da:9d:9c:75:fc:7f:05:4b:34:95:f4:d7: 06:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2C:B5:BF:58:96:22:0E:3F:5C:FD:41:B9:6A:75:70:47:A4:21:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/cf2344fd-ae0f-376c-bb1c-dc7230820578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 205.234.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:1f:fb:e4:53:42:b1:bd:b6:a1:e7:ad:a9:50:f7:0a:da:01: 7f:0d:ca:fb:77:6c:64:c9:b2:96:fe:fe:a2:1a:fc:4f:47:0f: fa:c1:72:8b:ca:43:bb:91:f0:89:e0:5a:a2:14:75:4d:36:6c: 98:0b:95:6c:7c:cb:e1:50:99:4b:c9:af:55:23:a3:ce:8e:4c: 39:6a:22:f9:0c:1b:80:cb:e7:b0:25:fc:2e:da:0d:84:6b:1b: 67:c3:36:da:c7:8f:ee:24:72:39:75:c2:e6:f5:af:64:9d:66: d3:8e:ab:66:6f:71:91:5d:b5:27:03:d5:6c:fe:60:28:ed:97: fe:76:af:2a:25:8b:b0:d2:d2:a4:36:14:75:22:80:d0:dc:6a: b0:e8:e1:a6:88:2a:ec:ab:c5:50:90:bc:e8:84:89:d0:7e:d9: e2:03:fa:a8:d5:cf:ca:d3:87:4f:f2:ca:ee:0d:bd:78:0e:9e: ae:25:05:0e:cf:64:f0:e0:8b:e9:ad:24:b1:2c:10:f2:94:29: 4f:5d:8e:82:25:d4:db:c9:1a:99:70:41:d3:18:8b:07:e8:81: 4a:98:9b:ce:6f:f3:97:b8:79:80:28:fa:88:06:63:0e:49:ac: 66:d3:aa:90:3e:1c:94:4b:e2:9e:d2:c5:da:e2:09:b5:ed:80: 0b:a2:a2:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8D/u6Up1RpJaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZjBmOGE4ZmQtMDI3Zi00YmFiLTg4MTItYTZlMjgzMWI5MmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMqzxjhp2+F8Fd9kpy9dJ0WEJEotmnZQu/Q1 qXFI6xp1RDsOoT8Jt7hJXjsfW+Ki3uIfTs8LQZIAdT3nyx4HVVBa/UkN8ojw6BCT SV+HXo5plya6F4fOwHGuDdXotmmspNSRCMKc3IbxgpQ+c2VpwEDc1oJ9ko5fgbPO 4bJt2lT/NndiCDZJx8ZdHFg1MOqvxDAMGrZGhKX2VNbN5hNTzsrUdPNSfYMoj0sf V4ytoySnyfSV/hbTtwDiHkwBCenqiDpAE7GeNEVpnErT/6rThVGvo3oNg+cr11lP RqTsqAEVb+2Zi6LMjKuCPQq5NFRDTw7anZx1/H8FSzSV9NcGSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIstb9YliIOP1z9QblqdXBHpCHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvY2YyMzQ0ZmQtYWUwZi0z NzZjLWJiMWMtZGM3MjMwODIwNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzep1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQf++RTQrG9tqHnralQ9wraAX8Nyvt3bGTJspb+/qIa/E9HD/rBcovK Q7uR8IngWqIUdU02bJgLlWx8y+FQmUvJr1Ujo86OTDlqIvkMG4DL57Al/C7aDYRr G2fDNtrHj+4kcjl1wub1r2SdZtOOq2ZvcZFdtScD1Wz+YCjtl/52ryoli7DS0qQ2 FHUigNDcarDo4aaIKuyrxVCQvOiEidB+2eID+qjVz8rTh0/yyu4NvXgOnq4lBQ7P ZPDgi+mtJLEsEPKUKU9djoIl1NvJGplwQdMYiwfogUqYm85v85e4eYAo+ogGYw5J rGbTqpA+HJRL4p7SxdriCbXtgAuiolg= -----END CERTIFICATE-----Generated at Wed Apr 30 15:29:35 2025 by rpki-client