$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eead68f8-e203-32f6-9c05-c30eb025fea8.roa File: eead68f8-e203-32f6-9c05-c30eb025fea8.roa (raw, json) Hash identifier: tAS7FQCKXs9xBx86OeP7IQZ6zx+7m4NWQhX3UxsWXR8= Subject key identifier: 2B:76:23:E8:9D:9B:38:7E:F5:8C:EE:2E:A8:0D:80:03:87:A2:9E:9E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584919418872CD26BE31DDE4DD20 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eead68f8-e203-32f6-9c05-c30eb025fea8.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 397601 IP address blocks: 204.2.178.80/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:88:72:cd:26:be:31:dd:e4:dd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=a731379c-9dfd-4667-8fb9-b5f7fe69ad81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:97:7c:92:4a:61:7a:a8:ec:34:5f:2b:5c: 54:b3:5d:c8:c7:91:3e:fc:5b:c7:d0:d3:9a:45:ef: 79:67:67:f2:c5:89:9b:6e:92:58:ea:97:c4:b6:94: 40:d2:d7:17:de:82:a1:b2:b6:6d:c8:f4:92:bc:f1: d9:52:63:a7:96:c1:77:f9:d1:c4:90:21:e0:e6:94: a1:80:6a:f6:fa:80:6b:bb:85:60:30:20:32:5b:3e: 84:f6:b0:26:c8:f6:3f:3c:04:c4:ce:02:13:2f:61: a5:63:d7:00:b8:81:78:90:81:37:d9:7c:18:d6:2f: f9:36:5a:38:c1:63:0f:92:10:27:09:2b:aa:57:e0: 1e:1a:e5:b6:1d:58:b4:9f:bd:5d:3e:a4:f4:c8:8a: 36:8c:b8:33:99:97:34:f6:fb:34:85:b1:77:60:88: 65:d5:56:7e:61:41:7b:7a:65:40:45:35:31:58:0c: 17:47:69:80:c3:0d:c2:3e:7e:d4:6f:d8:0b:6e:6c: 33:fd:7d:6c:a9:df:28:7e:4c:3c:4e:fc:fa:63:92: 3e:a6:3b:c7:d4:a6:5e:1e:85:d5:0f:e6:8f:7b:72: 13:37:21:40:d8:02:7b:ca:03:e0:3d:0b:90:f3:05: 3e:bb:8b:82:be:6e:e9:a2:69:92:72:e3:56:a7:3c: 82:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:76:23:E8:9D:9B:38:7E:F5:8C:EE:2E:A8:0D:80:03:87:A2:9E:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/eead68f8-e203-32f6-9c05-c30eb025fea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.178.80/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d3:86:93:31:4b:c0:dc:95:96:2b:d0:2f:fa:a5:79:fa:04: ca:2f:31:10:e6:31:32:82:a4:f0:c0:2e:d5:77:a0:33:75:bc: ec:73:97:f8:eb:4b:5e:c2:7f:64:78:99:7a:f0:1c:03:df:11: cc:12:f9:09:82:ed:ce:e8:64:0f:75:56:41:98:03:f2:d3:23: 96:76:4e:c8:9a:fe:af:90:01:67:54:6d:6c:8c:c8:c7:bb:69: 40:ad:bb:02:eb:41:00:e8:19:e5:93:3f:ac:27:2e:15:5c:0b: a3:2d:e5:7a:66:c0:01:d1:61:91:b6:32:6f:44:0d:59:e7:c9: dc:7d:f6:1f:bf:55:aa:bd:e2:3e:47:87:53:aa:64:3a:5b:40: 77:1c:a4:5e:90:7e:d4:76:2c:41:00:ae:71:e3:9f:a0:62:28: 38:a1:9e:c2:c9:df:0d:32:7f:99:0d:d7:77:0f:1f:a3:ea:47: 06:e2:94:38:c6:14:74:5a:99:5e:db:b7:4a:70:34:2c:d7:e0: c9:5e:23:2f:78:cb:b6:5c:6a:40:45:2a:25:79:1d:cd:cc:96: 43:73:b0:10:0e:38:7d:5a:6a:a0:04:83:ed:38:9f:8a:4c:32: 9b:f5:47:78:b3:a2:f7:a1:d6:03:9d:e1:3d:e6:34:3a:38:bd: 75:65:ed:31 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkZQYhyzSa+Md3k3SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YTczMTM3OWMtOWRmZC00NjY3LThmYjktYjVmN2ZlNjlhZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUyXfJJKYXqo7DRfK1xUs13Ix5E+/FvH0NOa Re95Z2fyxYmbbpJY6pfEtpRA0tcX3oKhsrZtyPSSvPHZUmOnlsF3+dHEkCHg5pSh gGr2+oBru4VgMCAyWz6E9rAmyPY/PATEzgITL2GlY9cAuIF4kIE32XwY1i/5Nlo4 wWMPkhAnCSuqV+AeGuW2HVi0n71dPqT0yIo2jLgzmZc09vs0hbF3YIhl1VZ+YUF7 emVARTUxWAwXR2mAww3CPn7Ub9gLbmwz/X1sqd8ofkw8Tvz6Y5I+pjvH1KZeHoXV D+aPe3ITNyFA2AJ7ygPgPQuQ8wU+u4uCvm7pommScuNWpzyC+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCt2I+idmzh+9YzuLqgNgAOHop6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZWVhZDY4ZjgtZTIwMy0z MmY2LTljMDUtYzMwZWIwMjVmZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAKyUDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBB04aTMUvA3JWWK9Av+qV5+gTKLzEQ5jEygqTwwC7Vd6Azdbzsc5f4 60tewn9keJl68BwD3xHMEvkJgu3O6GQPdVZBmAPy0yOWdk7Imv6vkAFnVG1sjMjH u2lArbsC60EA6Bnlkz+sJy4VXAujLeV6ZsAB0WGRtjJvRA1Z58ncffYfv1WqveI+ R4dTqmQ6W0B3HKRekH7UdixBAK5x45+gYig4oZ7Cyd8NMn+ZDdd3Dx+j6kcG4pQ4 xhR0Wple27dKcDQs1+DJXiMveMu2XGpARSoleR3NzJZDc7AQDjh9WmqgBIPtOJ+K TDKb9Ud4s6L3odYDneE95jQ6OL11Ze0x -----END CERTIFICATE-----Generated at Sun Apr 27 14:14:29 2025 by rpki-client