$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa File: f45bc517-864a-32c1-b059-db26a9dffa20.roa (raw, json) Hash identifier: WwkyeMWdHBMuWNZwSo4Pe7LJmm9fQuD6gkNrHogtFaY= Subject key identifier: BB:C8:11:7E:1C:FE:D6:FC:1D:CC:1E:B7:A6:68:BF:EB:01:50:71:A9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285848F65BE6BA5D867492E5681100 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 3938 IP address blocks: 204.141.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e6:ba:5d:86:74:92:e5:68:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=a5b2577b-3e36-4bd8-9d34-a6866bb3aa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ce:6c:a8:f9:87:f3:ca:5a:83:79:10:e4:e9: 65:d3:04:ba:e3:a9:90:3c:03:10:5a:e7:1a:2d:53: 58:f0:e2:84:61:2f:4c:5a:7b:8f:ee:eb:55:cc:47: be:ee:1e:4c:68:8b:f0:a4:20:ef:4d:45:07:f8:12: 93:2f:02:57:5d:7f:1c:52:41:ce:b6:9e:cf:4d:d5: 6e:10:da:fb:8b:42:a0:d4:c7:3a:99:36:db:be:fd: 9e:e4:58:9d:24:bf:ed:e1:82:e2:f1:b6:3f:07:6e: ef:b1:35:65:54:96:d3:c6:f9:d9:c3:fc:ae:47:de: 19:ac:de:7e:5d:34:ea:c2:1a:86:b5:c1:8e:55:4e: c5:37:cc:96:2f:9c:64:71:0b:cb:9a:c6:fd:14:89: ac:c1:66:bb:e2:8e:5f:f9:82:ac:90:27:5c:89:36: f2:8b:25:9b:2e:52:a4:e8:7b:5e:cb:6f:0b:a4:2f: ae:60:9e:6c:f6:86:69:18:e3:b4:2c:51:2a:42:fa: da:bc:51:3e:a6:05:a0:6e:53:82:0a:5c:06:de:b0: 0d:0b:26:e6:e5:7e:25:1e:c8:b8:e2:77:f0:7d:47: 5b:fd:13:cc:7c:61:71:0e:42:14:78:2d:72:0e:e8: f9:b0:82:ac:4a:27:21:0f:19:9c:d7:4a:c7:be:c2: 34:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C8:11:7E:1C:FE:D6:FC:1D:CC:1E:B7:A6:68:BF:EB:01:50:71:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f45bc517-864a-32c1-b059-db26a9dffa20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5b:77:cf:72:de:a3:2d:57:04:0f:92:93:62:c0:9f:07:8d: fc:91:a4:95:ca:eb:d3:cc:64:2d:53:ea:5e:da:bf:6f:c6:87: 40:03:1c:d9:2a:30:5b:6c:78:b8:a5:6c:44:46:cc:c9:95:b0: cf:aa:18:7a:6c:a6:9d:c7:59:3c:7b:95:74:df:a1:06:52:40: 37:cc:6a:05:83:39:3a:63:a3:24:ed:ad:e2:f8:17:5d:ee:cc: 93:79:be:bf:d1:7f:ed:e3:f4:65:88:5a:66:fc:37:5b:fe:95: 01:3c:42:a1:ae:bb:a6:a2:c0:d1:39:f9:cc:80:04:ed:32:60: 3a:52:02:62:8d:62:ff:1e:7d:d0:20:30:af:4a:93:ef:51:6d: 22:d2:eb:ef:c7:5a:60:1a:e1:39:48:e0:c2:d6:36:51:32:c5: d8:c4:3e:f5:09:83:cc:99:90:91:20:16:a1:f9:c8:f3:f0:05: 76:d0:a3:e3:b8:7e:46:95:cf:ef:26:50:48:ad:9c:c0:40:d9: d8:f2:db:17:44:6d:bc:28:d3:fb:14:36:5b:04:7b:93:22:e3: 69:ac:42:86:cd:67:c2:e0:f8:ec:7f:7e:45:ac:7c:be:fa:60: 46:c2:0a:6f:66:e9:e5:31:a4:b2:f4:21:77:6a:32:45:70:e6: d1:53:d6:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+a6XYZ0kuVoEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YTViMjU3N2ItM2UzNi00YmQ4LTlkMzQtYTY4NjZiYjNhYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm85sqPmH88pag3kQ5Oll0wS646mQPAMQWuca LVNY8OKEYS9MWnuP7utVzEe+7h5MaIvwpCDvTUUH+BKTLwJXXX8cUkHOtp7PTdVu ENr7i0Kg1Mc6mTbbvv2e5FidJL/t4YLi8bY/B27vsTVlVJbTxvnZw/yuR94ZrN5+ XTTqwhqGtcGOVU7FN8yWL5xkcQvLmsb9FImswWa74o5f+YKskCdciTbyiyWbLlKk 6Htey28LpC+uYJ5s9oZpGOO0LFEqQvravFE+pgWgblOCClwG3rANCybm5X4lHsi4 4nfwfUdb/RPMfGFxDkIUeC1yDuj5sIKsSichDxmc10rHvsI0FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvIEX4c/tb8Hcwet6Zov+sBUHGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZjQ1YmM1MTctODY0YS0z MmMxLWIwNTktZGIyNmE5ZGZmYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzI18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1bd89y3qMtVwQPkpNiwJ8HjfyRpJXK69PMZC1T6l7av2/Gh0ADHNkq MFtseLilbERGzMmVsM+qGHpspp3HWTx7lXTfoQZSQDfMagWDOTpjoyTtreL4F13u zJN5vr/Rf+3j9GWIWmb8N1v+lQE8QqGuu6aiwNE5+cyABO0yYDpSAmKNYv8efdAg MK9Kk+9RbSLS6+/HWmAa4TlI4MLWNlEyxdjEPvUJg8yZkJEgFqH5yPPwBXbQo+O4 fkaVz+8mUEitnMBA2djy2xdEbbwo0/sUNlsEe5Mi42msQobNZ8Lg+Ox/fkWsfL76 YEbCCm9m6eUxpLL0IXdqMkVw5tFT1v8= -----END CERTIFICATE-----Generated at Sat Apr 26 16:00:48 2025 by rpki-client