$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa File: d4c36706-7a07-30a3-8ac0-4f853f76d634.roa (raw, json) Hash identifier: Fdfpk4cW4Axa0Sh5BMfZnKdlpoC/jU/SXCMDKzjEe1A= Subject key identifier: 4B:89:EC:6B:80:C5:4A:8C:6D:3F:39:42:2E:E4:D7:2F:17:44:04:64 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F43285849EBEA570BD2FF5791649D1F00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa Signing time: Wed 21 May 2025 01:00:49 +0000 ROA not before: Wed 21 May 2025 01:00:49 +0000 ROA not after: Tue 19 Aug 2025 01:00:49 +0000 asID: 54203 IP address blocks: 173.255.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:ea:57:0b:d2:ff:57:91:64:9d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: May 21 01:00:49 2025 GMT Not After : Aug 19 01:00:49 2025 GMT Subject: CN=74efcc71-a04b-4648-958c-5d4ed4f606c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:71:6e:d8:5b:fa:8c:fb:45:66:cf:f2:da:26: 16:f6:a2:78:cf:4b:d5:44:1f:f8:e7:a8:46:e7:d0: 14:71:ed:53:5c:0a:6a:9c:46:6a:86:27:4e:d5:22: 03:0d:6f:fb:dc:cb:e8:28:23:48:77:64:b5:c0:60: 61:21:7f:66:dd:b5:a2:2b:94:55:05:9d:cf:c9:bf: 30:cb:b2:d4:fa:89:23:ca:e5:ff:9f:e3:f8:06:c2: 1e:c9:9d:99:c9:00:de:70:2e:db:f8:bc:e5:8d:d2: 8c:89:84:01:98:5b:13:be:73:ae:be:2f:79:0c:ee: 2c:ec:59:cf:2f:6d:4d:5f:98:cc:bc:57:6a:71:1b: f6:c0:2f:12:ed:80:53:d3:6d:da:f9:36:12:86:ef: 7c:44:e1:f4:32:5a:4e:a3:cc:37:22:36:11:03:94: 9b:1c:b0:61:3f:db:73:aa:b3:6b:4a:2b:75:02:fd: 2e:84:22:17:d8:27:60:96:bc:86:4f:af:0c:ac:d4: 39:b4:a4:b0:b9:56:37:3b:71:a4:b5:93:d3:d6:bf: 1f:00:a4:5b:b6:7b:4c:53:28:11:91:75:e8:60:de: 96:fa:79:28:e9:ae:03:0b:b8:b4:3b:d9:5f:85:e6: 42:2a:56:29:51:21:f8:12:08:e0:37:a4:22:02:38: 9a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:89:EC:6B:80:C5:4A:8C:6D:3F:39:42:2E:E4:D7:2F:17:44:04:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c36706-7a07-30a3-8ac0-4f853f76d634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:51:08:dd:05:a4:d0:e9:00:48:b7:0b:df:73:d9:46:a1:e2: 4b:e6:8f:47:68:14:65:87:0a:e5:92:c9:ad:18:dc:27:a7:ed: d0:7f:b4:d6:73:08:df:6c:73:e3:e1:64:50:5a:3d:39:4d:8e: f7:fa:89:2c:5a:48:7a:b1:c4:af:eb:47:b2:04:9d:17:8e:b1: 58:c9:82:fb:1b:4e:1d:85:b8:bc:81:02:84:ca:d2:da:05:63: 10:a3:d4:fc:11:0f:b1:6e:21:71:55:2b:a2:ba:67:e3:7a:6e: 22:c4:cc:59:41:da:4d:bd:c3:b3:f2:07:86:be:51:e8:63:ac: ae:c7:2f:a5:df:2c:91:55:f2:fa:a0:b6:07:c8:34:cd:9b:dd: e5:9d:35:18:a8:c2:2f:8e:9b:51:46:f4:97:a6:5c:ec:49:36: 49:46:c2:b4:f3:b6:be:ae:54:5f:fe:4c:66:ba:b5:75:f1:7b: 3a:1c:7f:ef:95:ce:ac:8d:04:64:85:af:08:e2:9c:c8:aa:ea: 98:d9:a7:69:17:51:39:f6:27:a4:24:f6:dc:37:b7:a0:aa:48: 7a:33:1e:20:ab:a7:22:7f:90:52:6f:99:d9:01:5a:4a:15:d1: e4:95:6c:fa:7c:c1:7b:4b:52:de:66:1b:f7:5f:46:3f:74:17: d7:19:11:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6lcL0v9XkWSdHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk NzRlZmNjNzEtYTA0Yi00NjQ4LTk1OGMtNWQ0ZWQ0ZjYwNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnFu2Fv6jPtFZs/y2iYW9qJ4z0vVRB/456hG 59AUce1TXApqnEZqhidO1SIDDW/73MvoKCNId2S1wGBhIX9m3bWiK5RVBZ3Pyb8w y7LU+okjyuX/n+P4BsIeyZ2ZyQDecC7b+LzljdKMiYQBmFsTvnOuvi95DO4s7FnP L21NX5jMvFdqcRv2wC8S7YBT023a+TYShu98ROH0MlpOo8w3IjYRA5SbHLBhP9tz qrNrSit1Av0uhCIX2CdglryGT68MrNQ5tKSwuVY3O3GktZPT1r8fAKRbtntMUygR kXXoYN6W+nko6a4DC7i0O9lfheZCKlYpUSH4EgjgN6QiAjia7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuJ7GuAxUqMbT85Qi7k1y8XRARkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzY3MDYtN2EwNy0z MGEzLThhYzAtNGY4NTNmNzZkNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArf+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtRCN0FpNDpAEi3C99z2Uah4kvmj0doFGWHCuWSya0Y3Cen7dB/tNZz CN9sc+PhZFBaPTlNjvf6iSxaSHqxxK/rR7IEnReOsVjJgvsbTh2FuLyBAoTK0toF YxCj1PwRD7FuIXFVK6K6Z+N6biLEzFlB2k29w7PyB4a+UehjrK7HL6XfLJFV8vqg tgfINM2b3eWdNRiowi+Om1FG9JemXOxJNklGwrTztr6uVF/+TGa6tXXxezocf++V zqyNBGSFrwjinMiq6pjZp2kXUTn2J6Qk9tw3t6CqSHozHiCrpyJ/kFJvmdkBWkoV 0eSVbPp8wXtLUt5mG/dfRj90F9cZERo= -----END CERTIFICATE-----Generated at Mon Jun 16 20:01:06 2025 by rpki-client