$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa File: a8644137-6b60-3be7-b264-80e3e2c1a315.roa (raw, json) Hash identifier: My+Rpn0KRn6RdHmMH6oTZMr4iZFlM0AtOGqe/nrj+KY= Subject key identifier: 75:45:C6:54:46:5A:8F:38:3C:39:DD:EC:9B:E5:2E:AC:5A:46:3A:20 Certificate issuer: /CN=17c62883-899d-4b86-8800-e9715d10a482 Certificate serial: 010D0C9F432858490E16C04ECC8A6C8F67227360 Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 30305 IP address blocks: 74.113.192.0/21 maxlen: 24 204.86.64.0/19 maxlen: 24 206.201.64.0/20 maxlen: 24 208.93.241.0/24 maxlen: 24 208.93.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c0:4e:cc:8a:6c:8f:67:22:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=84585832-aa26-49ae-b3a1-c998d924c2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d7:d3:f4:64:e3:59:b9:a5:37:3b:72:42:ac: ff:29:01:d8:7d:5d:6c:1f:0a:1c:e6:92:50:c7:81: c0:c3:d7:99:98:14:6c:30:18:2e:37:09:d9:7f:a1: cf:2b:93:38:b6:e9:29:6c:dc:cf:3d:5d:2b:87:66: 8e:41:8e:e3:9e:b7:30:6f:19:8f:79:22:ba:2f:6e: 38:f3:59:38:71:14:f2:5d:18:12:cd:08:59:7a:d1: e0:f1:06:7c:ab:93:87:1a:fd:0b:14:38:d2:ef:44: 1d:55:11:d7:2e:bb:71:d6:f1:01:dc:ad:b6:d3:f1: 2d:bd:0a:0b:e4:e5:2f:65:6a:cd:27:e7:10:d1:9f: ed:58:f5:05:5a:28:bd:53:11:e6:30:2d:36:f5:bc: 83:ef:a5:f0:04:41:7e:15:3e:8f:2e:9d:1b:5d:92: 99:10:53:ec:a9:de:01:15:19:74:8d:87:cd:9d:7a: b2:a5:47:73:33:bf:f3:14:bd:2f:97:1e:46:de:34: 79:0f:88:0d:a6:5b:89:ca:69:71:3a:c3:28:57:51: bb:8d:d6:ad:bb:aa:98:9f:ff:60:0b:91:c8:d8:8b: 7e:71:bd:af:1a:2b:3b:9e:bb:cd:99:96:cf:c2:35: fd:ce:0c:e5:99:6d:7c:4b:35:94:62:ec:68:a1:a4: 00:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:45:C6:54:46:5A:8F:38:3C:39:DD:EC:9B:E5:2E:AC:5A:46:3A:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/a8644137-6b60-3be7-b264-80e3e2c1a315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl X509v3 Authority Key Identifier: keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer sbgp-ipAddrBlock: critical IPv4: 74.113.192.0/21 204.86.64.0/19 206.201.64.0/20 208.93.241.0-208.93.243.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1a:89:7b:02:8f:e9:1e:60:bc:61:85:2c:2f:ce:c2:67:a8: d6:f4:65:4e:6c:54:9a:a8:27:26:4f:89:7f:dc:9f:6d:c0:6e: fe:93:47:47:6f:06:90:26:6c:30:68:7d:a7:12:5d:16:b6:22: ed:12:92:bd:03:95:2f:c7:2b:fb:b4:9c:35:39:63:f9:30:c6: dc:8a:86:76:4c:42:77:72:42:95:ab:71:81:84:a0:47:76:21: 1b:71:59:bc:3c:cc:fa:46:d5:df:38:ce:93:d0:a9:e5:03:a0: 51:c8:e9:94:9b:3a:29:59:fe:d8:54:b4:d1:cd:0d:e0:cd:f0: 1c:3f:b2:1f:60:0f:eb:c9:c2:e8:ed:43:20:c3:1b:cd:b2:61: 89:b4:e9:29:98:ec:da:21:e8:36:84:6a:e9:05:6a:a4:92:07: b1:cc:33:c8:b0:4a:32:e7:42:f1:df:15:d5:f5:b5:fd:5d:d5: 34:20:60:e5:73:08:b2:c1:15:76:5b:8f:5f:36:30:48:af:a2: 40:8e:d2:13:81:f9:97:7d:a6:39:ec:4a:40:7a:53:5d:e0:c2: 9c:85:59:e8:5e:f7:fb:a3:f0:68:e9:b4:af:18:e7:18:22:c3: e3:aa:01:45:3b:76:97:3a:eb:52:f6:4c:7c:6c:dd:f2:cb:9e: 61:10:d8:63 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEkOFsBOzIpsj2cic2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjNjI4ODMtODk5ZC00Yjg2LTg4MDAtZTk3MTVkMTBh NDgyMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk ODQ1ODU4MzItYWEyNi00OWFlLWIzYTEtYzk5OGQ5MjRjMmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9fT9GTjWbmlNztyQqz/KQHYfV1sHwoc5pJQ x4HAw9eZmBRsMBguNwnZf6HPK5M4tukpbNzPPV0rh2aOQY7jnrcwbxmPeSK6L244 81k4cRTyXRgSzQhZetHg8QZ8q5OHGv0LFDjS70QdVRHXLrtx1vEB3K220/EtvQoL 5OUvZWrNJ+cQ0Z/tWPUFWii9UxHmMC029byD76XwBEF+FT6PLp0bXZKZEFPsqd4B FRl0jYfNnXqypUdzM7/zFL0vlx5G3jR5D4gNpluJymlxOsMoV1G7jdatu6qYn/9g C5HI2It+cb2vGis7nrvNmZbPwjX9zgzlmW18SzWUYuxooaQAUQIDAQABo4IDbzCC A2swHQYDVR0OBBYEFHVFxlRGWo84PDnd7JvlLqxaRjogMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2 Mjg4My04OTlkLTRiODYtODgwMC1lOTcxNWQxMGE0ODIvYTg2NDQxMzctNmI2MC0z YmU3LWIyNjQtODBlM2UyYzFhMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTdjNjI4ODMtODk5ZC00Yjg2LTg4 MDAtZTk3MTVkMTBhNDgyLzE3YzYyODgzLTg5OWQtNGI4Ni04ODAwLWU5NzE1ZDEw YTQ4Mi5jcmwwHwYDVR0jBBgwFoAU3RSJnAK92EnUJKV7aIh0t2HdE4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2Mjg4My04OTlkLTRiODYtODgwMC1lOTcx NWQxMGE0ODIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDSnHAAwQF zFZAAwQEzslAMAwDBADQXfEDBALQXfAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGhqJewKP6R5gvGGFLC/O wmeo1vRlTmxUmqgnJk+Jf9yfbcBu/pNHR28GkCZsMGh9pxJdFrYi7RKSvQOVL8cr +7ScNTlj+TDG3IqGdkxCd3JClatxgYSgR3YhG3FZvDzM+kbV3zjOk9Cp5QOgUcjp lJs6KVn+2FS00c0N4M3wHD+yH2AP68nC6O1DIMMbzbJhibTpKZjs2iHoNoRq6QVq pJIHscwzyLBKMudC8d8V1fW1/V3VNCBg5XMIssEVdluPXzYwSK+iQI7SE4H5l32m OexKQHpTXeDCnIVZ6F73+6PwaOm0rxjnGCLD46oBRTt2lzrrUvZMfGzd8sueYRDY Yw== -----END CERTIFICATE-----Generated at Tue Apr 29 10:09:26 2025 by rpki-client