$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/a7439e92-2f94-3878-a6a5-ab2adf4fb9c7.roa File: a7439e92-2f94-3878-a6a5-ab2adf4fb9c7.roa (raw, json) Hash identifier: 0Bz4Mf6G1g9Kjr7UfXccpGeGvb2xvkR3RU+wzWnHyG4= Subject key identifier: 3F:E9:01:27:9A:D4:39:53:5A:F2:4D:B9:D4:1D:81:63:54:AE:6B:52 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F43285849A1EF6BA0EA8E0C4A869957C0 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/a7439e92-2f94-3878-a6a5-ab2adf4fb9c7.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 46261 IP address blocks: 172.102.192.0/24 maxlen: 24 172.102.193.0/24 maxlen: 24 172.102.194.0/24 maxlen: 24 172.102.195.0/24 maxlen: 24 172.102.196.0/24 maxlen: 24 172.102.197.0/24 maxlen: 24 172.102.198.0/24 maxlen: 24 172.102.199.0/24 maxlen: 24 172.102.202.0/24 maxlen: 24 172.102.204.0/24 maxlen: 24 172.102.208.0/24 maxlen: 24 172.102.209.0/24 maxlen: 24 172.102.212.0/24 maxlen: 24 172.102.214.0/24 maxlen: 24 172.102.217.0/24 maxlen: 24 172.102.220.0/24 maxlen: 24 172.102.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:6b:a0:ea:8e:0c:4a:86:99:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=01c780bf-9f8b-4a5c-ab5f-80467100e7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:02:8c:1c:8c:ce:a8:80:dc:c8:85:57:b4: 4f:a2:ec:a0:9b:4a:0f:23:45:34:67:68:b5:57:52: 76:18:5e:18:4b:0d:3d:52:b6:73:f8:75:bb:62:c0: f3:ca:12:62:9e:ed:da:00:1a:46:21:01:7d:1e:03: 0e:c4:dc:72:23:ef:ce:bc:07:51:29:ca:cb:a1:9a: ea:e6:2a:18:d2:0d:80:8c:5f:6c:23:c1:8e:28:5b: 47:df:35:95:76:59:bc:39:9a:19:7f:87:67:3f:1d: 87:4d:f6:3f:2d:28:e3:e1:53:50:42:f2:4e:2a:fb: f3:04:c8:52:2d:05:7a:b8:36:1e:56:5d:c0:5b:6a: 1b:f9:f4:34:91:78:44:cc:a3:8e:6f:2b:54:db:15: 1f:bf:c3:83:50:df:53:da:ca:82:7e:08:f5:89:c0: ad:57:ef:47:b7:f2:6e:93:d4:a3:9d:a4:d7:a8:21: 71:47:0e:5f:0e:91:8a:cf:f0:04:90:75:70:5d:e5: 40:23:d2:ce:80:93:cb:47:fe:91:bc:9d:97:2c:16: 5f:e9:1e:80:49:db:4b:50:6a:24:14:96:cf:55:30: 6e:b7:4f:ed:03:b0:2b:4a:0d:76:e8:74:3c:1b:90: b3:2d:df:00:a4:39:b6:39:6f:ef:00:85:61:40:3f: 4f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E9:01:27:9A:D4:39:53:5A:F2:4D:B9:D4:1D:81:63:54:AE:6B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/a7439e92-2f94-3878-a6a5-ab2adf4fb9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.192.0/21 172.102.202.0/24 172.102.204.0/24 172.102.208.0/23 172.102.212.0/24 172.102.214.0/24 172.102.217.0/24 172.102.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:0d:2c:e3:fc:e2:c5:53:84:0f:62:86:52:d1:25:fe:99:20: 2c:0b:94:8c:f4:f4:18:54:b7:5c:a0:d3:4e:c7:1b:92:40:16: 67:bc:98:f3:c2:26:d7:2c:1a:1e:ab:ac:b1:41:bb:ed:23:95: 4c:2b:3e:e7:bf:a5:72:69:83:cb:a0:8a:1a:cd:b6:3d:a9:9b: 6f:30:8f:2f:55:a4:27:6d:ad:05:3c:51:3b:d6:18:03:c2:11: 56:cb:f9:44:ab:4c:6e:81:79:5a:17:6e:54:3f:0b:0d:46:bf: d3:2f:6b:4d:39:e0:8e:34:fd:d7:5e:0e:dc:e8:01:a6:00:44: 7e:e4:f7:4f:59:6b:48:51:31:5b:67:91:26:e1:31:4d:2d:fa: df:ef:f3:38:d3:4a:35:82:42:80:4c:36:30:32:6f:1a:57:8e: 75:ec:13:bd:9e:3e:d2:4d:89:ee:fa:d4:50:d4:03:5f:70:a9: d2:72:37:51:a8:2c:53:86:c2:db:6c:e7:fb:89:c4:c7:f8:1a: 5a:17:d5:69:3c:a2:a7:8d:ad:7b:f8:67:3e:4e:30:68:a3:56: 79:cc:5f:36:44:7c:c6:65:64:fd:f7:aa:91:f6:ee:6b:be:b3: a7:2e:00:62:7c:89:7c:5d:f5:dd:d9:ce:ba:f9:84:6b:a7:c8: 26:31:9e:c5 -----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEmh72ug6o4MSoaZV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk MDFjNzgwYmYtOWY4Yi00YTVjLWFiNWYtODA0NjcxMDBlN2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot0CjByMzqiA3MiFV7RPouygm0oPI0U0Z2i1 V1J2GF4YSw09UrZz+HW7YsDzyhJinu3aABpGIQF9HgMOxNxyI+/OvAdRKcrLoZrq 5ioY0g2AjF9sI8GOKFtH3zWVdlm8OZoZf4dnPx2HTfY/LSjj4VNQQvJOKvvzBMhS LQV6uDYeVl3AW2ob+fQ0kXhEzKOObytU2xUfv8ODUN9T2sqCfgj1icCtV+9Ht/Ju k9SjnaTXqCFxRw5fDpGKz/AEkHVwXeVAI9LOgJPLR/6RvJ2XLBZf6R6ASdtLUGok FJbPVTBut0/tA7ArSg126HQ8G5CzLd8ApDm2OW/vAIVhQD9PVwIDAQABo4IDfzCC A3swHQYDVR0OBBYEFD/pASea1DlTWvJNudQdgWNUrmtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvYTc0MzllOTItMmY5NC0z ODc4LWE2YTUtYWIyYWRmNGZiOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQDrGbAAwQA rGbKAwQArGbMAwQBrGbQAwQArGbUAwQArGbWAwQArGbZAwQBrGbcMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AJANLOP84sVThA9ihlLRJf6ZICwLlIz09BhUt1yg007HG5JAFme8mPPCJtcsGh6r rLFBu+0jlUwrPue/pXJpg8ugihrNtj2pm28wjy9VpCdtrQU8UTvWGAPCEVbL+USr TG6BeVoXblQ/Cw1Gv9Mva0054I40/ddeDtzoAaYARH7k909Za0hRMVtnkSbhMU0t +t/v8zjTSjWCQoBMNjAybxpXjnXsE72ePtJNie761FDUA19wqdJyN1GoLFOGwtts 5/uJxMf4GloX1Wk8oqeNrXv4Zz5OMGijVnnMXzZEfMZlZP33qpH27mu+s6cuAGJ8 iXxd9d3Zzrr5hGunyCYxnsU= -----END CERTIFICATE-----Generated at Sun Apr 27 19:48:03 2025 by rpki-client