$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa File: e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa (raw, json) Hash identifier: d8PGfEy/V07TQdSMG8Y2VydfdDUbaPD2JHld/+xEhB0= Subject key identifier: 88:90:87:27:B4:40:4F:0C:BB:17:74:81:71:FD:92:30:65:29:A1:55 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F4328584965E97637A79371EB2B984680 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 9009 IP address blocks: 172.102.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:76:37:a7:93:71:eb:2b:98:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=b1ebd90a-52ad-4bbb-a36a-dd9fd0817e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:d1:88:cc:20:10:42:ac:a6:5c:5b:f6:c0: 04:22:55:5d:15:aa:64:7f:3a:d3:5b:8f:a5:de:22: 8d:75:4d:d6:4b:ad:8f:b7:bb:57:17:4a:20:60:48: b1:cf:10:9d:50:37:8a:90:a0:51:57:d5:a4:f6:32: 9f:51:4b:da:0c:a7:58:dc:e0:b1:f4:c6:cf:ec:2b: f3:77:75:a9:67:b5:43:f4:a8:b8:e6:36:00:36:c6: de:65:2a:5b:17:91:93:b4:52:9a:48:d3:1d:22:8e: 11:9a:0d:77:03:ef:11:3f:a9:ac:a2:30:e0:0c:4e: 1f:84:2b:81:d7:82:05:a8:0a:68:75:0d:c1:cf:f6: 2b:1d:36:28:c0:c2:d5:1b:45:9f:d1:a4:55:de:80: cb:f8:ba:28:97:71:91:e5:3f:ce:f8:11:eb:5c:66: a1:61:0b:69:f6:c5:c4:49:ef:eb:a3:a3:87:0e:63: 89:48:87:a8:f8:9c:96:27:89:43:ed:a2:9d:06:84: e6:15:0d:ca:fd:2f:47:91:ff:5d:85:85:14:d4:65: 56:cc:63:d4:2d:24:cf:7b:ff:09:ee:d5:ca:38:a3: 2b:d4:00:63:95:07:e0:95:09:65:84:ff:b7:a2:98: 3e:d4:0d:e0:b3:6d:31:13:a9:33:00:55:d4:08:53: 1c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:90:87:27:B4:40:4F:0C:BB:17:74:81:71:FD:92:30:65:29:A1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/e9c8b957-08b6-346b-bfaa-5e02a08960e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1b:e4:46:00:8b:8a:56:21:bb:ee:3a:b8:2a:70:99:49:8a: 29:22:ed:cc:14:1b:25:27:4b:a1:ee:d0:ef:40:fc:5b:d3:9b: 06:8c:f3:69:cc:b1:c0:0e:d6:8b:3e:cd:2b:c5:97:65:95:33: 62:49:0b:3c:99:29:83:2d:c6:f1:aa:97:e5:27:a5:17:2b:50: 7c:45:dc:f9:03:5e:9f:fb:a5:61:20:5f:db:08:90:37:bc:b0: b8:23:1d:90:29:da:e1:02:6f:8f:a2:49:91:f8:95:1c:19:25: c9:f0:db:db:34:0c:5a:43:ef:57:3e:72:dc:16:7b:9c:eb:32: 0e:5e:e9:73:80:28:c8:b5:ec:8c:0e:32:33:b5:40:71:fa:7a: a7:c4:bf:7b:30:1d:ec:4d:38:17:63:18:3a:c5:d3:65:a3:19: 76:81:ed:93:54:dd:e3:6a:47:aa:cc:fa:35:d1:f8:af:84:ce: 83:a2:0f:cf:11:0d:c5:ce:ed:ef:07:ea:c7:ce:86:39:e8:b0: 5d:9b:f6:86:2f:65:51:7a:2e:24:83:a0:24:0d:6d:87:dc:78: 1c:19:8f:bc:5a:ac:9b:14:c4:18:37:c7:e4:28:02:59:db:ec: 17:93:b9:f7:cb:cd:0a:50:db:ab:51:fd:29:db:b0:62:4d:db: d7:6f:ba:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6XY3p5Nx6yuYRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk YjFlYmQ5MGEtNTJhZC00YmJiLWEzNmEtZGQ5ZmQwODE3ZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWfRiMwgEEKsplxb9sAEIlVdFapkfzrTW4+l 3iKNdU3WS62Pt7tXF0ogYEixzxCdUDeKkKBRV9Wk9jKfUUvaDKdY3OCx9MbP7Cvz d3WpZ7VD9Ki45jYANsbeZSpbF5GTtFKaSNMdIo4Rmg13A+8RP6msojDgDE4fhCuB 14IFqApodQ3Bz/YrHTYowMLVG0Wf0aRV3oDL+Lool3GR5T/O+BHrXGahYQtp9sXE Se/ro6OHDmOJSIeo+JyWJ4lD7aKdBoTmFQ3K/S9Hkf9dhYUU1GVWzGPULSTPe/8J 7tXKOKMr1ABjlQfglQllhP+3opg+1A3gs20xE6kzAFXUCFMcQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiQhye0QE8Muxd0gXH9kjBlKaFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZTljOGI5NTctMDhiNi0z NDZiLWJmYWEtNWUwMmEwODk2MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4b5EYAi4pWIbvuOrgqcJlJiiki7cwUGyUnS6Hu0O9A/FvTmwaM82nM scAO1os+zSvFl2WVM2JJCzyZKYMtxvGql+UnpRcrUHxF3PkDXp/7pWEgX9sIkDe8 sLgjHZAp2uECb4+iSZH4lRwZJcnw29s0DFpD71c+ctwWe5zrMg5e6XOAKMi17IwO MjO1QHH6eqfEv3swHexNOBdjGDrF02WjGXaB7ZNU3eNqR6rM+jXR+K+EzoOiD88R DcXO7e8H6sfOhjnosF2b9oYvZVF6LiSDoCQNbYfceBwZj7xarJsUxBg3x+QoAlnb 7BeTuffLzQpQ26tR/SnbsGJN29dvulQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:14:56 2025 by rpki-client