$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa File: 89690801-3877-35af-874c-1b06e4cd1f4a.roa (raw, json) Hash identifier: wwQYsEnK1YCO5gOLHAxlveqCg1nujSp4JC9hjA6ofMw= Subject key identifier: 3D:56:16:9D:AD:D2:73:2C:AE:83:83:A3:C4:FE:78:FC:1E:1A:E5:80 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584921840B62651AED1FD7290DB0 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 62467 IP address blocks: 204.197.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:84:0b:62:65:1a:ed:1f:d7:29:0d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=9434b7cc-ad29-4105-81fd-1c237b66332b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f4:02:f1:f5:0c:1d:c6:1d:a4:ba:5b:70:5d: ef:e5:41:4f:96:b7:3c:bc:93:03:b1:6d:91:d3:39: 97:3f:d2:f2:b8:76:61:52:60:e9:a8:66:0a:bc:1d: a6:af:58:86:12:2a:9c:08:f6:7e:04:8c:92:80:36: ca:ac:41:77:bf:ee:d0:ae:96:d3:b1:1e:52:0e:70: 6d:a2:bf:ef:c0:49:b6:59:a4:5b:ef:8f:f4:05:ab: 0a:cf:9e:aa:02:8e:fb:29:36:a5:1d:12:7c:28:90: dd:51:14:d1:57:36:f5:cd:53:fd:7a:a2:af:f4:b4: a2:4d:d0:26:ba:c7:42:04:95:d1:e7:69:aa:c2:5f: fb:fd:47:78:db:46:c0:cb:1a:e1:eb:8c:96:08:e1: b1:8d:13:f3:0c:a1:6b:27:02:0c:2e:c0:38:f4:e3: 73:ce:31:20:c6:df:bc:de:a7:09:ab:15:dc:7a:c2: d3:be:02:cf:a1:c1:10:b0:ae:7f:69:49:c0:0d:9c: 88:65:b7:86:6c:76:80:e9:67:df:e8:f1:8b:c9:61: 6c:c2:d2:e4:ab:32:dc:22:a1:7c:bd:88:a1:63:c3: 0e:72:3a:0e:aa:54:37:5a:c1:30:6d:20:ef:9c:bc: f7:6b:14:6f:34:8d:97:73:68:05:f4:bf:8a:61:ea: 15:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:56:16:9D:AD:D2:73:2C:AE:83:83:A3:C4:FE:78:FC:1E:1A:E5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/89690801-3877-35af-874c-1b06e4cd1f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:37:0d:28:1f:c0:d4:97:6c:b5:9c:95:f1:29:0b:6e:fb:76: 75:24:b1:f8:4f:3a:9a:f6:dc:3e:6d:e9:a2:77:1d:11:ca:ef: b3:24:f2:62:7c:ab:15:48:c3:69:0a:3b:dc:64:1c:77:7d:e8: 94:f0:a7:95:cc:d7:9e:c9:bb:f7:28:42:ba:7c:88:6e:f1:55: b1:f1:dd:06:2e:1d:2f:36:d9:43:a1:0a:2c:45:4d:5a:41:b2: 2e:53:8c:7f:78:cd:7f:f3:4f:4c:e9:38:44:b0:51:47:1e:22: 69:93:79:74:50:c1:06:0d:66:88:89:bb:f3:ab:5d:42:29:d2: de:16:4f:1c:5a:3d:fd:fa:48:a7:83:b0:c8:0f:7f:57:ed:9d: d6:d8:8b:61:76:a7:85:f0:44:c3:6c:73:84:c6:d8:27:c8:1a: 31:40:20:af:4f:63:33:5e:64:6d:f1:4e:aa:a7:18:de:39:a3: da:e2:82:a2:fd:9a:2a:dc:04:7c:a7:9c:e2:84:2b:99:49:b9: 38:92:c7:5d:1d:0a:9d:46:07:9c:81:1d:39:7a:33:41:87:07: 6d:29:bc:dd:b6:43:db:3c:9a:96:6b:2b:49:6a:a2:73:9f:49: b1:d0:af:a2:24:30:27:01:84:d6:a5:79:24:2e:a7:14:d6:7c: 03:41:62:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhhAtiZRrtH9cpDbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk OTQzNGI3Y2MtYWQyOS00MTA1LTgxZmQtMWMyMzdiNjYzMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/QC8fUMHcYdpLpbcF3v5UFPlrc8vJMDsW2R 0zmXP9LyuHZhUmDpqGYKvB2mr1iGEiqcCPZ+BIySgDbKrEF3v+7QrpbTsR5SDnBt or/vwEm2WaRb74/0BasKz56qAo77KTalHRJ8KJDdURTRVzb1zVP9eqKv9LSiTdAm usdCBJXR52mqwl/7/Ud420bAyxrh64yWCOGxjRPzDKFrJwIMLsA49ONzzjEgxt+8 3qcJqxXcesLTvgLPocEQsK5/aUnADZyIZbeGbHaA6Wff6PGLyWFswtLkqzLcIqF8 vYihY8MOcjoOqlQ3WsEwbSDvnLz3axRvNI2Xc2gF9L+KYeoV7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1WFp2t0nMsroODo8T+ePweGuWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvODk2OTA4MDEtMzg3Ny0z NWFmLTg3NGMtMWIwNmU0Y2QxZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE83DSgfwNSXbLWclfEpC277dnUksfhPOpr23D5t6aJ3HRHK77Mk8mJ8 qxVIw2kKO9xkHHd96JTwp5XM157Ju/coQrp8iG7xVbHx3QYuHS822UOhCixFTVpB si5TjH94zX/zT0zpOESwUUceImmTeXRQwQYNZoiJu/OrXUIp0t4WTxxaPf36SKeD sMgPf1ftndbYi2F2p4XwRMNsc4TG2CfIGjFAIK9PYzNeZG3xTqqnGN45o9rigqL9 mircBHynnOKEK5lJuTiSx10dCp1GB5yBHTl6M0GHB20pvN22Q9s8mpZrK0lqonOf SbHQr6IkMCcBhNaleSQupxTWfANBYnA= -----END CERTIFICATE-----Generated at Thu May 1 17:24:24 2025 by rpki-client