$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa File: fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa (raw, json) Hash identifier: /KFEh77e0wwRkUaeUnPeYPsAkjc/u1R3yY8eVdEG7HE= Subject key identifier: D5:57:87:D1:17:E6:69:3C:E8:E3:20:EC:57:B3:94:E4:A9:95:C9:CE Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584960541181AAEB5BF4285BAC00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 173.231.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:11:81:aa:eb:5b:f4:28:5b:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=1d181de4-1141-4f55-9514-b6f84eb1e26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:24:82:ab:ba:05:0d:f8:94:75:74:fa:6f: f3:01:ad:9f:4b:33:a7:74:fd:b3:04:91:b4:57:57: dc:7b:13:17:6f:d9:53:1f:23:0d:e1:02:70:a1:14: d8:ac:36:ff:4e:95:21:f4:c4:f8:da:8c:83:40:09: b9:f5:c4:a2:8d:92:eb:58:12:57:96:43:a8:1a:f3: e7:d5:f6:62:84:80:15:f6:09:39:88:de:24:d9:c2: 4e:46:a0:f3:b0:e2:28:a8:58:1c:39:71:2a:df:76: 6e:98:67:77:a9:9f:d1:a9:51:ed:dd:8a:fe:dc:11: 45:42:46:b3:b4:18:f8:46:c0:c1:78:c1:f3:e0:5c: 66:c9:8f:77:b8:b5:38:fb:5a:cc:43:1c:87:d1:dd: e8:a1:e6:8c:53:04:2f:e0:a3:d5:2e:bc:f6:31:b8: 1a:19:8f:57:15:93:b3:ff:ab:6e:87:df:af:c2:25: 1e:e1:c9:ff:05:ad:47:2a:d7:d2:df:f0:8e:c6:82: f1:71:a8:ea:e3:11:81:18:2d:04:ac:32:3b:47:56: 63:c8:69:15:ea:14:0a:76:3c:a2:9f:71:95:ca:8a: a2:02:24:0f:3f:55:21:e5:df:62:d2:54:1b:3b:e0: fc:75:c4:c2:b7:a7:1f:6d:60:b4:10:e6:7a:75:b4: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:57:87:D1:17:E6:69:3C:E8:E3:20:EC:57:B3:94:E4:A9:95:C9:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5b:8c:4a:5d:03:17:56:43:13:e1:77:a0:6f:f4:77:24:63: 90:ff:b9:29:a4:4d:3d:9c:0f:98:91:31:26:56:c3:92:69:12: 27:dc:62:ca:a4:95:06:ab:91:8a:5e:93:b2:d6:37:00:ee:71: 69:0c:51:4a:86:91:ae:08:3f:8c:de:0a:6b:b7:e7:0e:c9:e2: 65:a3:c0:e9:36:f3:2e:78:0f:8a:d3:58:a5:06:86:78:79:63: 71:d2:b4:d1:75:c4:7f:52:fe:fc:29:27:0d:7d:1b:43:e6:fe: 51:09:45:be:46:6a:85:8a:7d:eb:f5:e4:13:c2:a7:e2:22:70: 7a:db:db:a0:e9:7d:5d:b0:84:b2:96:b0:3a:ed:ab:71:82:4a: 30:ff:6a:f8:e0:08:a1:bf:0d:bb:97:70:3d:51:73:64:61:72: 42:f6:d7:56:1a:ea:d3:f4:0f:17:c6:6e:f3:25:04:51:f0:92: b2:e8:e1:3c:eb:86:c9:17:1f:e4:48:1b:cd:4b:5c:65:d4:9b: af:ee:b3:db:75:ef:53:d8:6f:ef:e5:63:a4:94:a1:a4:55:c2: c7:e9:0d:e0:17:7a:94:e6:e4:9e:b6:d7:fe:38:43:3d:84:70: 7d:f3:d6:31:2b:28:b1:9f:37:f4:da:33:0f:69:fa:49:5f:7c: e1:21:58:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBGBqutb9ChbrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk MWQxODFkZTQtMTE0MS00ZjU1LTk1MTQtYjZmODRlYjFlMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYkgqu6BQ34lHV0+m/zAa2fSzOndP2zBJG0 V1fcexMXb9lTHyMN4QJwoRTYrDb/TpUh9MT42oyDQAm59cSijZLrWBJXlkOoGvPn 1fZihIAV9gk5iN4k2cJORqDzsOIoqFgcOXEq33ZumGd3qZ/RqVHt3Yr+3BFFQkaz tBj4RsDBeMHz4FxmyY93uLU4+1rMQxyH0d3ooeaMUwQv4KPVLrz2MbgaGY9XFZOz /6tuh9+vwiUe4cn/Ba1HKtfS3/COxoLxcajq4xGBGC0ErDI7R1ZjyGkV6hQKdjyi n3GVyoqiAiQPP1Uh5d9i0lQbO+D8dcTCt6cfbWC0EOZ6dbQv7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVXh9EX5mk86OMg7FezlOSplcnOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZmE0NDhhMzctMGEyMS0z NjNlLWJlZjMtMmY5ZWU3ZGM1NjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAredsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdbjEpdAxdWQxPhd6Bv9HckY5D/uSmkTT2cD5iRMSZWw5JpEifcYsqk lQarkYpek7LWNwDucWkMUUqGka4IP4zeCmu35w7J4mWjwOk28y54D4rTWKUGhnh5 Y3HStNF1xH9S/vwpJw19G0Pm/lEJRb5GaoWKfev15BPCp+IicHrb26DpfV2whLKW sDrtq3GCSjD/avjgCKG/DbuXcD1Rc2RhckL211Ya6tP0DxfGbvMlBFHwkrLo4Tzr hskXH+RIG81LXGXUm6/us9t171PYb+/lY6SUoaRVwsfpDeAXepTm5J621/44Qz2E cH3z1jErKLGfN/TaMw9p+klffOEhWE4= -----END CERTIFICATE-----Generated at Wed Apr 30 07:38:55 2025 by rpki-client