$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json) Hash identifier: lwyZ0OHu4vqCa33sFakIZxkgcLvjWu5gYqEtdHpPS7A= Subject key identifier: 55:B8:63:F6:48:EF:E9:FA:FC:50:29:F2:DA:13:50:12:98:72:5D:D6 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F432858494E2EB1FE54CF4ACBACE55080 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 13849 IP address blocks: 173.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b1:fe:54:cf:4a:cb:ac:e5:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=428d05e3-58f6-4b5a-a07c-75f64e411769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:d5:34:ac:47:ef:3f:18:5b:dc:42:82:b1: 82:b4:4a:46:b6:28:0f:31:2d:c8:56:3a:5e:96:ff: ce:f8:23:53:0b:2c:ac:df:3e:60:49:31:7d:ec:a1: c5:26:b6:60:fa:cd:7f:6a:01:c3:3a:a7:26:5a:71: 9e:27:f5:8d:ef:fd:bf:bd:b0:ee:16:7b:73:f7:31: d4:4c:18:ba:31:cf:67:97:41:c0:8c:4a:fd:c4:97: 5d:6a:88:85:70:62:71:94:35:4c:c2:4f:b7:df:5c: db:1c:24:e8:88:9e:db:29:c3:6d:19:46:78:ec:9c: eb:48:59:e3:04:23:1c:18:8a:e7:44:35:b6:02:c3: 4e:ce:bd:d7:f2:8f:07:03:b1:56:a5:ad:d1:77:56: 12:96:5b:a3:ad:17:24:fb:cd:3d:d2:d4:b6:ef:bf: 82:47:08:14:12:3c:1e:29:d1:18:fd:e1:3a:c2:52: ba:41:52:a6:b9:58:b4:9c:d7:f3:9b:56:28:38:c2: bb:97:53:c5:36:0c:3d:c1:4b:bf:86:48:e9:2b:db: d3:89:05:4f:da:1d:91:56:51:48:36:d4:75:06:9a: a0:72:dc:a2:cb:13:c8:e8:9e:8d:ea:95:fd:d3:fb: 9b:a8:ca:21:0e:0c:54:a5:da:9b:0d:9c:36:73:21: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B8:63:F6:48:EF:E9:FA:FC:50:29:F2:DA:13:50:12:98:72:5D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 173.243.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:30:9d:54:9f:95:02:2b:70:49:a8:67:d9:73:82:24:f8:ab: bb:0b:b3:8b:25:2e:12:4b:bd:30:9c:34:f8:63:1f:45:1b:a4: ea:fc:19:77:49:4e:38:27:67:d3:e2:10:58:51:ed:d0:30:fc: bd:a5:49:11:b4:07:13:1a:5b:9b:5b:a0:47:e2:39:1b:37:01: 8b:01:85:b8:9c:dc:fc:de:a5:7a:f0:6c:07:55:7f:8d:66:28: 3e:9e:ba:91:d2:6d:8c:88:aa:23:17:ca:a0:cf:5d:01:f7:39: 15:24:54:7b:f8:eb:6e:46:e6:8c:b4:f5:fa:85:51:80:bb:d9: 46:fe:86:b9:e7:2c:c7:d6:09:85:e0:63:c5:bc:aa:d9:53:75: 65:b3:7b:ec:87:69:99:52:e6:40:48:af:d7:e2:31:f2:c7:7f: 02:50:61:ea:89:af:46:aa:ec:4a:3b:a2:bf:c9:ba:eb:85:76: 3f:9b:ef:f8:5d:d4:14:02:e6:6c:37:d0:d5:36:1b:c9:86:20: 4b:09:c2:e2:9e:c8:c3:66:6c:3f:41:80:bb:34:47:a6:b8:b0: a2:64:15:ce:05:88:b1:6b:76:2e:16:15:02:90:50:9c:04:f1: ec:e4:f8:e2:4a:b3:1d:63:e0:22:09:ee:8c:39:60:49:82:57: a8:35:76:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrH+VM9Ky6zlUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk NDI4ZDA1ZTMtNThmNi00YjVhLWEwN2MtNzVmNjRlNDExNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF3VNKxH7z8YW9xCgrGCtEpGtigPMS3IVjpe lv/O+CNTCyys3z5gSTF97KHFJrZg+s1/agHDOqcmWnGeJ/WN7/2/vbDuFntz9zHU TBi6Mc9nl0HAjEr9xJddaoiFcGJxlDVMwk+331zbHCToiJ7bKcNtGUZ47JzrSFnj BCMcGIrnRDW2AsNOzr3X8o8HA7FWpa3Rd1YSllujrRck+8090tS277+CRwgUEjwe KdEY/eE6wlK6QVKmuVi0nNfzm1YoOMK7l1PFNgw9wUu/hkjpK9vTiQVP2h2RVlFI NtR1BpqgctyiyxPI6J6N6pX90/ubqMohDgxUpdqbDZw2cyGFOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFW4Y/ZI7+n6/FAp8toTUBKYcl3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvZmFlYWEzNWEtM2QwMy0z YzczLTliZWEtYTZlODk5MGFlYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8wnVSflQIrcEmoZ9lzgiT4q7sLs4slLhJLvTCcNPhjH0UbpOr8GXdJ TjgnZ9PiEFhR7dAw/L2lSRG0BxMaW5tboEfiORs3AYsBhbic3PzepXrwbAdVf41m KD6eupHSbYyIqiMXyqDPXQH3ORUkVHv4625G5oy09fqFUYC72Ub+hrnnLMfWCYXg Y8W8qtlTdWWze+yHaZlS5kBIr9fiMfLHfwJQYeqJr0aq7Eo7or/JuuuFdj+b7/hd 1BQC5mw30NU2G8mGIEsJwuKeyMNmbD9BgLs0R6a4sKJkFc4FiLFrdi4WFQKQUJwE 8ezk+OJKsx1j4CIJ7ow5YEmCV6g1duQ= -----END CERTIFICATE-----Generated at Tue Apr 29 22:44:17 2025 by rpki-client