$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa File: 16b704f1-00d2-3275-b255-32b4eae3f37c.roa (raw, json) Hash identifier: B4Ud3E/z7hhsHWQYsiNjcfz6amGs4N6T8AGnX2zfVtI= Subject key identifier: 96:31:E4:38:06:57:C0:AC:52:A0:FA:63:35:F0:39:B3:98:7A:72:C8 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858494CC9411C6AC841C4914F6100 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 1239 IP address blocks: 204.119.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:41:1c:6a:c8:41:c4:91:4f:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=5e661326-6caf-420b-961d-036b76291df6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:e4:c3:a2:23:01:6c:ba:59:36:53:64:45: b7:7d:58:0c:10:d6:8a:22:e0:2d:50:34:b0:d2:af: 07:86:97:13:6b:52:a5:c0:02:d0:36:32:9c:b0:be: 92:6b:6a:43:98:be:31:de:de:cb:3c:41:d7:dc:f6: 32:7c:b4:07:72:e5:62:63:40:e2:da:9d:2e:14:7c: ce:ee:e5:70:a1:0c:09:ff:17:7a:99:22:d9:a9:0a: 44:c5:b5:f4:b1:e1:16:44:ac:98:d0:83:61:44:46: 91:a1:2d:fa:62:ad:2e:ca:8a:7f:a3:d6:c2:97:e6: 9c:28:97:2b:1f:8c:f9:7a:c8:26:9f:cd:fd:7e:31: 51:28:3f:2c:f8:47:f4:6f:e4:31:3e:8b:05:8f:57: 27:c0:e3:d0:80:8f:8d:25:e6:43:cc:7b:1a:a3:59: da:45:f5:d1:11:99:47:e8:dc:bd:31:23:ff:42:ec: 82:3f:e4:8c:b3:f1:36:00:aa:1c:f9:69:cc:f3:0b: 56:c3:7a:a5:ca:66:c9:79:fb:8e:4e:c8:a9:62:3f: db:09:7e:02:e6:2a:d2:c4:fb:75:dc:27:81:09:26: 45:d5:a9:56:97:63:ac:de:62:9b:76:11:08:df:86: 98:f4:10:06:a4:6f:25:52:3e:18:0e:7c:74:23:1e: 97:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:31:E4:38:06:57:C0:AC:52:A0:FA:63:35:F0:39:B3:98:7A:72:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.119.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:38:ba:10:81:07:97:33:fd:fd:78:f5:5b:92:b1:f0:86:2e: 75:02:ea:e4:ca:d4:7b:ea:08:3e:94:32:49:11:70:2d:2c:0d: 44:f0:1c:b1:ec:c8:60:92:50:a7:2b:fd:81:9f:7b:4e:3b:39: f8:8c:dc:19:bb:cc:3a:9e:8c:6d:fe:e7:e5:a4:d5:20:9b:97: 30:d9:7d:f5:b2:d6:e0:b7:aa:f8:d2:39:1f:09:0d:37:87:50: 97:87:6c:6c:e6:d0:22:24:e2:15:ab:7a:e4:a2:1c:92:6e:ac: 02:79:8b:6e:48:12:53:67:c3:89:6a:6c:05:51:cb:b1:f5:17: b1:db:b1:04:ad:62:dd:63:4b:da:a8:5e:1b:e0:7a:1a:bb:06: 0b:d4:ad:31:65:68:5c:33:e0:18:64:0c:f9:ae:5f:03:b8:b3: fa:8e:a2:4e:3e:c3:d5:70:56:d7:8c:d7:6e:d8:7b:e1:d7:e2: 89:b0:d3:43:e2:0f:ee:0d:2b:0d:7c:4c:f3:35:6d:18:b1:a1: 57:e0:ed:47:3c:36:a2:47:f7:05:11:98:ee:aa:8b:99:33:81: e8:d9:4b:c2:b3:ad:4e:d4:a8:1a:24:45:7d:fd:16:38:af:d6: b4:99:25:4d:aa:f9:d7:96:5a:98:2c:4a:07:87:79:f0:d8:a9: 4b:6b:fd:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUEcashBxJFPYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk NWU2NjEzMjYtNmNhZi00MjBiLTk2MWQtMDM2Yjc2MjkxZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmPkw6IjAWy6WTZTZEW3fVgMENaKIuAtUDSw 0q8HhpcTa1KlwALQNjKcsL6Sa2pDmL4x3t7LPEHX3PYyfLQHcuViY0Di2p0uFHzO 7uVwoQwJ/xd6mSLZqQpExbX0seEWRKyY0INhREaRoS36Yq0uyop/o9bCl+acKJcr H4z5esgmn839fjFRKD8s+Ef0b+QxPosFj1cnwOPQgI+NJeZDzHsao1naRfXREZlH 6Ny9MSP/QuyCP+SMs/E2AKoc+WnM8wtWw3qlymbJefuOTsipYj/bCX4C5irSxPt1 3CeBCSZF1alWl2Os3mKbdhEI34aY9BAGpG8lUj4YDnx0Ix6XEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYx5DgGV8CsUqD6YzXwObOYenLIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMTZiNzA0ZjEtMDBkMi0z Mjc1LWIyNTUtMzJiNGVhZTNmMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY4uhCBB5cz/f149VuSsfCGLnUC6uTK1HvqCD6UMkkRcC0sDUTwHLHs yGCSUKcr/YGfe047OfiM3Bm7zDqejG3+5+Wk1SCblzDZffWy1uC3qvjSOR8JDTeH UJeHbGzm0CIk4hWreuSiHJJurAJ5i25IElNnw4lqbAVRy7H1F7HbsQStYt1jS9qo Xhvgehq7BgvUrTFlaFwz4BhkDPmuXwO4s/qOok4+w9VwVteM127Ye+HX4omw00Pi D+4NKw18TPM1bRixoVfg7Uc8NqJH9wURmO6qi5kzgejZS8KzrU7UqBokRX39Fjiv 1rSZJU2q+deWWpgsSgeHefDYqUtr/fI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:37:55 2025 by rpki-client