$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa File: 33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa (raw, json) Hash identifier: 8+Qo7xsoF3TFYoXeDl9PvvLpo0kr6yR7gOY5q9i1x/w= Subject key identifier: 09:05:F9:8D:72:4B:C9:A1:53:FB:77:A5:EA:9C:88:19:59:48:03:FD Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584968B421AEED5F165D494DE340 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 174 IP address blocks: 204.95.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:21:ae:ed:5f:16:5d:49:4d:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=8e249da2-8d6b-4d55-8082-f8748e38c2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:34:92:00:24:d4:a6:22:8a:42:8c:f0:02:1a: 98:10:df:0d:7d:e9:5a:f7:fc:58:7e:40:fc:ba:aa: fa:3a:2c:95:51:61:9f:03:5f:ee:c1:3a:42:19:d6: a5:ae:b1:95:b0:e1:6e:a1:f5:3e:30:83:2e:f0:cf: 8a:d7:05:0d:71:e3:99:c9:ba:2d:50:f2:88:ba:14: 2d:51:e1:05:5d:e1:4c:15:5f:73:ba:3a:6b:07:f6: 1f:f4:bc:d1:dd:c6:14:be:b8:43:9f:d5:e7:be:e4: ed:ed:65:52:0e:f2:90:92:38:c8:36:e4:09:15:5e: 2b:4e:fb:08:17:1b:c8:89:6a:27:2c:47:e7:64:fd: f2:b8:c4:7c:f8:9e:01:31:d5:16:21:c2:c7:30:3d: 26:67:20:b5:70:e4:46:05:04:b4:3e:d0:64:51:05: 68:12:11:97:9b:d8:06:ad:65:78:9f:71:ae:d7:ca: 9c:5a:62:43:9f:48:3c:6b:ec:cb:9a:e2:4f:8c:c9: 2c:f9:f2:9a:2e:d4:49:58:02:b8:20:99:5d:4c:b5: a8:b2:3a:e5:c5:a5:79:24:92:6f:ef:ba:c3:e0:2e: 8b:fa:42:0e:51:67:54:61:ed:1a:49:f9:78:1a:87: ea:9c:fa:75:0d:08:45:13:e2:27:7d:7d:35:9d:61: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:05:F9:8D:72:4B:C9:A1:53:FB:77:A5:EA:9C:88:19:59:48:03:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/33cbeda8-ef84-3e20-ad85-a5be7b117a8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.95.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:bb:d9:4e:20:5c:1e:9e:2a:5d:81:3e:ef:41:d0:fb:d4:7e: d9:ba:ee:f8:0f:35:6c:9d:1e:e9:4e:a6:4f:a2:2f:66:4f:1e: b6:cd:52:bf:6b:cc:76:a2:3e:71:ca:40:cf:84:aa:29:f7:cd: 93:bd:29:6b:54:34:48:91:af:cd:de:89:f5:b3:79:de:00:3a: 4c:de:8e:7c:e5:54:ca:f3:18:29:eb:1e:e0:df:97:f5:0c:4c: 88:36:01:a7:18:8d:cf:7a:37:a7:39:df:2a:43:2d:ef:d3:69: 4e:af:16:51:c9:17:d9:b0:3f:bd:23:fd:76:52:0e:81:44:a8: 99:e6:a9:5a:bd:ef:bd:03:10:94:56:b3:01:2b:ec:1b:ba:e2: 77:c1:65:d4:c3:8b:bc:05:e6:eb:16:d0:0b:76:ef:74:c9:e5: 5c:58:32:f9:fe:70:61:16:4d:92:56:f6:86:81:a4:0d:b6:a0: 21:1e:01:25:45:8b:69:fc:f0:90:35:79:90:3c:b5:ce:ce:de: 62:03:f8:79:10:14:15:2c:6d:ec:cb:b7:12:b8:41:c1:e7:09: 6d:a9:d7:b3:81:23:74:a5:f5:13:cb:c9:bc:ec:d5:78:e0:da: 0c:3a:24:44:9f:9e:e1:0c:a5:c6:4f:23:8e:be:54:e2:2e:3b: 32:1b:15:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCGu7V8WXUlN40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk OGUyNDlkYTItOGQ2Yi00ZDU1LTgwODItZjg3NDhlMzhjMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijSSACTUpiKKQozwAhqYEN8Nfela9/xYfkD8 uqr6OiyVUWGfA1/uwTpCGdalrrGVsOFuofU+MIMu8M+K1wUNceOZybotUPKIuhQt UeEFXeFMFV9zujprB/Yf9LzR3cYUvrhDn9XnvuTt7WVSDvKQkjjINuQJFV4rTvsI FxvIiWonLEfnZP3yuMR8+J4BMdUWIcLHMD0mZyC1cORGBQS0PtBkUQVoEhGXm9gG rWV4n3Gu18qcWmJDn0g8a+zLmuJPjMks+fKaLtRJWAK4IJldTLWosjrlxaV5JJJv 77rD4C6L+kIOUWdUYe0aSfl4GofqnPp1DQhFE+InfX01nWEnawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkF+Y1yS8mhU/t3peqciBlZSAP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMzNjYmVkYTgtZWY4NC0z ZTIwLWFkODUtYTViZTdiMTE3YThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzF8oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALm72U4gXB6eKl2BPu9B0PvUftm67vgPNWydHulOpk+iL2ZPHrbNUr9r zHaiPnHKQM+Eqin3zZO9KWtUNEiRr83eifWzed4AOkzejnzlVMrzGCnrHuDfl/UM TIg2AacYjc96N6c53ypDLe/TaU6vFlHJF9mwP70j/XZSDoFEqJnmqVq9770DEJRW swEr7Bu64nfBZdTDi7wF5usW0At273TJ5VxYMvn+cGEWTZJW9oaBpA22oCEeASVF i2n88JA1eZA8tc7O3mID+HkQFBUsbezLtxK4QcHnCW2p17OBI3Sl9RPLybzs1Xjg 2gw6JESfnuEMpcZPI46+VOIuOzIbFXE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:59 2025 by rpki-client