$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa File: c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa (raw, json) Hash identifier: MnifNn48GzKBJIdFf+rXcFwVRq1BjW1cwOfGt6A/ng0= Subject key identifier: 22:47:D0:52:C3:60:69:B3:E6:7C:75:9E:55:F8:D6:57:8F:8C:66:ED Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584961B991A33A3965FD01AE2C20 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 29968 IP address blocks: 208.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:91:a3:3a:39:65:fd:01:ae:2c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=06b724e9-8c2f-4e83-be50-3442b42dd17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5e:1b:9e:3a:3a:44:4f:67:71:29:ab:c8:c7: 3a:ae:d9:88:ac:69:56:67:64:4a:9a:da:b2:16:d0: 9f:14:5c:e1:be:0e:c5:c4:d0:16:e7:d7:8d:71:1c: 5a:c1:4c:08:03:6b:6d:05:44:94:3c:16:3e:fa:e1: 68:d3:0d:a6:ed:cf:94:07:bc:10:de:de:2d:5d:f9: 88:1d:ac:42:a5:15:7e:c6:52:0a:9a:9d:13:ee:73: 54:a2:3a:91:69:77:b5:91:14:df:76:81:92:64:d1: dd:fe:4e:6e:cb:f5:3b:84:bb:b0:33:7d:57:1c:36: e0:b3:9e:fb:1d:4f:b3:11:4e:24:cf:0c:c0:30:74: eb:48:49:f3:d1:a7:39:62:23:03:7c:91:f1:36:9f: 32:a6:3b:b3:42:c3:63:ed:33:fc:b0:2f:a4:3a:42: 4e:3c:21:db:4f:75:2e:3b:79:ef:1e:f0:22:79:cc: 54:99:be:d2:1f:91:73:59:4e:e5:ba:22:6f:b8:83: 48:d4:f0:f0:b8:97:e2:c2:26:82:3c:91:c9:3e:48: 07:c9:4e:96:36:0f:67:cf:db:97:48:9e:b6:e4:f2: 0b:48:89:7f:16:c8:86:e6:65:d0:bf:3d:e4:34:5d: 4f:39:d2:ca:8d:3d:38:e8:63:4e:cb:0a:8d:59:b4: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:47:D0:52:C3:60:69:B3:E6:7C:75:9E:55:F8:D6:57:8F:8C:66:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/c78e23e3-d53e-3b69-8548-1cb439a1fc79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f0:bc:a7:f2:07:a5:b7:54:01:e6:95:e2:20:69:12:d9:db: f1:ca:ae:3c:98:29:23:0f:73:e4:24:4a:b0:c6:d8:7e:4d:99: 53:90:96:a6:b5:6e:2d:1b:84:49:94:19:c3:43:79:61:94:63: 72:65:3e:76:27:bd:22:84:55:06:07:89:7d:3b:4f:56:d5:d2: dc:45:6f:90:1e:22:dd:c5:7a:ff:68:19:d1:d0:e4:99:16:c3: 7e:c9:e3:32:14:0c:e2:33:b1:40:e0:74:cd:a7:7e:43:31:39: f6:eb:32:eb:4c:93:26:fd:01:a4:bf:e9:6f:09:e9:8b:5b:bd: 83:14:f4:75:fd:14:96:b8:60:18:21:ce:93:8c:ff:e2:16:56: db:33:5f:ba:54:26:61:65:07:08:77:47:4f:06:1b:45:82:81: b4:71:37:68:95:a6:89:26:b8:3f:e7:68:3f:1e:9a:fa:a8:75: e5:63:fb:5d:44:11:9d:28:99:01:da:7e:cf:73:d7:75:f4:2f: ee:2e:e8:9a:ca:0a:ee:a5:6d:5b:04:0c:97:01:70:2c:a8:86: 5b:66:7d:70:59:41:1f:df:8d:e9:09:37:e2:86:ab:4a:a4:5f: f6:79:ef:f9:fd:d0:e7:71:49:f2:07:ed:01:3f:28:83:6e:4f: 56:58:1f:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZGjOjll/QGuLCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk MDZiNzI0ZTktOGMyZi00ZTgzLWJlNTAtMzQ0MmI0MmRkMTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV4bnjo6RE9ncSmryMc6rtmIrGlWZ2RKmtqy FtCfFFzhvg7FxNAW59eNcRxawUwIA2ttBUSUPBY++uFo0w2m7c+UB7wQ3t4tXfmI HaxCpRV+xlIKmp0T7nNUojqRaXe1kRTfdoGSZNHd/k5uy/U7hLuwM31XHDbgs577 HU+zEU4kzwzAMHTrSEnz0ac5YiMDfJHxNp8ypjuzQsNj7TP8sC+kOkJOPCHbT3Uu O3nvHvAiecxUmb7SH5FzWU7luiJvuINI1PDwuJfiwiaCPJHJPkgHyU6WNg9nz9uX SJ625PILSIl/FsiG5mXQvz3kNF1POdLKjT046GNOywqNWbT4KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJH0FLDYGmz5nx1nlX41lePjGbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYzc4ZTIzZTMtZDUzZS0z YjY5LTg1NDgtMWNiNDM5YTFmYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3wvKfyB6W3VAHmleIgaRLZ2/HKrjyYKSMPc+QkSrDG2H5NmVOQlqa1 bi0bhEmUGcNDeWGUY3JlPnYnvSKEVQYHiX07T1bV0txFb5AeIt3Fev9oGdHQ5JkW w37J4zIUDOIzsUDgdM2nfkMxOfbrMutMkyb9AaS/6W8J6YtbvYMU9HX9FJa4YBgh zpOM/+IWVtszX7pUJmFlBwh3R08GG0WCgbRxN2iVpokmuD/naD8emvqodeVj+11E EZ0omQHafs9z13X0L+4u6JrKCu6lbVsEDJcBcCyohltmfXBZQR/fjekJN+KGq0qk X/Z57/n90OdxSfIH7QE/KINuT1ZYH4E= -----END CERTIFICATE-----Generated at Wed Apr 30 03:26:32 2025 by rpki-client