$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa File: 2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa (raw, json) Hash identifier: WllrS64ejSLgVWHRtlbO71TO0YYAXkIXyViN4khMOBc= Subject key identifier: 79:4C:AE:4F:25:51:75:44:BC:77:2B:30:43:06:CC:93:BE:81:CD:81 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285849AA4F72FD66E6386427CEC980 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 33322 IP address blocks: 204.15.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:72:fd:66:e6:38:64:27:ce:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=d421244d-90f3-4c78-a78e-dc8ec64701a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:12:10:2c:e9:dd:14:57:e4:56:21:01:41:4a: 39:40:2f:bd:44:48:e2:07:f1:65:0e:a5:c6:00:67: 84:d8:12:3d:de:20:bf:98:42:9d:7b:5f:ce:b7:eb: 19:84:69:69:d3:72:cf:9a:6d:01:f9:9d:64:c8:4f: e6:4a:b2:0e:0b:35:81:2e:da:e8:13:98:59:8d:d1: 7d:e9:5a:3b:78:8d:0d:29:0a:1b:ef:e0:88:00:a0: 3e:75:ab:c5:44:e2:b4:bf:9e:7e:5d:06:88:d3:99: 28:8a:b8:07:0d:93:a6:30:55:ef:50:c7:c1:9f:77: 6c:d1:89:00:1f:28:86:80:4c:d5:87:31:74:69:54: 60:f7:8f:66:50:0b:5c:2f:cb:f0:d1:18:b4:3a:08: 68:8c:f0:3f:9d:a4:0e:f0:03:3d:1e:c1:09:ff:cd: a8:6c:da:14:7b:82:48:59:c3:be:ee:f5:34:79:bf: 15:a5:dc:b5:d7:bc:38:fb:07:be:45:c6:f5:f6:9c: c4:e9:50:96:b7:b9:3d:b4:bb:4b:9f:ec:61:0e:a9: df:1e:09:1a:31:89:a4:8a:e5:53:51:b4:c2:29:35: f7:be:99:75:44:fb:e7:6d:e0:43:95:85:2a:a6:21: af:ab:a2:65:8e:b8:c4:57:2d:81:9f:b6:2f:9c:e4: f7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4C:AE:4F:25:51:75:44:BC:77:2B:30:43:06:CC:93:BE:81:CD:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/2fb96297-0a8b-37ec-be3f-30ba5b8c2ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.15.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:92:b7:45:6d:0d:33:5a:6f:09:0a:32:ac:4e:27:38:73:1e: 01:d0:46:6a:9d:b8:95:b3:06:40:90:8e:88:36:15:c2:c6:3c: 60:0f:74:64:07:71:d4:78:e8:44:e2:09:e2:41:ae:97:3c:86: 8b:cc:76:37:2f:ea:b2:a4:d2:b9:cb:51:58:1a:05:4e:9a:2b: fc:97:c5:94:89:68:95:a0:8b:69:56:7c:1b:cf:5b:61:db:b8: be:7c:c6:f0:31:ff:ad:c8:49:ed:55:26:dc:4d:9f:87:ed:c8: 8e:40:0b:ac:19:4b:2c:b2:04:46:b8:6d:e7:7e:cd:b8:1a:ae: b9:6d:8d:1a:e5:69:a9:7f:04:9d:12:f5:c4:f4:6e:d2:e6:6d: b9:fd:65:12:41:83:ea:d3:50:79:95:1f:73:4a:a2:04:36:89: b1:fb:79:f7:b1:59:fb:b0:96:f6:95:d0:ef:88:f8:2b:dd:30: 0c:7e:0e:85:8c:77:f8:fb:80:96:11:ee:90:78:16:13:0c:0a: d7:cb:5e:98:55:c4:69:55:35:2f:55:a7:19:07:e7:36:4a:88: 21:55:75:b8:01:24:ce:df:79:ce:bf:b7:5b:20:00:ac:53:a1: 60:c0:3e:f1:78:46:4c:69:80:56:e6:88:24:32:9e:f6:44:ea: 06:90:7a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT3L9ZuY4ZCfOyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk ZDQyMTI0NGQtOTBmMy00Yzc4LWE3OGUtZGM4ZWM2NDcwMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBIQLOndFFfkViEBQUo5QC+9REjiB/FlDqXG AGeE2BI93iC/mEKde1/Ot+sZhGlp03LPmm0B+Z1kyE/mSrIOCzWBLtroE5hZjdF9 6Vo7eI0NKQob7+CIAKA+davFROK0v55+XQaI05koirgHDZOmMFXvUMfBn3ds0YkA HyiGgEzVhzF0aVRg949mUAtcL8vw0Ri0OghojPA/naQO8AM9HsEJ/82obNoUe4JI WcO+7vU0eb8Vpdy117w4+we+Rcb19pzE6VCWt7k9tLtLn+xhDqnfHgkaMYmkiuVT UbTCKTX3vpl1RPvnbeBDlYUqpiGvq6JljrjEVy2Bn7YvnOT30QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlMrk8lUXVEvHcrMEMGzJO+gc2BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMmZiOTYyOTctMGE4Yi0z N2VjLWJlM2YtMzBiYTViOGMyYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA+EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCSt0VtDTNabwkKMqxOJzhzHgHQRmqduJWzBkCQjog2FcLGPGAPdGQH cdR46ETiCeJBrpc8hovMdjcv6rKk0rnLUVgaBU6aK/yXxZSJaJWgi2lWfBvPW2Hb uL58xvAx/63ISe1VJtxNn4ftyI5AC6wZSyyyBEa4bed+zbgarrltjRrlaal/BJ0S 9cT0btLmbbn9ZRJBg+rTUHmVH3NKogQ2ibH7efexWfuwlvaV0O+I+CvdMAx+DoWM d/j7gJYR7pB4FhMMCtfLXphVxGlVNS9VpxkH5zZKiCFVdbgBJM7fec6/t1sgAKxT oWDAPvF4RkxpgFbmiCQynvZE6gaQetE= -----END CERTIFICATE-----Generated at Wed Apr 30 09:40:13 2025 by rpki-client