$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa File: 3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa (raw, json) Hash identifier: usuBnwPvH56YASLexg0aPZ63eiJ6zC3MnEuhevJSdx4= Subject key identifier: 20:AA:3E:96:E9:0E:59:71:D7:45:5B:F4:45:4C:48:97:C8:DF:6C:6F Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285849A784C2A753FEB45398411380 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa Signing time: Sat 26 Apr 2025 13:01:01 +0000 ROA not before: Sat 26 Apr 2025 13:01:01 +0000 ROA not after: Fri 25 Jul 2025 13:01:01 +0000 asID: 33322 IP address blocks: 204.16.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a7:84:c2:a7:53:fe:b4:53:98:41:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Apr 26 13:01:01 2025 GMT Not After : Jul 25 13:01:01 2025 GMT Subject: CN=91a843a1-b76c-49a7-a9e3-ec44fbd8e5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:30:32:b6:1e:b0:73:4a:40:dd:de:db:ff: 19:0e:bd:3a:a3:4c:98:71:12:39:05:11:a8:af:54: 82:8c:48:fb:2f:eb:91:68:61:78:5c:5e:59:eb:80: 07:26:18:e1:f0:b5:6e:31:31:f5:eb:0b:a1:a8:18: 13:46:82:17:e0:86:59:2c:eb:04:7a:4f:ba:a9:22: cc:50:37:2b:ec:94:2f:e1:8d:04:30:d8:70:a3:ca: 72:0a:74:0e:da:68:78:6d:f9:bf:7f:57:0b:71:10: 66:8b:86:7c:b6:27:61:5a:47:c8:fa:c0:8b:c8:b4: 1c:52:1d:92:ba:b7:d1:f3:43:d3:65:3a:35:7c:4a: 12:ce:f3:f5:e7:a7:a4:ff:cb:9e:83:b8:a3:62:48: 8c:b4:18:81:5b:78:71:71:e7:c7:87:fa:56:eb:89: f6:19:15:76:a9:75:e5:27:89:5f:c9:c2:86:37:7b: 8a:be:b4:2f:99:21:96:60:fa:19:b9:e6:21:fc:fc: 36:f6:60:58:33:5f:44:c8:7f:d1:18:66:6e:83:3d: c4:0e:a0:1b:fc:4a:c1:44:46:dd:ec:9e:fa:70:53: 38:08:9b:26:93:50:74:76:52:b4:34:aa:b3:c3:5a: 09:0b:e4:70:a4:cd:ee:09:5a:aa:4d:bf:cc:c3:9a: b6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AA:3E:96:E9:0E:59:71:D7:45:5B:F4:45:4C:48:97:C8:DF:6C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/3d458b10-00d8-3f00-a0c7-2fc6c9de3114.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.16.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:17:73:b0:c8:43:b0:6f:03:4a:ed:25:40:bc:06:61:80:64: ac:1d:0c:94:f1:7c:de:55:cb:44:a3:a1:f3:d6:8e:b6:a2:cd: 2b:a4:99:09:af:87:d1:64:e4:ec:1e:a1:62:8a:be:c3:b5:35: 00:32:02:13:74:f9:7f:e9:d5:e9:80:25:fb:85:10:79:a1:b9: ea:bf:f0:50:1a:a3:49:f6:e6:41:62:c3:07:e7:b7:9c:56:ee: 46:f8:46:6d:b5:c8:41:20:fc:58:5b:58:ae:5b:57:a3:ef:37: f0:53:6d:d3:e4:87:2b:fa:41:07:7d:12:70:62:07:f5:32:08: 48:ec:36:82:39:14:56:42:88:98:26:51:7d:38:a0:dc:b7:01: 72:5e:e5:26:2f:9a:86:cf:7f:a5:f9:b6:bf:86:f8:d1:a1:7c: 6e:74:fa:62:88:1f:85:3d:1c:64:18:84:5a:61:03:63:bb:1c: c6:a8:31:09:69:df:25:be:e7:29:e9:65:dd:58:90:08:38:dc: 15:36:07:22:4c:8c:12:e4:e3:2a:35:3e:6a:5a:4f:5a:3c:c5: d8:3e:7d:53:e7:e3:73:14:8f:fd:0f:41:7e:32:ce:c6:7a:15: 79:5d:b9:07:36:e6:a1:42:50:51:f3:da:40:68:63:81:39:76: 9f:53:dd:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMKnU/60U5hBE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk OTFhODQzYTEtYjc2Yy00OWE3LWE5ZTMtZWM0NGZiZDhlNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL4wMrYesHNKQN3e2/8ZDr06o0yYcRI5BRGo r1SCjEj7L+uRaGF4XF5Z64AHJhjh8LVuMTH16wuhqBgTRoIX4IZZLOsEek+6qSLM UDcr7JQv4Y0EMNhwo8pyCnQO2mh4bfm/f1cLcRBmi4Z8tidhWkfI+sCLyLQcUh2S urfR80PTZTo1fEoSzvP156ek/8ueg7ijYkiMtBiBW3hxcefHh/pW64n2GRV2qXXl J4lfycKGN3uKvrQvmSGWYPoZueYh/Pw29mBYM19EyH/RGGZugz3EDqAb/ErBREbd 7J76cFM4CJsmk1B0dlK0NKqzw1oJC+RwpM3uCVqqTb/Mw5q2twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCqPpbpDllx10Vb9EVMSJfI32xvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvM2Q0NThiMTAtMDBkOC0z ZjAwLWEwYzctMmZjNmM5ZGUzMTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBDUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcXc7DIQ7BvA0rtJUC8BmGAZKwdDJTxfN5Vy0SjofPWjraizSukmQmv h9Fk5OweoWKKvsO1NQAyAhN0+X/p1emAJfuFEHmhueq/8FAao0n25kFiwwfnt5xW 7kb4Rm21yEEg/FhbWK5bV6PvN/BTbdPkhyv6QQd9EnBiB/UyCEjsNoI5FFZCiJgm UX04oNy3AXJe5SYvmobPf6X5tr+G+NGhfG50+mKIH4U9HGQYhFphA2O7HMaoMQlp 3yW+5ynpZd1YkAg43BU2ByJMjBLk4yo1PmpaT1o8xdg+fVPn43MUj/0PQX4yzsZ6 FXlduQc25qFCUFHz2kBoY4E5dp9T3Ts= -----END CERTIFICATE-----Generated at Tue Apr 29 21:00:46 2025 by rpki-client