$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa File: 235cefab-f003-344e-a29e-ed3307aa2358.roa (raw, json) Hash identifier: PQq5NpdkCp+pmD1leKadps3QeHB5Dp6/f9E5vhltYgQ= Subject key identifier: BC:6F:1F:BC:CC:65:C6:55:59:3C:23:6B:A0:C5:9F:5D:95:AB:3F:E3 Certificate issuer: /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Certificate serial: 010D0C9F432858492ABCA9D9C13B81938BB33D20 Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa Signing time: Wed 12 Mar 2025 20:17:55 +0000 ROA not before: Wed 12 Mar 2025 20:17:55 +0000 ROA not after: Tue 10 Jun 2025 20:17:55 +0000 asID: 16509 IP address blocks: 204.57.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2a:bc:a9:d9:c1:3b:81:93:8b:b3:3d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c Validity Not Before: Mar 12 20:17:55 2025 GMT Not After : Jun 10 20:17:55 2025 GMT Subject: CN=221d0444-afda-43e3-ade0-9429d2727afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:ed:57:80:16:8b:a4:d2:87:4c:5d:70:e6: af:dc:8f:46:87:9a:0d:7f:00:4f:57:19:a0:17:cc: af:87:f6:3d:74:d7:c9:b9:0a:a9:47:4c:20:37:fe: 85:46:83:7a:05:8b:e4:68:27:f7:50:f7:81:a0:7c: 14:90:88:c3:35:86:1b:bc:40:6c:f5:c4:f3:02:6f: 84:19:10:ba:3c:04:b7:fa:7f:0f:fd:42:25:96:e4: 18:17:39:4c:d7:c8:b6:b0:15:1d:d4:62:9a:7b:54: ef:bb:7a:0e:c4:85:8e:9d:8e:5b:0d:87:5d:dc:dd: ae:d9:60:b0:9f:e3:84:84:6c:c7:79:85:f4:77:b2: 57:67:b0:a5:74:51:8c:01:e8:04:cf:ae:6e:8f:81: cc:63:45:3f:77:94:f6:19:cf:87:45:2a:39:cc:28: 65:8d:84:3c:68:19:04:f4:60:fe:5a:40:d7:2f:7f: b4:11:3d:a5:d2:6c:79:cb:27:90:91:95:09:a5:f5: fc:0c:93:0b:58:b0:ab:28:0e:90:84:b4:52:d2:0d: 07:1c:60:91:b9:65:92:e7:fa:80:9e:a6:35:60:e5: 40:7e:a3:2a:c7:c1:f7:39:57:c4:4d:2d:e1:19:e3: 03:a3:da:3b:42:af:cd:08:d6:1b:56:19:d8:04:83: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6F:1F:BC:CC:65:C6:55:59:3C:23:6B:A0:C5:9F:5D:95:AB:3F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/235cefab-f003-344e-a29e-ed3307aa2358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl X509v3 Authority Key Identifier: keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer sbgp-ipAddrBlock: critical IPv4: 204.57.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:0e:3f:2a:39:e9:7d:98:e8:5c:61:ec:e9:bc:5d:5d:57:4f: 98:ca:46:89:9e:78:9a:ef:78:ec:d2:47:f3:31:a2:2f:cd:b3: 97:bc:c6:ab:16:a1:81:d0:16:84:a6:7d:b9:73:bc:06:83:d1: ad:4a:52:ba:48:52:cd:5d:f5:a6:1e:c0:ce:a5:0a:6c:40:65: 18:18:f4:07:66:8b:ce:27:b3:68:2d:27:42:29:d4:e8:9d:2f: 1e:b9:6a:6b:43:80:03:e0:c4:30:97:c4:58:73:0c:5a:81:8f: 5f:6b:79:f2:9b:2a:d1:98:2b:fc:8b:56:4f:87:c8:33:a5:16: a2:34:b0:c3:47:e5:7d:da:91:ee:3e:42:e5:29:97:ad:04:d8: 97:71:d5:b4:a0:2b:27:d0:3e:45:78:f1:cc:70:93:f0:c0:8c: 72:e2:19:40:09:9b:03:1a:95:db:ac:a4:10:72:3f:3f:bb:e0: 73:32:ab:fa:52:85:6d:c0:e0:8d:81:d8:9d:51:fa:72:16:92: 7b:b2:f7:2f:4a:4b:0d:eb:d4:66:b0:11:ef:8c:62:74:48:42: 44:d9:e0:18:f4:be:14:7c:09:22:ad:51:b6:09:81:47:ba:ec: 63:61:c6:96:8a:8e:b6:ff:5d:75:89:0c:a8:3d:a1:57:9a:73: ba:49:e7:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkqvKnZwTuBk4uzPSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ4MGRhYTUtNzlkYy00YzJhLTg4NzktMjQ4YTNmM2Uz MzljMB4XDTI1MDMxMjIwMTc1NVoXDTI1MDYxMDIwMTc1NVowLzEtMCsGA1UEAxMk MjIxZDA0NDQtYWZkYS00M2UzLWFkZTAtOTQyOWQyNzI3YWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosHtV4AWi6TSh0xdcOav3I9Gh5oNfwBPVxmg F8yvh/Y9dNfJuQqpR0wgN/6FRoN6BYvkaCf3UPeBoHwUkIjDNYYbvEBs9cTzAm+E GRC6PAS3+n8P/UIlluQYFzlM18i2sBUd1GKae1Tvu3oOxIWOnY5bDYdd3N2u2WCw n+OEhGzHeYX0d7JXZ7CldFGMAegEz65uj4HMY0U/d5T2Gc+HRSo5zChljYQ8aBkE 9GD+WkDXL3+0ET2l0mx5yyeQkZUJpfX8DJMLWLCrKA6QhLRS0g0HHGCRuWWS5/qA nqY1YOVAfqMqx8H3OVfETS3hGeMDo9o7Qq/NCNYbVhnYBIP6aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxvH7zMZcZVWTwja6DFn12Vqz/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgw ZGFhNS03OWRjLTRjMmEtODg3OS0yNDhhM2YzZTMzOWMvMjM1Y2VmYWItZjAwMy0z NDRlLWEyOWUtZWQzMzA3YWEyMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGQ4MGRhYTUtNzlkYy00YzJhLTg4 NzktMjQ4YTNmM2UzMzljLzRkODBkYWE1LTc5ZGMtNGMyYS04ODc5LTI0OGEzZjNl MzM5Yy5jcmwwHwYDVR0jBBgwFoAURSS0Po4TMO3Vlg05oMUNPZbAVvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80ZDgwZGFhNS03OWRjLTRjMmEtODg3OS0yNDhh M2YzZTMzOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzDnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwOPyo56X2Y6Fxh7Om8XV1XT5jKRomeeJrveOzSR/Mxoi/Ns5e8xqsW oYHQFoSmfblzvAaD0a1KUrpIUs1d9aYewM6lCmxAZRgY9Admi84ns2gtJ0Ip1Oid Lx65amtDgAPgxDCXxFhzDFqBj19refKbKtGYK/yLVk+HyDOlFqI0sMNH5X3ake4+ QuUpl60E2Jdx1bSgKyfQPkV48cxwk/DAjHLiGUAJmwMalduspBByPz+74HMyq/pS hW3A4I2B2J1R+nIWknuy9y9KSw3r1GawEe+MYnRIQkTZ4Bj0vhR8CSKtUbYJgUe6 7GNhxpaKjrb/XXWJDKg9oVeac7pJ5xQ= -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:03 2025 by rpki-client