$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa File: 3a3ff72c-b732-3667-ade1-9d63c15074cb.roa (raw, json) Hash identifier: g8DsAaYttgaGJI4ikl9exqiW1E6zyY9fnA1zVWWFpyI= Subject key identifier: B2:DE:E2:F9:C0:5B:B9:32:BB:30:CA:99:57:A7:FA:D8:FE:A7:12:33 Certificate issuer: /CN=0b291a85-da3e-420d-8e7f-61b66b323402 Certificate serial: 010D0C9F43285849A61F498BDDF7C8A155B03E60 Authority key identifier: 8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 13566 IP address blocks: 204.76.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:49:8b:dd:f7:c8:a1:55:b0:3e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b291a85-da3e-420d-8e7f-61b66b323402 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=e3d61c99-29c3-47b6-824a-1e3f87f2637e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2d:c1:d8:7f:65:3c:45:67:d0:6b:53:57:fb: d2:55:60:80:09:d1:f8:32:b3:77:39:d2:6e:82:28: e8:f5:dd:28:ee:57:8e:cf:62:74:a1:54:4f:be:cb: 7f:60:97:0b:42:5e:95:a6:eb:5e:79:31:ee:37:85: b7:59:25:ff:3f:e3:04:60:ba:3d:18:35:2a:07:0b: 02:5e:2e:87:1a:9d:6c:26:df:4b:91:11:b3:ee:73: b0:36:a6:24:57:25:44:5f:1b:23:5c:2b:22:ac:2d: 3c:af:86:85:dc:c1:f0:fb:e9:20:ca:d5:01:96:37: f2:81:b8:92:96:2e:84:2c:0c:91:69:93:39:d8:96: e2:92:44:8f:e4:61:03:bb:ea:b3:4d:fa:6d:f7:fc: e3:db:3e:c4:77:fc:fb:43:bf:42:ca:e3:c0:b7:a4: 38:45:21:86:48:76:95:86:4a:ce:05:19:b1:d2:2d: 38:2b:24:f5:17:66:94:3b:3d:af:d1:05:55:11:00: 74:93:e7:04:47:50:18:62:76:b4:27:ce:86:e7:2a: 1d:9f:7a:aa:f1:20:66:c2:7e:15:b1:ea:3c:4c:93: b0:9f:c7:e4:05:d0:a6:0c:32:eb:dc:5a:b9:a5:2d: 72:c9:72:08:d2:66:b5:e8:72:c8:21:df:87:9a:10: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DE:E2:F9:C0:5B:B9:32:BB:30:CA:99:57:A7:FA:D8:FE:A7:12:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/3a3ff72c-b732-3667-ade1-9d63c15074cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402/0b291a85-da3e-420d-8e7f-61b66b323402.crl X509v3 Authority Key Identifier: keyid:8A:94:63:90:8E:24:FB:33:72:32:FC:FA:B4:6C:C0:B7:AD:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b291a85-da3e-420d-8e7f-61b66b323402.cer sbgp-ipAddrBlock: critical IPv4: 204.76.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:6c:90:6d:b8:08:17:cd:7c:a4:ba:ca:77:0a:9c:23:d8:f0: 75:e8:e9:fa:08:b0:f0:95:15:71:8e:a4:24:32:ec:fd:ce:7a: cf:8c:85:7c:8b:c2:70:95:c1:6e:23:9e:d9:25:0d:5f:f8:01: e2:c1:1d:27:4d:ac:47:dd:bb:25:b8:6e:8f:f2:e8:f4:83:ce: 03:f9:33:f3:63:07:55:d1:12:3d:35:cc:73:8d:07:16:bc:50: 74:fe:61:3f:ac:67:69:28:3e:fb:16:b2:0b:74:35:a2:31:6d: a5:35:95:44:64:c9:71:0a:ba:31:78:d1:4f:1e:40:ce:13:94: 19:6e:99:91:21:25:02:ae:61:1f:f5:2b:78:7d:8c:71:ee:63: 08:fa:6d:b1:95:3a:03:ea:ab:77:0a:88:93:70:94:a5:df:cf: bb:0c:a6:e8:26:c6:95:e0:7d:37:17:93:56:ae:48:24:9c:2d: ea:1e:89:3d:6d:1f:ec:ed:3d:20:cf:85:6e:35:b8:d9:ba:92: 8a:7a:db:3d:44:76:67:1a:a5:a3:73:31:6c:86:56:f0:4e:f3: f9:ae:bf:ef:d6:a5:2d:57:3d:59:5a:6e:b5:09:57:b6:83:3d: 3d:e6:b4:10:12:c8:6c:68:a8:01:7f:29:bf:7f:28:dc:f5:da: 84:a4:6c:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0mL3ffIoVWwPmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIyOTFhODUtZGEzZS00MjBkLThlN2YtNjFiNjZiMzIz NDAyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk ZTNkNjFjOTktMjljMy00N2I2LTgyNGEtMWUzZjg3ZjI2MzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS3B2H9lPEVn0GtTV/vSVWCACdH4MrN3OdJu gijo9d0o7leOz2J0oVRPvst/YJcLQl6VputeeTHuN4W3WSX/P+MEYLo9GDUqBwsC Xi6HGp1sJt9LkRGz7nOwNqYkVyVEXxsjXCsirC08r4aF3MHw++kgytUBljfygbiS li6ELAyRaZM52JbikkSP5GEDu+qzTfpt9/zj2z7Ed/z7Q79CyuPAt6Q4RSGGSHaV hkrOBRmx0i04KyT1F2aUOz2v0QVVEQB0k+cER1AYYna0J86G5yodn3qq8SBmwn4V seo8TJOwn8fkBdCmDDLr3Fq5pS1yyXII0ma16HLIId+HmhCtuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLe4vnAW7kyuzDKmVen+tj+pxIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5 MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2NmIzMjM0MDIvM2EzZmY3MmMtYjczMi0z NjY3LWFkZTEtOWQ2M2MxNTA3NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGIyOTFhODUtZGEzZS00MjBkLThl N2YtNjFiNjZiMzIzNDAyLzBiMjkxYTg1LWRhM2UtNDIwZC04ZTdmLTYxYjY2YjMy MzQwMi5jcmwwHwYDVR0jBBgwFoAUipRjkI4k+zNyMvz6tGzAt618TWwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYjI5MWE4NS1kYTNlLTQyMGQtOGU3Zi02MWI2 NmIzMjM0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzEyuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVskG24CBfNfKS6yncKnCPY8HXo6foIsPCVFXGOpCQy7P3Oes+MhXyL wnCVwW4jntklDV/4AeLBHSdNrEfduyW4bo/y6PSDzgP5M/NjB1XREj01zHONBxa8 UHT+YT+sZ2koPvsWsgt0NaIxbaU1lURkyXEKujF40U8eQM4TlBlumZEhJQKuYR/1 K3h9jHHuYwj6bbGVOgPqq3cKiJNwlKXfz7sMpugmxpXgfTcXk1auSCScLeoeiT1t H+ztPSDPhW41uNm6kop62z1EdmcapaNzMWyGVvBO8/muv+/WpS1XPVlabrUJV7aD PT3mtBASyGxoqAF/Kb9/KNz12oSkbIY= -----END CERTIFICATE-----Generated at Tue Apr 29 10:21:20 2025 by rpki-client