$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa File: 2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa (raw, json) Hash identifier: CO9VYEpfxdgOhS2TkRtxbuKSTEZcrbo2eK0b6E3p0oA= Subject key identifier: 42:45:52:6D:D9:01:99:71:68:05:BD:3B:16:48:80:C0:BD:4F:D7:A1 Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Certificate serial: 010D0C9F43285849AA4F56DFF191952761F8E180 Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 5377 IP address blocks: 204.8.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:56:df:f1:91:95:27:61:f8:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=1086d6fd-330a-453e-8a38-c96456768ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d2:98:65:fc:8c:a9:86:4e:c8:0e:92:f4:a7: 23:78:57:fd:38:58:d3:ed:d7:0d:ff:42:61:ce:fc: 52:b4:a3:00:59:e7:9e:32:1e:04:9d:18:44:76:68: d2:24:82:c3:f0:92:05:9a:7d:b3:39:43:a4:41:eb: 9a:ce:db:b9:ac:33:f3:1d:44:92:d5:8b:1c:a2:cb: 73:0b:13:1d:10:59:d6:4c:b7:fb:db:f4:91:12:32: e3:67:dd:af:d2:3e:89:6d:9b:ff:75:03:bb:65:c8: f2:9d:ab:5c:c5:66:9c:9b:13:b3:25:15:31:29:67: 75:8d:22:8d:0c:46:39:a5:bd:49:4b:1f:3e:90:f0: 7a:da:bb:4a:91:b8:7f:2e:ba:df:0e:28:39:03:b2: f1:32:82:35:39:58:9a:29:6c:77:bd:ad:61:40:4d: 79:f3:12:2f:11:aa:12:f4:4e:ff:8e:ba:a6:51:30: 02:5e:6c:88:d5:5c:ab:10:64:17:c8:ee:03:67:6c: 8a:77:45:23:17:b2:df:9e:a5:51:aa:df:6d:36:02: c7:11:f7:6e:b2:0d:0b:27:8b:1a:1e:bc:97:b1:52: 01:02:2e:ab:5d:ac:41:ec:d3:17:61:f2:b4:ed:af: d5:11:ad:fd:e1:f9:d2:44:0d:ff:e4:28:eb:e4:8d: ec:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:45:52:6D:D9:01:99:71:68:05:BD:3B:16:48:80:C0:BD:4F:D7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/2c4b35cf-7564-33b2-82cc-cee4d0eaab70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl X509v3 Authority Key Identifier: keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer sbgp-ipAddrBlock: critical IPv4: 204.8.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:35:8a:e7:25:3a:91:64:0f:9b:17:da:53:7b:d5:74:dc:42: 33:5a:ac:ac:5c:4a:fa:12:f9:36:1e:60:d3:24:3b:77:c3:4c: aa:8d:19:1b:03:b1:25:85:cb:4f:01:eb:7d:3f:38:9f:c7:2f: 50:2e:55:5a:74:30:ad:7b:d4:cd:de:cd:c3:2c:0e:71:3f:ee: ce:98:b4:73:81:7a:01:98:3b:cd:44:44:86:9c:b5:8c:4d:dd: 21:30:c4:de:e8:e5:36:40:a5:2d:15:3a:43:18:96:bf:ff:66: b3:de:ac:2d:22:8f:06:29:f7:02:73:bf:27:cb:37:67:ed:b1: d1:8f:70:1d:2b:e6:a6:33:37:07:f4:15:77:af:34:3c:bf:07: 85:4a:d6:8f:06:cb:c6:ee:82:2d:9b:2b:10:44:2b:a7:d7:74: bd:5d:44:14:5c:da:8c:ba:8d:2d:44:85:83:bd:ea:1b:52:fb: e6:66:d1:ff:d3:3f:2d:06:ac:aa:a5:84:17:46:48:46:6f:40: f8:75:7c:27:d4:99:01:10:b4:b9:0b:c9:a1:b0:e9:8a:be:3e: 5f:75:b8:4e:56:77:76:5b:18:d8:c4:e4:83:d5:f8:f9:db:95: e9:a3:ef:f8:4a:6f:45:b1:18:59:11:87:02:da:78:54:3f:5b: 46:04:eb:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT1bf8ZGVJ2H44YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMzNGY2OGItMmY3Zi00ZWYzLWJkZWUtNWEwZTJkNjhh MDNiMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk MTA4NmQ2ZmQtMzMwYS00NTNlLThhMzgtYzk2NDU2NzY4ZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndKYZfyMqYZOyA6S9KcjeFf9OFjT7dcN/0Jh zvxStKMAWeeeMh4EnRhEdmjSJILD8JIFmn2zOUOkQeuaztu5rDPzHUSS1Yscostz CxMdEFnWTLf72/SREjLjZ92v0j6JbZv/dQO7ZcjynatcxWacmxOzJRUxKWd1jSKN DEY5pb1JSx8+kPB62rtKkbh/LrrfDig5A7LxMoI1OViaKWx3va1hQE158xIvEaoS 9E7/jrqmUTACXmyI1VyrEGQXyO4DZ2yKd0UjF7LfnqVRqt9tNgLHEfdusg0LJ4sa HryXsVIBAi6rXaxB7NMXYfK07a/VEa394fnSRA3/5Cjr5I3s5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJFUm3ZAZlxaAW9OxZIgMC9T9ehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0 ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBlMmQ2OGEwM2IvMmM0YjM1Y2YtNzU2NC0z M2IyLTgyY2MtY2VlNGQwZWFhYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMzNGY2OGItMmY3Zi00ZWYzLWJk ZWUtNWEwZTJkNjhhMDNiLzBjMzRmNjhiLTJmN2YtNGVmMy1iZGVlLTVhMGUyZDY4 YTAzYi5jcmwwHwYDVR0jBBgwFoAUGT96sPm60yA6FwWVB8+TKk6ScCwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzM0ZjY4Yi0yZjdmLTRlZjMtYmRlZS01YTBl MmQ2OGEwM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw1iuclOpFkD5sX2lN71XTcQjNarKxcSvoS+TYeYNMkO3fDTKqNGRsD sSWFy08B630/OJ/HL1AuVVp0MK171M3ezcMsDnE/7s6YtHOBegGYO81ERIactYxN 3SEwxN7o5TZApS0VOkMYlr//ZrPerC0ijwYp9wJzvyfLN2ftsdGPcB0r5qYzNwf0 FXevNDy/B4VK1o8Gy8bugi2bKxBEK6fXdL1dRBRc2oy6jS1EhYO96htS++Zm0f/T Py0GrKqlhBdGSEZvQPh1fCfUmQEQtLkLyaGw6Yq+Pl91uE5Wd3ZbGNjE5IPV+Pnb lemj7/hKb0WxGFkRhwLaeFQ/W0YE66w= -----END CERTIFICATE-----Generated at Mon Apr 28 08:24:52 2025 by rpki-client