$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/27b3156d-f54a-3b5e-a9b5-f39133bfe1b1.roa File: 27b3156d-f54a-3b5e-a9b5-f39133bfe1b1.roa (raw, json) Hash identifier: ok6//O+Ix3LKk/Hr9DjuCCZOlEhGA2M6IVJLABsC9l0= Subject key identifier: 00:16:99:03:9B:05:FE:5C:D3:2C:64:4A:35:38:78:43:C4:3F:FF:D9 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285849806F0F5709EB08EBBD0CD480 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/27b3156d-f54a-3b5e-a9b5-f39133bfe1b1.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 19165 IP address blocks: 204.14.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:0f:57:09:eb:08:eb:bd:0c:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=e853278e-1ce0-4532-b560-f8c31547734d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:28:aa:ee:a9:8e:e5:80:24:98:e3:4b:24:2b: 0f:29:4c:55:79:04:d9:61:ac:e2:02:69:0d:ee:5b: 3b:a9:08:9b:d9:ae:f6:2e:61:4f:cd:84:e0:f1:c6: d2:3d:32:c4:69:44:f6:59:c6:cc:62:0b:2c:9e:97: c2:3d:bf:14:28:b1:50:71:30:c4:68:df:64:1f:ad: 52:3e:e5:77:39:16:fa:14:ab:75:fc:13:cf:09:5f: 30:76:8b:f6:6a:5a:cb:60:d9:9b:81:3b:bc:9f:3b: 9d:c0:e7:74:dc:12:7d:04:cf:70:3d:69:c3:7a:63: 44:17:d9:cd:c4:15:9a:27:c8:3f:ae:48:1e:2c:ae: 7f:e6:5d:2d:b8:a3:17:14:47:a0:e0:0f:0f:dc:f5: 9a:f3:b6:42:87:b3:e9:e6:d3:c1:09:d3:e4:fd:38: 2e:1e:1f:31:3e:92:63:00:f6:2e:20:a5:f6:21:9b: ac:67:49:26:c2:19:55:d4:f4:10:ef:7d:14:72:fd: 75:ba:0f:0a:45:3b:62:47:8d:5b:93:6f:7a:67:12: 28:a6:c9:41:91:b2:79:83:1c:08:ae:8b:95:79:9a: 4e:87:0d:7c:83:87:1f:bb:9e:a8:88:90:f9:0c:22: 66:9a:cb:7e:6b:22:dd:bb:f6:5a:a7:a8:04:09:f1: 15:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:16:99:03:9B:05:FE:5C:D3:2C:64:4A:35:38:78:43:C4:3F:FF:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/27b3156d-f54a-3b5e-a9b5-f39133bfe1b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 204.14.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:35:cc:b7:48:41:3a:cb:b4:7d:95:c4:a9:48:49:47:e3:dc: 82:89:d0:90:69:c7:ad:b5:79:61:19:e5:d9:1c:6e:0a:5a:5a: a2:17:f9:8b:f4:6d:4d:96:dd:2b:71:5d:ff:d1:b2:f8:fb:9d: a6:19:18:b0:6c:ae:38:f5:55:04:17:2a:0d:85:dd:5e:14:93: 99:60:37:3c:2e:61:09:eb:1a:60:ca:0f:6f:93:93:ee:4d:cb: 1f:84:fa:13:6c:0b:c0:17:3b:6e:bc:bb:1d:04:36:98:f5:81: 1d:3e:68:bb:ad:4b:e8:99:06:24:99:83:ef:2e:a1:d3:99:63: c2:8f:c9:90:4c:84:ec:5b:b8:20:d6:aa:3c:67:2b:30:20:cd: 89:b4:68:31:2f:d6:5b:4f:0b:54:9e:6e:c7:44:fc:cd:c2:5b: d8:e0:55:ce:5f:30:65:09:95:d7:d7:b7:09:2d:97:f7:10:9b: b2:ca:2e:ca:59:46:3b:ae:84:2e:6f:ab:ce:bc:f9:29:b9:6b: 5b:ee:88:14:ca:35:47:2f:2c:b6:90:0c:9f:cc:8c:36:fc:a9: 7a:11:7d:21:68:5c:5b:d8:a1:73:a2:71:52:5c:c2:9c:05:e8: f5:f6:62:da:8d:9e:d5:b5:19:61:5f:05:2b:e5:be:e7:35:7d: be:dd:dc:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbw9XCesI670M1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZTg1MzI3OGUtMWNlMC00NTMyLWI1NjAtZjhjMzE1NDc3MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSiq7qmO5YAkmONLJCsPKUxVeQTZYaziAmkN 7ls7qQib2a72LmFPzYTg8cbSPTLEaUT2WcbMYgssnpfCPb8UKLFQcTDEaN9kH61S PuV3ORb6FKt1/BPPCV8wdov2alrLYNmbgTu8nzudwOd03BJ9BM9wPWnDemNEF9nN xBWaJ8g/rkgeLK5/5l0tuKMXFEeg4A8P3PWa87ZCh7Pp5tPBCdPk/TguHh8xPpJj APYuIKX2IZusZ0kmwhlV1PQQ730Ucv11ug8KRTtiR41bk296ZxIopslBkbJ5gxwI rouVeZpOhw18g4cfu56oiJD5DCJmmst+ayLdu/Zap6gECfEV5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAWmQObBf5c0yxkSjU4eEPEP//ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvMjdiMzE1NmQtZjU0YS0z YjVlLWE5YjUtZjM5MTMzYmZlMWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA6cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc1zLdIQTrLtH2VxKlISUfj3IKJ0JBpx621eWEZ5dkcbgpaWqIX+Yv0 bU2W3StxXf/Rsvj7naYZGLBsrjj1VQQXKg2F3V4Uk5lgNzwuYQnrGmDKD2+Tk+5N yx+E+hNsC8AXO268ux0ENpj1gR0+aLutS+iZBiSZg+8uodOZY8KPyZBMhOxbuCDW qjxnKzAgzYm0aDEv1ltPC1SebsdE/M3CW9jgVc5fMGUJldfXtwktl/cQm7LKLspZ RjuuhC5vq868+Sm5a1vuiBTKNUcvLLaQDJ/MjDb8qXoRfSFoXFvYoXOicVJcwpwF 6PX2YtqNntW1GWFfBSvlvuc1fb7d3Fc= -----END CERTIFICATE-----Generated at Mon Apr 28 12:27:49 2025 by rpki-client