$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa File: 325875a8-7f1a-358a-a215-06cc79b97d9a.roa (raw, json) Hash identifier: 9r4dx0uUhmelQMWpeatEvb8kotLG/jDNpsZtve8AI4k= Subject key identifier: 24:46:36:D0:D1:C1:8B:11:D7:0D:1A:02:06:B4:1D:AA:63:87:E8:CD Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584988CF2CB9611F084C4ACE4080 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 395567 IP address blocks: 172.83.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:2c:b9:61:1f:08:4c:4a:ce:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=c87f8b51-795f-47ed-957b-9051fb7e975c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:dd:49:24:e5:e1:6b:22:39:05:bf:91:97:f2: 3e:96:ab:db:46:ce:10:f3:89:47:20:c8:b9:2b:9f: 20:8b:67:e9:c0:2c:16:89:a6:d3:47:50:51:a1:ae: 47:76:b7:65:84:92:20:24:55:a2:21:e9:f4:00:dd: 47:5c:a2:78:b4:ff:f8:75:40:c7:d3:8a:72:e1:78: 4f:71:83:3d:21:3b:3a:49:7d:09:17:19:3d:51:a5: a5:6b:c7:21:b7:84:a5:1b:d3:2e:d7:43:fc:d2:af: 7c:bc:f6:d1:8c:8d:40:08:56:17:fa:49:0f:f5:90: 4e:34:ef:1d:96:76:f3:9d:60:f7:47:a6:5f:6e:d7: 60:a7:e6:fb:fc:b0:12:c3:95:91:5a:83:fb:70:57: 81:de:79:9d:86:b4:0e:d2:f5:e3:1b:69:87:2a:55: 43:7b:4b:ae:93:d4:42:b5:fb:b1:84:9d:ad:39:e0: 8d:2c:74:2e:91:00:54:b5:81:9e:68:79:0c:c7:c5: 6d:4e:58:ba:15:9a:48:5f:3a:2a:8e:d2:05:1d:b0: 39:50:0e:84:94:c6:0b:ea:bd:69:6e:13:2e:89:f1: 63:89:27:eb:fe:4b:a2:80:8a:b2:cd:41:ba:1b:ec: 98:6d:67:09:d0:b0:34:71:50:49:1b:f1:ce:1c:1a: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:46:36:D0:D1:C1:8B:11:D7:0D:1A:02:06:B4:1D:AA:63:87:E8:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 172.83.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f8:e6:be:dc:25:95:7d:90:eb:4e:cc:e7:29:d3:ff:05:98: a1:97:8d:3e:72:a3:ba:64:54:09:13:3e:ff:0f:1a:eb:73:b0: f0:a8:c9:06:82:73:af:4a:c9:a9:3b:2b:ab:03:ed:bc:0f:a8: f4:13:b7:96:b5:9d:1c:5a:74:4f:45:5e:83:6e:b0:cb:ff:1d: 0e:f6:42:70:f4:06:82:42:75:cf:70:b7:6b:04:38:66:ec:b0: 71:ce:00:49:b2:61:af:1b:3f:27:a6:d4:8a:e1:75:de:74:d3: 30:5c:12:e4:be:90:7f:fa:17:4f:6a:d5:f2:88:15:dc:af:fd: e1:dd:d0:fa:69:a3:72:50:99:17:c0:55:53:a2:6e:94:8b:69: 29:d5:d7:a6:e6:9c:56:f9:14:bb:93:65:88:79:b9:b6:8b:bb: 30:4b:18:ca:80:b2:42:e5:2e:3f:c8:6c:2e:af:bc:8f:52:77: b3:cb:75:da:80:05:c4:82:10:b5:b9:49:1a:6b:b3:5c:e1:75: b3:37:ed:47:a8:ea:8a:a7:db:47:be:da:59:2c:ea:57:c5:1b: b4:a1:c6:91:7a:42:e0:25:95:c8:7a:cc:6c:17:7d:40:8c:b3: a5:74:06:54:47:05:93:22:d0:47:9b:96:1f:19:cc:33:1a:f5: 24:26:c5:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzyy5YR8ITErOQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Yzg3ZjhiNTEtNzk1Zi00N2VkLTk1N2ItOTA1MWZiN2U5NzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd1JJOXhayI5Bb+Rl/I+lqvbRs4Q84lHIMi5 K58gi2fpwCwWiabTR1BRoa5HdrdlhJIgJFWiIen0AN1HXKJ4tP/4dUDH04py4XhP cYM9ITs6SX0JFxk9UaWla8cht4SlG9Mu10P80q98vPbRjI1ACFYX+kkP9ZBONO8d lnbznWD3R6Zfbtdgp+b7/LASw5WRWoP7cFeB3nmdhrQO0vXjG2mHKlVDe0uuk9RC tfuxhJ2tOeCNLHQukQBUtYGeaHkMx8VtTli6FZpIXzoqjtIFHbA5UA6ElMYL6r1p bhMuifFjiSfr/kuigIqyzUG6G+yYbWcJ0LA0cVBJG/HOHBqP/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRGNtDRwYsR1w0aAga0Hapjh+jNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMzI1ODc1YTgtN2YxYS0z NThhLWEyMTUtMDZjYzc5Yjk3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX45r7cJZV9kOtOzOcp0/8FmKGXjT5yo7pkVAkTPv8PGutzsPCoyQaC c69Kyak7K6sD7bwPqPQTt5a1nRxadE9FXoNusMv/HQ72QnD0BoJCdc9wt2sEOGbs sHHOAEmyYa8bPyem1Irhdd500zBcEuS+kH/6F09q1fKIFdyv/eHd0Pppo3JQmRfA VVOibpSLaSnV16bmnFb5FLuTZYh5ubaLuzBLGMqAskLlLj/IbC6vvI9Sd7PLddqA BcSCELW5SRprs1zhdbM37Ueo6oqn20e+2lks6lfFG7ShxpF6QuAllch6zGwXfUCM s6V0BlRHBZMi0Eeblh8ZzDMa9SQmxZk= -----END CERTIFICATE-----Generated at Sun Apr 27 23:39:27 2025 by rpki-client