$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa File: caa97378-5f08-3b0d-b7e1-827ad74af39f.roa (raw, json) Hash identifier: IZK97JE7KVLtid233jVcwncszRlHWeAkq4QqgUgbPJ8= Subject key identifier: D1:D0:A5:02:6D:4B:E5:2D:1A:51:E5:D7:CA:D4:AB:CB:8C:7B:C3:71 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F43285849A3548439058E4154409CDC80 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 36290 IP address blocks: 204.19.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:84:39:05:8e:41:54:40:9c:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=42ef0beb-6f3d-43dd-839e-50c212251391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:bd:b7:8a:a2:21:16:c5:ab:73:5a:20:cc: 78:79:5c:06:51:10:3c:bb:e7:b3:7e:5a:5c:4f:86: 9d:b3:fb:cb:cc:f9:10:ed:67:e4:3a:b9:63:41:cc: 9e:54:d1:8d:f6:34:11:eb:9c:60:87:41:e8:be:90: 88:5a:3c:d7:be:f8:1a:9d:51:46:0f:83:e5:ed:40: 7e:36:3e:d2:87:b6:ec:2f:4c:f2:87:ec:9d:68:e9: f8:d3:11:25:fa:2f:c9:4d:bb:28:1d:e4:0f:11:e0: db:f6:46:97:db:67:b8:8a:89:70:84:97:3e:d5:8a: 3c:e1:4b:57:78:01:bc:f4:3d:0b:6f:8e:8b:9d:7a: bc:27:22:50:a2:76:8c:a2:df:0d:39:5a:7b:2b:6c: 15:1e:fe:b4:35:24:8e:3f:00:de:4c:04:8f:85:b8: 5b:cf:91:36:41:0f:11:02:05:96:e4:8f:2b:7d:ad: e0:d6:5c:9c:73:06:dc:22:58:c0:07:88:a2:5d:11: b9:d1:38:fe:2a:4f:81:52:5c:0f:8c:13:ea:bc:0f: 72:12:ef:40:88:ee:0f:56:f5:a0:82:8c:4e:f7:d1: 65:14:b3:f7:d5:1b:74:b4:8a:63:ff:90:e8:4b:7d: 62:e0:a2:3c:64:ff:a1:e2:f6:85:ac:36:d4:70:c0: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D0:A5:02:6D:4B:E5:2D:1A:51:E5:D7:CA:D4:AB:CB:8C:7B:C3:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.19.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:3c:4f:70:dc:09:3e:2b:0a:bd:1b:9f:c1:be:aa:bc:ac:d6: 68:0f:08:96:1c:ce:74:52:46:80:43:d3:6d:69:6d:a5:59:76: 1e:6f:9e:4b:75:b9:b7:51:59:93:a8:38:c5:c8:05:9d:ef:7c: 3e:2f:6a:c1:51:31:f5:06:b9:d7:3a:40:a1:16:70:ff:66:a2: 52:f7:e8:12:ec:2d:cb:3a:8e:5e:e4:5d:d6:88:1f:fa:b9:8f: 84:62:f2:2d:34:3c:6f:ff:67:25:d2:71:eb:d0:89:a4:58:0b: 0e:8d:56:dd:94:83:5e:5d:0f:f7:4e:ef:c4:2a:b6:86:1c:9d: 24:8e:fc:e3:a1:d2:08:03:80:ee:04:42:d8:b5:f8:57:87:09: 0c:8b:41:5d:b8:67:63:ea:41:54:29:a3:c5:4a:a6:66:b9:81: c7:18:85:26:55:d5:fa:28:54:ac:34:e2:ba:1e:48:65:15:d2: d6:5a:27:53:77:a6:da:0a:c1:ad:9c:4b:f2:11:2e:e2:5e:bc: 01:ce:56:39:65:24:ac:fa:ed:b0:08:ae:dd:b1:35:69:cb:06: a8:c0:52:26:67:5d:d5:ac:c3:c8:31:3c:2c:90:7f:ec:07:1c: 39:13:8b:58:82:70:29:15:a0:3a:7e:7a:21:93:a7:b3:f1:df: 01:6d:fd:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIQ5BY5BVECc3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk NDJlZjBiZWItNmYzZC00M2RkLTgzOWUtNTBjMjEyMjUxMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpm9t4qiIRbFq3NaIMx4eVwGURA8u+ezflpc T4ads/vLzPkQ7WfkOrljQcyeVNGN9jQR65xgh0HovpCIWjzXvvganVFGD4Pl7UB+ Nj7Sh7bsL0zyh+ydaOn40xEl+i/JTbsoHeQPEeDb9kaX22e4iolwhJc+1Yo84UtX eAG89D0Lb46LnXq8JyJQonaMot8NOVp7K2wVHv60NSSOPwDeTASPhbhbz5E2QQ8R AgWW5I8rfa3g1lyccwbcIljAB4iiXRG50Tj+Kk+BUlwPjBPqvA9yEu9AiO4PVvWg goxO99FlFLP31Rt0tIpj/5DoS31i4KI8ZP+h4vaFrDbUcMCgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHQpQJtS+UtGlHl18rUq8uMe8NxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvY2FhOTczNzgtNWYwOC0z YjBkLWI3ZTEtODI3YWQ3NGFmMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE88T3DcCT4rCr0bn8G+qrys1mgPCJYcznRSRoBD021pbaVZdh5vnkt1 ubdRWZOoOMXIBZ3vfD4vasFRMfUGudc6QKEWcP9molL36BLsLcs6jl7kXdaIH/q5 j4Ri8i00PG//ZyXScevQiaRYCw6NVt2Ug15dD/dO78QqtoYcnSSO/OOh0ggDgO4E Qti1+FeHCQyLQV24Z2PqQVQpo8VKpma5gccYhSZV1fooVKw04roeSGUV0tZaJ1N3 ptoKwa2cS/IRLuJevAHOVjllJKz67bAIrt2xNWnLBqjAUiZnXdWsw8gxPCyQf+wH HDkTi1iCcCkVoDp+eiGTp7Px3wFt/dc= -----END CERTIFICATE-----Generated at Mon Apr 28 01:00:52 2025 by rpki-client