$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/32607b24-2be3-3e02-9907-19ab759052e2.roa File: 32607b24-2be3-3e02-9907-19ab759052e2.roa (raw, json) Hash identifier: oPz3oryqxlJBdMaSxqoXDzUOMqcTvZTxN0wxWSFw8YU= Subject key identifier: 84:2D:2C:5F:F0:DC:E0:B9:90:CC:15:3B:01:4E:7D:B8:7E:DC:78:07 Certificate issuer: /CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052 Certificate serial: 010D0C9F43285849350E93BF8C3FC7F1982FE10B Authority key identifier: 6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/32607b24-2be3-3e02-9907-19ab759052e2.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 19905 IP address blocks: 204.89.58.0/24 maxlen: 24 204.89.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:93:bf:8c:3f:c7:f1:98:2f:e1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=6a867e11-8ada-4426-8dc2-6489518a807c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d6:98:af:26:a9:1a:91:88:f0:e4:0c:c7:e5: 96:53:26:65:89:f9:13:a8:3d:ad:73:02:26:63:79: fe:08:6f:ef:d6:f3:17:b4:2b:a4:f0:1a:08:ba:35: 88:e1:0d:c6:58:df:36:65:41:95:ba:1a:dd:12:5f: 4d:3d:6e:8b:1a:22:4c:ab:d3:a8:c2:c1:0d:55:26: 98:b7:a6:e0:81:f5:0a:dd:28:cb:b6:84:df:ff:ac: 92:9e:53:d5:6e:cb:d7:d1:69:77:ef:17:05:f1:b2: 11:1b:b0:22:7e:f0:68:13:7b:53:91:a9:78:b9:86: 4a:28:aa:b8:86:99:f9:d6:cc:f9:b8:ef:57:15:dc: 8e:d5:03:29:19:53:f3:e4:97:58:78:67:43:8a:3e: fb:59:ae:00:fb:2f:c9:87:2e:3e:6c:2d:92:f9:4b: 31:4d:51:a2:5c:de:6b:99:66:f0:12:ce:21:81:4e: 33:f5:b6:70:f2:f2:d0:0b:eb:84:28:12:0c:f1:77: 26:c6:4a:65:e8:7a:3b:04:3b:cd:69:10:d3:9b:27: 56:89:07:32:b4:74:94:d8:ce:a5:ec:c5:51:0b:f4: 12:e3:e9:26:bd:3f:49:75:6b:d8:f3:92:73:ae:d9: 5a:32:5d:7d:a3:27:44:b5:98:b9:4a:10:77:e9:2a: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2D:2C:5F:F0:DC:E0:B9:90:CC:15:3B:01:4E:7D:B8:7E:DC:78:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/32607b24-2be3-3e02-9907-19ab759052e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl X509v3 Authority Key Identifier: keyid:6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer sbgp-ipAddrBlock: critical IPv4: 204.89.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:b4:6d:f1:2d:09:f3:29:f0:75:82:b2:59:af:ea:48:c7:2a: 36:32:28:73:c8:00:5f:21:63:12:96:00:f9:17:5d:1c:3d:7a: e2:1d:a9:30:2e:b7:3a:3c:92:14:80:2c:6e:fc:e6:b0:34:bc: cb:74:74:54:c2:3d:6b:0b:29:d5:c8:e8:0c:5a:d3:74:b6:ad: 59:58:0c:20:ab:ef:e8:1d:ef:11:36:3c:a7:07:84:e9:4e:4c: 73:a3:4d:85:e5:0e:68:43:b0:5b:66:b8:8d:27:25:6e:6b:df: 9e:67:d6:6b:90:3b:ae:d2:f2:b8:e1:89:b8:4f:95:f1:77:de: ac:c5:e6:61:8d:cd:c2:52:9e:83:b2:40:3c:59:d9:d9:0a:3a: 12:dd:c1:8a:c5:9b:8a:b9:4e:bc:31:9b:45:29:ea:ef:8d:34: 41:f2:d2:ba:a9:8d:a6:30:76:2d:c3:fd:92:a5:3c:5b:5d:de: 95:24:e6:26:08:cd:72:ef:0a:e3:9d:80:58:f2:ad:16:ca:9a: 0a:4a:4e:0a:49:18:25:72:e4:0b:70:db:17:60:c3:8c:7e:c6: 7a:38:9d:9e:5c:94:77:50:8b:ad:0a:81:85:3b:0b:61:03:e2: 70:02:ff:42:a9:bc:e4:80:38:eb:34:22:f7:3b:8c:94:45:12: 46:e5:c8:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpO/jD/H8Zgv4QswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE0Y2U1ZTYtMjlmNC00NTUyLWJmM2ItNTUxMGFhM2I1 MDUyMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NmE4NjdlMTEtOGFkYS00NDI2LThkYzItNjQ4OTUxOGE4MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNaYryapGpGI8OQMx+WWUyZlifkTqD2tcwIm Y3n+CG/v1vMXtCuk8BoIujWI4Q3GWN82ZUGVuhrdEl9NPW6LGiJMq9OowsENVSaY t6bggfUK3SjLtoTf/6ySnlPVbsvX0Wl37xcF8bIRG7AifvBoE3tTkal4uYZKKKq4 hpn51sz5uO9XFdyO1QMpGVPz5JdYeGdDij77Wa4A+y/Jhy4+bC2S+UsxTVGiXN5r mWbwEs4hgU4z9bZw8vLQC+uEKBIM8Xcmxkpl6Ho7BDvNaRDTmydWiQcytHSU2M6l 7MVRC/QS4+kmvT9JdWvY85JzrtlaMl19oydEtZi5ShB36SqT7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQtLF/w3OC5kMwVOwFOfbh+3HgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRj ZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEwYWEzYjUwNTIvMzI2MDdiMjQtMmJlMy0z ZTAyLTk5MDctMTlhYjc1OTA1MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGE0Y2U1ZTYtMjlmNC00NTUyLWJm M2ItNTUxMGFhM2I1MDUyLzBhNGNlNWU2LTI5ZjQtNDU1Mi1iZjNiLTU1MTBhYTNi NTA1Mi5jcmwwHwYDVR0jBBgwFoAUb9kRablzH1xIfc4RiiHOsT/1+SUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRjZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEw YWEzYjUwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFk6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEq0bfEtCfMp8HWCslmv6kjHKjYyKHPIAF8hYxKWAPkXXRw9euIdqTAu tzo8khSALG785rA0vMt0dFTCPWsLKdXI6Axa03S2rVlYDCCr7+gd7xE2PKcHhOlO THOjTYXlDmhDsFtmuI0nJW5r355n1muQO67S8rjhibhPlfF33qzF5mGNzcJSnoOy QDxZ2dkKOhLdwYrFm4q5Trwxm0Up6u+NNEHy0rqpjaYwdi3D/ZKlPFtd3pUk5iYI zXLvCuOdgFjyrRbKmgpKTgpJGCVy5Atw2xdgw4x+xno4nZ5clHdQi60KgYU7C2ED 4nAC/0KpvOSAOOs0Ivc7jJRFEkblyBg= -----END CERTIFICATE-----Generated at Sat Apr 26 16:40:07 2025 by rpki-client