$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0956932-10e1-36f9-ba96-67345e1ea32e.roa File: c0956932-10e1-36f9-ba96-67345e1ea32e.roa (raw, json) Hash identifier: tiEVTYwZppI4EaBbgYEI44yQLAvFJjNBF/xvn6wDQPg= Subject key identifier: E0:00:E7:9B:00:80:51:91:45:E1:90:4A:4C:8C:EE:96:8E:45:3F:41 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858499DBF253A26A119E69690C100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0956932-10e1-36f9-ba96-67345e1ea32e.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 852 IP address blocks: 204.191.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:25:3a:26:a1:19:e6:96:90:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=bbf4cfc8-214b-4eb1-ab20-f842244a636b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e1:a0:0b:97:06:d3:78:a9:03:23:46:f3:13: 52:b4:43:df:2b:fd:7a:bc:94:bd:e8:73:b9:c2:4b: 45:14:55:42:15:bb:a7:00:2e:9b:c8:1d:e2:57:bc: 62:f8:65:02:10:55:f8:8f:bc:8f:7e:cd:98:f0:bb: 82:32:48:e9:64:41:39:ed:94:be:31:26:f6:9a:62: bb:5e:d7:7b:36:26:65:00:d8:04:d7:f3:5d:0b:4f: 04:b5:07:d9:d7:26:7b:d3:e2:84:67:05:6a:f4:ba: 50:47:d6:ed:a8:e0:17:9d:da:b8:e1:c6:be:72:c3: b2:4d:d7:9b:5b:67:94:6c:67:44:29:65:ab:ec:c9: 83:d4:d7:3d:4a:d3:30:21:c5:88:5e:7c:7e:f6:7f: 9b:b7:df:5d:cf:94:51:2b:63:a6:3a:55:b7:fc:ed: 27:b2:91:36:95:74:20:de:d5:f9:c7:57:c7:ad:66: 50:4a:f5:41:74:1b:46:73:40:a2:ba:01:0f:f8:9f: d9:2a:c8:d5:33:ac:7d:c8:19:b2:b8:ab:90:3a:fc: e4:8d:ec:27:9d:16:2b:f1:e8:3d:30:1c:7a:42:9c: b4:6f:d8:f5:69:e9:e0:d2:10:d1:8d:3e:84:f2:06: 60:71:69:68:db:87:26:7e:86:f7:73:a5:a7:6d:c3: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:00:E7:9B:00:80:51:91:45:E1:90:4A:4C:8C:EE:96:8E:45:3F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0956932-10e1-36f9-ba96-67345e1ea32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 204.191.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f3:29:4e:b5:1f:71:fd:76:d2:e3:3d:8b:da:6a:95:26:e2: 0f:15:b4:b9:74:c5:08:8a:34:08:38:f6:8c:fb:b9:26:f4:be: 60:18:c1:8c:5e:53:fa:bc:d2:b1:cd:cb:1a:e6:dc:5c:20:08: 15:ac:b6:04:e3:cb:2a:43:21:cd:69:d3:97:21:b2:2c:c7:73: 0e:4d:61:e5:dd:4d:05:a9:7b:81:6c:ab:7d:52:ce:ed:32:80: 00:47:da:ec:6a:9e:e0:02:bd:bb:77:91:a7:5e:b2:53:2b:d9: ae:aa:b4:74:70:5e:76:e5:24:51:a6:b0:0e:4a:df:39:18:2f: 36:c8:f3:fb:2e:e3:c3:d5:ab:8d:52:c9:e5:ff:07:7f:6b:93: b5:51:ae:7a:84:80:07:2f:96:fc:d2:3a:4a:8c:7e:31:de:53: ab:1d:fd:f8:f0:ec:9f:35:37:43:97:74:a7:f6:ad:da:93:91: 9d:8b:ff:6d:fd:2a:51:c5:18:d5:0e:af:9b:1d:3f:fa:26:fd: 1a:89:20:8a:d7:cf:3e:93:62:92:eb:9e:ce:7c:71:2e:3a:26: 8a:2b:85:c2:56:29:5f:e9:97:0e:b5:bb:40:93:20:39:cd:85: 19:04:0d:fd:1e:b2:5b:3c:0d:1c:91:04:77:40:09:72:09:09: 54:44:09:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvyU6JqEZ5paQwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YmJmNGNmYzgtMjE0Yi00ZWIxLWFiMjAtZjg0MjI0NGE2MzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieGgC5cG03ipAyNG8xNStEPfK/16vJS96HO5 wktFFFVCFbunAC6byB3iV7xi+GUCEFX4j7yPfs2Y8LuCMkjpZEE57ZS+MSb2mmK7 Xtd7NiZlANgE1/NdC08EtQfZ1yZ70+KEZwVq9LpQR9btqOAXndq44ca+csOyTdeb W2eUbGdEKWWr7MmD1Nc9StMwIcWIXnx+9n+bt99dz5RRK2OmOlW3/O0nspE2lXQg 3tX5x1fHrWZQSvVBdBtGc0CiugEP+J/ZKsjVM6x9yBmyuKuQOvzkjewnnRYr8eg9 MBx6Qpy0b9j1aeng0hDRjT6E8gZgcWlo24cmfob3c6WnbcOX+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAA55sAgFGRReGQSkyM7paORT9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzA5NTY5MzItMTBlMS0z NmY5LWJhOTYtNjczNDVlMWVhMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzL8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjzKU61H3H9dtLjPYvaapUm4g8VtLl0xQiKNAg49oz7uSb0vmAYwYxe U/q80rHNyxrm3FwgCBWstgTjyypDIc1p05chsizHcw5NYeXdTQWpe4Fsq31Szu0y gABH2uxqnuACvbt3kadeslMr2a6qtHRwXnblJFGmsA5K3zkYLzbI8/su48PVq41S yeX/B39rk7VRrnqEgAcvlvzSOkqMfjHeU6sd/fjw7J81N0OXdKf2rdqTkZ2L/239 KlHFGNUOr5sdP/om/RqJIIrXzz6TYpLrns58cS46JoorhcJWKV/plw61u0CTIDnN hRkEDf0esls8DRyRBHdACXIJCVRECec= -----END CERTIFICATE-----Generated at Sun Apr 27 04:16:38 2025 by rpki-client