$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/411e6ac6-a5e2-3368-bc02-605007a2b36c.roa File: 411e6ac6-a5e2-3368-bc02-605007a2b36c.roa (raw, json) Hash identifier: p+7vcM1gA5kFE5d0ArINHhamfn4RNZ3L0Ocn+foPbYk= Subject key identifier: 77:30:E7:6D:F5:CF:BF:B2:29:67:AE:A0:D2:28:21:E5:BE:0D:DB:C2 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584973DEE966819285ECA927DF00 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/411e6ac6-a5e2-3368-bc02-605007a2b36c.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 834 IP address blocks: 204.19.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e9:66:81:92:85:ec:a9:27:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=1dc6c31c-198a-4908-bb33-6071b7c5528b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:08:f7:bc:38:fd:1f:f1:53:f6:28:8f:9b:ff: 38:94:05:7d:83:a8:87:ff:b3:cb:ee:29:d1:65:72: b6:40:6f:4f:66:1c:99:61:27:68:14:99:6f:60:e7: 3d:35:35:14:cf:e5:3b:8d:4e:91:6e:bd:8d:7d:5e: df:45:d3:ac:35:1f:92:89:23:14:87:65:2b:e2:b6: d8:1f:a2:07:c6:44:b3:94:8a:5b:85:bc:54:01:53: 69:7d:b6:3b:32:96:a3:45:79:cc:cf:70:20:ee:70: 39:ea:eb:79:e6:d1:15:01:e1:91:aa:72:b7:de:57: dc:84:da:ff:4f:e7:e4:da:b0:d4:9f:70:07:ef:74: 03:59:55:a6:cc:b0:e1:21:90:b4:13:e5:c3:4d:1a: 40:50:b4:57:de:80:9d:b1:9f:e4:7a:dd:0d:ee:93: 61:52:7e:64:7f:fb:c9:ec:51:f2:1b:bc:44:9f:e5: 7a:5a:0a:36:24:6b:2a:93:ab:83:ea:94:80:6c:a6: bc:6c:b0:04:6a:b1:1d:7f:ba:01:6d:e4:ea:02:9f: 42:4d:bd:38:4d:4f:29:a4:3a:25:33:43:74:8e:7a: d6:09:c9:0a:6d:ad:ed:ef:ae:ac:6e:80:6d:41:5c: 60:4a:ba:76:b9:4c:35:e3:c9:6b:0c:ea:32:4f:1b: b4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:30:E7:6D:F5:CF:BF:B2:29:67:AE:A0:D2:28:21:E5:BE:0D:DB:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/411e6ac6-a5e2-3368-bc02-605007a2b36c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 204.19.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:43:46:c9:0e:29:dc:21:bd:5e:e7:24:68:14:42:be:1a:34: 4a:f8:e4:44:82:93:13:8f:1b:6e:2b:6b:e1:3a:d3:0d:d9:64: 0b:a6:26:e3:43:4a:4b:12:0d:93:49:c3:68:77:7d:18:a7:db: 74:86:42:aa:18:6a:6e:b7:7c:bc:ec:6b:45:34:6e:9c:cc:94: 67:b4:ff:7e:e6:b5:b8:43:68:55:69:34:dd:81:0d:71:ef:69: 71:00:f7:7b:3b:19:03:d7:aa:51:c9:58:6e:94:bf:42:03:6f: f4:5a:6e:80:9a:a2:a7:e8:1a:7d:bf:dd:f8:b6:b6:ca:1c:32: 54:b8:52:5e:ba:f3:8e:f0:0c:90:30:3e:b3:9c:71:dc:b8:16: 86:c6:95:ab:ae:c4:fc:eb:eb:c7:f0:80:d6:77:ca:05:1e:c7: a2:34:70:59:30:8d:b8:16:73:d0:63:97:c8:d4:35:d6:f3:78: ef:e0:e1:7c:69:39:99:b6:fa:43:fc:81:fb:ab:9f:3a:42:91: 63:fa:86:a5:37:69:e9:f0:fb:08:cf:b6:23:29:89:00:ff:ae: fa:9f:34:8d:de:27:98:60:22:e1:3a:cc:2a:6a:7b:35:d4:0e: 6d:c9:5c:92:12:5a:9a:56:2d:17:13:4b:58:be:6d:e4:29:0b: de:e0:2c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3ulmgZKF7Kkn3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk MWRjNmMzMWMtMTk4YS00OTA4LWJiMzMtNjA3MWI3YzU1MjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgj3vDj9H/FT9iiPm/84lAV9g6iH/7PL7inR ZXK2QG9PZhyZYSdoFJlvYOc9NTUUz+U7jU6Rbr2NfV7fRdOsNR+SiSMUh2Ur4rbY H6IHxkSzlIpbhbxUAVNpfbY7MpajRXnMz3Ag7nA56ut55tEVAeGRqnK33lfchNr/ T+fk2rDUn3AH73QDWVWmzLDhIZC0E+XDTRpAULRX3oCdsZ/ket0N7pNhUn5kf/vJ 7FHyG7xEn+V6Wgo2JGsqk6uD6pSAbKa8bLAEarEdf7oBbeTqAp9CTb04TU8ppDol M0N0jnrWCckKba3t766sboBtQVxgSrp2uUw148lrDOoyTxu0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcw5231z7+yKWeuoNIoIeW+DdvCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvNDExZTZhYzYtYTVlMi0z MzY4LWJjMDItNjA1MDA3YTJiMzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFDRskOKdwhvV7nJGgUQr4aNEr45ESCkxOPG24ra+E60w3ZZAumJuND SksSDZNJw2h3fRin23SGQqoYam63fLzsa0U0bpzMlGe0/37mtbhDaFVpNN2BDXHv aXEA93s7GQPXqlHJWG6Uv0IDb/RaboCaoqfoGn2/3fi2tsocMlS4Ul66847wDJAw PrOccdy4FobGlauuxPzr68fwgNZ3ygUex6I0cFkwjbgWc9Bjl8jUNdbzeO/g4Xxp OZm2+kP8gfurnzpCkWP6hqU3aenw+wjPtiMpiQD/rvqfNI3eJ5hgIuE6zCpqezXU Dm3JXJISWppWLRcTS1i+beQpC97gLBc= -----END CERTIFICATE-----Generated at Sat Apr 26 14:51:07 2025 by rpki-client