$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa File: 3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa (raw, json) Hash identifier: Ziu02RfzFacG1VlOUvZmzoyuYfQuAAFLB01ITFeKjVk= Subject key identifier: 72:3F:D2:EA:C0:16:C8:CE:45:92:4A:EA:6E:B0:D1:D3:6F:4F:FC:3B Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F43285849955F13F301597118E9850A00 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa Signing time: Sun 20 Apr 2025 01:00:47 +0000 ROA not before: Sun 20 Apr 2025 01:00:47 +0000 ROA not after: Sat 19 Jul 2025 01:00:47 +0000 asID: 14315 IP address blocks: 200.229.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:5f:13:f3:01:59:71:18:e9:85:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Apr 20 01:00:47 2025 GMT Not After : Jul 19 01:00:47 2025 GMT Subject: CN=3ec8dbd4-0406-48a9-9a13-f29cd77ceb82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:55:3f:d2:93:3e:2c:52:ed:20:54:27:4b: 29:5a:39:a8:fe:24:04:a3:3f:12:4e:c0:ad:e8:31: a6:fa:cf:7f:66:4f:31:92:3b:96:4b:12:2a:8c:23: fa:28:96:48:7b:9d:24:1c:fb:28:ac:3f:03:a0:04: 6a:eb:5e:62:89:10:e8:ba:d9:2a:64:7e:cd:36:8d: 6a:46:02:79:3c:ad:04:01:76:d4:d0:85:86:a2:06: f6:47:f4:7e:9d:c9:ca:82:79:b6:b4:07:c3:a4:66: d4:27:4c:4e:a5:24:61:dd:e5:31:e2:11:1c:43:2e: a9:a6:ed:25:85:1f:21:f3:a8:6b:a5:9d:95:5a:b1: b5:11:a0:f7:08:73:86:ec:68:69:db:ca:4c:8e:7a: 34:c1:e8:50:4a:64:04:e4:96:c1:5b:17:8c:31:50: 58:1a:74:e6:dc:8f:31:4c:91:e5:5c:06:31:7a:89: f2:11:01:1d:ba:60:9f:e0:ce:9d:58:58:85:17:83: 79:e0:ce:48:77:d7:ac:1f:18:40:60:86:b5:b3:0c: 5a:13:dd:96:1a:c7:fc:38:9d:5e:77:24:56:c3:19: 5c:a8:70:1d:f2:a5:ec:b4:f3:85:32:f0:80:d9:8f: 0e:7f:db:44:7b:1c:a5:db:01:2a:81:60:0b:5d:a3: a6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:3F:D2:EA:C0:16:C8:CE:45:92:4A:EA:6E:B0:D1:D3:6F:4F:FC:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/3b0b3161-daf9-3eb2-8ec6-5634902677a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 200.229.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ec:1a:af:9f:8d:40:e9:ca:ee:20:4c:0c:ec:d9:40:3b:de: 21:7f:8d:e6:5a:0e:fa:fd:d7:16:d9:79:e2:4e:3e:bc:7e:15: b7:a3:e6:fc:d1:53:41:08:68:a3:35:97:3d:26:5b:4c:c5:16: bb:3a:32:e9:2b:19:2b:58:38:b6:60:42:cd:d0:fa:0f:44:80: 91:e9:5d:cc:ec:8a:cc:ad:a6:33:48:e3:6d:c3:3f:6a:cf:4c: c0:9e:fe:c8:04:bf:5b:bc:f5:cf:06:10:bf:b4:3b:79:d3:7d: 97:b3:c7:7a:8d:48:c1:6a:1e:0f:4f:18:e6:b0:c7:6e:89:8c: eb:b2:09:6e:22:e7:bc:df:d9:c6:fa:1a:03:f9:c6:b1:d3:08: f7:fc:30:ee:a0:33:a4:d5:a4:a5:ee:04:65:6b:6b:a1:8f:41: 7f:0e:5f:d4:a3:2c:c9:f5:42:38:af:2c:9a:c4:d0:25:cf:45: cc:3f:ff:a5:57:ff:e1:1a:39:70:62:f6:99:59:f6:f8:b4:dc: 64:e6:86:15:b1:bb:24:c8:4a:dc:c5:06:12:6a:dd:f2:c6:45: fb:e8:da:ef:0c:28:ac:3f:5c:72:8e:91:ba:84:06:a3:ad:e4: f5:c7:84:04:f3:11:22:1e:70:f3:a5:03:8f:75:10:e7:0f:d1: 0e:38:e4:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxPzAVlxGOmFCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk M2VjOGRiZDQtMDQwNi00OGE5LTlhMTMtZjI5Y2Q3N2NlYjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH5VP9KTPixS7SBUJ0spWjmo/iQEoz8STsCt 6DGm+s9/Zk8xkjuWSxIqjCP6KJZIe50kHPsorD8DoARq615iiRDoutkqZH7NNo1q RgJ5PK0EAXbU0IWGogb2R/R+ncnKgnm2tAfDpGbUJ0xOpSRh3eUx4hEcQy6ppu0l hR8h86hrpZ2VWrG1EaD3CHOG7Ghp28pMjno0wehQSmQE5JbBWxeMMVBYGnTm3I8x TJHlXAYxeonyEQEdumCf4M6dWFiFF4N54M5Id9esHxhAYIa1swxaE92WGsf8OJ1e dyRWwxlcqHAd8qXstPOFMvCA2Y8Of9tEexyl2wEqgWALXaOmVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI/0urAFsjORZJK6m6w0dNvT/w7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvM2IwYjMxNjEtZGFmOS0z ZWIyLThlYzYtNTYzNDkwMjY3N2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyOUUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrsGq+fjUDpyu4gTAzs2UA73iF/jeZaDvr91xbZeeJOPrx+Fbej5vzR U0EIaKM1lz0mW0zFFrs6MukrGStYOLZgQs3Q+g9EgJHpXczsisytpjNI423DP2rP TMCe/sgEv1u89c8GEL+0O3nTfZezx3qNSMFqHg9PGOawx26JjOuyCW4i57zf2cb6 GgP5xrHTCPf8MO6gM6TVpKXuBGVra6GPQX8OX9SjLMn1QjivLJrE0CXPRcw//6VX /+EaOXBi9plZ9vi03GTmhhWxuyTIStzFBhJq3fLGRfvo2u8MKKw/XHKOkbqEBqOt 5PXHhATzESIecPOlA491EOcP0Q445HA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:05:32 2025 by rpki-client