$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa File: cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa (raw, json) Hash identifier: 6t8eKDSCjEf8li/32GsdWPijtFJC61vWa9DL4ho+5sk= Subject key identifier: DA:A3:48:A6:D9:77:C1:BC:C3:C1:11:1A:5D:C7:A5:25:D4:EE:B4:C3 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285848F92697A35E3C9CBE9EC51CA4 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 1280 IP address blocks: 204.152.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:97:a3:5e:3c:9c:be:9e:c5:1c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=969ab955-0484-4e32-a168-5c4d5a429ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:25:da:03:5f:2e:b9:a7:55:16:f1:e2:6b: 85:76:22:30:f8:77:df:6a:ef:12:cf:47:27:e5:ae: cd:fb:37:6e:55:4c:32:0a:15:da:05:9a:95:3a:c9: a4:74:de:c8:6c:13:b8:1f:8f:11:93:e6:4a:dc:c2: 9c:44:dc:ab:f3:14:a3:eb:3e:f6:57:5a:af:0f:37: 9d:9e:1b:02:6c:9e:63:3b:19:1a:75:08:0d:c7:8a: 1b:93:ab:33:09:ef:a9:73:e5:68:d0:e3:48:78:d2: 7f:b2:c9:6d:17:35:4e:0e:a7:c5:91:b6:d6:84:9a: f6:b9:2f:85:2f:b5:e4:07:fa:26:d5:92:1f:97:1e: 50:be:74:3f:cd:ae:08:07:e9:ce:d9:41:c5:16:c0: b6:df:57:42:85:0a:52:a5:27:65:df:f9:94:e7:30: 59:d6:d8:e6:1c:0c:66:7c:8d:06:77:1f:02:cf:a5: c4:47:34:d1:c7:e2:89:36:f7:35:e5:68:5f:cf:06: 74:60:82:e6:9a:f2:6f:c0:4f:bc:f8:ff:f5:8c:5e: 22:fc:73:32:ce:24:f6:c7:34:40:e6:c7:bc:ac:b1: 80:ab:19:93:93:34:6e:ec:4f:e6:34:ea:5a:99:78: 97:cf:65:ad:48:40:f4:66:8c:7d:9d:e2:a2:b4:28: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A3:48:A6:D9:77:C1:BC:C3:C1:11:1A:5D:C7:A5:25:D4:EE:B4:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/cfea32f4-d591-3a37-9c22-4feb6fa4a3a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:78:36:90:b5:28:b8:43:64:23:89:ec:61:e7:bc:45:b9:58: 65:7b:b7:3c:b0:7c:76:07:18:81:aa:d9:7d:45:56:6c:bc:2b: b6:0b:13:50:75:c6:2f:55:24:6d:86:53:20:59:aa:4d:c0:b9: 11:d3:0a:5b:e5:f6:1b:10:d2:c8:1c:1c:42:9c:a9:58:72:64: 19:69:65:ba:48:c7:26:fc:d4:d2:48:6b:43:c2:d8:84:b4:e4: 41:ce:13:98:a3:8a:64:4c:2a:e4:6e:81:17:9c:d7:ea:39:e5: 09:96:92:bd:eb:74:b3:72:24:a2:99:65:fa:6e:2e:93:d3:d6: 89:50:3a:eb:d0:e8:06:f5:e3:2a:5b:e4:fc:78:fd:07:c9:00: ff:cf:b6:fd:05:4c:0d:ec:8c:ad:a1:ef:66:75:04:59:b2:d4: bf:bb:26:2c:f5:fa:8b:35:50:ee:7d:eb:ef:8e:c5:25:61:d6: 6e:67:f4:3b:cc:2a:0d:52:a0:c2:d7:9e:68:0f:b5:90:6a:96: 47:1e:5a:6e:e4:23:d8:c1:11:29:69:5c:e1:28:47:fe:e9:f4: 02:10:18:7b:9b:2a:f0:99:ae:c1:b7:58:23:02:35:61:43:f0: 60:fa:5e:8b:2a:dd:a3:c1:c1:2f:a1:96:f2:9a:91:49:ff:85: da:93:fa:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpejXjycvp7FHKQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OTY5YWI5NTUtMDQ4NC00ZTMyLWExNjgtNWM0ZDVhNDI5ZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySAl2gNfLrmnVRbx4muFdiIw+Hffau8Sz0cn 5a7N+zduVUwyChXaBZqVOsmkdN7IbBO4H48Rk+ZK3MKcRNyr8xSj6z72V1qvDzed nhsCbJ5jOxkadQgNx4obk6szCe+pc+Vo0ONIeNJ/ssltFzVODqfFkbbWhJr2uS+F L7XkB/om1ZIflx5QvnQ/za4IB+nO2UHFFsC231dChQpSpSdl3/mU5zBZ1tjmHAxm fI0Gdx8Cz6XERzTRx+KJNvc15WhfzwZ0YILmmvJvwE+8+P/1jF4i/HMyziT2xzRA 5se8rLGAqxmTkzRu7E/mNOpamXiXz2WtSED0Zox9neKitCiE+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqjSKbZd8G8w8ERGl3HpSXU7rTDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvY2ZlYTMyZjQtZDU5MS0z YTM3LTljMjItNGZlYjZmYTRhM2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl4NpC1KLhDZCOJ7GHnvEW5WGV7tzywfHYHGIGq2X1FVmy8K7YLE1B1 xi9VJG2GUyBZqk3AuRHTClvl9hsQ0sgcHEKcqVhyZBlpZbpIxyb81NJIa0PC2IS0 5EHOE5ijimRMKuRugRec1+o55QmWkr3rdLNyJKKZZfpuLpPT1olQOuvQ6Ab14ypb 5Px4/QfJAP/Ptv0FTA3sjK2h72Z1BFmy1L+7Jiz1+os1UO596++OxSVh1m5n9DvM Kg1SoMLXnmgPtZBqlkceWm7kI9jBESlpXOEoR/7p9AIQGHubKvCZrsG3WCMCNWFD 8GD6Xosq3aPBwS+hlvKakUn/hdqT+sI= -----END CERTIFICATE-----Generated at Sun Apr 27 03:10:36 2025 by rpki-client