$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/58d236c6-ac09-3e42-8c42-2294fb9dc837.roa File: 58d236c6-ac09-3e42-8c42-2294fb9dc837.roa (raw, json) Hash identifier: qs122e0TTeMaoQZU2N1VeCNxu9u5yHvUFBrplrU1XWY= Subject key identifier: A5:37:89:DB:57:6A:3D:94:99:FF:3F:60:95:3F:94:C8:84:DA:24:02 Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849A4BACF9C27E8ECB2120128C0 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/58d236c6-ac09-3e42-8c42-2294fb9dc837.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 172.102.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:cf:9c:27:e8:ec:b2:12:01:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fcdf8fd0-b0c1-4327-b656-cd4e8eee8382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:d3:ae:ce:10:ec:f2:2a:c2:d7:b7:10:97: 17:fb:53:2a:41:3c:c7:da:55:19:6d:dc:91:2b:06: 33:05:30:7c:f2:19:ca:78:ea:51:5c:48:eb:af:15: 4e:b3:07:36:2f:c9:dc:bd:da:c1:ac:ce:2b:83:0a: 7e:cd:f3:07:72:5b:62:b6:b0:dd:40:e9:22:30:a4: 2b:a5:8a:92:6b:36:66:19:f4:5e:16:94:3b:81:97: 05:d5:70:9a:70:1f:99:af:a1:d2:43:a0:28:93:45: 26:35:13:37:c7:1a:70:e2:a4:95:8e:b2:3f:fd:14: 16:4e:7d:4d:dd:01:22:86:7e:91:55:4c:07:a0:39: c2:b9:05:65:5e:1c:d8:3a:31:3d:37:9c:cb:89:c8: 21:d4:a3:6f:81:67:5b:36:fa:10:1c:8b:f0:49:80: 64:52:cf:3b:76:10:1c:7b:df:93:53:a9:5b:85:3b: ae:2d:8b:0e:a2:d0:a9:1e:f0:72:86:c4:8c:ff:11: 80:35:ca:37:88:a9:b1:88:68:8f:88:c5:19:f7:19: bf:97:5b:cd:09:c3:f9:27:c9:c1:40:cf:7b:ce:21: 50:6d:2a:af:d8:98:6a:09:d2:02:d6:76:ed:1d:17: b4:1e:26:27:92:d4:39:f3:c2:88:ff:49:74:a6:ba: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:37:89:DB:57:6A:3D:94:99:FF:3F:60:95:3F:94:C8:84:DA:24:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/58d236c6-ac09-3e42-8c42-2294fb9dc837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:be:10:c1:f6:71:f4:8d:2a:e4:19:63:9f:d8:9f:bb:94:cd: b8:ab:3b:ed:c7:10:28:87:ee:fd:43:c6:d2:29:4b:48:20:9a: 6b:98:4f:ad:82:bb:c2:3b:f1:e2:b2:64:21:49:2a:5a:76:ce: b7:44:b3:d9:8c:46:f3:0e:c1:66:fb:04:21:9d:bf:aa:47:54: a8:03:43:82:8e:51:fe:5e:66:42:00:56:5d:ab:ad:5a:bc:40: 74:a7:ca:dd:e3:4f:b2:a4:49:7d:a1:ff:e6:b3:98:14:ea:47: 44:4a:62:1f:de:6f:92:60:b1:1e:15:42:52:36:3f:8e:63:bb: c1:8f:08:08:c6:9e:70:01:df:5f:5c:35:e4:29:9c:fd:b4:7c: 25:96:b0:81:f2:25:12:64:0c:61:fc:6b:03:3e:ea:85:c6:f6: 15:c5:7e:bd:9d:05:b1:d2:f5:c3:a5:12:25:63:86:b3:38:11: 67:fc:40:74:68:58:b0:02:e1:e0:f9:cf:c7:06:99:4f:d3:0c: be:57:60:97:80:26:32:03:27:de:68:35:af:75:f3:3e:e5:87: 16:ed:45:d7:f4:1a:14:ff:ab:84:98:e2:dd:1b:b8:7a:b2:b7: 17:0e:15:11:df:ca:98:0f:b6:f2:a2:52:19:8b:0a:2d:66:75: 48:7d:88:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus+cJ+jsshIBKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmNkZjhmZDAtYjBjMS00MzI3LWI2NTYtY2Q0ZThlZWU4MzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKPTrs4Q7PIqwte3EJcX+1MqQTzH2lUZbdyR KwYzBTB88hnKeOpRXEjrrxVOswc2L8ncvdrBrM4rgwp+zfMHcltitrDdQOkiMKQr pYqSazZmGfReFpQ7gZcF1XCacB+Zr6HSQ6Aok0UmNRM3xxpw4qSVjrI//RQWTn1N 3QEihn6RVUwHoDnCuQVlXhzYOjE9N5zLicgh1KNvgWdbNvoQHIvwSYBkUs87dhAc e9+TU6lbhTuuLYsOotCpHvByhsSM/xGANco3iKmxiGiPiMUZ9xm/l1vNCcP5J8nB QM97ziFQbSqv2JhqCdIC1nbtHRe0HiYnktQ588KI/0l0pro4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKU3idtXaj2Umf8/YJU/lMiE2iQCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNThkMjM2YzYtYWMwOS0z ZTQyLThjNDItMjI5NGZiOWRjODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALO+EMH2cfSNKuQZY5/Yn7uUzbirO+3HECiH7v1DxtIpS0ggmmuYT62C u8I78eKyZCFJKlp2zrdEs9mMRvMOwWb7BCGdv6pHVKgDQ4KOUf5eZkIAVl2rrVq8 QHSnyt3jT7KkSX2h/+azmBTqR0RKYh/eb5JgsR4VQlI2P45ju8GPCAjGnnAB319c NeQpnP20fCWWsIHyJRJkDGH8awM+6oXG9hXFfr2dBbHS9cOlEiVjhrM4EWf8QHRo WLAC4eD5z8cGmU/TDL5XYJeAJjIDJ95oNa918z7lhxbtRdf0GhT/q4SY4t0buHqy txcOFRHfypgPtvKiUhmLCi1mdUh9iC4= -----END CERTIFICATE-----Generated at Sun Apr 27 13:24:04 2025 by rpki-client