$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8833246e-b4d3-3227-9a27-5ac70001ee6c.roa File: 8833246e-b4d3-3227-9a27-5ac70001ee6c.roa (raw, json) Hash identifier: fUUmYdT+xHwRDfFZm+cX89VhfKwwIlJv2AeR2CPHp3I= Subject key identifier: CC:D0:D9:EC:AC:B7:46:6E:73:D6:C1:27:DF:11:08:92:5C:A0:5E:AF Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849A4BAC3289DF8B7808C5AA500 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8833246e-b4d3-3227-9a27-5ac70001ee6c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 172.102.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c3:28:9d:f8:b7:80:8c:5a:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1ddec412-1ae4-4c75-aeae-8c9b0f7ddff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1f:2c:b1:92:a4:42:6d:20:7a:c9:ea:6e:c4: e4:31:8d:a2:76:11:9f:fd:b8:b9:a7:da:53:2b:12: 43:92:d7:aa:29:bb:1f:44:48:5a:09:ea:52:99:0f: 73:fa:83:f2:5e:c0:96:1e:9d:35:97:c2:59:b4:34: 8e:1a:60:e7:39:46:f0:a0:b9:49:6c:dd:e4:9f:58: 41:c7:40:56:b3:35:de:62:73:e8:e1:ae:6c:7e:98: 1b:bc:df:8f:df:54:6c:13:e0:37:13:ab:db:69:4b: db:3b:d6:dc:1b:07:a3:d7:84:2e:03:04:46:33:d5: c7:c8:f7:ae:68:c0:94:b4:42:bf:b7:91:c7:88:9d: d7:43:44:b2:e6:f1:1d:ee:bc:9f:58:5b:7d:0d:bc: 29:54:95:eb:0d:58:b4:17:21:db:d6:d0:40:86:7a: 62:56:41:fa:99:7c:ce:3e:17:2f:96:04:06:a8:9b: 71:aa:4b:56:fd:77:2e:66:56:a8:04:6f:0a:f9:c6: bb:43:f1:56:18:37:92:5b:ad:f3:3f:17:b1:58:22: d1:dc:64:e0:4c:c4:bf:1f:73:c0:fc:b9:9c:17:a5: db:12:0c:45:a1:3c:b5:3a:3a:2d:3a:f4:42:63:2d: e3:4e:58:58:67:d7:8b:2a:fe:2a:4c:80:21:72:59: 7e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D0:D9:EC:AC:B7:46:6E:73:D6:C1:27:DF:11:08:92:5C:A0:5E:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8833246e-b4d3-3227-9a27-5ac70001ee6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 172.102.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:d4:8c:9c:48:57:f1:f4:07:14:15:a6:30:ae:c0:aa:24:23: 12:be:79:5e:5d:a1:4c:27:e4:56:b6:25:81:85:54:cc:d6:e0: 1d:69:47:55:98:a8:e6:6e:fd:a9:82:59:1a:de:62:e3:f1:79: f5:32:0b:69:7e:6d:d0:d6:2c:3f:d4:85:08:3b:43:6e:a0:0e: f0:a8:c8:cf:9c:f8:7e:81:66:6a:b7:61:be:62:43:ce:48:9a: 97:aa:23:e3:47:e2:19:f8:f6:fe:c0:eb:51:c1:2f:d8:cc:78: b4:70:54:c6:8e:27:57:17:44:d3:a3:d7:30:f0:14:d9:1f:02: a3:8c:b4:ae:4e:8b:74:73:9c:35:bc:8f:4f:15:b1:85:1f:7b: 17:4d:c5:8a:d0:e6:8f:64:82:6d:9b:aa:46:0e:57:b0:8e:c1: 91:25:93:bd:42:4b:1d:18:e5:d4:75:ef:1f:7a:cb:21:ea:16: 54:81:1a:e2:23:11:33:89:9a:88:55:3f:87:5f:bc:42:8a:6c: fe:3c:49:f8:65:b3:19:76:95:32:14:a2:67:d0:a7:68:7f:9c: 01:56:e8:c8:cf:80:c6:93:00:80:24:86:b1:44:c4:f2:80:b6: 44:13:66:a0:1d:05:df:54:bc:a9:74:1b:69:a5:43:4d:6f:65: 8e:2b:bd:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusMonfi3gIxapQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MWRkZWM0MTItMWFlNC00Yzc1LWFlYWUtOGM5YjBmN2RkZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR8ssZKkQm0gesnqbsTkMY2idhGf/bi5p9pT KxJDkteqKbsfREhaCepSmQ9z+oPyXsCWHp01l8JZtDSOGmDnOUbwoLlJbN3kn1hB x0BWszXeYnPo4a5sfpgbvN+P31RsE+A3E6vbaUvbO9bcGwej14QuAwRGM9XHyPeu aMCUtEK/t5HHiJ3XQ0Sy5vEd7ryfWFt9DbwpVJXrDVi0FyHb1tBAhnpiVkH6mXzO PhcvlgQGqJtxqktW/XcuZlaoBG8K+ca7Q/FWGDeSW63zPxexWCLR3GTgTMS/H3PA /LmcF6XbEgxFoTy1OjotOvRCYy3jTlhYZ9eLKv4qTIAhcll+3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzQ2eyst0Zuc9bBJ98RCJJcoF6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvODgzMzI0NmUtYjRkMy0z MjI3LTlhMjctNWFjNzAwMDFlZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGYNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbUjJxIV/H0BxQVpjCuwKokIxK+eV5doUwn5Fa2JYGFVMzW4B1pR1WY qOZu/amCWRreYuPxefUyC2l+bdDWLD/UhQg7Q26gDvCoyM+c+H6BZmq3Yb5iQ85I mpeqI+NH4hn49v7A61HBL9jMeLRwVMaOJ1cXRNOj1zDwFNkfAqOMtK5Oi3RznDW8 j08VsYUfexdNxYrQ5o9kgm2bqkYOV7COwZElk71CSx0Y5dR17x96yyHqFlSBGuIj ETOJmohVP4dfvEKKbP48Sfhlsxl2lTIUomfQp2h/nAFW6MjPgMaTAIAkhrFExPKA tkQTZqAdBd9UvKl0G2mlQ01vZY4rveY= -----END CERTIFICATE-----Generated at Sun Apr 27 12:57:37 2025 by rpki-client