$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa File: 684afc08-241d-3133-9300-b05e5c02b68f.roa (raw, json) Hash identifier: 80whfa0j2Gj0IaQdoto0Y5u1HH0ft+D6U+n9ti9Rnyg= Subject key identifier: C2:F6:A1:6F:51:FD:FD:75:15:32:94:2A:2C:9F:98:A2:52:08:A3:07 Certificate issuer: /CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Certificate serial: 010D0C9F43285849912F2FB553B5AAC67E66C540 Authority key identifier: 4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa Signing time: Fri 18 Apr 2025 13:00:59 +0000 ROA not before: Fri 18 Apr 2025 13:00:59 +0000 ROA not after: Thu 17 Jul 2025 13:00:59 +0000 asID: 32852 IP address blocks: 204.10.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:2f:2f:b5:53:b5:aa:c6:7e:66:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15b30dd1-216d-4b82-87ee-44becb2d20c7 Validity Not Before: Apr 18 13:00:59 2025 GMT Not After : Jul 17 13:00:59 2025 GMT Subject: CN=d43486b3-bd2b-4686-a99f-6989db5a1f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:6b:e0:6b:89:86:52:14:1b:d6:bb:2b:60: ca:0c:b0:fe:f3:46:04:0d:5d:05:4b:a2:60:d2:2a: 7b:9a:7f:e3:c7:f4:c3:28:89:51:8c:57:ec:b8:94: ab:a1:59:e2:5b:99:74:8c:52:63:75:7b:b8:5f:28: 05:7c:44:13:04:8c:4c:c0:71:5d:69:85:ff:ee:32: 6f:46:32:1c:79:b9:f1:db:f7:07:2d:43:ba:ce:1a: f2:8d:ea:00:c6:65:0a:68:a4:9d:48:90:60:20:da: 3a:4a:08:ef:21:0e:ba:c4:8b:79:00:e2:8f:7d:36: 70:f4:ed:e5:ad:13:9f:5a:b4:3b:74:cc:23:00:cf: 7d:29:a1:97:e9:77:dc:d8:e5:a4:14:8a:fa:23:00: e5:31:bb:a4:ac:04:a5:6e:c6:a8:ef:c3:c6:91:89: 08:fb:e1:d6:e1:8e:c8:ef:42:90:33:77:5c:3d:14: 67:bd:d7:d2:02:8e:42:89:6b:e2:44:0d:d7:6c:e6: cc:c1:4d:74:43:5a:6f:a3:9a:f4:be:bd:6a:c8:15: c1:45:db:a2:f1:d1:8e:18:ce:64:37:44:bd:c5:16: 73:fa:42:72:a6:7d:62:1c:b8:21:72:eb:59:48:2f: f5:6f:67:fd:19:b7:c5:f0:ea:17:13:73:5f:91:e1: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F6:A1:6F:51:FD:FD:75:15:32:94:2A:2C:9F:98:A2:52:08:A3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/684afc08-241d-3133-9300-b05e5c02b68f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7/15b30dd1-216d-4b82-87ee-44becb2d20c7.crl X509v3 Authority Key Identifier: keyid:4E:38:50:30:3F:AF:AD:89:2F:B5:EE:88:B0:DB:01:3C:20:C3:57:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15b30dd1-216d-4b82-87ee-44becb2d20c7.cer sbgp-ipAddrBlock: critical IPv4: 204.10.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:f2:45:cd:de:e7:ec:98:31:3a:33:b2:76:95:9c:08:a9:e1: 8d:9b:14:d3:ed:6b:b2:30:09:b5:4d:b6:fd:b7:bb:c4:00:f7: c6:45:e1:ed:31:ae:a6:62:04:cc:db:ee:5e:60:9e:66:44:a3: 53:56:17:4a:da:7b:91:05:6e:14:62:36:4f:4b:3d:60:f9:66: 1c:16:42:90:09:e2:4c:e1:ec:d4:bd:6e:de:ff:0b:c3:8f:0e: 18:48:93:43:33:94:6c:df:09:63:30:0a:e1:06:57:6c:c5:9c: 25:1e:58:e7:e2:6e:ba:27:b3:32:e5:18:00:8b:08:89:92:08: e7:bb:cd:eb:c8:de:77:69:ed:e3:1f:ba:a1:9e:63:7b:34:42: 83:83:3d:c2:95:07:1a:bc:cd:33:45:41:74:81:cb:f8:14:7f: 3a:31:7e:a0:a0:5f:23:cc:1c:e4:74:5f:2c:8d:6a:f6:b2:75: e0:dd:cc:b6:3b:80:34:06:d2:f4:e9:21:5f:f4:b7:f0:63:89: 0c:33:e2:d1:da:e2:2a:9d:71:50:8e:38:b5:85:3b:7c:30:ce: ed:2c:da:06:ef:6e:34:1a:6e:a5:9e:4b:4d:4e:e6:b1:83:6d: 4a:0f:7d:2e:45:ea:2f:8d:fa:10:4a:7b:2f:be:8f:5d:5e:b3: 0c:e4:65:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLy+1U7Wqxn5mxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTViMzBkZDEtMjE2ZC00YjgyLTg3ZWUtNDRiZWNiMmQy MGM3MB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk ZDQzNDg2YjMtYmQyYi00Njg2LWE5OWYtNjk4OWRiNWExZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWBr4GuJhlIUG9a7K2DKDLD+80YEDV0FS6Jg 0ip7mn/jx/TDKIlRjFfsuJSroVniW5l0jFJjdXu4XygFfEQTBIxMwHFdaYX/7jJv RjIcebnx2/cHLUO6zhryjeoAxmUKaKSdSJBgINo6SgjvIQ66xIt5AOKPfTZw9O3l rROfWrQ7dMwjAM99KaGX6Xfc2OWkFIr6IwDlMbukrASlbsao78PGkYkI++HW4Y7I 70KQM3dcPRRnvdfSAo5CiWviRA3XbObMwU10Q1pvo5r0vr1qyBXBRdui8dGOGM5k N0S9xRZz+kJypn1iHLghcutZSC/1b2f9GbfF8OoXE3NfkeHgFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFML2oW9R/f11FTKUKiyfmKJSCKMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIz MGRkMS0yMTZkLTRiODItODdlZS00NGJlY2IyZDIwYzcvNjg0YWZjMDgtMjQxZC0z MTMzLTkzMDAtYjA1ZTVjMDJiNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTViMzBkZDEtMjE2ZC00YjgyLTg3 ZWUtNDRiZWNiMmQyMGM3LzE1YjMwZGQxLTIxNmQtNGI4Mi04N2VlLTQ0YmVjYjJk MjBjNy5jcmwwHwYDVR0jBBgwFoAUTjhQMD+vrYkvte6IsNsBPCDDV/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWIzMGRkMS0yMTZkLTRiODItODdlZS00NGJl Y2IyZDIwYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbyRc3e5+yYMTozsnaVnAip4Y2bFNPta7IwCbVNtv23u8QA98ZF4e0x rqZiBMzb7l5gnmZEo1NWF0rae5EFbhRiNk9LPWD5ZhwWQpAJ4kzh7NS9bt7/C8OP DhhIk0MzlGzfCWMwCuEGV2zFnCUeWOfibronszLlGACLCImSCOe7zevI3ndp7eMf uqGeY3s0QoODPcKVBxq8zTNFQXSBy/gUfzoxfqCgXyPMHOR0XyyNavaydeDdzLY7 gDQG0vTpIV/0t/BjiQwz4tHa4iqdcVCOOLWFO3wwzu0s2gbvbjQabqWeS01O5rGD bUoPfS5F6i+N+hBKey++j11eswzkZQo= -----END CERTIFICATE-----Generated at Mon Apr 28 18:43:13 2025 by rpki-client