$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa File: 5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa (raw, json) Hash identifier: VRX3UU+XVIzqD1rW8ObLJi0+65gJdslmF9ZuGZlI8H8= Subject key identifier: 57:C5:F7:6B:98:D8:BD:75:83:D5:E3:3A:56:35:E0:77:E0:1B:C8:1B Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F43285848EF6141F5B0EB285083EAAF80 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 10317 IP address blocks: 204.155.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:41:f5:b0:eb:28:50:83:ea:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=31fa0063-fe23-4922-bcb1-6a29d3088e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3e:71:ec:63:87:fc:f0:2b:51:ad:25:96:86: fb:dc:0a:43:62:f1:98:ec:2b:0a:1d:07:a6:f1:7a: 0b:dd:c7:ef:6d:11:93:46:b6:93:03:2c:8b:53:09: 14:f9:f7:3a:2d:d1:16:14:12:fb:e9:8a:cc:4d:b5: 78:98:25:cd:63:e1:2f:79:c5:97:a0:ea:bb:91:3f: 08:36:33:d6:d9:26:c9:06:69:98:9f:84:78:9a:ea: 95:d6:41:fa:49:6b:1e:f1:ef:88:94:61:26:cf:63: 56:15:ab:b1:28:46:e2:02:51:f8:9b:c6:5c:d3:41: 36:10:51:79:6c:e7:66:18:ae:27:bd:ae:df:a1:28: 40:d6:20:91:73:f8:14:4d:cd:5f:35:56:1c:dc:32: aa:0f:e5:7e:62:02:d3:5d:a7:84:41:0c:94:0b:ed: de:45:01:ec:5d:b7:37:0c:09:e6:ba:06:8d:e4:25: b6:5a:87:98:31:69:cf:ad:a3:11:3c:f2:31:c6:ce: e3:37:f8:32:f8:8b:b4:db:94:ab:99:62:5a:65:62: a6:f2:a9:e2:cb:28:1d:fb:90:54:c8:27:89:b8:6b: ed:3c:1d:e7:9d:20:70:02:0d:4c:51:9e:ca:5d:4e: 26:f7:b9:28:50:3e:12:ca:89:c1:c3:53:81:5c:e2: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C5:F7:6B:98:D8:BD:75:83:D5:E3:3A:56:35:E0:77:E0:1B:C8:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/5694af04-bfda-312c-84d5-8cfa5c6d8d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:00:9d:38:d7:b5:86:90:3e:54:3e:a3:61:7e:63:a8:2f:4d: b1:65:ba:b2:e3:83:17:07:ed:e0:0c:31:a9:a4:b6:41:3b:e5: 6f:92:b2:d0:28:ca:a6:ad:fd:4b:5e:a3:ce:72:e4:86:d0:53: 74:b8:3c:c8:6e:62:a0:26:dc:9e:79:fb:1d:c1:54:96:16:fc: b6:7a:31:ac:ce:69:eb:c5:88:60:15:20:fb:a6:f2:db:de:b7: fc:dd:a8:48:2c:7a:da:53:1e:ba:29:25:63:34:46:dc:5a:70: eb:a9:ee:8c:9c:7d:6c:77:1d:ab:b6:79:c6:50:63:8b:8a:3c: c7:80:b0:3c:7f:bf:63:fa:ba:1d:3f:86:32:82:02:f5:6d:cd: d1:ce:5d:06:2c:d7:39:9e:e7:a8:b4:25:56:55:db:fd:22:0b: 30:f2:c9:2d:df:90:ee:13:9f:1a:f8:61:46:94:6e:46:ba:1c: 20:ed:3c:7d:99:36:b4:57:31:91:85:e5:aa:91:00:41:dc:48: 6c:af:7c:7a:fc:e1:93:6c:f9:8a:4f:23:1e:52:db:0c:a2:9a: 76:14:c4:55:da:6c:4f:76:be:c2:01:65:82:a1:73:b3:13:92: be:4a:b6:e9:75:f9:c9:2f:d0:e0:c3:ad:e2:02:c3:13:1c:a9: 9c:07:f4:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUH1sOsoUIPqr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MzFmYTAwNjMtZmUyMy00OTIyLWJjYjEtNmEyOWQzMDg4ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD5x7GOH/PArUa0llob73ApDYvGY7CsKHQem 8XoL3cfvbRGTRraTAyyLUwkU+fc6LdEWFBL76YrMTbV4mCXNY+EvecWXoOq7kT8I NjPW2SbJBmmYn4R4muqV1kH6SWse8e+IlGEmz2NWFauxKEbiAlH4m8Zc00E2EFF5 bOdmGK4nva7foShA1iCRc/gUTc1fNVYc3DKqD+V+YgLTXaeEQQyUC+3eRQHsXbc3 DAnmugaN5CW2WoeYMWnPraMRPPIxxs7jN/gy+Iu025SrmWJaZWKm8qniyygd+5BU yCeJuGvtPB3nnSBwAg1MUZ7KXU4m97koUD4SyonBw1OBXOJRbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfF92uY2L11g9XjOlY14HfgG8gbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvNTY5NGFmMDQtYmZkYS0z MTJjLTg0ZDUtOGNmYTVjNmQ4ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEAnTjXtYaQPlQ+o2F+Y6gvTbFlurLjgxcH7eAMMamktkE75W+SstAo yqat/Uteo85y5IbQU3S4PMhuYqAm3J55+x3BVJYW/LZ6MazOaevFiGAVIPum8tve t/zdqEgsetpTHropJWM0RtxacOup7oycfWx3Hau2ecZQY4uKPMeAsDx/v2P6uh0/ hjKCAvVtzdHOXQYs1zme56i0JVZV2/0iCzDyyS3fkO4Tnxr4YUaUbka6HCDtPH2Z NrRXMZGF5aqRAEHcSGyvfHr84ZNs+YpPIx5S2wyimnYUxFXabE92vsIBZYKhc7MT kr5Ktul1+ckv0ODDreICwxMcqZwH9O0= -----END CERTIFICATE-----Generated at Sun Apr 27 15:14:56 2025 by rpki-client