$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa File: 5757907e-a152-3421-ae20-7d46415d4c4e.roa (raw, json) Hash identifier: wT/YYRZ/OV/2zM1dl/Q0XXMWj3+OsPcPfUVDfwZKE4M= Subject key identifier: 10:F1:1D:2B:CF:07:2F:B8:28:9A:F4:F2:ED:C7:E4:73:C2:12:74:27 Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Certificate serial: 010D0C9F4328584905B6B504B4CD709442589E00 Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 36634 IP address blocks: 205.221.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b5:04:b4:cd:70:94:42:58:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=5fb839cd-bf30-4b23-9512-af927d2a229a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:95:5d:89:c7:d3:e0:ff:45:16:48:61:92: be:68:b2:d0:39:96:c1:07:18:65:26:93:5b:9f:c7: 4e:19:39:59:bf:e1:d6:e6:2f:95:d3:f5:72:ce:6f: 0e:9d:d8:26:a7:09:53:a8:61:21:56:d5:7a:21:88: 12:3f:67:0c:d1:79:a5:56:26:15:b1:c9:79:8d:fe: 50:eb:82:ae:9e:96:22:91:ac:53:a7:a1:9e:26:2a: 5c:c6:32:97:f8:9b:df:ea:26:e4:08:24:21:06:07: 01:00:8a:c5:a4:65:a2:a1:40:13:1f:4d:85:c4:1e: 49:ce:c5:46:73:7b:3c:11:1a:54:fd:da:04:ce:56: 6e:d5:a3:71:00:58:9b:33:95:d5:d4:ac:10:25:2c: b0:b8:78:8c:e9:29:75:1a:16:d6:29:a3:9a:8a:96: 83:04:13:c5:df:97:82:85:25:ab:3d:a1:0e:9f:16: a7:86:51:53:2d:ed:83:cb:74:23:02:8d:5d:c1:d9: 14:ea:1c:41:bf:84:31:86:d5:a1:05:c2:83:ea:bb: d7:c1:74:5d:69:29:a7:30:cb:c4:c8:f4:b6:a7:ab: c8:dc:e9:f4:1c:d0:dc:2b:b3:d8:0a:e8:75:bf:ba: 1c:08:f2:4d:02:17:4c:8a:9d:fb:41:67:9f:92:6d: 25:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F1:1D:2B:CF:07:2F:B8:28:9A:F4:F2:ED:C7:E4:73:C2:12:74:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/5757907e-a152-3421-ae20-7d46415d4c4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl X509v3 Authority Key Identifier: keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer sbgp-ipAddrBlock: critical IPv4: 205.221.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:bf:77:2b:5b:96:f0:90:e7:fd:b4:60:2c:0f:71:57:ee:03: a4:8f:aa:cb:2d:1f:98:ad:07:7e:fe:db:46:bf:89:00:52:92: 14:5b:5e:7e:7c:84:60:80:f0:e6:60:c9:d9:ff:8a:a9:3a:2e: 9c:9a:d8:1f:94:d9:d6:f8:c4:33:90:58:33:b1:7d:a2:6d:a3: 3a:7e:83:61:dd:8b:70:00:0b:1a:31:e2:b9:49:15:ab:5c:67: a2:d6:77:17:63:35:0e:bf:42:dc:5a:74:a1:0b:e9:4e:49:4a: 27:f0:28:2a:39:54:e8:b6:f2:00:03:79:d7:47:b9:49:39:3b: 01:21:32:3b:4b:55:ba:70:8a:02:d8:4a:03:fc:46:52:15:93: 62:dd:0a:0e:e8:6a:fb:9a:96:f4:b2:9c:7d:28:ca:60:30:1f: eb:47:ef:f9:d0:6a:05:4c:95:15:f4:fd:e1:62:a5:aa:b1:cf: 23:d2:15:0a:a4:62:6c:66:37:41:b5:f9:25:36:49:43:57:0d: 40:11:9b:85:6b:9e:75:d6:4a:5e:e6:f4:46:97:48:83:de:87: 2d:24:c9:91:2a:be:a7:11:6f:e6:2a:e4:51:f5:19:ac:05:37: f8:e2:db:7b:7f:1b:be:57:e5:c6:97:e1:ac:71:24:cc:91:db: a1:d7:aa:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrUEtM1wlEJYngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2 MzY5MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk NWZiODM5Y2QtYmYzMC00YjIzLTk1MTItYWY5MjdkMmEyMjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfSVXYnH0+D/RRZIYZK+aLLQOZbBBxhlJpNb n8dOGTlZv+HW5i+V0/Vyzm8OndgmpwlTqGEhVtV6IYgSP2cM0XmlViYVscl5jf5Q 64KunpYikaxTp6GeJipcxjKX+Jvf6ibkCCQhBgcBAIrFpGWioUATH02FxB5JzsVG c3s8ERpU/doEzlZu1aNxAFibM5XV1KwQJSywuHiM6Sl1GhbWKaOaipaDBBPF35eC hSWrPaEOnxanhlFTLe2Dy3QjAo1dwdkU6hxBv4QxhtWhBcKD6rvXwXRdaSmnMMvE yPS2p6vI3On0HNDcK7PYCuh1v7ocCPJNAhdMip37QWefkm0lbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDxHSvPBy+4KJr08u3H5HPCEnQnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvNTc1NzkwN2UtYTE1Mi0z NDIxLWFlMjAtN2Q0NjQxNWQ0YzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1 OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3 ZmQ0MzYzNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzd1nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALO/dytblvCQ5/20YCwPcVfuA6SPqsstH5itB37+20a/iQBSkhRbXn58 hGCA8OZgydn/iqk6Lpya2B+U2db4xDOQWDOxfaJtozp+g2Hdi3AACxox4rlJFatc Z6LWdxdjNQ6/QtxadKEL6U5JSifwKCo5VOi28gADeddHuUk5OwEhMjtLVbpwigLY SgP8RlIVk2LdCg7oavualvSynH0oymAwH+tH7/nQagVMlRX0/eFipaqxzyPSFQqk YmxmN0G1+SU2SUNXDUARm4VrnnXWSl7m9EaXSIPehy0kyZEqvqcRb+Yq5FH1GawF N/ji23t/G75X5caX4axxJMyR26HXqgc= -----END CERTIFICATE-----Generated at Mon Apr 28 16:00:16 2025 by rpki-client