$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/4f00197c-82ad-39dc-96d1-b0d2703738e7.roa File: 4f00197c-82ad-39dc-96d1-b0d2703738e7.roa (raw, json) Hash identifier: wOij02fmzijejhAXeqA0gmv8D1fNubHjKE1z9rz5k5w= Subject key identifier: 54:EC:8F:F4:F5:0D:3C:47:BE:7F:ED:95:B7:A7:13:9A:59:C5:2F:6F Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F4328584A07D532B8FEF343DB1D9BD380 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/4f00197c-82ad-39dc-96d1-b0d2703738e7.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 173.247.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:32:b8:fe:f3:43:db:1d:9b:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=2fa3f02c-f00d-4248-98b5-5e5408b47cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:c5:dc:46:e6:90:fd:c0:4f:9c:c5:c6:ca: eb:7d:61:de:2f:9a:41:3b:f5:86:64:32:a4:ec:1f: 68:93:23:f1:b9:8c:f7:68:48:b7:3b:a5:bb:6b:41: 03:2a:49:ec:2e:41:40:49:6c:c1:32:28:c3:21:87: bd:5e:93:11:9f:b4:d8:05:e2:8a:97:e1:e3:8a:96: 58:49:cd:db:da:d3:02:8a:9b:62:f5:19:71:c6:2c: e6:c1:41:7b:15:ad:1b:8a:8f:aa:fd:11:08:86:1b: 56:62:1f:2d:fe:eb:30:ca:db:ed:16:b6:0d:40:4c: 17:08:09:99:7b:a6:ad:19:a0:da:21:91:e2:fd:35: f6:a1:7e:14:99:f8:50:45:32:fa:90:fb:11:ff:77: 83:0f:a2:ce:94:53:ed:0b:3c:d9:e1:cd:49:ea:7e: 90:6f:6c:02:22:8f:29:75:7e:38:bf:32:5c:6e:ad: 53:09:97:eb:d7:e5:1a:9a:d8:fa:b3:68:e6:ba:37: 3c:48:e7:49:ad:45:91:85:79:3a:5f:4b:4f:4a:7e: 47:4b:12:78:a2:90:84:ef:e9:f1:65:35:33:fc:80: de:cf:8f:cf:f1:c8:f4:0d:2f:73:c7:dc:f4:4c:d6: a0:da:40:0c:7f:f3:57:f3:95:d4:89:2f:ca:1e:05: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EC:8F:F4:F5:0D:3C:47:BE:7F:ED:95:B7:A7:13:9A:59:C5:2F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/4f00197c-82ad-39dc-96d1-b0d2703738e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: 173.247.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:ff:47:e8:6c:21:0f:e9:90:28:3a:c6:26:75:07:08:00:f9: 81:94:7d:1b:0c:7b:b2:df:d0:af:65:df:3d:ea:90:d7:88:b0: 2a:85:5f:26:df:51:98:90:cd:7e:ad:e7:ec:82:c6:84:c6:dc: a7:c8:3a:06:12:ac:9e:a0:07:eb:02:17:c1:ac:88:d5:37:c9: 5c:07:0a:9f:ba:22:47:85:d1:ff:e4:24:d1:a5:56:5e:42:57: 25:8e:d6:b1:06:ee:db:3b:34:90:0d:45:f6:3c:1d:8d:98:75: 34:ed:2f:b3:02:24:ec:8c:b8:f5:52:c7:72:4b:c6:e0:df:f9: b7:56:34:cf:00:54:90:fa:8a:3e:5f:5b:d4:d8:d4:fb:78:0a: 83:5c:51:01:1e:c5:21:64:86:b1:37:35:9f:25:2f:e7:36:2a: ee:b1:48:42:bd:3a:c8:ea:77:ff:8e:f7:ab:8c:53:fd:55:e1: 7d:f1:fd:1e:93:98:13:16:08:9b:4e:22:50:5e:a3:de:83:90: ff:d2:af:16:0c:0c:eb:9d:41:2b:fe:7d:1a:62:53:f4:2d:2f: b7:4d:e2:60:f5:d3:ff:67:0b:f7:9c:00:5c:3c:2e:7c:93:18: a3:9a:99:0e:3b:64:42:1e:c6:6c:0d:85:53:18:6c:eb:1a:4f: 8f:f7:f7:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1TK4/vND2x2b04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk MmZhM2YwMmMtZjAwZC00MjQ4LTk4YjUtNWU1NDA4YjQ3Y2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxzF3EbmkP3AT5zFxsrrfWHeL5pBO/WGZDKk 7B9okyPxuYz3aEi3O6W7a0EDKknsLkFASWzBMijDIYe9XpMRn7TYBeKKl+HjipZY Sc3b2tMCipti9RlxxizmwUF7Fa0bio+q/REIhhtWYh8t/uswytvtFrYNQEwXCAmZ e6atGaDaIZHi/TX2oX4UmfhQRTL6kPsR/3eDD6LOlFPtCzzZ4c1J6n6Qb2wCIo8p dX44vzJcbq1TCZfr1+Uamtj6s2jmujc8SOdJrUWRhXk6X0tPSn5HSxJ4opCE7+nx ZTUz/IDez4/P8cj0DS9zx9z0TNag2kAMf/NX85XUiS/KHgUyVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTsj/T1DTxHvn/tlbenE5pZxS9vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvNGYwMDE5N2MtODJhZC0z OWRjLTk2ZDEtYjBkMjcwMzczOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALD/R+hsIQ/pkCg6xiZ1BwgA+YGUfRsMe7Lf0K9l3z3qkNeIsCqFXybf UZiQzX6t5+yCxoTG3KfIOgYSrJ6gB+sCF8GsiNU3yVwHCp+6IkeF0f/kJNGlVl5C VyWO1rEG7ts7NJANRfY8HY2YdTTtL7MCJOyMuPVSx3JLxuDf+bdWNM8AVJD6ij5f W9TY1Pt4CoNcUQEexSFkhrE3NZ8lL+c2Ku6xSEK9Osjqd/+O96uMU/1V4X3x/R6T mBMWCJtOIlBeo96DkP/SrxYMDOudQSv+fRpiU/QtL7dN4mD10/9nC/ecAFw8LnyT GKOamQ47ZEIexmwNhVMYbOsaT4/39zw= -----END CERTIFICATE-----Generated at Sat Jun 14 06:25:16 2025 by rpki-client