$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa File: d3f55b78-b0db-358b-92ae-a01f4943931a.roa (raw, json) Hash identifier: JoxVKlyH/KA1BV+I3dNZfg4lGpmk3aNbDrn7uW59q54= Subject key identifier: 8A:17:9A:E1:06:FA:E0:C3:DB:38:1C:72:61:9F:7C:08:40:23:C1:99 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F43285849287E6869C96853CD914E20C0 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 18705 IP address blocks: 173.247.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:68:69:c9:68:53:cd:91:4e:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=1b4575ad-f753-4e04-b794-8a3328afd496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:43:20:5f:2d:e1:c9:3d:27:3b:df:5e:bf: d3:d3:a3:59:8a:84:92:21:9d:16:ee:c0:e2:30:08: 04:2b:57:d3:07:5f:95:e4:47:86:b9:17:7e:7d:73: 45:ae:2f:b8:cb:bf:a1:e0:36:93:f2:cb:c8:75:6f: 3d:8f:f4:93:84:88:a9:dd:71:fd:c9:79:19:ca:a4: 2f:1b:68:7d:86:63:67:9e:da:e6:01:13:51:dd:a0: aa:eb:ad:f5:91:cf:ab:18:05:63:d8:f7:e2:d6:4d: 83:08:b0:9e:1f:75:a4:88:d3:4b:5d:fa:5a:ee:0e: 42:61:c2:73:cc:ad:d5:d2:6b:b1:36:46:83:c7:77: 08:9a:b3:80:64:c4:55:82:c8:36:66:36:7b:31:78: 09:d6:88:92:64:23:71:5c:16:80:6f:06:94:7c:0f: 5b:56:a8:8b:ca:e6:bd:b3:6e:84:b6:bd:d5:f0:e2: 72:e0:2c:48:31:53:7f:12:c2:d9:13:a4:4c:19:85: 26:4a:4e:ad:53:87:f6:17:ea:14:8a:24:4d:93:4f: 0e:d1:b7:a3:d3:36:e7:22:e3:08:85:86:38:d3:d8: e1:af:11:ac:2b:ee:bc:3c:9b:9e:dd:a1:d4:51:d6: e9:3c:23:4e:fe:ec:3d:f0:7e:4a:64:85:98:c7:9a: 32:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:17:9A:E1:06:FA:E0:C3:DB:38:1C:72:61:9F:7C:08:40:23:C1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/d3f55b78-b0db-358b-92ae-a01f4943931a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: 173.247.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:98:e2:33:f5:07:36:c4:46:bc:5a:fc:1b:a7:24:02:aa:8f: 3a:2f:85:c7:1a:e0:a2:4b:14:dd:71:34:d4:f2:8a:be:b9:12: a2:cf:d0:8c:ec:3b:76:ab:fb:35:b2:4e:51:72:5c:4f:c7:4d: 37:e9:53:a0:e6:9a:d6:df:60:d8:08:e4:b5:95:c8:74:ca:21: ab:76:90:48:e5:01:23:b2:57:ef:35:e3:62:36:9d:05:53:06: 05:42:95:c0:55:ef:50:01:6e:82:a7:01:e3:15:7f:00:a6:d4: 21:7f:59:9c:4f:b5:39:be:02:20:ad:d2:17:9c:e5:01:3c:41: ba:d6:c4:66:3d:72:c5:86:ee:65:64:77:54:51:1f:4b:6e:2c: 8f:f4:f9:8b:7a:7c:a9:bf:2f:db:1c:54:9e:07:e7:68:3f:38: 2f:e8:9c:01:76:14:06:23:aa:d4:14:cf:a1:d9:66:55:99:6f: 56:2a:b4:9c:d3:e3:80:16:35:11:34:dc:2f:06:9d:1b:c5:54: ab:ab:bc:37:3d:13:67:e6:0c:fa:0d:d5:c8:a0:c2:5c:36:78: a6:74:59:a2:66:25:18:d3:32:ab:0e:f0:dc:7a:4a:81:84:cb: ee:c7:66:b0:e5:7f:b0:85:83:b0:ef:2d:f9:65:ad:8a:e1:66: 72:5d:fa:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmhpyWhTzZFOIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWI0NTc1YWQtZjc1My00ZTA0LWI3OTQtOGEzMzI4YWZkNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkStDIF8t4ck9JzvfXr/T06NZioSSIZ0W7sDi MAgEK1fTB1+V5EeGuRd+fXNFri+4y7+h4DaT8svIdW89j/SThIip3XH9yXkZyqQv G2h9hmNnntrmARNR3aCq6631kc+rGAVj2Pfi1k2DCLCeH3WkiNNLXfpa7g5CYcJz zK3V0muxNkaDx3cImrOAZMRVgsg2ZjZ7MXgJ1oiSZCNxXBaAbwaUfA9bVqiLyua9 s26Etr3V8OJy4CxIMVN/EsLZE6RMGYUmSk6tU4f2F+oUiiRNk08O0bej0zbnIuMI hYY409jhrxGsK+68PJue3aHUUdbpPCNO/uw98H5KZIWYx5oy6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoXmuEG+uDD2zgccmGffAhAI8GZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvZDNmNTViNzgtYjBkYi0z NThiLTkyYWUtYTAxZjQ5NDM5MzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6Y4jP1BzbERrxa/BunJAKqjzovhcca4KJLFN1xNNTyir65EqLP0Izs O3ar+zWyTlFyXE/HTTfpU6DmmtbfYNgI5LWVyHTKIat2kEjlASOyV+8142I2nQVT BgVClcBV71ABboKnAeMVfwCm1CF/WZxPtTm+AiCt0hec5QE8QbrWxGY9csWG7mVk d1RRH0tuLI/0+Yt6fKm/L9scVJ4H52g/OC/onAF2FAYjqtQUz6HZZlWZb1YqtJzT 44AWNRE03C8GnRvFVKurvDc9E2fmDPoN1cigwlw2eKZ0WaJmJRjTMqsO8Nx6SoGE y+7HZrDlf7CFg7DvLfllrYrhZnJd+tE= -----END CERTIFICATE-----Generated at Sun Apr 27 07:07:49 2025 by rpki-client