$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/bdb45b3c-808d-31b6-83d5-2bf16de00029.roa File: bdb45b3c-808d-31b6-83d5-2bf16de00029.roa (raw, json) Hash identifier: PAYWYmrU21Y+QXCbXCrS+34oY9fGP4mCMQiYCuBclro= Subject key identifier: 3C:B6:C8:2D:0C:8E:F5:D1:EB:AB:FB:2A:C7:D1:52:67:40:86:90:32 Certificate issuer: /CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765 Certificate serial: 010D0C9F43285849806F2963F2765555D512F940 Authority key identifier: 3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/bdb45b3c-808d-31b6-83d5-2bf16de00029.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 33739 IP address blocks: 204.16.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:29:63:f2:76:55:55:d5:12:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=d8d1ca91-d32c-4a31-913c-937de537e26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:09:99:cd:ab:d3:dc:70:47:58:7e:a9:92: d0:4f:d7:a1:70:18:ce:b1:b0:6a:4a:b9:72:88:f3: c0:17:2b:97:b4:20:a3:5a:ac:17:a0:2b:3f:ca:6d: cb:03:5b:eb:d4:7b:ab:fb:4e:60:97:57:35:be:6d: 8f:69:44:1e:92:26:59:34:18:0f:49:33:c3:73:b9: 2c:da:cf:aa:1d:7b:a6:59:b0:87:d0:ad:a1:69:4b: cc:ff:6f:71:d9:a3:b2:c3:d4:5a:ee:d8:83:33:38: 0b:99:ec:25:42:11:12:c3:f7:54:4b:b6:24:5d:87: ec:d4:13:80:a1:4d:fc:09:7d:ad:72:cb:fb:7c:ff: 99:42:c5:19:0e:69:96:46:a6:3b:64:04:fb:8e:d7: 00:60:33:93:a5:e9:10:b4:b8:2d:da:4a:0b:13:3f: cd:ed:47:fe:98:39:0a:51:6f:77:1f:08:36:a2:34: c8:55:ea:80:f5:44:82:7e:f0:34:7d:54:ae:db:f9: cd:b3:d9:19:5f:12:f5:c4:99:d3:83:08:37:bd:64: 6d:ae:cc:ff:a9:62:48:1f:ea:4e:ec:3c:28:9b:a8: 27:2b:aa:0d:c3:69:41:43:c3:a5:12:5e:a1:9c:9a: 87:78:37:57:ba:41:af:bf:99:f9:10:8c:b9:74:75: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B6:C8:2D:0C:8E:F5:D1:EB:AB:FB:2A:C7:D1:52:67:40:86:90:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/bdb45b3c-808d-31b6-83d5-2bf16de00029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl X509v3 Authority Key Identifier: keyid:3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer sbgp-ipAddrBlock: critical IPv4: 204.16.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:4b:f6:1f:31:1e:19:b1:60:a6:1c:3f:4c:c3:3c:4a:2a:c7: 12:c7:55:69:ae:23:44:9e:99:70:24:0e:93:73:48:aa:18:f1: d7:ac:ca:a5:f0:a3:d1:76:f4:3b:f3:02:9a:35:8d:c9:38:ae: cd:aa:9d:fa:d7:21:d0:ed:54:f8:2b:42:a1:20:e6:8c:5d:c9: 12:7c:68:05:68:fd:18:90:97:d8:77:ef:6f:79:2c:c3:dc:74: 77:15:fd:d9:4a:98:59:dc:61:df:01:93:c5:23:88:13:5a:6c: 8c:0a:62:39:26:73:cd:e2:b8:5a:b5:e0:35:d4:32:5f:3a:6d: 84:f2:c2:e8:3d:e7:ff:f8:73:cd:ea:54:b1:50:72:76:8a:37: 9f:fb:06:c8:fd:51:3b:df:14:fb:0b:9c:82:5d:89:23:3a:8a: 5e:22:e4:a5:bf:df:37:8c:c9:af:d6:7b:7f:25:27:fe:dc:1e: bf:27:51:8d:c5:5e:ad:24:c1:8d:43:f6:ef:0a:4d:de:48:b8: d0:7c:f1:b0:19:20:20:d3:57:57:85:8b:dd:82:0d:24:6e:a7: 23:ce:3b:eb:ed:59:ed:76:82:34:a7:36:c2:5a:d7:27:99:79: b3:38:e7:90:ac:69:2f:fb:6c:3f:b0:d3:0a:d2:35:e8:ad:99: 39:55:c9:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbylj8nZVVdUS+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwMTNiZDgtZmMzNC00YWQ0LThkYzgtNTE2YmRkOGJj NzY1MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZDhkMWNhOTEtZDMyYy00YTMxLTkxM2MtOTM3ZGU1MzdlMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi8Jmc2r09xwR1h+qZLQT9ehcBjOsbBqSrly iPPAFyuXtCCjWqwXoCs/ym3LA1vr1Hur+05gl1c1vm2PaUQekiZZNBgPSTPDc7ks 2s+qHXumWbCH0K2haUvM/29x2aOyw9Ra7tiDMzgLmewlQhESw/dUS7YkXYfs1BOA oU38CX2tcsv7fP+ZQsUZDmmWRqY7ZAT7jtcAYDOTpekQtLgt2koLEz/N7Uf+mDkK UW93Hwg2ojTIVeqA9USCfvA0fVSu2/nNs9kZXxL1xJnTgwg3vWRtrsz/qWJIH+pO 7Dwom6gnK6oNw2lBQ8OlEl6hnJqHeDdXukGvv5n5EIy5dHVwMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDy2yC0MjvXR66v7KsfRUmdAhpAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAx M2JkOC1mYzM0LTRhZDQtOGRjOC01MTZiZGQ4YmM3NjUvYmRiNDViM2MtODA4ZC0z MWI2LTgzZDUtMmJmMTZkZTAwMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUwMTNiZDgtZmMzNC00YWQ0LThk YzgtNTE2YmRkOGJjNzY1L2E1MDEzYmQ4LWZjMzQtNGFkNC04ZGM4LTUxNmJkZDhi Yzc2NS5jcmwwHwYDVR0jBBgwFoAUPNGeaXellv96HMZ7UJhoSVXPS6kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAxM2JkOC1mYzM0LTRhZDQtOGRjOC01MTZi ZGQ4YmM3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlL9h8xHhmxYKYcP0zDPEoqxxLHVWmuI0SemXAkDpNzSKoY8desyqXw o9F29DvzApo1jck4rs2qnfrXIdDtVPgrQqEg5oxdyRJ8aAVo/RiQl9h37295LMPc dHcV/dlKmFncYd8Bk8UjiBNabIwKYjkmc83iuFq14DXUMl86bYTywug95//4c83q VLFQcnaKN5/7Bsj9UTvfFPsLnIJdiSM6il4i5KW/3zeMya/We38lJ/7cHr8nUY3F Xq0kwY1D9u8KTd5IuNB88bAZICDTV1eFi92CDSRupyPOO+vtWe12gjSnNsJa1yeZ ebM455CsaS/7bD+w0wrSNeitmTlVyYA= -----END CERTIFICATE-----Generated at Sun Apr 27 18:52:15 2025 by rpki-client