$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa File: 774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json) Hash identifier: kjE8lzLQOuGOyblbNBG5C6dUDNsb96Z9wmTZXPTWAvg= Subject key identifier: 50:51:E2:A1:C5:85:C2:55:2B:DB:D7:0A:B2:2F:B9:92:7B:50:B1:EA Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Certificate serial: 010D0C9F43285849ABB49B31E05E63D157E10940 Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 16433 IP address blocks: 173.240.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:9b:31:e0:5e:63:d1:57:e1:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=ff1da1b1-e9d5-4869-b09f-032f8052f866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:a9:ed:09:24:10:d0:8d:88:07:51:65:f4: 51:eb:58:a3:3b:11:21:0e:bb:ee:b2:c5:8a:45:c1: 8a:1b:dc:0c:1e:f5:0c:27:6f:e3:4f:f3:64:30:a6: d5:86:9b:5a:b5:06:ca:76:bc:a9:1a:1b:27:24:0d: 0f:e7:97:c5:f1:3e:21:99:9a:c9:f3:4d:74:92:14: 01:32:b4:de:0a:34:2c:d9:5a:d9:9e:b4:dd:d2:07: 98:c7:5d:8d:4b:56:0a:3a:a4:7a:f1:97:8e:ab:b8: 8b:aa:f4:cd:5e:54:8d:74:bf:7c:19:3f:bb:6e:87: 3b:8e:7d:e2:c2:cc:8b:66:e5:4d:b6:c9:74:f5:0b: 19:f6:c9:74:40:24:df:b3:86:70:b0:f1:e0:54:29: 8a:2e:b3:df:a6:d7:98:20:b2:6c:1b:21:f2:31:ae: 98:91:5b:34:32:97:9a:99:8c:f9:ea:4f:b2:c8:01: fc:e1:5e:99:4a:6a:23:9e:7b:8d:4d:f7:37:a2:71: 76:3f:b5:5d:7b:2c:6a:51:11:5a:b1:a2:d0:16:ea: 1a:28:af:93:3f:b6:28:d5:1c:79:06:9b:3f:0a:e8: c6:f6:58:22:28:23:51:f8:4a:bc:3e:db:b8:41:a1: 36:bc:4b:9c:c8:e3:b5:d7:86:c6:b8:99:d2:e8:5f: 63:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:51:E2:A1:C5:85:C2:55:2B:DB:D7:0A:B2:2F:B9:92:7B:50:B1:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl X509v3 Authority Key Identifier: keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer sbgp-ipAddrBlock: critical IPv4: 173.240.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e5:55:64:3f:13:dc:fd:4f:89:fc:e4:0b:24:3d:90:bc:f7: ff:05:82:3a:61:89:bb:0f:e8:3e:fb:35:4a:f7:80:3f:85:2d: 3c:af:05:c7:0d:aa:b6:71:22:a4:f0:04:db:67:6a:11:fb:95: e2:67:d7:82:de:e7:f0:ea:cf:aa:88:53:8a:61:ef:3d:7b:74: 4c:e5:99:c1:40:c4:8a:d6:d8:73:f2:cb:93:df:6b:f8:fd:9a: bd:5a:81:e2:ad:31:5b:f1:1d:f2:7f:ef:d8:d1:71:44:02:aa: d5:46:9f:32:85:0d:92:cd:f6:5d:b8:e9:70:3b:63:ed:75:34: fc:54:32:8e:34:ef:cb:76:a7:11:07:74:2a:64:29:e6:54:f1: 93:4c:8c:e7:14:4e:74:e2:fb:52:7a:27:e7:3b:a8:f7:86:77: cd:52:0c:bf:65:9a:e5:ec:6e:8c:7d:5b:74:58:e7:4f:c9:c3: 25:d3:ec:90:15:d2:2a:1f:f0:bd:60:1d:18:0f:9f:19:08:55: fe:47:6e:91:47:4c:03:00:2c:9c:e5:ac:0e:63:f6:f0:12:fb: b2:8d:22:da:6e:34:f7:db:cc:cb:36:f1:f7:a7:8d:9d:a5:fd: 1a:14:4b:44:2f:f5:c8:b5:b0:92:55:c2:0f:27:6e:94:6e:86: 08:f3:26:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJsx4F5j0VfhCUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1 ZDUwMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZmYxZGExYjEtZTlkNS00ODY5LWIwOWYtMDMyZjgwNTJmODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXSp7QkkENCNiAdRZfRR61ijOxEhDrvussWK RcGKG9wMHvUMJ2/jT/NkMKbVhptatQbKdrypGhsnJA0P55fF8T4hmZrJ8010khQB MrTeCjQs2VrZnrTd0geYx12NS1YKOqR68ZeOq7iLqvTNXlSNdL98GT+7boc7jn3i wsyLZuVNtsl09QsZ9sl0QCTfs4ZwsPHgVCmKLrPfpteYILJsGyHyMa6YkVs0Mpea mYz56k+yyAH84V6ZSmojnnuNTfc3onF2P7VdeyxqURFasaLQFuoaKK+TP7Yo1Rx5 Bps/CujG9lgiKCNR+Eq8Ptu4QaE2vEucyOO114bGuJnS6F9j4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBR4qHFhcJVK9vXCrIvuZJ7ULHqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvNzc0ZGI2ZjAtY2YyZC0z OTVlLWI1YTctNDBhNWQyMTEzNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrlVWQ/E9z9T4n85AskPZC89/8FgjphibsP6D77NUr3gD+FLTyvBccN qrZxIqTwBNtnahH7leJn14Le5/Dqz6qIU4ph7z17dEzlmcFAxIrW2HPyy5Pfa/j9 mr1ageKtMVvxHfJ/79jRcUQCqtVGnzKFDZLN9l246XA7Y+11NPxUMo4078t2pxEH dCpkKeZU8ZNMjOcUTnTi+1J6J+c7qPeGd81SDL9lmuXsbox9W3RY50/JwyXT7JAV 0iof8L1gHRgPnxkIVf5HbpFHTAMALJzlrA5j9vAS+7KNItpuNPfbzMs28fenjZ2l /RoUS0Qv9ci1sJJVwg8nbpRuhgjzJuk= -----END CERTIFICATE-----Generated at Tue Apr 29 00:48:59 2025 by rpki-client