$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa File: cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa (raw, json) Hash identifier: MWyeje3Z8SZ4zIwJpBf9XaOh5OdDrw04mfCsFZD1qZo= Subject key identifier: D8:A7:39:54:E4:DA:EC:DC:9C:41:10:8B:99:28:90:A4:17:A0:5E:98 Certificate issuer: /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Certificate serial: 010D0C9F4328584979743A83E78AD87EDE034D00 Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 11399 IP address blocks: 204.225.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:3a:83:e7:8a:d8:7e:de:03:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=a1eb406b-9a06-4505-b7fe-a0f40cab06de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:da:29:9f:9d:28:b8:c3:a5:c2:d5:95:b4:2e: 34:ba:8b:82:19:78:0a:43:bd:d9:fd:64:18:fb:5e: 59:38:be:20:f1:c4:5e:01:45:ae:e1:92:5e:d9:d8: 89:97:e2:4a:dd:d5:de:4f:46:69:30:68:3a:07:72: 16:9f:1a:f5:bb:e3:72:2f:1d:fe:8c:f4:e8:50:76: 26:bd:83:22:03:58:84:c4:fb:cd:0c:81:14:48:20: 73:5b:4a:33:f3:39:4a:1c:2b:2b:da:4c:8c:c2:3b: 46:7e:87:2f:62:d4:b3:e8:f5:a8:45:56:d7:82:b2: 8f:26:e1:08:4d:b8:57:46:cc:88:b6:58:c0:af:12: 7c:4b:c3:66:c0:9c:2b:bd:04:12:8c:18:48:e8:72: 67:9e:ae:2d:30:ee:de:20:1d:96:81:67:b6:1b:60: b9:8a:88:59:fd:9c:1a:18:2a:1a:fa:68:90:3d:d1: 25:9e:2b:70:66:29:bc:d8:41:69:18:7d:13:ec:15: b3:47:f0:6b:cc:28:84:0c:06:3b:fc:e6:b1:7e:c6: 64:d9:5b:52:01:5b:6c:be:aa:f0:d8:aa:b9:c7:96: 0c:94:a7:98:24:91:58:25:03:5d:80:31:7f:87:81: a1:db:01:a4:58:1a:c4:6b:e0:65:7a:9e:f5:09:7b: c4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A7:39:54:E4:DA:EC:DC:9C:41:10:8B:99:28:90:A4:17:A0:5E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl X509v3 Authority Key Identifier: keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer sbgp-ipAddrBlock: critical IPv4: 204.225.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:72:89:63:87:21:cf:49:e2:59:81:9c:bd:ba:c6:f9:23:c8: 76:2e:6b:8e:e8:9f:16:85:70:ea:85:46:76:45:90:a4:ca:0b: de:8d:ce:be:1f:2a:84:6a:e5:97:af:47:13:82:5a:aa:63:52: 57:09:ce:af:c8:1b:27:1c:41:e8:0c:eb:62:67:23:39:b3:6b: 91:05:a7:85:cf:3b:33:20:8a:79:b9:38:68:5c:9d:18:3a:f0: 85:0e:70:d1:07:e2:a4:33:2f:7e:4b:87:fa:ec:f2:ed:2f:07: f0:48:e7:83:15:ea:5d:44:5b:93:e1:c4:d2:d0:f8:a3:a8:53: 04:c3:64:94:6c:f2:67:ab:52:a0:dc:8e:f3:08:b2:a5:7b:4f: 9a:da:09:a4:8d:8f:ee:3c:a5:5f:11:81:f6:33:ea:94:f9:88: b4:35:8b:f3:30:8b:c7:d0:1e:c8:0e:74:56:5d:1a:af:2b:e7: af:88:81:cd:90:e3:af:d0:29:a1:9f:8d:30:0e:75:e2:6b:3e: 1e:85:83:42:65:9c:1e:4a:e0:95:97:59:ad:08:d9:c6:86:f5: f1:ea:8d:2f:3f:a2:3c:52:64:37:e2:53:a4:46:03:e6:33:60: 50:0e:2c:6e:81:39:0c:26:2f:68:5a:d2:48:a7:57:ac:ce:ff: af:b8:cc:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dDqD54rYft4DTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwZWE3OGMtOTFlMi00NWUyLWI1OTYtZWVlZWRkNTI5 ZTNlMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk YTFlYjQwNmItOWEwNi00NTA1LWI3ZmUtYTBmNDBjYWIwNmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytopn50ouMOlwtWVtC40uouCGXgKQ73Z/WQY +15ZOL4g8cReAUWu4ZJe2diJl+JK3dXeT0ZpMGg6B3IWnxr1u+NyLx3+jPToUHYm vYMiA1iExPvNDIEUSCBzW0oz8zlKHCsr2kyMwjtGfocvYtSz6PWoRVbXgrKPJuEI TbhXRsyItljArxJ8S8NmwJwrvQQSjBhI6HJnnq4tMO7eIB2WgWe2G2C5iohZ/Zwa GCoa+miQPdElnitwZim82EFpGH0T7BWzR/BrzCiEDAY7/OaxfsZk2VtSAVtsvqrw 2Kq5x5YMlKeYJJFYJQNdgDF/h4Gh2wGkWBrEa+Blep71CXvEmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNinOVTk2uzcnEEQi5kokKQXoF6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81OTBl YTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVlZGQ1MjllM2UvY2RlNTU5YWUtMzZiOC0z NmJiLWFlZjItOGMwMTkwNWNiZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTkwZWE3OGMtOTFlMi00NWUyLWI1 OTYtZWVlZWRkNTI5ZTNlLzU5MGVhNzhjLTkxZTItNDVlMi1iNTk2LWVlZWVkZDUy OWUzZS5jcmwwHwYDVR0jBBgwFoAUcy9X58uXp+rbNiLQZg076YuCboUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81OTBlYTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVl ZGQ1MjllM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzOGtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9yiWOHIc9J4lmBnL26xvkjyHYua47onxaFcOqFRnZFkKTKC96Nzr4f KoRq5ZevRxOCWqpjUlcJzq/IGyccQegM62JnIzmza5EFp4XPOzMginm5OGhcnRg6 8IUOcNEH4qQzL35Lh/rs8u0vB/BI54MV6l1EW5PhxNLQ+KOoUwTDZJRs8merUqDc jvMIsqV7T5raCaSNj+48pV8RgfYz6pT5iLQ1i/Mwi8fQHsgOdFZdGq8r56+Igc2Q 46/QKaGfjTAOdeJrPh6Fg0JlnB5K4JWXWa0I2caG9fHqjS8/ojxSZDfiU6RGA+Yz YFAOLG6BOQwmL2ha0kinV6zO/6+4zBw= -----END CERTIFICATE-----Generated at Wed Apr 30 05:50:26 2025 by rpki-client