$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/5461a472-b261-38fb-9166-72daeaab4676.roa File: 5461a472-b261-38fb-9166-72daeaab4676.roa (raw, json) Hash identifier: MmhGwWe7+oVy6QuEAJYe1S/NwiS2hYg72LegMwEUOyw= Subject key identifier: 3C:ED:05:A5:6C:FD:23:A3:AD:0E:B5:B2:10:C3:5D:FD:C6:CC:70:85 Certificate issuer: /CN=4af5b8d8-56f7-435a-93b3-22ae179ae6bc Certificate serial: 010D0C9F432858498BE1754AF0D2E4E434554440 Authority key identifier: 8C:6C:55:9A:18:9D:3C:B8:62:0C:06:1D:E6:4F:CC:C9:66:8F:43:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/5461a472-b261-38fb-9166-72daeaab4676.roa Signing time: Wed 16 Apr 2025 15:25:27 +0000 ROA not before: Wed 16 Apr 2025 15:25:27 +0000 ROA not after: Tue 15 Jul 2025 15:25:27 +0000 asID: 11492 IP address blocks: 204.11.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8b:e1:75:4a:f0:d2:e4:e4:34:55:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4af5b8d8-56f7-435a-93b3-22ae179ae6bc Validity Not Before: Apr 16 15:25:27 2025 GMT Not After : Jul 15 15:25:27 2025 GMT Subject: CN=f000cc76-857c-4d57-8cf0-235b83babc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:4c:a6:b5:02:03:7a:92:74:3a:e1:1c:af: b4:a6:1f:96:63:5e:d0:9e:30:cf:51:36:02:8b:84: 2f:19:79:68:d8:19:dd:63:65:81:cb:86:2a:d2:9a: 21:32:81:5c:8e:1a:1c:0d:5e:68:11:67:30:8f:4c: cc:ea:7a:16:95:30:b6:dc:c7:4d:d2:db:ee:7e:b9: 05:30:c8:b3:aa:cd:dd:3a:7f:de:ed:fa:11:ea:49: 60:d8:3f:a1:c9:bb:99:90:a9:73:68:f6:99:08:d8: 62:3b:42:bc:22:67:83:59:41:96:80:a5:5c:b0:de: 3c:04:17:1c:1e:54:17:49:52:ea:c1:97:3d:c5:5c: 10:74:da:af:c3:54:2c:d8:d3:50:8e:66:a0:3f:8e: 78:01:5f:f1:28:11:24:5e:4f:90:51:fd:f6:f2:f2: 09:a1:fd:92:8e:79:eb:4b:7a:11:21:a4:33:3c:a7: 6a:88:6b:17:df:17:ee:01:83:c6:62:83:57:de:ae: d2:a2:67:a3:ad:42:8e:4c:b7:0d:f3:1d:d8:3c:ee: 4a:af:69:58:e6:c9:07:98:d5:b7:bc:4f:8e:2b:7e: 56:ef:ff:0a:01:12:2e:49:cb:0a:85:33:63:ca:8e: 41:74:28:08:ca:73:8e:8e:b2:d7:db:5e:e9:6a:b0: e9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:ED:05:A5:6C:FD:23:A3:AD:0E:B5:B2:10:C3:5D:FD:C6:CC:70:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/5461a472-b261-38fb-9166-72daeaab4676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.crl X509v3 Authority Key Identifier: keyid:8C:6C:55:9A:18:9D:3C:B8:62:0C:06:1D:E6:4F:CC:C9:66:8F:43:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4af5b8d8-56f7-435a-93b3-22ae179ae6bc.cer sbgp-ipAddrBlock: critical IPv4: 204.11.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:1f:b1:55:91:1f:1b:95:34:44:76:be:13:24:a6:c6:43:02: c8:f5:32:bc:e8:23:b2:44:35:93:70:5e:35:2b:17:f3:86:60: c0:b1:91:f3:fe:61:35:36:d8:68:fb:93:1a:8a:62:cd:aa:a2: c7:b4:13:36:31:69:06:5f:22:8f:ee:75:85:62:98:89:dd:c9: fd:f2:39:6a:66:99:ac:5b:62:f5:c6:48:69:7b:f7:03:ae:90: 21:66:f5:8d:15:5b:60:07:db:46:ef:3f:8e:0b:10:48:de:9c: 70:36:aa:4a:ac:b8:b0:70:d9:48:8d:58:f9:9e:3f:c5:05:d6: 70:33:20:73:08:3a:1b:06:55:42:44:e4:de:b5:65:2d:78:29: d0:1b:53:6d:c9:9c:f1:79:37:bd:69:9f:fc:c2:3f:f2:ad:00: 61:e1:d8:b4:de:8d:54:73:67:4c:d6:1d:81:79:85:1c:d5:0a: 8c:43:d2:8a:85:1d:3c:cc:9e:2e:cd:58:54:67:9b:db:be:41: 9e:b5:a4:46:15:99:46:af:a8:90:68:0a:d0:13:fd:b8:a7:eb: a6:69:38:b4:f4:5b:07:56:bd:04:63:15:41:94:a5:e1:a6:66: 3c:e7:e9:16:e9:0e:4d:4d:c8:22:e9:9a:77:5e:f7:5f:45:92: f9:c8:f6:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmL4XVK8NLk5DRVREAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFmNWI4ZDgtNTZmNy00MzVhLTkzYjMtMjJhZTE3OWFl NmJjMB4XDTI1MDQxNjE1MjUyN1oXDTI1MDcxNTE1MjUyN1owLzEtMCsGA1UEAxMk ZjAwMGNjNzYtODU3Yy00ZDU3LThjZjAtMjM1YjgzYmFiYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfhMprUCA3qSdDrhHK+0ph+WY17QnjDPUTYC i4QvGXlo2BndY2WBy4Yq0pohMoFcjhocDV5oEWcwj0zM6noWlTC23MdN0tvufrkF MMizqs3dOn/e7foR6klg2D+hybuZkKlzaPaZCNhiO0K8ImeDWUGWgKVcsN48BBcc HlQXSVLqwZc9xVwQdNqvw1Qs2NNQjmagP454AV/xKBEkXk+QUf328vIJof2Sjnnr S3oRIaQzPKdqiGsX3xfuAYPGYoNX3q7SomejrUKOTLcN8x3YPO5Kr2lY5skHmNW3 vE+OK35W7/8KARIuScsKhTNjyo5BdCgIynOOjrLX217parDp0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDztBaVs/SOjrQ61shDDXf3GzHCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80YWY1 YjhkOC01NmY3LTQzNWEtOTNiMy0yMmFlMTc5YWU2YmMvNTQ2MWE0NzItYjI2MS0z OGZiLTkxNjYtNzJkYWVhYWI0Njc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGFmNWI4ZDgtNTZmNy00MzVhLTkz YjMtMjJhZTE3OWFlNmJjLzRhZjViOGQ4LTU2ZjctNDM1YS05M2IzLTIyYWUxNzlh ZTZiYy5jcmwwHwYDVR0jBBgwFoAUjGxVmhidPLhiDAYd5k/MyWaPQ6MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80YWY1YjhkOC01NmY3LTQzNWEtOTNiMy0yMmFl MTc5YWU2YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAvbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEfsVWRHxuVNER2vhMkpsZDAsj1MrzoI7JENZNwXjUrF/OGYMCxkfP+ YTU22Gj7kxqKYs2qose0EzYxaQZfIo/udYVimIndyf3yOWpmmaxbYvXGSGl79wOu kCFm9Y0VW2AH20bvP44LEEjenHA2qkqsuLBw2UiNWPmeP8UF1nAzIHMIOhsGVUJE 5N61ZS14KdAbU23JnPF5N71pn/zCP/KtAGHh2LTejVRzZ0zWHYF5hRzVCoxD0oqF HTzMni7NWFRnm9u+QZ61pEYVmUavqJBoCtAT/bin66ZpOLT0WwdWvQRjFUGUpeGm Zjzn6RbpDk1NyCLpmnde919FkvnI9uE= -----END CERTIFICATE-----Generated at Thu May 1 21:55:15 2025 by rpki-client