$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa File: 1c21a477-f490-34ce-8019-0e5a15944ec6.roa (raw, json) Hash identifier: jpjH5qSP0HJ+zVAWEfEJaj2Hiyi1AJ9ZCDNThrhEOy4= Subject key identifier: 64:83:B2:88:51:F7:D1:32:45:55:F6:F0:74:27:CA:ED:66:73:6E:92 Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F4328584913AC371EB44FBD9CE1639180 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 396982 IP address blocks: 204.10.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:37:1e:b4:4f:bd:9c:e1:63:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=7747ff13-b75c-4e86-83ea-30e7acc7d86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:72:95:13:63:24:bb:74:76:5c:2b:80:13: 35:d6:59:c1:d5:99:5e:ca:d9:19:6c:ad:30:7d:f3: d1:44:dc:04:b2:50:b7:15:1c:7f:7b:a4:1e:0b:56: 15:83:f2:ce:9a:35:ae:f8:bb:a8:13:a1:dd:87:01: 06:2b:38:fd:9c:e6:b0:e3:9a:6a:4c:c8:30:7b:c0: 8d:f8:78:58:b4:80:0b:e3:aa:ad:77:81:64:2f:59: 9d:d4:dd:e5:bf:1e:68:6c:85:fa:e5:9f:65:67:95: dd:7e:f4:e2:67:c0:5c:7a:68:16:f8:27:ed:85:35: f8:b1:d1:40:c9:8f:3b:ea:5f:f8:db:50:0f:99:93: 57:0a:00:b1:c9:a8:5e:83:a3:6c:a7:6c:95:40:23: 27:6b:b3:b2:13:62:c4:af:fc:d3:3a:d9:6b:c7:83: 09:01:39:96:97:21:6f:f8:cc:41:2d:a3:0b:97:76: 4a:cf:5f:d2:9f:90:b1:65:29:21:36:39:e7:32:31: ff:dc:72:ee:b4:56:45:45:f4:b3:97:5d:a1:dd:08: 32:9a:f2:00:c1:9a:0c:67:fb:ac:fe:28:a0:ba:65: 13:54:23:ce:29:a7:14:f8:9a:d5:d7:ca:ef:ec:da: 9d:0c:39:d5:f1:3f:80:60:35:09:81:6b:bc:d5:61: 0e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:83:B2:88:51:F7:D1:32:45:55:F6:F0:74:27:CA:ED:66:73:6E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv4: 204.10.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:81:60:0c:68:c1:be:86:50:74:a5:a2:4e:b4:ba:3a:4e:0d: db:69:a6:4a:24:b2:87:5a:31:97:27:33:c8:b0:b0:a8:97:62: 0d:77:36:0d:5d:6a:25:f1:92:3d:eb:95:fe:bb:34:d4:07:61: 3f:61:99:a1:7d:f1:f3:e9:7e:e2:e5:40:bc:cb:69:d6:1c:f3: 10:20:39:5c:0a:c2:83:9c:16:a8:54:49:aa:8a:88:24:1e:3c: 28:e2:4c:67:5f:84:8d:9f:08:a0:5a:88:a9:30:ea:0f:bf:09: 26:72:f3:c3:cc:4b:e8:c6:c5:7c:5a:fc:86:6f:68:1f:86:25: 99:4c:c6:bd:ab:0d:b7:16:18:87:cb:56:7a:5f:56:ad:26:73: d6:ee:86:53:32:9d:d0:fa:ff:40:64:29:e0:81:4e:f5:18:dd: c0:02:6b:66:c1:34:0e:4a:90:50:e0:a1:cb:2e:ce:8c:a9:02: ef:9a:73:8f:3f:40:87:a1:f1:0b:22:71:d0:36:c3:ed:57:e7: 61:95:80:60:9f:58:4c:01:dd:34:33:94:93:c2:27:58:16:56: c9:f6:20:04:67:62:4b:52:2e:cb:a9:4f:c1:db:51:d2:20:d2: 9f:64:d4:6e:c1:78:8d:6b:2b:fc:fc:01:20:63:a0:47:0f:1e: 8e:b0:77:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDcetE+9nOFjkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk Nzc0N2ZmMTMtYjc1Yy00ZTg2LTgzZWEtMzBlN2FjYzdkODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYVylRNjJLt0dlwrgBM11lnB1ZleytkZbK0w ffPRRNwEslC3FRx/e6QeC1YVg/LOmjWu+LuoE6HdhwEGKzj9nOaw45pqTMgwe8CN +HhYtIAL46qtd4FkL1md1N3lvx5obIX65Z9lZ5XdfvTiZ8BcemgW+CfthTX4sdFA yY876l/421APmZNXCgCxyaheg6Nsp2yVQCMna7OyE2LEr/zTOtlrx4MJATmWlyFv +MxBLaMLl3ZKz1/Sn5CxZSkhNjnnMjH/3HLutFZFRfSzl12h3QgymvIAwZoMZ/us /iigumUTVCPOKacU+JrV18rv7NqdDDnV8T+AYDUJgWu81WEOSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSDsohR99EyRVX28HQnyu1mc26SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMWMyMWE0NzctZjQ5MC0z NGNlLTgwMTktMGU1YTE1OTQ0ZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAo0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6BYAxowb6GUHSlok60ujpODdtppkoksodaMZcnM8iwsKiXYg13Ng1d aiXxkj3rlf67NNQHYT9hmaF98fPpfuLlQLzLadYc8xAgOVwKwoOcFqhUSaqKiCQe PCjiTGdfhI2fCKBaiKkw6g+/CSZy88PMS+jGxXxa/IZvaB+GJZlMxr2rDbcWGIfL VnpfVq0mc9buhlMyndD6/0BkKeCBTvUY3cACa2bBNA5KkFDgocsuzoypAu+ac48/ QIeh8QsicdA2w+1X52GVgGCfWEwB3TQzlJPCJ1gWVsn2IARnYktSLsupT8HbUdIg 0p9k1G7BeI1rK/z8ASBjoEcPHo6wd5M= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:33 2025 by rpki-client