$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/30f98320-ac71-3783-81e0-1195762a58a6.roa File: 30f98320-ac71-3783-81e0-1195762a58a6.roa (raw, json) Hash identifier: snnKgvWn5s+GEzwiYAoK8MqV/0BmR4G3JY/8fgTRsk4= Subject key identifier: 2D:3D:4A:70:02:1B:19:11:33:81:3C:8D:FC:0D:FF:34:42:12:FF:29 Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209 Certificate serial: 010D0C9F4328584908817421997D1BB07D778780 Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/30f98320-ac71-3783-81e0-1195762a58a6.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 204.152.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:74:21:99:7d:1b:b0:7d:77:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=db74caaf-3d2f-4918-8413-f5e4a1493463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ff:19:b3:7d:8a:be:f6:05:03:04:ba:fb:4b: d8:ca:ea:bc:ea:36:a7:b1:67:6e:5d:90:27:bb:57: 60:45:80:93:34:20:23:7b:36:4f:19:01:27:5b:26: fb:00:59:92:ff:2a:ba:79:83:b2:cb:68:46:ba:cf: eb:60:2b:20:50:c1:c5:1d:87:1b:82:4f:77:3e:a3: 60:aa:82:0a:0b:f8:d2:cb:07:c6:e4:e8:b9:85:43: 96:86:ac:33:b8:8b:d9:4a:85:71:82:46:cc:41:b7: 7e:d3:35:d9:29:91:b2:d4:e9:63:14:4c:65:a9:3d: ed:ee:c4:00:29:92:11:fd:ed:60:15:9a:80:89:80: 4f:53:8c:74:89:10:31:dd:c3:37:45:86:f1:1b:65: ab:09:c4:35:3d:b8:4b:e7:16:b9:4d:8c:9f:19:18: 1b:d9:78:eb:7a:a4:a0:3d:1f:d4:bc:22:86:34:2e: 1f:c1:5f:9a:46:0e:7e:79:d3:43:9d:16:64:da:72: 09:c5:69:2e:3c:a5:fd:8d:b6:69:61:89:b9:02:45: 33:81:9f:a5:01:19:17:8a:e3:4b:36:1e:4d:c7:50: 64:e8:95:b6:3a:57:e5:2c:01:fc:fd:81:7d:31:8c: 21:ee:89:bd:8a:2d:40:6a:b9:35:8f:05:bc:17:e9: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3D:4A:70:02:1B:19:11:33:81:3C:8D:FC:0D:FF:34:42:12:FF:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/30f98320-ac71-3783-81e0-1195762a58a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl X509v3 Authority Key Identifier: keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer sbgp-ipAddrBlock: critical IPv4: 204.152.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:70:d0:81:bd:95:4e:4a:50:2b:c4:4f:bc:ec:f9:bd:05:15: 04:93:0a:6b:f3:d3:cc:2c:69:90:5c:8c:6f:3a:a2:89:d9:1a: 05:fb:bc:e3:3a:a2:4d:b1:b5:9f:f8:df:da:e8:bc:3c:35:ac: 29:48:f8:b2:d2:58:ff:80:46:f6:d5:cb:2e:37:45:29:9c:2c: b5:1d:ee:78:43:40:e2:21:7e:84:9c:19:c4:12:c2:7e:c5:d5: 3a:62:29:6b:4a:a4:e1:ab:80:b2:65:52:5e:c9:22:77:44:13: a2:a9:b5:9e:be:81:b8:dc:09:3d:b4:ad:f9:c0:96:b7:7b:97: 09:73:c8:51:ab:71:fa:cb:c4:33:e6:e4:19:9d:7b:3b:d5:0f: b1:1a:af:e3:9b:94:e5:67:98:57:24:01:51:84:48:48:66:7c: 0b:1e:80:16:09:5d:e8:97:87:bd:56:5b:8d:d2:18:90:ee:3b: 6d:26:6d:92:82:77:48:55:bf:cd:3a:7d:e9:9d:0f:4f:c4:68: 1c:bc:b7:78:86:c6:3d:8d:eb:e7:7e:dd:b8:86:f4:e1:44:65: 48:51:31:46:18:86:18:89:93:53:18:f1:cc:4d:ad:94:d5:a2: f3:a4:6b:ea:4c:01:fb:c5:b6:54:09:db:f9:12:8e:7f:e8:e2: ec:1a:d3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXQhmX0bsH13h4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNjkwZGMtZDMyNS00MmIyLTk4MzQtMDZlNGE3Nzli MjA5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZGI3NGNhYWYtM2QyZi00OTE4LTg0MTMtZjVlNGExNDkzNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP8Zs32KvvYFAwS6+0vYyuq86jansWduXZAn u1dgRYCTNCAjezZPGQEnWyb7AFmS/yq6eYOyy2hGus/rYCsgUMHFHYcbgk93PqNg qoIKC/jSywfG5Oi5hUOWhqwzuIvZSoVxgkbMQbd+0zXZKZGy1OljFExlqT3t7sQA KZIR/e1gFZqAiYBPU4x0iRAx3cM3RYbxG2WrCcQ1PbhL5xa5TYyfGRgb2XjreqSg PR/UvCKGNC4fwV+aRg5+edNDnRZk2nIJxWkuPKX9jbZpYYm5AkUzgZ+lARkXiuNL Nh5Nx1Bk6JW2OlflLAH8/YF9MYwh7om9ii1Aark1jwW8F+nenwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC09SnACGxkRM4E8jfwN/zRCEv8pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2 OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3OWIyMDkvMzBmOTgzMjAtYWM3MS0z NzgzLTgxZTAtMTE5NTc2MmE1OGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDZiNjkwZGMtZDMyNS00MmIyLTk4 MzQtMDZlNGE3NzliMjA5L2Q2YjY5MGRjLWQzMjUtNDJiMi05ODM0LTA2ZTRhNzc5 YjIwOS5jcmwwHwYDVR0jBBgwFoAU7UQThqHLnfMmsjfCW7+YxO/SX4wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0 YTc3OWIyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJh3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5w0IG9lU5KUCvET7zs+b0FFQSTCmvz08wsaZBcjG86oonZGgX7vOM6 ok2xtZ/439rovDw1rClI+LLSWP+ARvbVyy43RSmcLLUd7nhDQOIhfoScGcQSwn7F 1TpiKWtKpOGrgLJlUl7JIndEE6KptZ6+gbjcCT20rfnAlrd7lwlzyFGrcfrLxDPm 5BmdezvVD7Ear+OblOVnmFckAVGESEhmfAsegBYJXeiXh71WW43SGJDuO20mbZKC d0hVv806femdD0/EaBy8t3iGxj2N6+d+3biG9OFEZUhRMUYYhhiJk1MY8cxNrZTV ovOka+pMAfvFtlQJ2/kSjn/o4uwa09A= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:44 2025 by rpki-client