$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa File: 5b0f7ce6-9e65-3027-ace5-5004e591656b.roa (raw, json) Hash identifier: 4C27QUOHz+ZGSt5cqXGkskWZwRpKhFM739z4/+0X964= Subject key identifier: 5C:57:01:AB:0C:24:2F:2C:95:49:9E:26:00:AB:D9:CC:BF:6A:45:94 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F432858492CAE820AEFB6600E7EF54380 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 141776 IP address blocks: 174.136.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:82:0a:ef:b6:60:0e:7e:f5:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=1e154b10-5c7c-4e00-981a-509dfea63e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:da:79:08:fb:4b:ea:2c:b2:10:b4:b3:cb:3f: 09:9d:ff:0c:71:26:74:d0:04:00:61:0e:ec:e4:96: a9:f5:09:75:00:20:e7:4e:16:78:e9:e5:c9:e3:e4: 00:3e:11:54:81:4b:95:c1:f6:8e:c4:ea:95:e9:9a: db:70:cb:7e:ba:df:38:91:ef:6b:47:8d:01:25:28: f4:55:d4:96:55:8a:83:3c:54:ae:49:25:73:7d:1f: bd:f3:00:e7:99:7e:85:57:0a:60:f2:84:74:d7:e0: 61:cc:c8:93:e9:e6:c2:43:8b:45:8d:0d:7e:06:56: 96:c0:7f:6a:65:39:14:4d:99:db:9e:0f:0c:e0:4e: db:15:20:72:8d:9b:6f:02:a7:41:85:79:91:94:68: 3f:72:ca:5f:b0:5e:0b:7a:f8:50:73:1d:70:11:e6: d1:f3:7a:2b:02:8e:26:9a:5e:28:6f:4b:c7:68:5f: 42:44:c3:7e:56:84:05:aa:db:d7:c1:fa:86:ac:3a: 92:c1:7e:9d:fb:f6:57:68:9c:75:06:cf:57:3e:50: 57:09:a1:42:60:5a:2b:d2:84:fc:0d:f5:1d:92:6c: 6f:f9:90:6d:10:55:68:be:93:41:35:38:6c:1f:9d: 5c:2f:ec:62:59:89:0f:f7:4e:5c:3a:00:87:83:b5: 6e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:57:01:AB:0C:24:2F:2C:95:49:9E:26:00:AB:D9:CC:BF:6A:45:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d8:32:a6:0a:de:fe:f7:c9:44:e0:09:99:7b:fc:e1:46:b7: 5e:23:de:bb:dd:e9:bc:12:91:23:ac:d2:34:8e:78:bd:07:c9: 04:81:6c:a9:cf:05:cc:2b:a0:79:3e:71:48:5a:38:43:72:b3: ee:4e:40:f6:3d:ae:f3:05:21:29:6d:ee:7e:7b:52:89:17:fa: a2:2e:61:49:bf:ce:2e:35:ef:6b:97:99:ca:d6:3d:b6:60:8c: 38:9c:d4:24:18:3f:e6:b7:3b:f0:12:fc:83:31:09:bb:fc:a0: 67:8d:3c:89:13:d3:aa:34:2c:d2:2d:1e:8d:95:bd:57:f5:ed: 82:40:d8:da:ef:2a:79:0b:af:c1:42:d4:0c:a2:17:f3:a7:e2: 0a:0f:c0:66:58:6a:70:f1:07:0d:05:0d:0f:46:66:36:25:f6: c9:89:a7:04:47:86:5a:21:4f:37:90:fb:04:26:04:6e:5c:ae: af:8f:70:3d:4c:90:d8:1b:96:cd:8b:b5:4e:00:f1:24:9f:e1: f3:f7:4c:75:9e:7a:38:8a:17:c5:2b:97:31:f2:18:66:47:e4: 0d:c8:7f:95:42:b0:0e:0d:57:aa:2c:04:cc:6f:41:2b:7b:66: a3:52:70:f8:85:f9:08:da:f8:c8:0e:d9:98:ce:fa:81:13:2f: 21:36:4a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroIK77ZgDn71Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWUxNTRiMTAtNWM3Yy00ZTAwLTk4MWEtNTA5ZGZlYTYzZTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidp5CPtL6iyyELSzyz8Jnf8McSZ00AQAYQ7s 5Jap9Ql1ACDnThZ46eXJ4+QAPhFUgUuVwfaOxOqV6ZrbcMt+ut84ke9rR40BJSj0 VdSWVYqDPFSuSSVzfR+98wDnmX6FVwpg8oR01+BhzMiT6ebCQ4tFjQ1+BlaWwH9q ZTkUTZnbng8M4E7bFSByjZtvAqdBhXmRlGg/cspfsF4LevhQcx1wEebR83orAo4m ml4ob0vHaF9CRMN+VoQFqtvXwfqGrDqSwX6d+/ZXaJx1Bs9XPlBXCaFCYFor0oT8 DfUdkmxv+ZBtEFVovpNBNThsH51cL+xiWYkP905cOgCHg7Vu8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxXAasMJC8slUmeJgCr2cy/akWUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvNWIwZjdjZTYtOWU2NS0z MDI3LWFjZTUtNTAwNGU1OTE2NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjYMqYK3v73yUTgCZl7/OFGt14j3rvd6bwSkSOs0jSOeL0HyQSBbKnP BcwroHk+cUhaOENys+5OQPY9rvMFISlt7n57UokX+qIuYUm/zi4172uXmcrWPbZg jDic1CQYP+a3O/AS/IMxCbv8oGeNPIkT06o0LNItHo2VvVf17YJA2NrvKnkLr8FC 1AyiF/On4goPwGZYanDxBw0FDQ9GZjYl9smJpwRHhlohTzeQ+wQmBG5crq+PcD1M kNgbls2LtU4A8SSf4fP3THWeejiKF8UrlzHyGGZH5A3If5VCsA4NV6osBMxvQSt7 ZqNScPiF+Qja+MgO2ZjO+oETLyE2SjI= -----END CERTIFICATE-----Generated at Sun Apr 6 12:47:29 2025 by rpki-client