$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa File: d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa (raw, json) Hash identifier: W66bG/97UudP1fFlvNgNxtR7ShQuuMIhJysYRFh9WCU= Subject key identifier: 36:22:81:12:E1:7A:61:F1:94:8C:1C:47:20:51:5E:BD:6E:7F:82:A7 Certificate issuer: /CN=8d560541-dfe9-43df-8277-86d83aa610a1 Certificate serial: 010D0C9F432858492CAE860725258D3E80E4B7C0 Authority key identifier: 8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 204.11.174.0/24 maxlen: 24 204.11.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:86:07:25:25:8d:3e:80:e4:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d560541-dfe9-43df-8277-86d83aa610a1 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=822fece6-384e-4264-9fd4-80983ecd1c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:94:c0:90:61:2a:02:fa:4d:24:e1:e5:f5: 04:4e:a1:b7:d6:3e:20:5f:b4:b7:41:bb:a3:83:43: b2:ba:7b:e9:46:a8:1b:d4:cc:28:b5:08:e5:dc:d6: b5:de:da:a3:50:f6:3d:81:bc:f5:39:02:47:6c:55: 42:48:5a:5d:b6:1a:f5:ae:14:99:3f:98:94:c7:33: 37:fe:1e:80:8a:1b:41:2d:1a:81:1e:7c:56:8a:19: 67:7e:1e:06:e1:81:06:86:f4:f4:63:ed:4c:97:3c: 18:3d:21:ee:1a:2e:b7:b8:a4:be:2c:81:b3:53:f2: 6c:75:98:ff:3f:ed:57:d3:ef:5b:82:b9:22:03:6a: b8:f4:ee:3e:4c:5e:f4:b9:64:c1:72:a4:50:b6:db: ae:4c:e9:da:ec:9e:7c:a5:ee:af:f2:7a:9b:e0:d1: 09:ca:79:84:b7:6a:5f:f7:59:26:c8:99:fd:4b:e2: fd:7c:b1:90:d3:25:3b:6f:c9:6a:ff:cd:77:e6:9c: 53:a5:fa:7e:81:a3:24:41:f6:f8:03:f6:be:01:47: dc:79:bd:1e:f9:50:e1:f1:48:5f:1b:ae:b0:34:e5: 12:12:4a:eb:72:0e:18:e8:f6:ce:2a:7b:6d:43:fc: 7e:76:e8:8b:53:d6:61:d3:47:b0:53:8e:66:08:fb: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:22:81:12:E1:7A:61:F1:94:8C:1C:47:20:51:5E:BD:6E:7F:82:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/d90017c3-a77d-3cd2-9c68-3d52f6ed6055.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1/8d560541-dfe9-43df-8277-86d83aa610a1.crl X509v3 Authority Key Identifier: keyid:8B:B2:3D:2F:85:7E:56:48:9E:99:6E:81:CF:A0:4B:69:48:A1:5C:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d560541-dfe9-43df-8277-86d83aa610a1.cer sbgp-ipAddrBlock: critical IPv4: 204.11.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b7:69:2b:65:b1:2e:cd:05:60:fe:4b:13:9a:11:90:cd:19: 34:7c:fd:87:3b:4f:d1:72:47:a4:af:32:a9:e1:d4:3e:83:37: 7a:80:f1:5a:bf:01:42:5b:f7:c0:9f:9d:53:40:9f:29:c9:d0: 99:79:98:de:8e:ec:d1:57:8d:84:ca:3b:d6:aa:b4:7b:3d:59: e9:d1:62:95:ab:08:d7:0d:71:72:fa:4a:70:84:01:bc:8d:c3: 4e:61:df:9c:f9:fd:31:53:2b:0c:f6:08:49:65:60:09:9b:20: 91:13:d1:cd:55:a0:4b:56:fc:99:06:15:d3:95:1d:c9:08:ea: 7b:24:53:36:0a:45:a9:1a:71:aa:8d:38:f7:96:d0:3f:fc:18: dd:09:b5:fc:8b:05:fc:3e:98:d3:a0:72:57:a2:e8:0a:1a:ca: e7:33:7e:48:ed:d0:0c:75:87:b3:cc:a7:3c:02:55:fb:4c:be: cf:75:b2:6b:71:66:9a:3b:48:65:1b:00:aa:eb:98:d5:6c:62: 46:a8:ee:42:b5:e0:6b:c9:e9:26:86:24:1a:58:3b:71:5d:25: 33:a6:20:11:1c:cc:8f:a1:29:7e:75:d9:fa:a4:8d:19:c1:c8: b6:01:b6:9d:73:2a:40:7c:6d:26:32:5b:ff:ae:52:2c:da:09: a5:9f:86:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksroYHJSWNPoDkt8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1NjA1NDEtZGZlOS00M2RmLTgyNzctODZkODNhYTYx MGExMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ODIyZmVjZTYtMzg0ZS00MjY0LTlmZDQtODA5ODNlY2QxYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhaUwJBhKgL6TSTh5fUETqG31j4gX7S3Qbuj g0OyunvpRqgb1MwotQjl3Na13tqjUPY9gbz1OQJHbFVCSFpdthr1rhSZP5iUxzM3 /h6AihtBLRqBHnxWihlnfh4G4YEGhvT0Y+1MlzwYPSHuGi63uKS+LIGzU/JsdZj/ P+1X0+9bgrkiA2q49O4+TF70uWTBcqRQttuuTOna7J58pe6v8nqb4NEJynmEt2pf 91kmyJn9S+L9fLGQ0yU7b8lq/8135pxTpfp+gaMkQfb4A/a+AUfceb0e+VDh8Uhf G66wNOUSEkrrcg4Y6PbOKnttQ/x+duiLU9Zh00ewU45mCPsIkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYigRLhemHxlIwcRyBRXr1uf4KnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2 MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4M2FhNjEwYTEvZDkwMDE3YzMtYTc3ZC0z Y2QyLTljNjgtM2Q1MmY2ZWQ2MDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1NjA1NDEtZGZlOS00M2RmLTgy NzctODZkODNhYTYxMGExLzhkNTYwNTQxLWRmZTktNDNkZi04Mjc3LTg2ZDgzYWE2 MTBhMS5jcmwwHwYDVR0jBBgwFoAUi7I9L4V+VkiemW6Bz6BLaUihXO0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU2MDU0MS1kZmU5LTQzZGYtODI3Ny04NmQ4 M2FhNjEwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzAuuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa3aStlsS7NBWD+SxOaEZDNGTR8/Yc7T9FyR6SvMqnh1D6DN3qA8Vq/ AUJb98CfnVNAnynJ0Jl5mN6O7NFXjYTKO9aqtHs9WenRYpWrCNcNcXL6SnCEAbyN w05h35z5/TFTKwz2CEllYAmbIJET0c1VoEtW/JkGFdOVHckI6nskUzYKRakacaqN OPeW0D/8GN0JtfyLBfw+mNOgclei6Aoayuczfkjt0Ax1h7PMpzwCVftMvs91smtx Zpo7SGUbAKrrmNVsYkao7kK14GvJ6SaGJBpYO3FdJTOmIBEczI+hKX512fqkjRnB yLYBtp1zKkB8bSYyW/+uUizaCaWfhpM= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:00 2025 by rpki-client