$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a32832e5-81a3-350c-8660-f7b5d046ade5.roa File: a32832e5-81a3-350c-8660-f7b5d046ade5.roa (raw, json) Hash identifier: Ej9JL4STHmhqHxvxYwlH93Zg1rvb44veY5x9/6g7unI= Subject key identifier: 9E:01:8B:1C:89:C4:CF:BE:88:E5:5E:1E:AB:AE:66:F4:69:80:48:69 Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Certificate serial: 010D0C9F43285848F22C62D5393A7E36DE63B440 Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a32832e5-81a3-350c-8660-f7b5d046ade5.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 11737 IP address blocks: 173.251.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:62:d5:39:3a:7e:36:de:63:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=5aecf25e-e503-45e6-a9d9-6d773e3e03cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3b:ca:26:74:8a:84:11:ce:a6:cb:78:c8:d9: e8:d1:50:f2:ac:86:e1:48:a1:51:e9:f4:0b:e1:5a: 50:b1:08:3d:b2:f9:3d:90:21:32:8e:9b:2e:d1:31: 8b:68:38:95:4d:5c:ff:58:c0:6d:f3:a2:00:33:7c: 58:10:e5:e5:c5:32:b8:12:d0:12:d7:02:c8:65:82: 12:dd:97:93:a7:e7:e8:65:ca:72:85:72:b2:ea:23: a4:ec:8f:2e:81:55:2f:29:27:a1:c9:89:ca:cf:a1: 20:7e:8b:bf:91:f8:e3:62:fc:e5:7c:e3:80:b2:05: 78:bd:d9:9a:55:f9:50:6e:f5:3a:bc:8d:c7:52:4f: 6d:23:1d:1e:a2:4f:84:d6:80:fc:2c:a0:18:b7:fa: 91:99:96:41:fa:29:d3:6c:31:00:2e:2d:23:cd:81: ec:df:af:79:6c:af:05:3b:58:35:bc:e3:73:19:66: 0f:5a:0d:27:ec:b8:5b:af:4c:84:3b:5b:6d:ec:6e: e5:fc:8a:fd:99:04:b1:0f:81:0a:bd:be:de:f1:a6: d1:ce:24:1e:14:a9:f8:a6:17:c5:39:9e:20:2e:9f: 3e:2c:fb:8d:ef:3f:e7:d7:7f:0f:a4:8e:d9:b8:e7: 05:65:71:bb:c4:b9:c2:83:7e:38:7e:8d:35:93:8b: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:01:8B:1C:89:C4:CF:BE:88:E5:5E:1E:AB:AE:66:F4:69:80:48:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/a32832e5-81a3-350c-8660-f7b5d046ade5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl X509v3 Authority Key Identifier: keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer sbgp-ipAddrBlock: critical IPv4: 173.251.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:86:13:50:4f:c6:d9:84:96:3a:61:d1:76:dc:64:ef:99:f1: 07:02:ef:e1:71:f6:39:b6:48:9c:19:6b:84:11:9f:16:cf:76: e7:0f:d0:c5:97:5d:03:a2:05:36:4a:f0:7a:c7:ec:83:be:73: a6:31:7d:60:68:00:9a:72:a5:84:3a:5f:81:ca:0f:54:56:76: df:ef:b7:ec:55:ab:05:94:3a:b7:d6:db:ea:0f:fd:12:dd:74: 2f:52:46:cd:6b:a4:01:f0:87:d7:6b:cc:d9:bd:7e:4a:bc:73: de:cf:f7:70:36:06:bd:f6:42:a9:e5:0b:db:80:ae:fc:4d:b4: f6:2a:63:1a:8b:e6:3b:f1:e8:36:a2:ea:3b:6f:ac:72:19:a5: cf:e7:af:3f:07:fd:3d:bf:10:7c:f9:03:d0:90:96:dc:84:45: fd:98:d1:cd:68:cc:2c:87:c1:fe:f5:97:a8:84:9d:e8:60:77: 24:ef:eb:4e:17:29:41:da:b5:84:97:2a:81:a2:69:be:22:f5: c2:6e:3b:35:6c:c9:fb:09:3d:2f:98:35:40:29:69:cc:ac:a0: 4e:27:8d:47:8e:c4:a5:57:4b:ef:27:ca:a3:2d:b4:0d:e1:32: 7e:09:f0:29:3d:75:62:b5:a5:24:9d:1b:37:15:a4:8c:da:2a: 03:c7:77:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLGLVOTp+Nt5jtEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh ZDE1MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk NWFlY2YyNWUtZTUwMy00NWU2LWE5ZDktNmQ3NzNlM2UwM2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DvKJnSKhBHOpst4yNno0VDyrIbhSKFR6fQL 4VpQsQg9svk9kCEyjpsu0TGLaDiVTVz/WMBt86IAM3xYEOXlxTK4EtAS1wLIZYIS 3ZeTp+foZcpyhXKy6iOk7I8ugVUvKSehyYnKz6Egfou/kfjjYvzlfOOAsgV4vdma VflQbvU6vI3HUk9tIx0eok+E1oD8LKAYt/qRmZZB+inTbDEALi0jzYHs3695bK8F O1g1vONzGWYPWg0n7Lhbr0yEO1tt7G7l/Ir9mQSxD4EKvb7e8abRziQeFKn4phfF OZ4gLp8+LPuN7z/n138PpI7ZuOcFZXG7xLnCg344fo01k4u8kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ4BixyJxM++iOVeHquuZvRpgEhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4 YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYTMyODMyZTUtODFhMy0z NTBjLTg2NjAtZjdiNWQwNDZhZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfseMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+GE1BPxtmEljph0XbcZO+Z8QcC7+Fx9jm2SJwZa4QRnxbPducP0MWX XQOiBTZK8HrH7IO+c6YxfWBoAJpypYQ6X4HKD1RWdt/vt+xVqwWUOrfW2+oP/RLd dC9SRs1rpAHwh9drzNm9fkq8c97P93A2Br32QqnlC9uArvxNtPYqYxqL5jvx6Dai 6jtvrHIZpc/nrz8H/T2/EHz5A9CQltyERf2Y0c1ozCyHwf71l6iEnehgdyTv604X KUHatYSXKoGiab4i9cJuOzVsyfsJPS+YNUApacysoE4njUeOxKVXS+8nyqMttA3h Mn4J8Ck9dWK1pSSdGzcVpIzaKgPHd9M= -----END CERTIFICATE-----Generated at Sun Apr 6 17:46:01 2025 by rpki-client