$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa File: a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa (raw, json) Hash identifier: jxRr6/evtiMRg++K+mnFmI9Ehv/tm9sCQH5C60liykI= Subject key identifier: 12:AD:28:96:FF:09:87:36:8E:6F:15:FA:52:3E:E6:D5:FA:50:16:4E Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584937D93D85B96F91E9E05E6380 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa Signing time: Mon 17 Mar 2025 13:00:52 +0000 ROA not before: Mon 17 Mar 2025 13:00:52 +0000 ROA not after: Sun 15 Jun 2025 13:00:52 +0000 asID: 62651 IP address blocks: 173.245.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:37:d9:3d:85:b9:6f:91:e9:e0:5e:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 17 13:00:52 2025 GMT Not After : Jun 15 13:00:52 2025 GMT Subject: CN=d81dcf65-2ef0-4b55-b0b4-7bae5b8db996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:b7:05:9d:79:18:9c:73:f5:70:b2:d6:c8: 8e:d4:7f:8d:8e:53:b9:07:31:56:91:e0:8f:c6:2c: 36:2e:30:f0:b9:35:ce:a6:ab:f4:8c:d9:5c:43:a3: 3c:8b:29:ff:95:e9:11:d6:d9:7d:2f:72:e8:e3:69: 4e:0b:a8:18:6b:4a:d7:63:46:17:90:91:18:60:a4: 0f:38:34:4f:db:fe:53:82:eb:44:fe:5d:ff:6c:71: 0f:23:74:c9:ce:ce:02:03:71:69:ef:41:40:60:6a: 8f:d6:d2:e0:61:5a:35:43:9e:6c:9b:56:69:1d:6b: f9:83:f5:b7:3b:a2:32:fc:7e:65:6e:e1:e7:88:6c: d2:6b:36:56:92:69:30:aa:72:c4:88:e9:d2:ff:35: 2c:b8:ce:55:85:40:b1:ff:61:c1:90:46:4c:2e:85: c4:32:e9:5c:b4:e4:5e:e2:a5:a6:94:7b:c2:a1:c5: cf:d1:f3:e6:ae:10:1f:ac:97:d1:8d:db:c5:16:32: b9:f2:33:6c:4b:57:19:ab:48:05:50:31:6a:99:fc: fe:e5:a6:3c:00:b7:3e:47:3f:5e:30:a1:b5:15:65: 8c:b0:26:87:c4:ff:a3:7a:1a:26:1a:29:77:af:0e: 95:fc:52:a9:57:82:19:42:f3:5b:0f:fa:28:99:b2: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AD:28:96:FF:09:87:36:8E:6F:15:FA:52:3E:E6:D5:FA:50:16:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/a337bf32-0dd5-399a-b30c-b86cbdc818d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:56:e2:f3:90:4f:26:53:4f:43:e8:30:8d:e4:4e:3f:de:72: 48:35:62:87:99:e9:48:e5:7c:40:1a:9e:fb:ae:55:d7:df:f9: 7f:da:b0:74:b6:b8:2b:b0:fa:a4:a8:16:f0:98:69:3f:70:81: 92:9b:28:2b:da:c4:b2:73:60:ec:5d:30:07:5b:60:6b:ed:ae: a8:e7:50:e3:3a:5b:18:26:b4:cc:10:0d:c8:0b:a4:01:b7:20: 46:7a:58:80:12:d2:b0:ee:e9:83:d5:76:94:4e:ae:09:74:a5: a3:2f:ca:ca:e6:b6:92:2e:66:9c:a8:09:94:21:92:e3:76:d9: 6f:9a:ce:9d:a9:06:3d:3c:3e:16:14:c4:95:6a:6a:f9:4a:ae: 91:e1:3d:ab:4d:75:80:c4:0b:07:e7:86:4f:ee:5a:e8:3d:fa: 8d:17:92:20:d3:45:47:3d:08:d2:1d:bb:c7:8b:d1:a3:ed:0b: 79:69:ef:df:d9:c5:b8:10:59:5d:82:fa:05:5d:94:cf:8f:34: 98:07:ba:8c:12:52:66:50:63:34:b7:0e:60:7c:5a:38:1a:eb: f8:98:b2:b4:42:f4:4d:3d:16:34:05:31:2c:a4:d4:25:da:4a: fe:dd:9e:d4:1e:e4:dd:01:64:74:49:37:54:48:97:db:91:68: 79:49:b8:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32T2FuW+R6eBeY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDgxZGNmNjUtMmVmMC00YjU1LWIwYjQtN2JhZTViOGRiOTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1re3BZ15GJxz9XCy1siO1H+NjlO5BzFWkeCP xiw2LjDwuTXOpqv0jNlcQ6M8iyn/lekR1tl9L3Lo42lOC6gYa0rXY0YXkJEYYKQP ODRP2/5TgutE/l3/bHEPI3TJzs4CA3Fp70FAYGqP1tLgYVo1Q55sm1ZpHWv5g/W3 O6Iy/H5lbuHniGzSazZWkmkwqnLEiOnS/zUsuM5VhUCx/2HBkEZMLoXEMulctORe 4qWmlHvCocXP0fPmrhAfrJfRjdvFFjK58jNsS1cZq0gFUDFqmfz+5aY8ALc+Rz9e MKG1FWWMsCaHxP+jehomGil3rw6V/FKpV4IZQvNbD/oombJO+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKtKJb/CYc2jm8V+lI+5tX6UBZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvYTMzN2JmMzItMGRkNS0z OTlhLWIzMGMtYjg2Y2JkYzgxOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhW4vOQTyZTT0PoMI3kTj/eckg1YoeZ6UjlfEAanvuuVdff+X/asHS2 uCuw+qSoFvCYaT9wgZKbKCvaxLJzYOxdMAdbYGvtrqjnUOM6WxgmtMwQDcgLpAG3 IEZ6WIAS0rDu6YPVdpROrgl0paMvysrmtpIuZpyoCZQhkuN22W+azp2pBj08PhYU xJVqavlKrpHhPatNdYDECwfnhk/uWug9+o0XkiDTRUc9CNIdu8eL0aPtC3lp79/Z xbgQWV2C+gVdlM+PNJgHuowSUmZQYzS3DmB8Wjga6/iYsrRC9E09FjQFMSyk1CXa Sv7dntQe5N0BZHRJN1RIl9uRaHlJuDk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:22 2025 by rpki-client