$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa File: 21f399c4-9b55-39ef-bed5-884b07932f9f.roa (raw, json) Hash identifier: CN67d4H5GbB7dVrj599gBtuRXGrZ7UrWjl87JCEyoig= Subject key identifier: C6:4C:29:DE:6B:7D:F4:E5:F0:80:A2:C7:5D:18:B9:6C:A9:17:DD:E6 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F4328584949FE894A83D05A0163783600 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 26918 IP address blocks: 204.77.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:89:4a:83:d0:5a:01:63:78:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=39721614-de34-44f7-9623-f50eb5a06be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:b4:4a:de:e4:a6:5f:48:2a:2d:a1:ed:37: 35:96:76:f0:83:e4:9a:fb:99:7d:65:d6:60:13:8a: 1d:60:dd:30:1b:0f:c2:69:bc:25:3e:96:ac:8e:af: b1:eb:48:95:f8:39:04:b5:43:2a:12:6a:a4:57:a5: 0f:33:96:55:65:05:ff:49:9f:4f:7b:8e:84:1f:98: 3f:1e:16:f2:a8:d1:20:b6:c1:a6:aa:21:bf:61:90: 95:7c:7f:71:7b:e9:18:03:d5:e5:a9:e9:78:e3:2b: 78:ba:93:3a:f1:51:5a:3b:d6:4f:18:9e:94:ce:4e: 69:3a:13:1d:a9:7a:80:5e:c1:e5:05:1f:5e:3b:0b: 49:48:96:7b:85:3f:50:a6:3b:bf:ab:b2:ba:45:bd: b8:f2:58:cc:b8:97:f0:46:4f:f4:68:76:dd:1b:b8: 58:f7:e9:d2:b6:5d:17:00:eb:b6:87:95:41:69:5b: 89:f9:af:30:d7:80:39:f7:72:3f:08:c4:b2:cd:20: ac:24:c9:cc:24:a8:d8:3c:94:33:c6:c8:fd:0d:bd: 8f:1b:5e:8d:30:4d:cc:45:23:f8:9b:06:95:c4:64: 4c:61:2c:f2:7b:1c:5f:76:36:ad:05:1c:74:ed:ad: 7a:9f:5e:61:f8:06:13:9f:99:dd:bb:62:74:85:1b: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4C:29:DE:6B:7D:F4:E5:F0:80:A2:C7:5D:18:B9:6C:A9:17:DD:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:20:94:8a:f8:09:c8:5f:b5:d8:6b:05:76:d0:5d:07:af:5c: cc:31:26:68:f2:3d:8c:76:fa:ca:c0:2c:25:20:f9:65:bc:af: b5:12:7d:1f:1f:5c:56:df:4e:c6:7d:bf:dd:d2:92:8e:9f:ff: ce:a2:0b:69:5d:db:2d:d2:7f:09:cd:2d:06:59:a7:55:60:ed: 5e:9c:ca:5b:68:d6:66:a3:a1:8c:0d:87:55:95:11:1e:3e:d6: 59:43:8a:6e:48:ed:e4:28:b6:12:98:5b:ff:90:6d:81:a0:a6: 05:11:ef:a3:c9:9b:e4:9a:3a:63:1f:50:40:7b:79:41:93:c7: c5:d4:be:99:57:d3:97:a3:5c:ae:f3:31:0b:0b:94:60:83:16: 2b:1c:d3:79:c0:b1:6a:e2:bb:9b:e6:7a:6a:2f:63:d9:1e:13: 42:07:b2:0e:58:a6:20:bd:20:1d:f7:90:e7:c6:39:27:08:e6: 8c:c4:a3:4f:19:75:9b:17:77:1c:91:21:6f:96:de:a5:39:b8: b1:82:ca:29:bf:43:fd:05:a4:92:7b:ac:cd:c5:4f:12:4c:dd: b2:1f:92:ab:78:9d:a2:46:d4:79:ae:53:70:15:f0:1a:8c:2c: 0b:5e:30:07:d6:00:8a:91:35:e0:ab:24:55:50:a1:ae:e8:b2: 42:e9:de:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/olKg9BaAWN4NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk Mzk3MjE2MTQtZGUzNC00NGY3LTk2MjMtZjUwZWI1YTA2YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK+0St7kpl9IKi2h7Tc1lnbwg+Sa+5l9ZdZg E4odYN0wGw/CabwlPpasjq+x60iV+DkEtUMqEmqkV6UPM5ZVZQX/SZ9Pe46EH5g/ HhbyqNEgtsGmqiG/YZCVfH9xe+kYA9Xlqel44yt4upM68VFaO9ZPGJ6Uzk5pOhMd qXqAXsHlBR9eOwtJSJZ7hT9Qpju/q7K6Rb248ljMuJfwRk/0aHbdG7hY9+nStl0X AOu2h5VBaVuJ+a8w14A593I/CMSyzSCsJMnMJKjYPJQzxsj9Db2PG16NME3MRSP4 mwaVxGRMYSzyexxfdjatBRx07a16n15h+AYTn5ndu2J0hRvgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZMKd5rffTl8ICix10YuWypF93mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvMjFmMzk5YzQtOWI1NS0z OWVmLWJlZDUtODg0YjA3OTMyZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgglIr4CchftdhrBXbQXQevXMwxJmjyPYx2+srALCUg+WW8r7USfR8f XFbfTsZ9v93Sko6f/86iC2ld2y3SfwnNLQZZp1Vg7V6cylto1majoYwNh1WVER4+ 1llDim5I7eQothKYW/+QbYGgpgUR76PJm+SaOmMfUEB7eUGTx8XUvplX05ejXK7z MQsLlGCDFisc03nAsWriu5vmemovY9keE0IHsg5YpiC9IB33kOfGOScI5ozEo08Z dZsXdxyRIW+W3qU5uLGCyim/Q/0FpJJ7rM3FTxJM3bIfkqt4naJG1HmuU3AV8BqM LAteMAfWAIqRNeCrJFVQoa7oskLp3vo= -----END CERTIFICATE-----Generated at Sat Apr 5 12:37:14 2025 by rpki-client