$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa File: 9c3fab74-0b0d-31ce-9e60-48382ddab243.roa (raw, json) Hash identifier: Ef5/TqSYk8vUgOU1eInd+UkYHouLCDHpdwwKK1GWy5w= Subject key identifier: 75:AA:33:6E:85:C7:F0:E4:42:C5:19:9E:78:39:5F:8E:B7:7C:8C:EB Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F432858489E6B6A90E773F71F1B212380 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 26918 IP address blocks: 204.77.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:6a:90:e7:73:f7:1f:1b:21:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1e245184-8483-4664-b7f0-24c27ba7d5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:26:8a:69:cb:be:4f:e2:b2:84:0d:2b:e2:aa: 8c:70:72:01:60:10:26:8d:a3:59:04:0e:02:34:28: 73:7f:b5:7a:e6:72:c6:02:c2:ce:3b:6e:c8:32:20: 56:70:60:c0:88:fb:c7:31:6e:f0:32:02:c3:94:ea: 72:91:58:df:2c:55:2c:3f:f6:41:f2:78:4a:3e:71: 29:f7:bd:0d:54:47:e0:05:6f:bf:a9:74:9b:ae:16: 38:d1:a6:d8:7b:d9:b0:e3:07:43:db:5c:94:3b:a3: 79:63:3f:b8:5c:99:42:6d:17:4e:bf:8f:32:96:bf: dc:36:9d:aa:02:31:6d:47:db:4d:51:31:8c:28:81: 87:0b:f6:d5:2d:40:32:ba:72:74:29:e3:d5:6f:8d: 54:da:d4:e1:b4:72:a8:f7:17:f1:dc:d9:41:82:c5: ed:47:2c:eb:2d:de:08:b6:fe:89:27:10:1f:40:11: 89:00:cc:d6:43:a2:c6:d4:be:81:36:35:49:0a:03: 06:8f:08:60:41:c3:6d:54:bb:a4:47:b4:30:15:33: b6:50:d2:a0:ac:93:a2:80:7d:be:ff:4b:03:e6:83: 67:4f:49:7d:88:81:68:c6:38:0f:70:76:31:33:ae: 52:88:d4:3b:c4:70:25:ff:85:bf:7c:31:18:ba:9e: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AA:33:6E:85:C7:F0:E4:42:C5:19:9E:78:39:5F:8E:B7:7C:8C:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:df:7c:eb:9f:32:2f:d0:35:30:70:82:50:5e:7a:ca:ec:8c: 22:27:68:50:78:39:1b:00:2f:04:0f:59:88:fe:1f:33:7f:14: 1f:dc:13:17:b4:1a:2b:1b:18:2d:12:cf:fb:b1:af:c7:99:7c: 91:8b:9d:86:ab:5d:a0:ac:cf:5b:1d:b1:fc:1d:1a:e5:e3:c3: 0b:ee:f8:02:1c:fa:3e:42:ff:d1:6b:4f:4d:e2:ce:4d:60:18: 66:b0:25:17:0e:05:49:93:0f:58:54:c8:a2:f4:f7:60:92:af: ec:8e:1d:d5:e7:da:95:61:5b:44:8a:46:3c:45:f0:1e:f3:23: 47:d1:aa:59:e2:66:83:63:5b:b9:f1:32:03:bb:80:8b:5e:98: a2:6a:f9:f1:4f:3d:f1:ce:60:73:5e:8c:2b:ca:f1:3e:46:e3: 75:40:ea:56:fc:39:d5:4d:b3:0a:ca:8e:6f:6a:1a:3d:02:02: 51:d5:39:30:6e:b1:a4:4d:27:71:58:5e:46:bf:3f:af:41:c0: e5:0c:0a:e2:47:d8:0e:47:1a:b9:a3:65:20:f3:c4:38:2d:46: e7:5f:00:3d:56:ef:87:a3:2b:f1:68:11:0c:4f:26:9c:5e:b3: df:29:bf:03:70:f1:69:23:79:40:9c:01:02:0b:d2:3b:d0:09: 80:7a:f8:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiea2qQ53P3HxshI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MWUyNDUxODQtODQ4My00NjY0LWI3ZjAtMjRjMjdiYTdkNWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+iaKacu+T+KyhA0r4qqMcHIBYBAmjaNZBA4C NChzf7V65nLGAsLOO27IMiBWcGDAiPvHMW7wMgLDlOpykVjfLFUsP/ZB8nhKPnEp 970NVEfgBW+/qXSbrhY40abYe9mw4wdD21yUO6N5Yz+4XJlCbRdOv48ylr/cNp2q AjFtR9tNUTGMKIGHC/bVLUAyunJ0KePVb41U2tThtHKo9xfx3NlBgsXtRyzrLd4I tv6JJxAfQBGJAMzWQ6LG1L6BNjVJCgMGjwhgQcNtVLukR7QwFTO2UNKgrJOigH2+ /0sD5oNnT0l9iIFoxjgPcHYxM65SiNQ7xHAl/4W/fDEYup7+cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWqM26Fx/DkQsUZnng5X463fIzrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvOWMzZmFiNzQtMGIwZC0z MWNlLTllNjAtNDgzODJkZGFiMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvffOufMi/QNTBwglBeesrsjCInaFB4ORsALwQPWYj+HzN/FB/cExe0 GisbGC0Sz/uxr8eZfJGLnYarXaCsz1sdsfwdGuXjwwvu+AIc+j5C/9FrT03izk1g GGawJRcOBUmTD1hUyKL092CSr+yOHdXn2pVhW0SKRjxF8B7zI0fRqlniZoNjW7nx MgO7gItemKJq+fFPPfHOYHNejCvK8T5G43VA6lb8OdVNswrKjm9qGj0CAlHVOTBu saRNJ3FYXka/P69BwOUMCuJH2A5HGrmjZSDzxDgtRudfAD1W74ejK/FoEQxPJpxe s98pvwNw8WkjeUCcAQIL0jvQCYB6+CM= -----END CERTIFICATE-----Generated at Thu Apr 10 15:29:54 2025 by rpki-client