$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa File: 7cca8c9b-95b3-3789-93a9-141f27073aeb.roa (raw, json) Hash identifier: QWtMFJMwo11ILo1O67zCy3Zh4lkzGICew+/HsgCY+P0= Subject key identifier: 84:33:2B:47:C3:8E:20:29:35:D9:99:42:14:5A:5D:44:CB:73:37:C2 Certificate issuer: /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d Certificate serial: 010D0C9F432858494CC93F995008F794DA7BBD50 Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 204.8.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3f:99:50:08:f7:94:da:7b:bd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=06fd871f-cede-4f59-a12f-38a6a377f20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f3:aa:3f:e0:89:9c:a1:76:00:b7:2f:33:6e: 9b:59:2d:54:f8:a9:cf:51:7a:d3:b4:21:ab:09:f2: ad:4d:61:85:a6:38:e7:ee:d5:40:4b:0c:d9:18:56: e0:0d:12:0d:99:60:25:ce:38:52:80:da:e7:63:4f: 28:4f:78:c3:fa:98:23:ee:16:0f:3d:fe:1c:47:d8: 4b:e2:3e:ef:d4:a4:3e:93:f6:20:47:e0:24:4c:49: cf:51:f9:0d:01:be:4f:a6:dc:4a:f1:49:1c:65:db: 7e:6c:90:ba:04:57:86:07:60:99:36:8a:14:74:fa: e7:26:12:34:d1:90:d7:28:52:14:09:22:07:92:2c: d5:d6:eb:28:e0:56:07:2d:fe:40:73:ff:14:13:3e: 0c:ac:b5:44:19:99:ce:5c:5e:69:7b:d1:ea:fc:2f: e2:ce:f4:fa:ab:83:11:4d:c6:ff:0c:04:2b:b7:eb: 2a:77:c0:5a:43:70:fb:dd:bb:51:71:cd:cb:0e:a9: d1:f5:2b:e8:45:66:d9:41:4d:7e:43:d5:e0:b9:d4: ab:84:38:33:9d:a9:b3:32:ba:47:18:74:6b:d2:5c: e8:04:50:62:5a:ea:06:33:97:be:b6:ad:36:13:66: 4c:01:77:59:69:2e:b2:2f:af:1c:3b:b3:15:f7:50: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:33:2B:47:C3:8E:20:29:35:D9:99:42:14:5A:5D:44:CB:73:37:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/7cca8c9b-95b3-3789-93a9-141f27073aeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl X509v3 Authority Key Identifier: keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer sbgp-ipAddrBlock: critical IPv4: 204.8.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:7a:21:2a:4a:ee:b5:f3:a5:5e:1e:01:5f:2c:75:30:83:34: 41:0a:f7:cb:6c:fe:21:47:f0:eb:3a:59:25:b0:c0:32:f1:3f: 85:3b:19:dc:9b:e4:59:1f:d9:9c:74:b7:07:13:fe:06:8e:33: ad:ac:5f:10:47:65:70:10:89:24:81:5e:9e:63:86:50:93:03: 0a:08:de:fe:ef:dc:13:4c:33:07:e6:b0:38:6c:07:74:1d:08: 38:59:fd:55:4b:51:6b:20:00:70:81:68:ed:af:f9:f0:10:e3: 4d:0c:8c:cb:a2:95:29:b5:35:67:e3:bf:64:86:f7:be:d3:6d: f2:98:c5:a5:d8:b3:d5:a0:01:cd:2c:2e:dd:d5:d2:19:a0:f7: d2:7b:00:08:25:71:39:e7:d2:2a:fe:96:f5:de:14:3c:a5:9e: fd:85:03:49:51:a3:9e:b2:c5:4e:08:a2:00:cd:65:ae:53:fb: 70:b6:f5:a7:61:1e:fd:e8:b6:23:ac:1d:52:5b:48:fb:2a:1e: 0f:fb:30:9c:e9:e9:ec:24:13:c4:2a:db:ec:34:9c:70:d6:5b: 9f:4d:35:a8:5b:78:1b:aa:09:b1:0c:63:f6:d8:ca:78:ce:e6: 42:91:37:d5:af:a2:ff:81:d2:96:84:ee:f2:9d:8d:27:d7:83: bf:d6:18:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT+ZUAj3lNp7vVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMzliMmEtY2RlZi00NDQ1LWFjZTgtYmIzOWQ0M2Nk YTVkMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk MDZmZDg3MWYtY2VkZS00ZjU5LWExMmYtMzhhNmEzNzdmMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPOqP+CJnKF2ALcvM26bWS1U+KnPUXrTtCGr CfKtTWGFpjjn7tVASwzZGFbgDRINmWAlzjhSgNrnY08oT3jD+pgj7hYPPf4cR9hL 4j7v1KQ+k/YgR+AkTEnPUfkNAb5PptxK8UkcZdt+bJC6BFeGB2CZNooUdPrnJhI0 0ZDXKFIUCSIHkizV1uso4FYHLf5Ac/8UEz4MrLVEGZnOXF5pe9Hq/C/izvT6q4MR Tcb/DAQrt+sqd8BaQ3D73btRcc3LDqnR9SvoRWbZQU1+Q9XgudSrhDgznamzMrpH GHRr0lzoBFBiWuoGM5e+tq02E2ZMAXdZaS6yL68cO7MV91B4YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQzK0fDjiApNdmZQhRaXUTLczfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MGIz OWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5ZDQzY2RhNWQvN2NjYThjOWItOTViMy0z Nzg5LTkzYTktMTQxZjI3MDczYWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDBiMzliMmEtY2RlZi00NDQ1LWFj ZTgtYmIzOWQ0M2NkYTVkLzQwYjM5YjJhLWNkZWYtNDQ0NS1hY2U4LWJiMzlkNDNj ZGE1ZC5jcmwwHwYDVR0jBBgwFoAU2oJ1e2t4uHbXRsrYgXq/mgsWW2IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MGIzOWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5 ZDQzY2RhNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAitMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx6ISpK7rXzpV4eAV8sdTCDNEEK98ts/iFH8Os6WSWwwDLxP4U7Gdyb 5Fkf2Zx0twcT/gaOM62sXxBHZXAQiSSBXp5jhlCTAwoI3v7v3BNMMwfmsDhsB3Qd CDhZ/VVLUWsgAHCBaO2v+fAQ400MjMuilSm1NWfjv2SG977TbfKYxaXYs9WgAc0s Lt3V0hmg99J7AAglcTnn0ir+lvXeFDylnv2FA0lRo56yxU4IogDNZa5T+3C29adh Hv3otiOsHVJbSPsqHg/7MJzp6ewkE8Qq2+w0nHDWW59NNahbeBuqCbEMY/bYynjO 5kKRN9Wvov+B0paE7vKdjSfXg7/WGA4= -----END CERTIFICATE-----Generated at Fri Apr 4 23:44:16 2025 by rpki-client