$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa File: 058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa (raw, json) Hash identifier: /JhEKXdWZWQxJIlOvjOuvGd3OVIvTnKirDo0QZBNgeQ= Subject key identifier: 42:F0:B2:3E:C6:2F:A7:E1:1B:BF:94:DB:2D:FC:4A:DD:A8:A9:57:D6 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491D717C8063D15417C27F2200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 396071 IP address blocks: 204.141.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7c:80:63:d1:54:17:c2:7f:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=d8274e46-ff0a-49d4-ab85-e1e612c7afdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c5:de:dd:73:c3:02:88:bb:96:d4:f9:b0:35: 24:8d:41:21:f1:7b:0a:0a:de:b9:5a:89:d7:e3:94: a8:97:c8:d4:c9:6f:ac:3d:cf:98:d2:b9:8b:b0:26: 2d:5b:4a:f6:65:4f:96:b6:51:85:ef:67:3b:7f:2b: fd:5b:a7:71:a0:01:19:e0:7e:22:42:c5:a3:e1:9e: eb:7c:4f:78:f5:8e:6b:8b:af:89:bb:1a:65:66:89: d6:51:e7:47:f3:02:2f:1d:5f:2b:13:5c:89:83:46: a9:a0:1e:39:a8:d4:50:13:58:ac:c6:ae:3e:58:2e: 02:9f:b2:4e:e8:5f:2d:c7:48:de:dd:ed:22:69:98: be:33:6c:2e:ab:95:ab:cb:6e:1f:20:40:be:74:16: 5d:58:e3:84:b6:26:01:b4:20:33:a3:16:e2:8e:a4: 6f:1c:76:d9:26:1f:22:d0:76:76:a0:67:c1:a6:3e: 16:d9:b9:69:4b:49:e4:bb:85:30:a7:24:95:c0:1d: 84:88:51:01:9f:61:5f:5f:bf:1b:00:04:d6:68:4d: e1:05:b1:e1:b2:c9:32:c7:d9:05:71:5a:90:56:ff: bf:a6:93:b3:d6:58:4e:79:50:17:fd:a1:d8:45:f3: 2c:80:2e:e8:87:19:ef:83:3d:f6:36:b0:eb:0c:31: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F0:B2:3E:C6:2F:A7:E1:1B:BF:94:DB:2D:FC:4A:DD:A8:A9:57:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/058ee240-3f5e-3cad-9e8d-83f47bcc997f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f2:35:a2:ed:3f:72:b2:63:25:2e:f6:7e:6e:4a:c1:65:e0: d7:07:1b:a8:eb:51:93:de:28:b2:02:56:fc:01:2c:28:46:43: 27:31:25:ae:7c:da:6d:a5:a4:6d:0d:12:00:9c:2e:6b:19:de: 60:0b:a0:05:97:a3:9a:b4:d0:14:2d:ae:6b:c9:f7:26:94:37: 50:66:85:ec:7b:de:de:c0:fc:66:41:ea:90:83:d6:08:31:9c: fd:c2:cb:1b:f5:e4:d6:d9:a6:2b:c6:31:2e:9d:2d:67:92:62: 41:e2:25:23:c1:d9:1f:02:01:aa:ab:b5:6d:1f:a7:fa:bf:56: 10:e4:b0:70:b4:a1:54:04:55:40:7f:a6:26:eb:65:eb:b1:f1: ec:ea:3a:d7:bd:9f:eb:14:dc:4c:92:16:b4:84:0d:92:56:ee: cc:55:0e:c8:36:55:3e:a8:a0:06:6d:58:90:d1:5c:48:aa:35: f0:f1:b5:bd:f2:29:44:46:57:23:5d:6e:74:d8:5c:3f:1d:00: 1c:c0:8b:d0:c8:28:6a:06:79:00:73:35:2a:c9:ca:0f:09:c4: 40:cd:8b:87:fd:e0:24:bb:ae:2d:3e:4e:0f:97:6e:46:1e:54: 40:c5:7d:cc:e1:87:22:dd:ec:6b:c2:15:bf:7e:73:89:89:c0: 1e:1a:f1:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXyAY9FUF8J/IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZDgyNzRlNDYtZmYwYS00OWQ0LWFiODUtZTFlNjEyYzdhZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMXe3XPDAoi7ltT5sDUkjUEh8XsKCt65WonX 45Sol8jUyW+sPc+Y0rmLsCYtW0r2ZU+WtlGF72c7fyv9W6dxoAEZ4H4iQsWj4Z7r fE949Y5ri6+JuxplZonWUedH8wIvHV8rE1yJg0apoB45qNRQE1isxq4+WC4Cn7JO 6F8tx0je3e0iaZi+M2wuq5Wry24fIEC+dBZdWOOEtiYBtCAzoxbijqRvHHbZJh8i 0HZ2oGfBpj4W2blpS0nku4UwpySVwB2EiFEBn2FfX78bAATWaE3hBbHhsskyx9kF cVqQVv+/ppOz1lhOeVAX/aHYRfMsgC7ohxnvgz32NrDrDDF9UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELwsj7GL6fhG7+U2y38St2oqVfWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDU4ZWUyNDAtM2Y1ZS0z Y2FkLTllOGQtODNmNDdiY2M5OTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzI3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALyNaLtP3KyYyUu9n5uSsFl4NcHG6jrUZPeKLICVvwBLChGQycxJa58 2m2lpG0NEgCcLmsZ3mALoAWXo5q00BQtrmvJ9yaUN1Bmhex73t7A/GZB6pCD1ggx nP3Cyxv15NbZpivGMS6dLWeSYkHiJSPB2R8CAaqrtW0fp/q/VhDksHC0oVQEVUB/ pibrZeux8ezqOte9n+sU3EySFrSEDZJW7sxVDsg2VT6ooAZtWJDRXEiqNfDxtb3y KURGVyNdbnTYXD8dABzAi9DIKGoGeQBzNSrJyg8JxEDNi4f94CS7ri0+Tg+XbkYe VEDFfczhhyLd7GvCFb9+c4mJwB4a8TA= -----END CERTIFICATE-----Generated at Fri Apr 4 17:13:44 2025 by rpki-client