$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/33744961-27f1-3851-aafe-a8623868a2b2.roa File: 33744961-27f1-3851-aafe-a8623868a2b2.roa (raw, json) Hash identifier: UADaUHwj7b7JmLIQVpLFcqJ1IeY2Z6gTJUEVs/kbqVM= Subject key identifier: 39:48:D3:6B:D7:73:1F:6A:35:2B:A4:3A:7C:8B:CF:A7:CC:27:77:C1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491D718737F5BA67F813157300 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/33744961-27f1-3851-aafe-a8623868a2b2.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 32787 IP address blocks: 204.141.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:87:37:f5:ba:67:f8:13:15:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=6eac48a2-bc99-4e5f-a151-a744601632d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:29:c6:87:85:9b:fa:d2:2c:0c:32:cd:5c: cb:8f:df:cf:8a:70:45:e1:d0:1c:da:3f:57:b4:e6: 69:4e:74:5c:7c:31:ba:c6:58:a5:e0:b5:d7:9d:f2: 6b:9e:83:0e:e9:b0:bf:27:3a:d3:16:38:89:b9:b8: 46:9d:39:a0:c7:c9:fd:24:f5:4a:89:c4:76:56:58: a9:aa:80:ed:5a:03:ff:37:58:31:8f:be:a5:63:6e: 03:be:6e:85:bf:47:4c:a0:8d:1e:fc:b4:47:0f:4b: bb:cb:33:40:ec:50:bd:37:8d:c5:8b:6e:78:d8:0a: a0:e3:96:d4:af:1e:4f:f6:53:d9:76:81:c9:f4:f9: c9:a8:73:9c:d7:42:c7:45:43:43:c4:fd:54:1a:d2: 8c:17:13:ac:39:3b:8e:05:a1:fd:4d:41:73:ef:fa: 3e:59:f2:1e:01:a9:83:92:80:d3:dd:67:4d:ea:d1: 99:7b:96:f4:48:6a:a6:d7:da:89:20:70:ae:0d:b8: 0e:dd:45:9a:91:7d:98:46:ec:a6:79:f3:51:22:45: 60:d8:bb:a2:7d:5d:84:91:4d:d8:21:cb:65:52:49: 16:9f:2b:e9:40:15:81:ac:d0:52:64:22:43:10:85: 7d:d2:ed:f7:cb:c8:fe:5c:0c:aa:de:62:53:c8:00: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:48:D3:6B:D7:73:1F:6A:35:2B:A4:3A:7C:8B:CF:A7:CC:27:77:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/33744961-27f1-3851-aafe-a8623868a2b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:02:42:81:87:5a:59:06:65:28:16:4d:8b:ce:9a:f8:20:58: 78:a6:c5:44:10:bc:3f:4f:17:28:eb:05:95:bd:7b:8a:fb:18: 68:02:da:72:62:1b:3d:ca:f4:e5:3f:fb:e0:6c:3c:a0:ad:62: cb:00:b0:a2:b9:84:b2:18:85:44:12:c4:7c:96:0f:50:21:10: 52:5a:8c:98:40:72:18:35:bf:8a:fb:59:ad:1a:ff:ac:a0:ae: 90:e9:bb:f1:cf:cd:00:82:9f:f9:cf:f1:41:3f:a2:eb:61:2f: 9b:23:bf:74:90:12:55:dc:46:82:92:bb:2b:6f:07:7a:75:fb: 38:c7:0f:c3:99:c1:b4:d5:4e:37:ec:27:76:bd:bf:43:52:c8: 3a:b8:2d:9b:4f:df:16:81:00:f5:66:2a:58:2c:84:2d:4d:23: 44:2e:62:32:24:34:7a:67:a6:7b:19:54:ca:6e:7c:a8:0a:ff: 5e:e8:bc:84:60:2f:55:5f:9e:c6:23:dd:45:97:f7:93:2d:bd: f3:78:c9:b6:b5:d2:de:fc:3a:77:2a:71:b0:3c:0a:3f:b9:2a: 1e:29:e6:87:28:70:4e:ee:09:e8:54:f1:3d:4a:6b:17:cd:bb: 76:4f:96:0a:06:79:5f:c0:88:c5:98:36:3d:23:27:bf:e2:b5: 66:8f:8a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYc39bpn+BMVcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NmVhYzQ4YTItYmM5OS00ZTVmLWExNTEtYTc0NDYwMTYzMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0popxoeFm/rSLAwyzVzLj9/PinBF4dAc2j9X tOZpTnRcfDG6xlil4LXXnfJrnoMO6bC/JzrTFjiJubhGnTmgx8n9JPVKicR2Vlip qoDtWgP/N1gxj76lY24Dvm6Fv0dMoI0e/LRHD0u7yzNA7FC9N43Fi2542Aqg45bU rx5P9lPZdoHJ9PnJqHOc10LHRUNDxP1UGtKMFxOsOTuOBaH9TUFz7/o+WfIeAamD koDT3WdN6tGZe5b0SGqm19qJIHCuDbgO3UWakX2YRuymefNRIkVg2LuifV2EkU3Y IctlUkkWnyvpQBWBrNBSZCJDEIV90u33y8j+XAyq3mJTyADziQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlI02vXcx9qNSukOnyLz6fMJ3fBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzM3NDQ5NjEtMjdmMS0z ODUxLWFhZmUtYTg2MjM4NjhhMmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzI2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsCQoGHWlkGZSgWTYvOmvggWHimxUQQvD9PFyjrBZW9e4r7GGgC2nJi Gz3K9OU/++BsPKCtYssAsKK5hLIYhUQSxHyWD1AhEFJajJhAchg1v4r7Wa0a/6yg rpDpu/HPzQCCn/nP8UE/outhL5sjv3SQElXcRoKSuytvB3p1+zjHD8OZwbTVTjfs J3a9v0NSyDq4LZtP3xaBAPVmKlgshC1NI0QuYjIkNHpnpnsZVMpufKgK/17ovIRg L1VfnsYj3UWX95MtvfN4yba10t78OncqcbA8Cj+5Kh4p5ococE7uCehU8T1KaxfN u3ZPlgoGeV/AiMWYNj0jJ7/itWaPivE= -----END CERTIFICATE-----Generated at Fri Apr 4 17:35:22 2025 by rpki-client