$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa File: da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa (raw, json) Hash identifier: ol0WdQ54Ewm5Zf2x3dyulvQDqZ50e1+T8Ri7qSzGrO4= Subject key identifier: 8F:26:F1:10:AB:81:20:30:E5:EE:EE:46:39:4A:08:BD:E0:4D:CD:A1 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858491941884BCB7575BC2D25F840 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 397601 IP address blocks: 204.2.56.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:88:4b:cb:75:75:bc:2d:25:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=3f24af28-0133-4f3d-a039-0c07eb3e99ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:97:d5:83:f3:d1:61:30:4e:de:65:e0:d9:20: a4:fa:98:9b:79:93:47:70:10:1c:7a:47:b9:8b:7f: 45:bb:94:49:19:fb:01:10:0d:35:7f:a2:be:12:6c: 6d:78:1f:0c:e7:a1:e4:61:2d:c9:6c:97:b5:73:17: e4:a7:81:4c:de:32:a5:fd:07:c2:55:12:76:d3:29: aa:6f:5a:2d:d3:54:06:49:d4:f8:a0:2b:72:a3:c3: 21:5d:60:84:c5:94:71:06:d7:74:2f:8d:bc:d1:03: 52:ba:7d:c9:58:fa:1f:30:0a:56:7b:60:fd:e5:a2: 40:b4:42:99:18:05:3b:7c:e2:c5:1e:86:63:05:b4: 92:46:34:07:d4:d1:6b:75:f9:77:0e:be:4d:61:b1: e6:d9:22:b0:4d:97:87:56:56:73:b6:bf:21:a8:8c: 9f:ad:81:c1:77:a7:8e:a3:f3:71:a5:59:f6:82:bc: b2:af:9d:0c:50:33:5f:89:a2:33:f1:15:ac:50:fb: c6:e3:94:82:d0:76:e8:85:cd:40:34:d8:d8:29:03: 8f:7c:1c:b1:ac:27:5c:55:69:eb:87:a9:82:cf:bd: 12:fa:a0:39:7d:16:ce:bf:5c:50:36:e7:e0:c7:8a: cc:cd:d8:8a:3b:d0:19:84:c3:3b:12:4e:ab:d0:0b: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:26:F1:10:AB:81:20:30:E5:EE:EE:46:39:4A:08:BD:E0:4D:CD:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da1cc5f4-0a9d-3e07-9443-8532ccfa6403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.56.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6d:49:13:bf:34:f1:44:05:3e:9d:bc:83:56:39:63:5f:02: e0:e7:c9:41:02:e3:09:72:9a:b7:89:df:62:0c:d2:95:32:e6: 64:ae:92:f6:5c:93:06:2b:58:9c:7d:ac:1e:d9:de:43:5c:27: da:25:99:58:a7:52:bc:1e:32:51:2e:c2:b1:ef:0c:1c:af:0a: 17:72:d3:71:a9:29:59:72:a2:c8:cd:43:63:bb:0c:8f:1d:d2: 3d:d7:78:25:ef:4e:39:55:e5:16:70:fb:70:9e:48:e1:be:2a: 8a:75:99:9c:4a:11:c0:5f:18:e5:ac:60:b4:07:c3:57:f4:22: c4:45:11:8b:33:0b:34:cd:72:d6:bc:95:8e:1f:4e:a2:c0:3d: b3:bb:67:89:85:b1:f6:99:e5:be:05:30:ad:00:a3:19:44:06: fd:1d:5a:c6:fc:c8:c5:7d:30:1b:3c:b7:77:20:6f:97:bf:a2: 6f:b7:aa:7b:a3:94:9d:70:7e:e8:96:64:e0:a9:0e:53:33:8f: 31:67:57:4f:44:dc:b3:a3:6e:87:94:77:f6:5e:fb:9c:af:59: fc:71:ec:c5:93:77:60:c3:a9:6d:d4:d6:36:45:77:4b:b1:ba: 09:f8:cb:02:40:6e:70:37:e8:af:c8:08:dc:29:bb:e0:f1:6d: e1:71:d1:61 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEkZQYhLy3V1vC0l+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk M2YyNGFmMjgtMDEzMy00ZjNkLWEwMzktMGMwN2ViM2U5OWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZfVg/PRYTBO3mXg2SCk+pibeZNHcBAceke5 i39Fu5RJGfsBEA01f6K+EmxteB8M56HkYS3JbJe1cxfkp4FM3jKl/QfCVRJ20ymq b1ot01QGSdT4oCtyo8MhXWCExZRxBtd0L4280QNSun3JWPofMApWe2D95aJAtEKZ GAU7fOLFHoZjBbSSRjQH1NFrdfl3Dr5NYbHm2SKwTZeHVlZztr8hqIyfrYHBd6eO o/NxpVn2gryyr50MUDNfiaIz8RWsUPvG45SC0Hbohc1ANNjYKQOPfByxrCdcVWnr h6mCz70S+qA5fRbOv1xQNufgx4rMzdiKO9AZhMM7Ek6r0AvwTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI8m8RCrgSAw5e7uRjlKCL3gTc2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGExY2M1ZjQtMGE5ZC0z ZTA3LTk0NDMtODUzMmNjZmE2NDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAI4gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwbUkTvzTxRAU+nbyDVjljXwLg58lBAuMJcpq3id9iDNKVMuZkrpL2 XJMGK1icfawe2d5DXCfaJZlYp1K8HjJRLsKx7wwcrwoXctNxqSlZcqLIzUNjuwyP HdI913gl7045VeUWcPtwnkjhviqKdZmcShHAXxjlrGC0B8NX9CLERRGLMws0zXLW vJWOH06iwD2zu2eJhbH2meW+BTCtAKMZRAb9HVrG/MjFfTAbPLd3IG+Xv6Jvt6p7 o5SdcH7olmTgqQ5TM48xZ1dPRNyzo26HlHf2Xvucr1n8cezFk3dgw6lt1NY2RXdL sboJ+MsCQG5wN+ivyAjcKbvg8W3hcdFh -----END CERTIFICATE-----Generated at Fri Apr 4 17:31:38 2025 by rpki-client