$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/1c213eca-2928-3702-abc1-b5482041c1b4.roa File: 1c213eca-2928-3702-abc1-b5482041c1b4.roa (raw, json) Hash identifier: iuHLg7LPs0dsmDEEd/W7XNZgv8Vpvi3+Jw5MUUJ5H8Y= Subject key identifier: 5D:49:0D:35:73:F0:E5:67:91:81:56:B0:B9:01:61:B2:B5:32:E1:55 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285848E16BE24D010E6B9943FFF720 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/1c213eca-2928-3702-abc1-b5482041c1b4.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 4005 IP address blocks: 204.59.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:e2:4d:01:0e:6b:99:43:ff:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=858dde95-f98a-40cb-ba8b-3ba87c07f0c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:39:21:8e:cb:20:2d:45:6d:7b:d5:6c:d0: e5:06:bd:54:4a:b2:23:e1:13:0e:a5:f9:90:c0:56: e1:7a:9a:08:7e:97:d2:a8:9d:d1:69:22:b5:81:d8: a7:7a:f2:37:3a:ce:58:28:e3:0e:74:24:25:b8:d4: f6:fd:5b:0c:a9:1d:a5:4d:b6:2c:3d:00:a8:15:03: 42:1c:8a:1c:2b:28:7e:49:0f:0b:65:a0:f1:53:1c: 21:41:00:4e:63:88:98:83:ae:51:07:4d:89:85:3e: 21:53:dd:cb:7d:ae:80:68:1a:2b:99:49:23:32:6f: ef:02:a4:33:1a:00:75:cf:7a:58:d4:03:96:16:fa: 0b:ec:53:83:ff:22:92:20:b6:eb:2e:3e:f5:0d:2d: a6:14:6b:5d:6f:25:6a:f3:49:89:ea:66:9d:0a:7d: 7d:46:f8:12:b4:4d:c3:ee:b2:a9:37:10:0b:45:93: 15:12:fa:4a:d5:83:95:05:9e:70:ba:57:c7:15:81: 96:99:14:a8:95:23:4d:62:30:cf:f3:9c:01:a6:dd: 4a:c0:5f:55:2b:3e:61:3b:1e:81:86:bf:43:c9:1b: 3c:3a:e2:3d:40:50:c4:0c:79:56:3f:08:b7:de:93: e0:a5:34:ab:04:f5:6d:cf:c3:f8:9a:15:11:9f:eb: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:49:0D:35:73:F0:E5:67:91:81:56:B0:B9:01:61:B2:B5:32:E1:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/1c213eca-2928-3702-abc1-b5482041c1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 204.59.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:a7:e2:ae:6e:aa:7b:76:5e:e1:c6:7a:4c:77:1f:f6:75:f4: 13:f2:06:70:14:90:aa:c1:a0:20:0a:1b:6d:d7:30:c8:a9:df: 66:a0:1c:a5:a0:c6:3b:67:38:86:b4:71:ad:a9:ef:2c:6d:e5: 9d:64:90:0f:c1:67:ac:5e:16:ca:83:87:7c:2f:7c:1b:4d:f3: 28:ac:25:e4:a4:ec:2d:2e:be:af:8e:0e:69:5d:66:da:c7:eb: 7e:3b:e1:ba:a1:af:8b:e3:f9:77:52:9d:45:2b:0a:87:78:bd: 76:63:86:9b:e3:cc:d9:12:4d:bb:3d:96:04:c3:66:3c:e7:17: 60:f7:88:cd:9c:ef:b6:30:2d:f4:ae:39:6d:55:7d:ef:2f:5d: 1a:2f:bc:4b:39:0d:20:5b:8b:98:c2:d8:2b:29:9c:9e:b7:04: a2:1c:b7:c3:81:b8:ea:30:c6:4b:9f:51:f1:19:d5:b8:86:64: c4:83:d9:8d:2a:ee:a2:ca:14:b7:a0:f2:77:a9:2e:bf:5a:87: e6:14:4b:d0:b2:b4:0d:6b:88:e1:4a:56:f5:33:fc:93:6d:4e: dd:cd:58:61:42:c6:a7:e5:b0:92:bb:18:cd:83:b1:02:e6:c9: c2:08:13:22:ec:01:9f:d8:c4:c8:13:b0:b3:98:ba:5d:a5:d2: 56:85:b8:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+JNAQ5rmUP/9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ODU4ZGRlOTUtZjk4YS00MGNiLWJhOGItM2JhODdjMDdmMGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLg5IY7LIC1FbXvVbNDlBr1USrIj4RMOpfmQ wFbhepoIfpfSqJ3RaSK1gdinevI3Os5YKOMOdCQluNT2/VsMqR2lTbYsPQCoFQNC HIocKyh+SQ8LZaDxUxwhQQBOY4iYg65RB02JhT4hU93Lfa6AaBormUkjMm/vAqQz GgB1z3pY1AOWFvoL7FOD/yKSILbrLj71DS2mFGtdbyVq80mJ6madCn19RvgStE3D 7rKpNxALRZMVEvpK1YOVBZ5wulfHFYGWmRSolSNNYjDP85wBpt1KwF9VKz5hOx6B hr9DyRs8OuI9QFDEDHlWPwi33pPgpTSrBPVtz8P4mhURn+tuMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1JDTVz8OVnkYFWsLkBYbK1MuFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMWMyMTNlY2EtMjkyOC0z NzAyLWFiYzEtYjU0ODIwNDFjMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALun4q5uqnt2XuHGekx3H/Z19BPyBnAUkKrBoCAKG23XMMip32agHKWg xjtnOIa0ca2p7yxt5Z1kkA/BZ6xeFsqDh3wvfBtN8yisJeSk7C0uvq+ODmldZtrH 63474bqhr4vj+XdSnUUrCod4vXZjhpvjzNkSTbs9lgTDZjznF2D3iM2c77YwLfSu OW1Vfe8vXRovvEs5DSBbi5jC2CspnJ63BKIct8OBuOowxkufUfEZ1biGZMSD2Y0q 7qLKFLeg8nepLr9ah+YUS9CytA1riOFKVvUz/JNtTt3NWGFCxqflsJK7GM2DsQLm ycIIEyLsAZ/YxMgTsLOYul2l0laFuA0= -----END CERTIFICATE-----Generated at Sat Apr 12 16:31:36 2025 by rpki-client