$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa File: 20065a80-fc1c-313d-bc55-ba7100fda1b9.roa (raw, json) Hash identifier: cpN5GzVQ07xXUZkX4GBv6x2D2qJrLsvBHYvlwbbDZPI= Subject key identifier: 15:2D:BC:04:72:0C:02:21:C3:D5:22:1C:52:74:3A:D2:59:B6:93:14 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285848E16BD7A8F081AA7AAF703670 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 4005 IP address blocks: 204.59.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d7:a8:f0:81:aa:7a:af:70:36:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=8b5448fb-775f-4f0a-a9ce-ec97275aa106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:91:89:cc:14:c9:bc:c7:c3:e5:d7:6d:e9:a4: 98:78:fd:e2:98:28:28:32:f0:67:b2:17:58:96:50: 15:5a:38:cf:4d:25:8b:e0:3b:15:7e:c7:1d:00:17: c8:35:57:a5:b5:23:74:3d:be:c2:0b:d3:da:92:3e: b8:21:51:bf:49:3d:84:a1:4e:31:64:62:34:a8:a1: cd:e7:cd:7d:6a:71:5c:57:c7:fb:c9:14:fc:5a:d2: bd:0a:59:5b:2e:ac:14:da:65:b5:be:1f:56:6b:a6: 42:d0:e4:7d:b6:aa:05:20:58:26:f8:3d:2b:08:f7: be:82:e1:91:d2:3c:86:37:f4:2d:1b:4b:c4:29:48: 74:83:29:2a:42:e4:53:83:62:4e:ee:88:25:18:e3: 25:97:54:57:fc:1c:67:a0:d5:1c:63:df:92:1f:ed: 63:34:8b:b8:c5:79:c5:f0:2f:1b:18:8c:2e:ba:2f: e5:8f:57:e7:5f:0e:6e:83:4e:a7:fd:1f:00:5e:35: 6b:d7:d8:30:3e:58:0c:bc:ea:5f:74:18:f5:2a:f8: 0d:5c:64:0d:9c:1c:d9:74:73:7a:23:db:6f:d6:35: ed:44:a5:e8:36:9d:7f:0d:11:26:c5:f4:d8:0b:4a: bf:61:4c:93:ca:cd:47:18:66:58:0a:73:c3:a1:d7: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2D:BC:04:72:0C:02:21:C3:D5:22:1C:52:74:3A:D2:59:B6:93:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/20065a80-fc1c-313d-bc55-ba7100fda1b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 204.59.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:92:18:9d:b1:20:2e:d8:ec:1a:ac:32:58:1d:b4:f9:c0:43: 8f:6b:60:61:be:e0:e4:5f:5e:ba:40:84:27:4a:62:d4:14:76: bb:2e:e7:e5:53:3d:ae:68:94:93:c5:ae:84:45:3a:40:e8:18: 9c:bc:ce:ca:c4:3b:ce:8b:c4:2a:d1:d9:15:f7:68:1d:67:94: 07:07:bf:b1:77:38:26:68:8a:0d:9e:03:ed:d3:7e:82:d2:41: e1:b9:05:e0:7e:9e:f7:af:fa:47:35:0d:65:64:cc:27:07:d3: b5:d0:d0:66:6a:0d:9b:5d:26:9e:6a:4d:e9:fb:a9:05:ef:16: 96:df:09:dd:cf:7d:b5:11:e1:24:4e:c1:6b:68:8f:7b:8d:e1: 9d:81:88:a4:b6:03:6a:77:dc:8b:c7:44:57:37:e9:3a:0d:cf: e7:80:6e:76:21:91:a5:3d:b2:12:fc:fe:3d:4a:5e:4f:f5:eb: 5d:19:b9:44:34:19:25:2f:65:e1:3d:fc:f9:1f:64:a0:1f:c1: ef:59:f1:1d:fe:7d:41:73:b9:be:98:31:6b:97:6c:06:ce:a3: 1e:69:d4:45:a0:47:c0:11:cd:08:ae:83:13:9e:cc:9b:93:96: 02:f6:3c:e5:1d:00:cf:bf:1d:0c:3f:f1:c4:00:a6:ff:23:d1: 3c:65:99:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9eo8IGqeq9wNnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk OGI1NDQ4ZmItNzc1Zi00ZjBhLWE5Y2UtZWM5NzI3NWFhMTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJGJzBTJvMfD5ddt6aSYeP3imCgoMvBnshdY llAVWjjPTSWL4DsVfscdABfINVeltSN0Pb7CC9Pakj64IVG/ST2EoU4xZGI0qKHN 5819anFcV8f7yRT8WtK9CllbLqwU2mW1vh9Wa6ZC0OR9tqoFIFgm+D0rCPe+guGR 0jyGN/QtG0vEKUh0gykqQuRTg2JO7oglGOMll1RX/BxnoNUcY9+SH+1jNIu4xXnF 8C8bGIwuui/lj1fnXw5ug06n/R8AXjVr19gwPlgMvOpfdBj1KvgNXGQNnBzZdHN6 I9tv1jXtRKXoNp1/DREmxfTYC0q/YUyTys1HGGZYCnPDoddaUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUtvARyDAIhw9UiHFJ0OtJZtpMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMjAwNjVhODAtZmMxYy0z MTNkLWJjNTUtYmE3MTAwZmRhMWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN6SGJ2xIC7Y7BqsMlgdtPnAQ49rYGG+4ORfXrpAhCdKYtQUdrsu5+VT Pa5olJPFroRFOkDoGJy8zsrEO86LxCrR2RX3aB1nlAcHv7F3OCZoig2eA+3TfoLS QeG5BeB+nvev+kc1DWVkzCcH07XQ0GZqDZtdJp5qTen7qQXvFpbfCd3PfbUR4SRO wWtoj3uN4Z2BiKS2A2p33IvHRFc36ToNz+eAbnYhkaU9shL8/j1KXk/1610ZuUQ0 GSUvZeE9/PkfZKAfwe9Z8R3+fUFzub6YMWuXbAbOox5p1EWgR8ARzQiugxOezJuT lgL2POUdAM+/HQw/8cQApv8j0TxlmW4= -----END CERTIFICATE-----Generated at Sat Apr 12 16:22:17 2025 by rpki-client