$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa File: 4420984a-f7eb-38c1-89b7-981cd4631dc3.roa (raw, json) Hash identifier: gkiUWNx1AcElRELQ8hsCe6kkq0ODqtbEwtZxExPvH3s= Subject key identifier: 58:65:CA:0B:E1:13:E5:F9:43:C2:42:2A:4B:02:5F:A7:50:94:F2:54 Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Certificate serial: 010D0C9F4328584919418F07275D90B0649C6600 Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 22135 IP address blocks: 173.242.10.0/24 maxlen: 24 173.242.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:8f:07:27:5d:90:b0:64:9c:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=3797ef88-ebdb-4a1b-859c-419907012402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6f:ee:e1:b3:ad:76:a6:aa:76:d6:b9:d9:1d: aa:46:13:8f:b4:bc:da:67:b7:0c:6b:77:bf:d4:e8: 6b:4b:3c:0f:11:3a:dd:3d:a8:63:72:ec:eb:0d:4e: 41:c0:48:0d:dd:cc:f7:c8:40:d5:b2:7e:8b:83:e0: 80:85:02:1a:68:de:0d:1c:20:e2:5d:9a:7d:68:a1: a4:66:ba:27:97:1a:0f:a4:b2:88:92:52:61:97:e8: 2c:40:16:eb:0d:2a:9a:b3:7b:db:87:0d:73:1f:37: d1:3e:5d:03:6d:2c:15:79:08:e6:cd:18:48:b9:74: 72:11:ad:6a:51:62:08:7d:57:95:d2:9b:28:f3:b0: 15:4a:04:b6:76:7e:08:ff:94:cd:8b:37:a4:4f:0f: 9f:26:b4:dc:02:9b:1a:b9:2e:94:8a:af:07:3e:65: b6:dc:63:b3:b5:d8:b1:cd:ec:af:d5:e3:64:8c:0e: 50:0b:2f:89:9e:5f:ef:18:61:b0:8e:02:0d:f8:6c: 8f:a2:af:4c:37:30:a5:66:4c:50:54:5e:e1:77:f8: 77:e0:46:b2:1d:a4:31:ae:ff:66:2c:be:a9:34:d8: ce:fb:df:71:44:54:56:86:49:26:27:3f:20:09:f9: b2:08:b0:eb:12:e3:1c:48:cf:be:c6:d5:69:ba:88: 39:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:65:CA:0B:E1:13:E5:F9:43:C2:42:2A:4B:02:5F:A7:50:94:F2:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl X509v3 Authority Key Identifier: keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer sbgp-ipAddrBlock: critical IPv4: 173.242.10.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:95:2d:1c:2a:64:82:5a:39:79:38:76:f3:b0:6f:6a:24:03: 72:59:af:2d:a1:cf:74:92:4e:79:a8:97:a4:8d:2a:63:8a:0c: 4d:e0:db:9d:93:51:dc:81:a1:9f:9a:32:f1:2b:8d:f0:fe:2c: 7a:6f:28:50:b1:c5:a1:0e:53:56:62:3a:66:2f:9c:14:14:f2: c1:0b:26:86:a9:02:30:aa:71:fb:78:29:54:27:7a:44:bb:fd: 82:d9:bd:57:f9:1f:b3:4d:34:d3:73:b3:01:13:e6:d7:fa:e1: 6f:92:44:cf:fe:e9:c9:81:43:6e:83:24:c4:9f:67:25:27:55: 8f:61:cf:4e:29:d3:3c:d3:85:ed:95:57:3c:4b:af:fe:ec:eb: 97:b1:16:cc:07:2a:c8:67:e1:85:9b:1d:c7:c9:f0:ad:c8:0a: 3c:34:5b:e7:8e:b6:6c:3d:60:bb:4c:fb:0e:a4:63:07:24:7d: a8:50:58:3d:8a:82:a6:d1:8d:bb:89:54:4e:ba:b6:c2:29:33: 65:e4:18:59:22:63:95:3c:ea:39:fa:9e:3b:15:4b:c0:a7:5f: 83:4c:83:db:5f:04:08:65:f8:48:52:56:4f:ce:f4:8b:77:7a: ed:15:94:99:9d:5a:f8:54:af:43:14:a7:3a:17:c3:c3:ce:e3: 45:36:f5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQY8HJ12QsGScZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5NDk5YTctZGQ3My00ZDI4LWIzYWQtMjgxM2UxNDIx YzY0MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk Mzc5N2VmODgtZWJkYi00YTFiLTg1OWMtNDE5OTA3MDEyNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm/u4bOtdqaqdta52R2qRhOPtLzaZ7cMa3e/ 1OhrSzwPETrdPahjcuzrDU5BwEgN3cz3yEDVsn6Lg+CAhQIaaN4NHCDiXZp9aKGk ZronlxoPpLKIklJhl+gsQBbrDSqas3vbhw1zHzfRPl0DbSwVeQjmzRhIuXRyEa1q UWIIfVeV0pso87AVSgS2dn4I/5TNizekTw+fJrTcApsauS6Uiq8HPmW23GOztdix zeyv1eNkjA5QCy+Jnl/vGGGwjgIN+GyPoq9MNzClZkxQVF7hd/h34EayHaQxrv9m LL6pNNjO+99xRFRWhkkmJz8gCfmyCLDrEuMcSM++xtVpuog5HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhlygvhE+X5Q8JCKksCX6dQlPJUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDk0 OTlhNy1kZDczLTRkMjgtYjNhZC0yODEzZTE0MjFjNjQvNDQyMDk4NGEtZjdlYi0z OGMxLTg5YjctOTgxY2Q0NjMxZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ5NDk5YTctZGQ3My00ZDI4LWIz YWQtMjgxM2UxNDIxYzY0LzVkOTQ5OWE3LWRkNzMtNGQyOC1iM2FkLTI4MTNlMTQy MWM2NC5jcmwwHwYDVR0jBBgwFoAUButBQNUQLNt8DYziewcWWtswkqkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDk0OTlhNy1kZDczLTRkMjgtYjNhZC0yODEz ZTE0MjFjNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrfIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmVLRwqZIJaOXk4dvOwb2okA3JZry2hz3SSTnmol6SNKmOKDE3g252T UdyBoZ+aMvErjfD+LHpvKFCxxaEOU1ZiOmYvnBQU8sELJoapAjCqcft4KVQnekS7 /YLZvVf5H7NNNNNzswET5tf64W+SRM/+6cmBQ26DJMSfZyUnVY9hz04p0zzThe2V VzxLr/7s65exFswHKshn4YWbHcfJ8K3ICjw0W+eOtmw9YLtM+w6kYwckfahQWD2K gqbRjbuJVE66tsIpM2XkGFkiY5U86jn6njsVS8CnX4NMg9tfBAhl+EhSVk/O9It3 eu0VlJmdWvhUr0MUpzoXw8PO40U29XE= -----END CERTIFICATE-----Generated at Fri Mar 14 09:50:24 2025 by rpki-client