$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa File: 8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa (raw, json) Hash identifier: KSddiUgbuw5aPFTUz+/s0Kcvy18Eo1wSBy4HDRYd63s= Subject key identifier: 73:43:5C:E3:5E:A1:3F:05:AB:F8:C4:5E:E7:DF:B8:D2:8F:6B:B1:98 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584957F3FE896193DCF25D114880 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 22781 IP address blocks: 173.255.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fe:89:61:93:dc:f2:5d:11:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=e985339e-3e54-4490-b2d0-807226bf75b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ef:6c:69:1f:23:78:bb:d5:2f:e3:1d:9a:47: 90:db:32:d3:00:76:ce:a3:e2:59:c8:61:13:20:dc: 06:a8:c8:82:10:ff:82:ea:79:f1:db:31:08:a4:eb: 11:bc:72:8f:dc:07:c8:71:90:ff:91:1f:8c:e4:7d: eb:91:5e:53:5f:0c:54:d7:fd:5c:0a:b7:5f:93:14: c8:c9:8d:07:4c:7a:db:aa:cd:b8:ac:93:5a:51:95: 4d:09:bf:63:39:32:b0:3c:bd:0b:ca:1a:71:c2:7b: 4b:58:97:f3:af:e7:bd:17:34:d0:a3:42:79:13:3e: b6:80:1b:3f:65:77:61:b6:0f:75:d5:c1:6d:aa:ca: 64:4b:d5:a6:83:a5:8d:06:c1:55:82:d3:e2:c2:df: 08:95:72:43:1c:e4:19:09:62:94:f4:e9:99:f4:5a: b7:d6:ba:ac:e9:d2:36:d7:41:de:53:3b:42:f6:3a: 68:9c:1b:1d:58:ad:d3:f5:35:57:1f:82:80:6b:65: 34:16:2c:8b:bf:70:52:c5:0f:5c:63:76:cb:a5:12: 7b:3f:0a:a4:28:af:38:47:4c:92:e0:93:bb:4d:14: a0:3a:1e:b7:41:cf:97:f9:58:6a:00:d2:79:97:b4: 34:e2:1e:e3:a8:ba:74:07:61:a1:3f:1e:bb:c1:73: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:43:5C:E3:5E:A1:3F:05:AB:F8:C4:5E:E7:DF:B8:D2:8F:6B:B1:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c8:2e:7b:f6:60:65:6a:36:32:9e:2d:73:a0:0c:28:ea:c8: e3:d3:90:b5:df:ca:69:c4:eb:5a:ef:e0:ea:da:39:47:a5:5a: 89:ca:a9:ce:ba:b1:83:e6:fa:89:52:38:d4:ca:2b:7e:c6:0e: 3d:73:a5:25:ee:34:0e:05:1d:93:f2:7c:54:31:76:ad:a8:9e: 73:f4:ef:26:02:f4:c7:52:60:ab:4c:ad:d3:a7:10:d2:94:cb: c0:f0:70:0f:11:e6:2b:80:04:bd:94:2e:62:d4:0a:1e:36:f8: cc:77:8e:86:ef:d5:12:d8:ba:75:13:ca:55:5f:15:6b:05:7b: 42:fe:68:ee:d1:0f:c6:59:1b:79:ec:8e:fd:b7:d3:b9:32:22: 5c:7c:f4:c7:87:0b:bd:0a:64:36:5f:76:ff:e8:94:df:be:56: d2:6e:b1:f1:8f:43:3e:f8:2c:6a:05:f8:f7:fb:56:23:77:a4: 93:36:6d:95:9c:15:e7:5f:22:2c:15:51:8f:03:4d:80:61:f5: 8b:6b:cf:bb:5c:b3:68:e9:e1:53:b2:f9:59:1b:e9:a8:75:b7: 61:02:50:ac:bf:d7:b2:88:ef:46:d8:e5:9e:9f:41:8c:ef:11: 84:e5:52:9e:57:11:cd:19:ee:b7:d0:b8:c1:b8:8b:5c:a0:24: 68:41:38:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/6JYZPc8l0RSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZTk4NTMzOWUtM2U1NC00NDkwLWIyZDAtODA3MjI2YmY3NWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO9saR8jeLvVL+MdmkeQ2zLTAHbOo+JZyGET INwGqMiCEP+C6nnx2zEIpOsRvHKP3AfIcZD/kR+M5H3rkV5TXwxU1/1cCrdfkxTI yY0HTHrbqs24rJNaUZVNCb9jOTKwPL0LyhpxwntLWJfzr+e9FzTQo0J5Ez62gBs/ ZXdhtg911cFtqspkS9Wmg6WNBsFVgtPiwt8IlXJDHOQZCWKU9OmZ9Fq31rqs6dI2 10HeUztC9jponBsdWK3T9TVXH4KAa2U0FiyLv3BSxQ9cY3bLpRJ7PwqkKK84R0yS 4JO7TRSgOh63Qc+X+VhqANJ5l7Q04h7jqLp0B2GhPx67wXP41wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNDXONeoT8Fq/jEXuffuNKPa7GYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOGFhNGNkYTgtMDZmMy0z YTc3LThjZmYtNWU4NjAzY2U0YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPILnv2YGVqNjKeLXOgDCjqyOPTkLXfymnE61rv4OraOUelWonKqc66 sYPm+olSONTKK37GDj1zpSXuNA4FHZPyfFQxdq2onnP07yYC9MdSYKtMrdOnENKU y8DwcA8R5iuABL2ULmLUCh42+Mx3jobv1RLYunUTylVfFWsFe0L+aO7RD8ZZG3ns jv2307kyIlx89MeHC70KZDZfdv/olN++VtJusfGPQz74LGoF+Pf7ViN3pJM2bZWc FedfIiwVUY8DTYBh9Ytrz7tcs2jp4VOy+Vkb6ah1t2ECUKy/17KI70bY5Z6fQYzv EYTlUp5XEc0Z7rfQuMG4i1ygJGhBOIE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:27:32 2025 by rpki-client