$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0d4e5656-afae-30a6-9a06-129f4ade41da.roa File: 0d4e5656-afae-30a6-9a06-129f4ade41da.roa (raw, json) Hash identifier: sL9oAJBJThCBZYFGx5gTfFj7Vq08xdKwGblrOK1xD2Y= Subject key identifier: 20:F1:09:21:32:D8:71:F8:2B:B3:10:7D:A9:90:81:4C:20:9B:7A:58 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F43285848C9B0D8F2C8FAC45998108500 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0d4e5656-afae-30a6-9a06-129f4ade41da.roa Signing time: Thu 06 Feb 2025 02:00:39 +0000 ROA not before: Thu 06 Feb 2025 02:00:39 +0000 ROA not after: Wed 07 May 2025 01:00:39 +0000 asID: 11325 IP address blocks: 172.102.196.0/24 maxlen: 24 172.102.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c9:b0:d8:f2:c8:fa:c4:59:98:10:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Feb 6 02:00:39 2025 GMT Not After : May 7 01:00:39 2025 GMT Subject: CN=567c6fa8-41a6-431d-8b18-850cd47fcd41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6c:3b:41:05:4c:39:9a:be:b7:e4:38:4b:f7: 40:b3:10:c0:e3:50:5d:55:ce:09:b6:d4:23:6e:40: b5:9d:4a:cc:5d:44:65:bf:52:53:7e:0f:3d:d6:53: f1:31:83:20:a9:83:49:60:2f:63:e0:3b:88:4d:43: 55:01:ee:87:8d:bd:3d:ae:a2:b4:e5:0b:21:5e:a7: 7b:24:02:eb:ba:64:f0:32:27:2b:0e:34:7d:bf:4c: 17:54:09:82:74:59:d0:da:02:69:36:90:a0:b9:7d: 57:ab:3f:63:ab:ff:84:b7:e7:c6:dd:9a:78:63:b4: e7:d9:f3:ac:4f:b5:63:3f:e6:ab:c9:3c:ba:53:e2: 66:97:b7:6d:69:3d:cb:98:50:38:2c:59:64:04:34: 2c:8e:15:9b:1f:40:f9:31:d5:66:89:66:9b:ca:c0: ce:61:83:3a:fe:fd:55:f6:de:36:bd:e9:6c:91:93: b8:a9:74:98:92:24:dc:67:21:e9:dd:db:01:fe:7e: 56:19:98:43:62:b5:91:d5:65:6a:4c:f4:d4:77:a3: d0:52:4d:9d:7d:71:a4:d8:7b:b8:44:98:ac:11:96: e6:fd:1e:15:93:ef:70:6a:0e:66:10:2b:79:db:d3: 4d:d1:d5:5d:07:cd:2c:80:19:52:26:93:b2:56:72: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F1:09:21:32:D8:71:F8:2B:B3:10:7D:A9:90:81:4C:20:9B:7A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/0d4e5656-afae-30a6-9a06-129f4ade41da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.196.0/24 172.102.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d5:b6:9f:42:35:e0:8f:c1:1e:b6:4b:e0:55:44:22:c8:c0: a2:f1:dd:f7:01:1d:92:98:74:86:d8:0d:6a:b3:30:f1:57:1a: 79:f7:58:20:4c:84:69:79:13:c9:6f:52:03:cc:2d:dc:e4:ad: 1f:81:a8:d3:92:9f:98:80:96:62:24:18:85:51:bf:2a:0f:76: fa:cc:d7:5a:8d:4b:d4:04:fe:2f:14:16:76:a1:8e:9e:67:72: e2:8e:1b:a9:b6:eb:c7:4d:fa:8a:a9:f4:9a:c2:22:7d:7c:e2: 53:32:4b:e5:b8:23:fa:e1:b6:71:29:9a:86:44:ac:b1:fd:96: 75:9d:25:34:ac:08:ba:47:b3:19:da:ce:88:0c:5b:5a:2a:b2: df:50:d4:9a:8e:b1:01:9a:2f:18:0d:a9:8e:5e:95:04:e4:cd: d6:fd:df:de:cd:41:d9:46:7f:a5:af:1e:a1:ac:95:c5:8a:36: 1e:e6:94:09:9c:1b:29:45:f7:3f:2e:38:3a:13:35:37:e7:25: 02:7e:a1:06:56:96:f8:54:dd:3e:31:05:eb:9a:ba:c5:27:dd: 1a:e1:a0:e0:1f:75:c1:14:1e:af:2a:82:37:51:08:78:37:86: 0c:31:75:33:52:bc:ac:87:98:ff:e0:94:d4:83:22:2b:76:c7: 17:db:50:5c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEjJsNjyyPrEWZgQhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDIwNjAyMDAzOVoXDTI1MDUwNzAxMDAzOVowLzEtMCsGA1UEAxMk NTY3YzZmYTgtNDFhNi00MzFkLThiMTgtODUwY2Q0N2ZjZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2w7QQVMOZq+t+Q4S/dAsxDA41BdVc4JttQj bkC1nUrMXURlv1JTfg891lPxMYMgqYNJYC9j4DuITUNVAe6Hjb09rqK05QshXqd7 JALrumTwMicrDjR9v0wXVAmCdFnQ2gJpNpCguX1Xqz9jq/+Et+fG3Zp4Y7Tn2fOs T7VjP+aryTy6U+Jml7dtaT3LmFA4LFlkBDQsjhWbH0D5MdVmiWabysDOYYM6/v1V 9t42velskZO4qXSYkiTcZyHp3dsB/n5WGZhDYrWR1WVqTPTUd6PQUk2dfXGk2Hu4 RJisEZbm/R4Vk+9wag5mECt529NN0dVdB80sgBlSJpOyVnIR2wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCDxCSEy2HH4K7MQfamQgUwgm3pYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMGQ0ZTU2NTYtYWZhZS0z MGE2LTlhMDYtMTI5ZjRhZGU0MWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGbEAwQA rGbUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFnVtp9CNeCPwR62S+BVRCLIwKLx3fcBHZKYdIbYDWqzMPFX Gnn3WCBMhGl5E8lvUgPMLdzkrR+BqNOSn5iAlmIkGIVRvyoPdvrM11qNS9QE/i8U Fnahjp5ncuKOG6m268dN+oqp9JrCIn184lMyS+W4I/rhtnEpmoZErLH9lnWdJTSs CLpHsxnazogMW1oqst9Q1JqOsQGaLxgNqY5elQTkzdb9397NQdlGf6WvHqGslcWK Nh7mlAmcGylF9z8uODoTNTfnJQJ+oQZWlvhU3T4xBeuausUn3RrhoOAfdcEUHq8q gjdRCHg3hgwxdTNSvKyHmP/glNSDIit2xxfbUFw= -----END CERTIFICATE-----Generated at Mon Apr 7 02:32:09 2025 by rpki-client