$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa File: dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa (raw, json) Hash identifier: TJ6NWk2OwV5sjuwg8iB5xRujFX4gznNQf0YCE7Tczhg= Subject key identifier: 7E:05:94:2B:08:96:BE:98:34:65:DD:B9:5C:3F:10:02:69:A6:02:FF Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F432858496FAF0B4F16CCE134B1A62C00 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 212238 IP address blocks: 172.102.218.0/24 maxlen: 24 216.158.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:0b:4f:16:cc:e1:34:b1:a6:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=417277cd-6e7f-4550-84a8-05ae3147af22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8b:2a:2e:0b:51:57:1b:8a:b9:b4:9e:ae:6e: c7:9a:97:b6:ae:52:42:19:32:c4:29:13:c0:ec:16: e1:83:40:5d:b7:ba:fa:26:fe:f9:c6:f9:eb:89:ec: 0e:65:d3:c9:17:4f:aa:33:e2:66:3f:ac:79:8e:1e: 3c:0b:f4:cc:6c:56:70:8c:6f:f5:6a:ce:18:ee:ce: 2d:8c:3a:8a:95:d5:9d:09:99:1b:a6:11:ae:f0:1c: 64:f3:2d:12:74:2e:80:7c:1a:1f:ed:b2:cc:f7:33: 6d:1d:bb:81:45:72:58:cc:e8:ab:d0:22:05:64:e3: 44:a7:e7:ac:2d:94:a8:22:ea:b5:8a:80:86:c1:4b: d5:04:5a:5b:a3:9f:d2:8a:4f:de:3f:a8:c1:5d:8a: 73:6d:05:4e:90:ba:cc:18:65:47:42:09:a3:33:7c: 4f:99:68:29:5e:65:b3:53:4d:ce:40:fc:6d:65:17: be:e8:84:9d:2c:02:38:85:1b:b1:e8:c7:f4:b0:8c: 41:3f:64:25:f9:c3:5e:a6:d4:07:d7:e2:77:54:06: ab:50:85:a2:eb:14:f1:21:c7:3f:cb:59:0f:29:3d: 55:4d:5b:47:96:0b:7a:af:eb:f2:bb:9d:dc:96:1b: 4b:49:de:c3:8f:c9:3f:8f:e1:f9:b1:67:62:1f:1c: 5d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:05:94:2B:08:96:BE:98:34:65:DD:B9:5C:3F:10:02:69:A6:02:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/dc00e18d-2835-30b2-aedc-0f8185ec4a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.218.0/24 216.158.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:04:f4:f1:d0:32:8e:56:5b:c1:c2:5f:9b:8d:09:22:e4:19: 69:ec:2c:90:53:23:04:14:07:71:b3:ba:a1:b9:c6:8b:f3:bf: cb:5c:9e:76:e6:45:00:ab:ed:fa:4b:7f:57:16:9c:59:8a:c2: ec:fe:64:c6:fc:d5:7c:49:71:f3:4e:dd:f5:a7:c7:b3:0d:31: 4e:1f:f5:95:da:7b:d1:6d:9d:51:83:71:22:37:d1:89:ed:dd: 53:1e:ee:60:f5:1d:da:6f:08:2a:a0:3f:54:c3:d0:07:e6:b1: c7:68:c0:6f:80:3a:5f:93:ef:83:db:5a:70:9c:0d:9e:3e:af: 8e:99:40:79:19:f2:e1:0e:b0:26:77:dc:71:48:3a:e4:d8:17: e1:29:89:a6:e7:71:a3:31:d2:54:47:dd:7c:70:35:a4:fa:72: b9:1f:5f:2f:d6:6b:97:39:f4:aa:f7:08:84:de:e5:d8:78:1d: 1f:2a:b0:8b:ba:8a:84:82:2c:fa:99:9e:6c:83:3e:d2:1f:96: a2:66:ab:21:af:58:9c:39:ba:02:9f:d2:9b:33:b5:f9:6b:cb: b9:15:1e:16:bc:3c:0f:1d:8b:39:dc:de:0b:5e:a9:a0:e7:1e: f1:74:2d:fa:ca:dc:80:a4:c5:f5:f5:23:d2:c5:a9:f1:4a:ab: b7:f0:1a:cc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElvrwtPFszhNLGmLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk NDE3Mjc3Y2QtNmU3Zi00NTUwLTg0YTgtMDVhZTMxNDdhZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4sqLgtRVxuKubSerm7Hmpe2rlJCGTLEKRPA 7Bbhg0Bdt7r6Jv75xvnriewOZdPJF0+qM+JmP6x5jh48C/TMbFZwjG/1as4Y7s4t jDqKldWdCZkbphGu8Bxk8y0SdC6AfBof7bLM9zNtHbuBRXJYzOir0CIFZONEp+es LZSoIuq1ioCGwUvVBFpbo5/Sik/eP6jBXYpzbQVOkLrMGGVHQgmjM3xPmWgpXmWz U03OQPxtZRe+6ISdLAI4hRux6Mf0sIxBP2Ql+cNeptQH1+J3VAarUIWi6xTxIcc/ y1kPKT1VTVtHlgt6r+vyu53clhtLSd7Dj8k/j+H5sWdiHxxdRwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFH4FlCsIlr6YNGXduVw/EAJppgL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvZGMwMGUxOGQtMjgzNS0z MGIyLWFlZGMtMGY4MTg1ZWM0YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGbaAwQA 2J7NMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE8E9PHQMo5WW8HCX5uNCSLkGWnsLJBTIwQUB3GzuqG5xovz v8tcnnbmRQCr7fpLf1cWnFmKwuz+ZMb81XxJcfNO3fWnx7MNMU4f9ZXae9FtnVGD cSI30Ynt3VMe7mD1HdpvCCqgP1TD0AfmscdowG+AOl+T74PbWnCcDZ4+r46ZQHkZ 8uEOsCZ33HFIOuTYF+EpiabncaMx0lRH3XxwNaT6crkfXy/Wa5c59Kr3CITe5dh4 HR8qsIu6ioSCLPqZnmyDPtIflqJmqyGvWJw5ugKf0psztflry7kVHha8PA8diznc 3gteqaDnHvF0LfrK3ICkxfX1I9LFqfFKq7fwGsw= -----END CERTIFICATE-----Generated at Mon Apr 7 02:24:31 2025 by rpki-client