$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa File: 9477d30f-60e1-349b-9381-c5e6e73f84d7.roa (raw, json) Hash identifier: T8YiyoiTLqPY535WOZNx0G0qE+ao7DmsaBtth9aiQoY= Subject key identifier: 5D:67:B1:A2:A2:FA:49:1E:38:6B:3B:D3:D7:AA:20:3A:A8:FD:AC:F6 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F43285848D6410B564812F01106F61AB0 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 400226 IP address blocks: 204.197.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:0b:56:48:12:f0:11:06:f6:1a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=a875b515-b275-489a-b8df-0af76e93b26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:49:b0:fc:6a:33:9e:82:1e:73:6c:f5:50:42: c3:c7:02:bb:de:b8:a2:56:d1:d0:b1:83:15:d3:7d: 1f:89:e8:70:0c:d4:44:ed:e6:93:04:e0:db:1a:0d: f2:76:56:de:7d:98:b6:82:b1:3b:33:fb:95:56:34: 88:d0:4f:5c:e8:2c:ac:44:73:e6:cd:56:34:2a:78: fd:85:9c:65:f7:ee:ed:15:06:d2:a6:a8:8e:57:08: ff:8c:3d:43:52:8d:e5:d3:a9:47:1e:7c:88:b8:31: ef:ea:62:e1:4f:d1:cc:35:b8:10:54:de:35:85:40: c2:55:dd:fa:52:60:4c:42:cd:cc:56:60:e9:8c:91: 77:25:7a:b3:d5:00:42:d1:c9:ac:93:41:e7:df:62: 27:72:aa:7a:a7:b3:5e:4a:68:df:10:66:53:c7:51: ca:2a:b5:27:73:6b:11:57:41:78:db:4b:47:51:06: d0:ef:15:1c:c8:01:aa:46:60:1e:77:4b:e7:01:ed: ba:bd:bd:13:3c:84:3f:d5:8a:f2:e8:68:b6:a0:4d: 17:00:5b:1d:dd:1b:58:26:2a:bb:a7:7f:f0:53:cd: 5f:04:08:85:79:98:4c:f3:b8:9f:b0:14:b5:bd:c2: 77:49:56:1d:28:3a:27:d7:a6:1d:13:fb:cc:45:bc: 7e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:B1:A2:A2:FA:49:1E:38:6B:3B:D3:D7:AA:20:3A:A8:FD:AC:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:5a:9a:49:74:6a:8d:eb:0d:b5:06:57:79:10:b1:ee:46:c3: c4:0a:56:d6:73:eb:b0:e6:0a:d2:1e:11:70:27:b9:2f:1d:c4: 22:ab:6f:73:02:6d:5d:02:a1:63:b9:6e:d8:b3:ad:11:c4:3e: 61:fd:91:93:9e:29:6a:cd:6c:e9:e1:47:e1:a7:a0:dd:91:1a: f1:b6:b8:cf:a5:d0:d8:56:7b:34:3b:8f:a6:19:ce:0c:44:b4: 0d:88:79:3d:b0:ae:e9:d9:71:4f:c0:81:39:81:79:70:6c:d3: ee:60:18:66:1c:c1:2d:a0:f5:03:7c:0c:e4:55:f1:39:ed:1f: 51:8c:19:b6:06:d9:a2:ae:da:44:e9:f9:10:80:05:6a:1c:d1: 81:b0:e6:ac:99:85:5b:82:c2:37:9e:e5:5e:3e:07:68:26:59: 76:31:4a:b0:fd:c8:eb:4c:dd:dd:3d:7e:53:37:79:aa:31:7b: d3:7f:e5:2b:70:f7:bf:da:60:c9:f5:e8:1e:09:43:ed:12:18: b7:a0:45:45:70:bc:cd:01:68:ce:0d:f8:74:52:f1:5c:bf:a5: 4c:ed:86:e4:85:1d:5c:79:a5:c2:c1:a9:96:46:72:34:61:90: 4f:2a:6a:49:d1:e4:36:de:bd:4f:11:11:3b:a4:ec:32:9b:97: d4:08:14:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQtWSBLwEQb2GrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTg3NWI1MTUtYjI3NS00ODlhLWI4ZGYtMGFmNzZlOTNiMjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0mw/GoznoIec2z1UELDxwK73riiVtHQsYMV 030fiehwDNRE7eaTBODbGg3ydlbefZi2grE7M/uVVjSI0E9c6CysRHPmzVY0Knj9 hZxl9+7tFQbSpqiOVwj/jD1DUo3l06lHHnyIuDHv6mLhT9HMNbgQVN41hUDCVd36 UmBMQs3MVmDpjJF3JXqz1QBC0cmsk0Hn32Incqp6p7NeSmjfEGZTx1HKKrUnc2sR V0F420tHUQbQ7xUcyAGqRmAed0vnAe26vb0TPIQ/1Yry6Gi2oE0XAFsd3RtYJiq7 p3/wU81fBAiFeZhM87ifsBS1vcJ3SVYdKDon16YdE/vMRbx+PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1nsaKi+kkeOGs709eqIDqo/az2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvOTQ3N2QzMGYtNjBlMS0z NDliLTkzODEtYzVlNmU3M2Y4NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtamkl0ao3rDbUGV3kQse5Gw8QKVtZz67DmCtIeEXAnuS8dxCKrb3MC bV0CoWO5btizrRHEPmH9kZOeKWrNbOnhR+GnoN2RGvG2uM+l0NhWezQ7j6YZzgxE tA2IeT2wrunZcU/AgTmBeXBs0+5gGGYcwS2g9QN8DORV8TntH1GMGbYG2aKu2kTp +RCABWoc0YGw5qyZhVuCwjee5V4+B2gmWXYxSrD9yOtM3d09flM3eaoxe9N/5Stw 97/aYMn16B4JQ+0SGLegRUVwvM0BaM4N+HRS8Vy/pUzthuSFHVx5pcLBqZZGcjRh kE8qaknR5DbevU8RETuk7DKbl9QIFFc= -----END CERTIFICATE-----Generated at Sun Feb 16 20:28:04 2025 by rpki-client