$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa File: 5025a268-fe54-38c3-b693-a58aa12b8433.roa (raw, json) Hash identifier: Bx7HIG/a8vJSYChCWCORMoiSmwPB05stgUSRT8eaUQQ= Subject key identifier: BF:98:AD:99:D6:9A:DE:A5:A2:8E:E9:9C:25:9B:CD:16:42:C1:44:74 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F432858496054119CC00E1DB5820347C0 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 22652 IP address blocks: 173.231.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:11:9c:c0:0e:1d:b5:82:03:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=d48d2976-30b2-4fbb-8993-cc2b038eb6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:7c:5f:cd:ce:4f:82:46:58:3b:07:51:55: 35:a1:e5:df:3f:3b:7d:6b:49:6b:bb:d0:60:8b:5a: 8d:94:1e:f8:d5:91:b1:a4:f3:f5:2b:e9:cf:b4:12: 2e:43:11:32:19:44:f7:94:df:99:fe:3e:ba:63:3b: e4:4a:63:e6:2a:20:38:ee:30:c4:27:1e:b1:62:42: c4:5e:07:d1:15:74:55:ba:39:45:8e:d8:87:7b:31: 4c:66:4a:9c:ac:93:b5:d6:2c:72:2a:48:32:e0:7d: 4c:00:dc:8e:5a:af:b2:a9:8e:8d:34:c1:d2:55:5f: ea:35:b2:05:43:fb:92:60:11:b4:e9:be:8c:e5:61: fc:8b:22:ee:76:69:ec:44:e3:8e:7f:45:63:33:1d: e7:62:b8:a8:e2:71:da:d2:32:63:b1:5d:8e:64:52: 6c:0d:17:fc:6d:ee:57:dd:52:9a:85:9e:bd:e1:6e: 3f:a8:40:e2:a5:f7:48:83:53:28:bd:c5:d3:45:40: 87:ef:34:8c:56:47:ba:0c:ef:02:ea:05:4a:6f:ac: c3:cc:c0:cf:26:4a:29:91:67:9f:f2:50:2b:db:b4: 94:60:6b:82:91:84:9a:86:57:c7:93:b1:c2:b1:23: 64:2c:ee:e6:fa:c6:fb:1c:37:49:0b:f3:c7:7a:15: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:98:AD:99:D6:9A:DE:A5:A2:8E:E9:9C:25:9B:CD:16:42:C1:44:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5025a268-fe54-38c3-b693-a58aa12b8433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d5:5b:99:36:23:c7:25:4d:be:e9:fd:3d:fd:b8:c0:56:ef: e6:f9:42:84:35:2e:d3:64:4b:a0:4b:37:a8:8e:3c:20:be:75: fc:47:15:b9:4d:41:80:cb:b3:1b:fd:e0:04:9a:11:c9:98:16: 5e:9f:8d:99:71:d8:80:56:2e:f8:5e:91:0e:7c:28:fd:d7:df: 66:e6:54:73:06:26:2a:9c:20:35:fc:57:c5:f4:cd:4c:15:fa: 29:21:0a:d1:d7:0e:68:8e:ae:2a:7e:29:14:72:d2:f8:7d:f4: e0:44:c4:9d:f0:72:e4:dd:3d:f3:b4:83:1e:a6:b2:5c:9b:48: d5:4d:32:6b:14:5d:f2:e7:a7:0b:49:81:15:b7:03:f8:60:a1: 92:26:1d:70:f8:b2:80:cb:f9:ab:7b:82:9a:46:a4:d5:8a:6b: b7:63:5f:7e:0e:4a:fa:ef:38:45:b8:41:61:dc:0e:9a:36:82: 8b:d1:5d:4d:63:81:70:1d:0b:fe:f7:e0:c4:d8:0f:36:4a:ea: d4:93:1e:6a:9a:3f:70:af:56:e9:ee:cd:99:af:2c:08:42:7b: 17:1a:34:9c:ff:d3:f3:d0:4c:65:7c:b3:b5:0b:ff:37:48:9d: ea:a1:23:b0:d2:e5:b7:21:e8:00:a6:87:67:6f:9f:b5:ed:9c: 05:23:57:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBGcwA4dtYIDR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk ZDQ4ZDI5NzYtMzBiMi00ZmJiLTg5OTMtY2MyYjAzOGViNmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSZ8X83OT4JGWDsHUVU1oeXfPzt9a0lru9Bg i1qNlB741ZGxpPP1K+nPtBIuQxEyGUT3lN+Z/j66YzvkSmPmKiA47jDEJx6xYkLE XgfRFXRVujlFjtiHezFMZkqcrJO11ixyKkgy4H1MANyOWq+yqY6NNMHSVV/qNbIF Q/uSYBG06b6M5WH8iyLudmnsROOOf0VjMx3nYrio4nHa0jJjsV2OZFJsDRf8be5X 3VKahZ694W4/qEDipfdIg1MovcXTRUCH7zSMVke6DO8C6gVKb6zDzMDPJkopkWef 8lAr27SUYGuCkYSahlfHk7HCsSNkLO7m+sb7HDdJC/PHehWowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+YrZnWmt6loo7pnCWbzRZCwUR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNTAyNWEyNjgtZmU1NC0z OGMzLWI2OTMtYTU4YWExMmI4NDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAred1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjVW5k2I8clTb7p/T39uMBW7+b5QoQ1LtNkS6BLN6iOPCC+dfxHFblN QYDLsxv94ASaEcmYFl6fjZlx2IBWLvhekQ58KP3X32bmVHMGJiqcIDX8V8X0zUwV +ikhCtHXDmiOrip+KRRy0vh99OBExJ3wcuTdPfO0gx6mslybSNVNMmsUXfLnpwtJ gRW3A/hgoZImHXD4soDL+at7gppGpNWKa7djX34OSvrvOEW4QWHcDpo2govRXU1j gXAdC/734MTYDzZK6tSTHmqaP3CvVunuzZmvLAhCexcaNJz/0/PQTGV8s7UL/zdI neqhI7DS5bch6ACmh2dvn7XtnAUjVzk= -----END CERTIFICATE-----Generated at Fri Apr 11 23:33:23 2025 by rpki-client