$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/036de617-e76d-30ec-9b98-0b9dba94ed13.roa File: 036de617-e76d-30ec-9b98-0b9dba94ed13.roa (raw, json) Hash identifier: SktSdNAVOFcdZt/jK5bkxjTgBjNEfDGW/maWyHMZAJ0= Subject key identifier: D2:C3:8F:08:D7:C9:42:5D:13:94:A6:9E:46:A1:35:5C:91:80:ED:38 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858490E16BBC2F01B100DE8CA7480 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/036de617-e76d-30ec-9b98-0b9dba94ed13.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 36050 IP address blocks: 205.243.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bb:c2:f0:1b:10:0d:e8:ca:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=1fba8621-bf65-4a89-9f94-77fd99d9469a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:1e:15:d1:26:d1:90:45:43:cc:ea:42:76: 0f:7d:69:37:39:3b:7f:95:e1:9f:eb:e8:a7:1f:23: 09:c5:fe:98:b5:a5:09:ea:36:6e:76:54:ec:55:5a: 6f:86:17:14:01:6d:27:a4:18:9c:11:63:98:ab:06: bc:98:eb:87:f2:c5:38:7e:ff:2f:a7:04:bd:2d:d5: 91:83:40:5b:9c:ac:e7:24:82:40:37:c6:c3:bc:43: 83:a5:e8:de:30:79:fc:42:28:5b:c1:25:cc:a7:92: 62:3b:5e:35:73:ca:74:ff:6a:3b:f4:38:c2:b7:8f: d9:a2:73:da:39:27:9d:7c:c0:6e:bc:3e:54:6e:dd: d1:46:32:7d:0e:ed:23:77:4c:63:b2:06:a2:3b:34: 3f:c5:59:32:58:c3:06:b6:11:83:e7:47:0b:13:0c: 18:01:2a:73:9c:4c:e5:0b:cb:1d:64:f2:82:cd:0b: 5b:78:9b:cf:c9:e8:cb:ae:e2:f7:c2:49:5b:3b:67: 0f:f7:2c:c2:eb:49:fd:18:2a:45:24:80:0d:19:bf: 8f:e9:68:07:97:af:61:f8:8c:e7:ee:0c:08:a0:81: 78:db:25:fa:b5:2e:84:08:fe:2d:84:18:f5:32:19: 63:81:e3:50:49:21:ff:4a:5c:d0:d6:19:4c:55:89: ff:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C3:8F:08:D7:C9:42:5D:13:94:A6:9E:46:A1:35:5C:91:80:ED:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/036de617-e76d-30ec-9b98-0b9dba94ed13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 205.243.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b3:f2:04:83:0d:2d:61:68:61:4d:d2:2a:50:9c:a0:8e:f0: f1:d3:b7:d2:02:f0:e6:e6:fb:d6:b4:c3:ff:16:0b:29:9f:00: d6:a0:2e:40:d3:b5:85:63:6c:44:ca:8c:10:46:19:45:98:70: b5:41:86:a2:50:9b:a2:cc:eb:83:ac:2c:64:96:d4:a6:23:ab: ef:bf:6b:71:0d:66:01:5f:68:18:76:ed:8f:02:71:35:4b:c1: 6a:22:83:aa:d5:52:7c:37:06:42:d8:85:43:da:0a:fd:1a:f2: 75:4d:7b:3c:91:c2:2c:34:c1:f9:5b:17:db:1a:6b:71:7d:aa: 7c:47:6d:5a:2d:de:52:25:fe:c9:74:cd:1a:24:18:72:03:98: 48:57:c2:a6:ad:cb:6c:69:c5:bc:cc:57:27:45:df:ac:32:51: 92:e5:b9:6e:dd:8c:a1:f3:e4:24:bd:a1:d8:26:65:d6:1b:4a: 8f:ca:a9:e5:21:32:61:8f:c4:8b:77:c3:bb:20:37:2c:36:71: 0e:80:ef:f7:75:55:e2:21:fa:e6:d0:6c:9c:7e:a4:75:28:ff: 6d:62:a0:82:a5:ce:3b:c5:ff:b5:4c:5e:d0:c2:3d:7a:e5:44: 10:12:53:fc:4f:ea:fd:71:63:a1:d2:00:98:7b:50:a9:9e:29: 75:1c:b3:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFrvC8BsQDejKdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MWZiYTg2MjEtYmY2NS00YTg5LTlmOTQtNzdmZDk5ZDk0NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPoeFdEm0ZBFQ8zqQnYPfWk3OTt/leGf6+in HyMJxf6YtaUJ6jZudlTsVVpvhhcUAW0npBicEWOYqwa8mOuH8sU4fv8vpwS9LdWR g0BbnKznJIJAN8bDvEODpejeMHn8QihbwSXMp5JiO141c8p0/2o79DjCt4/ZonPa OSedfMBuvD5Ubt3RRjJ9Du0jd0xjsgaiOzQ/xVkyWMMGthGD50cLEwwYASpznEzl C8sdZPKCzQtbeJvPyejLruL3wklbO2cP9yzC60n9GCpFJIANGb+P6WgHl69h+Izn 7gwIoIF42yX6tS6ECP4thBj1MhljgeNQSSH/SlzQ1hlMVYn/UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLDjwjXyUJdE5SmnkahNVyRgO04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvMDM2ZGU2MTctZTc2ZC0z MGVjLTliOTgtMGI5ZGJhOTRlZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzfNPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCz8gSDDS1haGFN0ipQnKCO8PHTt9IC8Obm+9a0w/8WCymfANagLkDT tYVjbETKjBBGGUWYcLVBhqJQm6LM64OsLGSW1KYjq++/a3ENZgFfaBh27Y8CcTVL wWoig6rVUnw3BkLYhUPaCv0a8nVNezyRwiw0wflbF9saa3F9qnxHbVot3lIl/sl0 zRokGHIDmEhXwqaty2xpxbzMVydF36wyUZLluW7djKHz5CS9odgmZdYbSo/KqeUh MmGPxIt3w7sgNyw2cQ6A7/d1VeIh+ubQbJx+pHUo/21ioIKlzjvF/7VMXtDCPXrl RBASU/xP6v1xY6HSAJh7UKmeKXUcs5o= -----END CERTIFICATE-----Generated at Sun Apr 6 05:53:38 2025 by rpki-client