$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa File: 32bae387-9a90-39b8-b5de-920b138b534b.roa (raw, json) Hash identifier: emxX32lyp37i9Zm3QwVG61QZ6QX6dVDh2kK52Lv1xtU= Subject key identifier: BF:EE:25:BD:79:27:CC:E3:F5:CB:74:04:D1:C7:09:63:71:BA:78:DB Certificate issuer: /CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Certificate serial: 010D0C9F43285849244E7C30F5BEB947F2AF7180 Authority key identifier: F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 46192 IP address blocks: 144.86.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:7c:30:f5:be:b9:47:f2:af:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd638a66-157d-4b37-b487-c2b5f4dbe940 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=44f4382d-8767-44b9-bf2d-b5341bd57c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:53:5e:20:b6:1e:f6:94:b0:ad:36:88:48: bd:96:ec:b3:85:70:79:95:97:3f:6d:e9:44:13:23: a4:96:57:54:b5:7e:5a:1e:c0:4a:01:b2:70:57:87: 62:51:93:6a:c6:8b:ba:0e:92:17:71:68:7d:9b:ac: c0:54:3a:1f:63:5c:a9:7a:54:e5:6e:94:16:c8:64: 48:33:b8:be:0a:5c:8c:a1:af:76:29:23:68:22:7b: 37:e5:54:ae:5d:ad:b4:1d:d3:15:19:1d:3d:08:2b: 88:a8:a8:9d:6e:b7:1f:b1:6a:e4:0d:88:80:e7:68: b7:db:85:29:c8:bf:4a:b5:4a:ba:4f:1f:2d:e4:25: 21:7c:59:ca:85:c6:1f:18:c4:c6:c6:d0:09:a7:83: d2:3d:df:aa:ce:60:2a:00:46:f2:6a:0e:30:48:76: d6:b9:c7:02:d1:96:97:31:52:e7:74:12:a0:c5:87: 60:5f:96:39:f2:29:30:e6:a1:b8:9f:22:57:cf:37: 86:1a:d4:ee:fb:5a:ea:54:47:cd:56:da:1c:ee:23: f4:b5:ca:d2:64:92:a1:82:b8:3e:79:f6:77:19:a1: c6:f4:e6:4e:16:2f:88:0f:02:13:5a:fc:33:16:e9: 2a:d6:2b:13:5c:79:b3:e9:b6:80:ea:c9:d0:0b:93: 18:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EE:25:BD:79:27:CC:E3:F5:CB:74:04:D1:C7:09:63:71:BA:78:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/32bae387-9a90-39b8-b5de-920b138b534b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940/dd638a66-157d-4b37-b487-c2b5f4dbe940.crl X509v3 Authority Key Identifier: keyid:F1:23:25:81:49:02:B4:C7:2A:9C:90:6D:26:C5:90:12:7C:96:B6:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dd638a66-157d-4b37-b487-c2b5f4dbe940.cer sbgp-ipAddrBlock: critical IPv4: 144.86.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1b:7b:62:60:24:8a:89:03:f4:f1:18:2f:ea:da:a9:99:bb: 16:74:54:26:32:49:67:88:83:4d:49:30:4c:39:f5:26:94:af: 1d:ab:12:a6:d4:04:1d:56:af:0e:23:1f:9a:21:3d:e7:b5:c5: 83:3e:b4:11:3a:44:fa:c1:c2:6b:75:f7:8c:c0:94:ef:b1:ed: ce:6f:4a:98:1a:17:fc:88:e8:1e:d1:75:33:31:78:b6:60:dd: 76:46:74:27:00:d5:7b:02:e9:7b:27:71:e2:88:72:3e:dc:1e: 56:d3:42:a2:c2:f4:4e:14:5f:e6:94:78:35:21:97:03:63:d0: cf:09:90:d5:67:22:b4:b9:ff:83:ab:f2:bb:da:33:c1:39:34: 5e:84:c0:b2:49:b8:19:f3:76:5e:6d:eb:f2:ca:06:f5:c3:24: 69:cd:04:b6:2b:7f:d7:9d:78:56:1c:d1:91:cd:31:c9:ad:9d: e0:cf:6f:86:77:86:b7:8b:8c:14:66:ab:2b:b6:2a:bd:1d:69: 1b:7c:d2:99:0d:7c:4a:34:dc:c5:39:60:b3:8f:2d:b2:d0:95: 35:df:b4:9e:19:4c:66:4d:c6:54:b2:4a:d0:42:d6:ab:88:af: 5c:c5:ac:ec:fa:ed:ba:3b:aa:bd:0f:e1:54:ed:d3:53:51:73: 23:3d:c9:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnww9b65R/KvcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ2MzhhNjYtMTU3ZC00YjM3LWI0ODctYzJiNWY0ZGJl OTQwMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NDRmNDM4MmQtODc2Ny00NGI5LWJmMmQtYjUzNDFiZDU3YzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjENTXiC2HvaUsK02iEi9luyzhXB5lZc/belE EyOklldUtX5aHsBKAbJwV4diUZNqxou6DpIXcWh9m6zAVDofY1ypelTlbpQWyGRI M7i+ClyMoa92KSNoIns35VSuXa20HdMVGR09CCuIqKidbrcfsWrkDYiA52i324Up yL9KtUq6Tx8t5CUhfFnKhcYfGMTGxtAJp4PSPd+qzmAqAEbyag4wSHbWuccC0ZaX MVLndBKgxYdgX5Y58ikw5qG4nyJXzzeGGtTu+1rqVEfNVtoc7iP0tcrSZJKhgrg+ efZ3GaHG9OZOFi+IDwITWvwzFukq1isTXHmz6baA6snQC5MYgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/uJb15J8zj9ct0BNHHCWNxunjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYz OGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1ZjRkYmU5NDAvMzJiYWUzODctOWE5MC0z OWI4LWI1ZGUtOTIwYjEzOGI1MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGQ2MzhhNjYtMTU3ZC00YjM3LWI0 ODctYzJiNWY0ZGJlOTQwL2RkNjM4YTY2LTE1N2QtNGIzNy1iNDg3LWMyYjVmNGRi ZTk0MC5jcmwwHwYDVR0jBBgwFoAU8SMlgUkCtMcqnJBtJsWQEnyWtlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZDYzOGE2Ni0xNTdkLTRiMzctYjQ4Ny1jMmI1 ZjRkYmU5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkFbKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEbe2JgJIqJA/TxGC/q2qmZuxZ0VCYySWeIg01JMEw59SaUrx2rEqbU BB1Wrw4jH5ohPee1xYM+tBE6RPrBwmt194zAlO+x7c5vSpgaF/yI6B7RdTMxeLZg 3XZGdCcA1XsC6XsnceKIcj7cHlbTQqLC9E4UX+aUeDUhlwNj0M8JkNVnIrS5/4Or 8rvaM8E5NF6EwLJJuBnzdl5t6/LKBvXDJGnNBLYrf9edeFYc0ZHNMcmtneDPb4Z3 hreLjBRmqyu2Kr0daRt80pkNfEo03MU5YLOPLbLQlTXftJ4ZTGZNxlSyStBC1quI r1zFrOz67bo7qr0P4VTt01NRcyM9yWo= -----END CERTIFICATE-----Generated at Sat Apr 12 00:52:45 2025 by rpki-client