$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d211989e-d01a-373b-b3b7-167816d1f06f.roa File: d211989e-d01a-373b-b3b7-167816d1f06f.roa (raw, json) Hash identifier: t1zyPLqr3IvZ00tgpokBb4Jdf+Ubb+8+UKD1FEffaBc= Subject key identifier: BB:55:6C:6D:8A:6F:2D:3C:C4:0F:00:47:D3:0A:A4:1B:33:FB:26:6F Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584953C4194925B3B7B73753C580 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d211989e-d01a-373b-b3b7-167816d1f06f.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 25645 IP address blocks: 204.174.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:19:49:25:b3:b7:b7:37:53:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=8d7fb0ef-b520-4b9e-805d-616e4a642cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9d:a6:08:3b:87:a2:d6:6a:fe:f0:e0:e9:4a: f4:5f:2b:5a:76:bd:96:ca:9d:30:13:a1:0e:f3:72: aa:15:75:cb:08:19:72:70:6a:2e:b7:e1:02:3f:3f: 15:f4:55:06:68:55:6c:07:b5:10:77:cf:72:89:fc: 4b:ca:02:84:c3:41:53:a6:f0:ee:41:44:9c:1c:93: 60:ae:a0:f1:8f:4f:70:d5:a0:2e:5c:cf:8c:b4:26: 4a:27:94:99:de:d2:66:40:d0:eb:f3:8b:91:df:d5: 3b:cd:82:3e:b4:cf:7a:86:0b:50:89:b8:7d:24:66: de:06:a7:ac:3a:be:62:5e:0a:c3:ed:33:26:99:dc: 83:de:4a:d2:68:fc:3d:73:d8:ac:8c:ef:b6:cf:0b: 79:b5:ca:82:15:1a:fc:ef:8b:20:b0:7e:92:bd:1c: 28:92:a5:1b:d5:57:72:ee:e7:a1:12:cc:1c:bc:6a: 25:72:53:fe:a3:22:71:26:06:21:bf:c4:53:9e:b3: a5:94:0d:7a:1e:bb:b2:bf:ea:48:eb:23:b2:cb:a9: 9a:9f:e1:10:6f:24:a4:86:7a:1d:45:91:9f:ad:b2: d5:6d:38:da:c1:8b:44:ff:03:cb:69:aa:a5:86:3e: 06:23:3c:45:3a:d9:0d:b4:31:c2:e5:9c:06:c1:cd: 87:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:55:6C:6D:8A:6F:2D:3C:C4:0F:00:47:D3:0A:A4:1B:33:FB:26:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d211989e-d01a-373b-b3b7-167816d1f06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 204.174.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ad:3f:0a:2d:12:26:94:1a:f7:30:75:28:74:78:38:d7:eb: 04:b0:8a:c8:de:c4:35:33:f7:15:39:f8:f9:7d:87:c1:76:92: 62:ab:1f:d3:8d:0e:42:f9:d3:45:3b:9b:9c:f3:d9:39:e6:49: b3:55:3a:b0:f0:0d:46:40:c8:93:e2:95:6b:df:e4:1a:19:89: 9c:14:62:bf:46:5b:2e:e2:f5:c7:a2:5e:25:cb:04:90:50:f7: 6f:45:de:31:6e:07:a2:08:ba:bb:a6:bd:c2:d8:0e:7a:15:63: 5c:dd:c5:05:a4:49:73:0c:de:88:30:c9:8f:2a:00:1b:65:67: 68:96:63:6f:ba:c1:a9:e0:4c:6a:7c:95:89:12:d9:67:57:09: dd:46:c1:73:68:29:91:94:a0:05:9c:0f:fe:32:48:1c:3b:1d: 47:72:81:27:1e:38:47:9d:27:88:b3:a9:0d:3a:38:88:fc:47: d9:ee:12:62:c3:7c:b4:5d:17:05:09:0d:d1:b4:80:03:e3:93: ce:57:b6:39:8b:53:73:69:44:b5:f9:43:96:ec:07:4c:c5:aa: 02:b3:d8:a9:bb:1d:25:0e:33:47:bc:bd:73:99:2e:d0:d4:9a: 7a:f0:2c:d2:5e:c2:97:cb:e5:ff:b4:af:82:df:d2:37:14:9d: 6e:c3:7d:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBlJJbO3tzdTxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGQ3ZmIwZWYtYjUyMC00YjllLTgwNWQtNjE2ZTRhNjQyY2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ2mCDuHotZq/vDg6Ur0Xytadr2Wyp0wE6EO 83KqFXXLCBlycGout+ECPz8V9FUGaFVsB7UQd89yifxLygKEw0FTpvDuQUScHJNg rqDxj09w1aAuXM+MtCZKJ5SZ3tJmQNDr84uR39U7zYI+tM96hgtQibh9JGbeBqes Or5iXgrD7TMmmdyD3krSaPw9c9isjO+2zwt5tcqCFRr874sgsH6SvRwokqUb1Vdy 7uehEswcvGolclP+oyJxJgYhv8RTnrOllA16Hruyv+pI6yOyy6man+EQbySkhnod RZGfrbLVbTjawYtE/wPLaaqlhj4GIzxFOtkNtDHC5ZwGwc2HxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtVbG2Kby08xA8AR9MKpBsz+yZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZDIxMTk4OWUtZDAxYS0z NzNiLWIzYjctMTY3ODE2ZDFmMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzK4eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABStPwotEiaUGvcwdSh0eDjX6wSwisjexDUz9xU5+Pl9h8F2kmKrH9ON DkL500U7m5zz2TnmSbNVOrDwDUZAyJPilWvf5BoZiZwUYr9GWy7i9ceiXiXLBJBQ 929F3jFuB6IIurumvcLYDnoVY1zdxQWkSXMM3ogwyY8qABtlZ2iWY2+6wangTGp8 lYkS2WdXCd1GwXNoKZGUoAWcD/4ySBw7HUdygSceOEedJ4izqQ06OIj8R9nuEmLD fLRdFwUJDdG0gAPjk85XtjmLU3NpRLX5Q5bsB0zFqgKz2Km7HSUOM0e8vXOZLtDU mnrwLNJewpfL5f+0r4Lf0jcUnW7DfbU= -----END CERTIFICATE-----Generated at Sat Apr 12 00:28:47 2025 by rpki-client