$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa File: fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa (raw, json) Hash identifier: 4zwzIev2UqhiaHn7IYRC9Tj60u4sGnXAZ5eV5DdJ87g= Subject key identifier: FF:E1:0E:4E:1C:DB:6F:79:7D:EB:40:F8:60:41:90:62:E8:CC:FB:7A Certificate issuer: /CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Certificate serial: 010D0C9F4328584961B99F26F1E40F130B41B080 Authority key identifier: AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 398573 IP address blocks: 204.108.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:9f:26:f1:e4:0f:13:0b:41:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032085af-3c11-4e53-8db4-4604b4f13aa1 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=84b3bf84-9690-41a3-8853-54ed647ae08b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b0:50:5c:3b:59:66:d3:aa:d8:8e:51:d0:14: 92:79:4a:ed:aa:32:17:65:ab:c5:a1:43:ca:d5:cc: fa:90:8b:94:b4:0d:0b:71:19:f0:fb:4b:c3:2a:64: 09:7e:5e:07:53:29:9a:7f:ea:d2:6e:43:08:1e:e5: 4d:dd:2c:7d:37:f8:35:f1:c2:78:47:89:5f:b4:ec: 07:78:00:64:08:36:e7:6f:1f:53:4a:98:3e:e4:b4: 81:6b:d5:c9:f8:5b:32:0b:98:e6:58:ec:16:49:d7: 95:dc:a2:6e:f8:84:cc:65:a6:f5:dc:12:85:d6:89: ea:39:9f:f4:22:12:15:66:bd:4f:6a:08:2e:7d:20: 71:45:a6:87:05:ad:a0:ce:96:ce:36:56:15:43:a6: 6d:0c:fc:48:91:d9:a4:2d:58:86:b4:0c:69:2d:32: 04:6c:76:46:11:41:d3:d3:c0:ff:06:58:d7:53:aa: 30:ae:51:5a:d2:89:cc:46:d4:0d:8f:30:ca:88:b2: ba:c2:ed:25:69:4c:bd:49:9e:4f:69:ca:de:74:a1: 40:9c:92:76:06:d2:3a:33:5c:10:5a:d2:13:c8:12: 04:9d:ba:dc:aa:0e:30:9e:9d:d8:96:47:a1:4a:d1: 6f:81:3b:f4:e5:c2:11:b8:cb:8e:44:ca:71:b3:23: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:0E:4E:1C:DB:6F:79:7D:EB:40:F8:60:41:90:62:E8:CC:FB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/fd10b3f3-1770-3a34-88fd-5f01b2d1720d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1/032085af-3c11-4e53-8db4-4604b4f13aa1.crl X509v3 Authority Key Identifier: keyid:AB:83:4E:8E:EF:63:73:07:54:ED:37:47:E8:9B:5F:BA:86:0C:0C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/032085af-3c11-4e53-8db4-4604b4f13aa1.cer sbgp-ipAddrBlock: critical IPv4: 204.108.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:62:fa:86:44:fa:8a:0a:32:d4:71:39:d1:53:63:0b:53:37: d4:38:30:a8:90:93:a4:1d:23:b3:2b:6a:aa:3e:3c:c9:b2:24: e1:38:80:3b:48:30:17:ed:3e:f0:fd:c1:39:2a:a7:f7:29:0c: 96:68:8d:67:58:a9:de:e1:19:ee:90:da:41:1b:30:5d:cb:20: 66:c2:b7:e3:9f:24:d8:f8:48:5d:80:16:1b:62:d9:4d:e1:a7: f4:82:f2:6a:e2:1b:17:85:32:7e:4d:c2:b9:54:1f:ab:94:6d: ec:4b:72:ba:6d:42:eb:d1:77:8f:51:a4:ee:b4:98:1f:bd:da: 9f:44:1b:cc:f3:dd:cc:0d:ee:df:e2:bf:32:ba:71:31:ba:17: bc:8d:76:90:d5:1b:76:df:73:dd:44:2b:04:73:ed:ba:43:1e: c0:84:28:da:31:0a:cc:3f:7c:60:24:fc:8c:8d:ee:cd:b4:b6: e2:ba:ca:8f:ef:7e:f8:30:ed:99:e4:89:1b:dd:d8:2f:bd:75: 11:3b:08:a7:8d:ab:87:e7:91:12:0c:19:9f:13:d3:53:24:46: d0:66:06:14:9f:03:bd:9d:45:71:25:08:35:ab:8a:36:b2:82: 6f:3b:c9:0f:0d:35:81:5d:3c:6f:b9:16:87:0c:8a:dc:23:dd: f3:2e:7b:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZ8m8eQPEwtBsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDMyMDg1YWYtM2MxMS00ZTUzLThkYjQtNDYwNGI0ZjEz YWExMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk ODRiM2JmODQtOTY5MC00MWEzLTg4NTMtNTRlZDY0N2FlMDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrBQXDtZZtOq2I5R0BSSeUrtqjIXZavFoUPK 1cz6kIuUtA0LcRnw+0vDKmQJfl4HUymaf+rSbkMIHuVN3Sx9N/g18cJ4R4lftOwH eABkCDbnbx9TSpg+5LSBa9XJ+FsyC5jmWOwWSdeV3KJu+ITMZab13BKF1onqOZ/0 IhIVZr1PaggufSBxRaaHBa2gzpbONlYVQ6ZtDPxIkdmkLViGtAxpLTIEbHZGEUHT 08D/BljXU6owrlFa0onMRtQNjzDKiLK6wu0laUy9SZ5PacredKFAnJJ2BtI6M1wQ WtITyBIEnbrcqg4wnp3YlkehStFvgTv05cIRuMuORMpxsyOsQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/hDk4c2295fetA+GBBkGLozPt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIw ODVhZi0zYzExLTRlNTMtOGRiNC00NjA0YjRmMTNhYTEvZmQxMGIzZjMtMTc3MC0z YTM0LTg4ZmQtNWYwMWIyZDE3MjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDMyMDg1YWYtM2MxMS00ZTUzLThk YjQtNDYwNGI0ZjEzYWExLzAzMjA4NWFmLTNjMTEtNGU1My04ZGI0LTQ2MDRiNGYx M2FhMS5jcmwwHwYDVR0jBBgwFoAUq4NOju9jcwdU7TdH6JtfuoYMDFYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wMzIwODVhZi0zYzExLTRlNTMtOGRiNC00NjA0 YjRmMTNhYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBi+oZE+ooKMtRxOdFTYwtTN9Q4MKiQk6QdI7Mraqo+PMmyJOE4gDtI MBftPvD9wTkqp/cpDJZojWdYqd7hGe6Q2kEbMF3LIGbCt+OfJNj4SF2AFhti2U3h p/SC8mriGxeFMn5NwrlUH6uUbexLcrptQuvRd49RpO60mB+92p9EG8zz3cwN7t/i vzK6cTG6F7yNdpDVG3bfc91EKwRz7bpDHsCEKNoxCsw/fGAk/IyN7s20tuK6yo/v fvgw7ZnkiRvd2C+9dRE7CKeNq4fnkRIMGZ8T01MkRtBmBhSfA72dRXElCDWrijay gm87yQ8NNYFdPG+5FocMitwj3fMue7I= -----END CERTIFICATE-----Generated at Fri Apr 11 21:46:30 2025 by rpki-client