$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa File: cd43aa95-3365-3fce-bb60-9f68c08faebc.roa (raw, json) Hash identifier: JECatkgrjLv2rwORuMzS2L4vnKSs6aYBGJ6PfVKy7HU= Subject key identifier: CD:F1:3F:72:1D:52:07:B9:25:43:C4:58:B9:56:0F:48:CB:0A:94:64 Certificate issuer: /CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Certificate serial: 010D0C9F43285849002169447F17A5FF78AA5300 Authority key identifier: 9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa Signing time: Tue 25 Feb 2025 14:00:52 +0000 ROA not before: Tue 25 Feb 2025 14:00:52 +0000 ROA not after: Mon 26 May 2025 13:00:52 +0000 asID: 46979 IP address blocks: 173.225.0.0/21 maxlen: 21 173.225.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:00:21:69:44:7f:17:a5:ff:78:aa:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd3b938-664d-40a2-b584-1fe2d6002819 Validity Not Before: Feb 25 14:00:52 2025 GMT Not After : May 26 13:00:52 2025 GMT Subject: CN=7b7ab5ab-a686-4bfd-a11b-9392a683df79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:09:9f:6a:bc:08:0a:af:98:92:25:ba:c4:99: fb:0a:10:22:32:58:f6:ff:d0:cc:b5:ac:6e:c8:17: a5:34:7f:d2:a8:8d:76:cd:5f:1f:c6:10:5d:df:90: 27:4c:4e:18:50:03:ed:5e:c7:a1:35:e6:45:0b:a7: c0:a6:63:cc:2c:fe:05:35:09:9a:2d:e6:03:37:36: c9:7e:c9:51:ed:f6:d6:4d:8e:c3:fc:21:77:60:d1: 40:8c:d2:4f:10:93:c6:ba:20:49:b0:bc:7e:c9:29: de:9f:6c:0e:49:d5:77:a6:97:69:6f:5b:ba:c5:4a: f0:ed:01:fa:13:93:92:3e:56:e1:94:fc:07:6a:cb: d1:20:25:a9:7e:37:e0:72:de:f7:4e:66:b2:f3:ca: 39:e6:b9:a0:c9:f3:60:ca:bf:1b:4a:80:5c:e8:36: f8:70:47:20:99:19:a7:63:38:b3:db:31:34:b7:af: da:e6:8d:ae:05:32:a8:71:18:e7:13:ef:1e:29:73: 45:bc:74:f7:c0:9b:0e:12:70:e7:7e:85:0c:d1:87: ac:c2:04:02:b9:18:bc:75:f8:60:09:0a:60:95:79: a4:37:e0:1b:57:11:25:9b:cd:b1:9b:a8:8e:b0:e8: 59:df:36:42:6c:ae:69:03:2e:e9:cc:88:c2:93:ca: 9b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F1:3F:72:1D:52:07:B9:25:43:C4:58:B9:56:0F:48:CB:0A:94:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/cd43aa95-3365-3fce-bb60-9f68c08faebc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819/3fd3b938-664d-40a2-b584-1fe2d6002819.crl X509v3 Authority Key Identifier: keyid:9C:FF:2E:D5:B7:8F:A8:92:30:DF:8A:9F:90:60:7B:F3:D6:40:A2:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3fd3b938-664d-40a2-b584-1fe2d6002819.cer sbgp-ipAddrBlock: critical IPv4: 173.225.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:71:be:b4:d0:13:83:84:59:48:7d:79:3d:47:51:b1:e6:56: 8e:ee:55:fa:d7:28:70:82:f1:de:78:63:a6:06:63:40:7b:62: cb:f3:55:50:58:db:87:21:da:d8:63:2a:74:57:73:15:4c:f6: 7a:12:6c:28:df:69:74:01:84:f1:81:d2:3d:a4:95:bc:6d:75: c9:3c:74:d2:4b:7d:ee:11:d8:9b:b4:ea:61:94:6b:d9:48:a8: 95:1e:19:f5:6b:9d:11:2d:d2:7e:44:ee:87:8f:bf:08:dc:9f: 1c:54:24:a0:56:ac:80:77:cf:f1:10:a7:b7:cb:2e:75:b5:7f: 82:a5:fc:61:8d:9f:ce:d4:e1:e1:07:33:72:27:57:eb:bd:ae: f7:85:04:d6:dd:7d:50:12:78:f6:3e:a4:85:0a:4c:58:22:fc: fa:4c:e3:c6:06:8f:46:a4:53:97:7f:92:c7:c8:c4:9a:92:dc: 1b:8d:9b:7b:cb:04:74:42:df:73:87:4a:8b:b7:28:99:c4:5e: d2:d1:f8:b5:44:82:d0:0e:c7:29:19:c8:fd:0a:07:21:ac:50: d9:06:d6:38:a1:87:76:c0:59:3d:28:40:ef:a3:95:98:c4:f7: b9:4f:1d:cc:2b:30:17:ad:9e:5c:40:4a:48:61:1b:d6:30:bb: 43:73:57:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkAIWlEfxel/3iqUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ZkM2I5MzgtNjY0ZC00MGEyLWI1ODQtMWZlMmQ2MDAy ODE5MB4XDTI1MDIyNTE0MDA1MloXDTI1MDUyNjEzMDA1MlowLzEtMCsGA1UEAxMk N2I3YWI1YWItYTY4Ni00YmZkLWExMWItOTM5MmE2ODNkZjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QmfarwICq+YkiW6xJn7ChAiMlj2/9DMtaxu yBelNH/SqI12zV8fxhBd35AnTE4YUAPtXsehNeZFC6fApmPMLP4FNQmaLeYDNzbJ fslR7fbWTY7D/CF3YNFAjNJPEJPGuiBJsLx+ySnen2wOSdV3ppdpb1u6xUrw7QH6 E5OSPlbhlPwHasvRICWpfjfgct73Tmay88o55rmgyfNgyr8bSoBc6Db4cEcgmRmn Yziz2zE0t6/a5o2uBTKocRjnE+8eKXNFvHT3wJsOEnDnfoUM0YeswgQCuRi8dfhg CQpglXmkN+AbVxElm82xm6iOsOhZ3zZCbK5pAy7pzIjCk8qbcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3xP3IdUge5JUPEWLlWD0jLCpRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQz YjkzOC02NjRkLTQwYTItYjU4NC0xZmUyZDYwMDI4MTkvY2Q0M2FhOTUtMzM2NS0z ZmNlLWJiNjAtOWY2OGMwOGZhZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2ZkM2I5MzgtNjY0ZC00MGEyLWI1 ODQtMWZlMmQ2MDAyODE5LzNmZDNiOTM4LTY2NGQtNDBhMi1iNTg0LTFmZTJkNjAw MjgxOS5jcmwwHwYDVR0jBBgwFoAUnP8u1bePqJIw34qfkGB789ZAolcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZmQzYjkzOC02NjRkLTQwYTItYjU4NC0xZmUy ZDYwMDI4MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9xvrTQE4OEWUh9eT1HUbHmVo7uVfrXKHCC8d54Y6YGY0B7YsvzVVBY 24ch2thjKnRXcxVM9noSbCjfaXQBhPGB0j2klbxtdck8dNJLfe4R2Ju06mGUa9lI qJUeGfVrnREt0n5E7oePvwjcnxxUJKBWrIB3z/EQp7fLLnW1f4Kl/GGNn87U4eEH M3InV+u9rveFBNbdfVASePY+pIUKTFgi/PpM48YGj0akU5d/ksfIxJqS3BuNm3vL BHRC33OHSou3KJnEXtLR+LVEgtAOxykZyP0KByGsUNkG1jihh3bAWT0oQO+jlZjE 97lPHcwrMBetnlxASkhhG9Ywu0NzVzw= -----END CERTIFICATE-----Generated at Sun Apr 6 07:15:13 2025 by rpki-client