$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa File: 3880b21f-244e-35e6-a256-bd5d4c123331.roa (raw, json) Hash identifier: hwDhbmHKxcrfiMGaRQIIOZPjPpylvmBXJgOTy9yJnAM= Subject key identifier: 47:0C:A4:46:7F:9E:BC:41:28:6F:B5:85:57:A2:85:83:DD:56:D0:6E Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F432858493C0941A8825D7D6A67081F80 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 15204 IP address blocks: 204.15.52.0/22 maxlen: 22 204.15.52.0/23 maxlen: 23 204.15.52.0/24 maxlen: 24 204.15.53.0/24 maxlen: 24 204.15.54.0/23 maxlen: 23 204.15.54.0/24 maxlen: 24 204.15.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:41:a8:82:5d:7d:6a:67:08:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=d64dc45d-d625-4024-a148-30d3b621c6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:37:0d:ab:d1:dd:30:89:99:ed:81:04:a7:82: ca:de:8b:23:f5:cb:da:76:9c:58:f9:36:e3:7b:51: 07:b1:3a:cb:10:13:1a:08:55:7f:d1:b9:16:83:3d: 86:74:53:2f:95:a2:7d:b5:a7:f0:e1:b6:ac:4c:6d: af:26:b0:b9:fe:2e:d1:00:6e:67:a1:85:24:66:24: 89:16:da:b3:ff:89:c6:21:f7:82:93:fc:e6:37:c6: 99:44:4d:6e:54:d6:5a:0f:e3:b8:9f:a8:03:b2:22: 54:85:7f:fd:e6:62:21:64:64:8c:5a:3b:7d:28:14: 08:4a:fc:b1:6f:09:20:f0:8a:f9:f1:16:2f:04:02: bf:f3:3b:d7:ba:a5:e5:59:59:a3:88:5e:dc:f0:06: 01:53:d3:56:51:23:eb:42:e7:6c:8f:13:ff:97:28: cf:6a:1c:60:77:53:3a:d8:5b:08:e1:ae:57:83:83: 86:c2:0d:24:9c:6f:84:0c:9f:e4:fa:1c:37:7d:1d: 5d:22:3b:ad:99:99:5d:66:59:72:b9:23:4f:13:3c: 05:f4:21:d7:2f:1c:8f:ff:1b:cf:9a:ba:bf:6e:c7: c5:de:97:e9:da:88:19:37:80:6f:7d:44:f0:cd:e8: bd:43:47:71:4b:d4:a2:aa:99:3e:77:1b:c6:53:50: ab:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0C:A4:46:7F:9E:BC:41:28:6F:B5:85:57:A2:85:83:DD:56:D0:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: 204.15.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:15:99:79:66:cc:c6:21:91:9b:26:87:b2:58:f6:91:a9:72: ee:6e:1a:ea:06:e2:8a:05:d2:f0:18:85:0d:95:b6:34:57:3c: cf:9c:d6:21:89:7a:d7:c5:c0:32:3b:68:bf:20:07:46:c6:f6: 14:37:5d:0b:9f:30:d3:3a:cc:fd:b6:e1:10:72:ed:8c:ae:da: 03:f7:c7:09:61:89:ff:5e:98:4e:35:44:81:90:f2:79:4c:fd: 5e:27:b9:26:55:be:53:db:b4:22:6f:2a:36:c5:1d:42:2e:18: 59:8c:63:c5:37:0e:9a:8a:8b:cf:f7:ed:81:7f:b0:a9:b1:f0: c5:5a:16:f3:8a:ac:d4:06:7b:5a:71:51:3c:d9:51:d2:b6:e1: 67:51:10:05:ab:ca:35:97:67:ab:c5:2d:56:c9:13:77:29:ae: a8:64:7f:54:36:96:98:b1:e1:83:35:2b:ec:6e:75:e5:57:04: c4:26:44:d3:20:b5:64:2e:5a:5e:d9:af:1e:fe:af:6e:fb:b1: 52:4d:5f:4c:07:20:f3:86:6f:ac:94:1a:e7:73:e0:7a:f8:58: 7d:af:bf:44:31:63:fa:28:de:95:e1:42:98:5f:e0:d6:1a:49: 52:7a:e6:13:ab:99:3f:16:3f:4d:22:ac:f8:fa:9a:74:a3:81: 77:88:f6:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUGogl19amcIH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk ZDY0ZGM0NWQtZDYyNS00MDI0LWExNDgtMzBkM2I2MjFjNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDcNq9HdMImZ7YEEp4LK3osj9cvadpxY+Tbj e1EHsTrLEBMaCFV/0bkWgz2GdFMvlaJ9tafw4basTG2vJrC5/i7RAG5noYUkZiSJ Ftqz/4nGIfeCk/zmN8aZRE1uVNZaD+O4n6gDsiJUhX/95mIhZGSMWjt9KBQISvyx bwkg8Ir58RYvBAK/8zvXuqXlWVmjiF7c8AYBU9NWUSPrQudsjxP/lyjPahxgd1M6 2FsI4a5Xg4OGwg0knG+EDJ/k+hw3fR1dIjutmZldZllyuSNPEzwF9CHXLxyP/xvP mrq/bsfF3pfp2ogZN4BvfUTwzei9Q0dxS9Siqpk+dxvGU1CrJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcMpEZ/nrxBKG+1hVeihYPdVtBuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvMzg4MGIyMWYtMjQ0ZS0z NWU2LWEyNTYtYmQ1ZDRjMTIzMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA80MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcVmXlmzMYhkZsmh7JY9pGpcu5uGuoG4ooF0vAYhQ2VtjRXPM+c1iGJ etfFwDI7aL8gB0bG9hQ3XQufMNM6zP224RBy7Yyu2gP3xwlhif9emE41RIGQ8nlM /V4nuSZVvlPbtCJvKjbFHUIuGFmMY8U3DpqKi8/37YF/sKmx8MVaFvOKrNQGe1px UTzZUdK24WdREAWryjWXZ6vFLVbJE3cprqhkf1Q2lpix4YM1K+xudeVXBMQmRNMg tWQuWl7Zrx7+r277sVJNX0wHIPOGb6yUGudz4Hr4WH2vv0QxY/oo3pXhQphf4NYa SVJ65hOrmT8WP00irPj6mnSjgXeI9gc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:26 2025 by rpki-client