$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa File: 325875a8-7f1a-358a-a215-06cc79b97d9a.roa (raw, json) Hash identifier: T8OjguabamUtYHWvBaWc7Yf3qyG6m4mZbWVYaSfCAUI= Subject key identifier: E3:61:8A:D3:4D:44:93:79:DC:06:EF:E8:A8:D4:FC:97:CF:32:14:55 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F43285848A99615E964826A38F02909C0 Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 395567 IP address blocks: 172.83.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:15:e9:64:82:6a:38:f0:29:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=f0fa8a8c-d3cf-49ff-ab1a-794eb42c4203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3d:1c:0e:17:95:a6:37:9e:ca:cc:da:da:f0: 62:0e:a4:a2:1a:43:3d:d8:66:3c:68:1d:0d:74:e5: f4:50:82:31:83:c3:13:d1:94:fc:5a:1a:4d:f5:01: 75:4f:33:01:23:02:18:12:03:e8:f4:8e:e5:31:1a: 10:50:36:85:7f:e9:00:f7:cf:8b:2b:db:98:e6:e9: 4b:44:6e:58:a4:1c:81:08:c5:94:3f:e9:24:b6:71: 73:0a:cb:ac:8f:84:8f:40:b0:1a:ad:68:97:bb:ac: 2e:03:32:18:46:f1:4d:e7:e9:f6:f6:7f:f4:db:76: e7:74:ab:87:00:76:1e:f7:50:99:74:00:d8:4a:d8: a2:99:e7:04:c2:7d:a3:7c:c6:b6:b5:a7:a2:2a:3f: 62:eb:4b:c5:d9:d3:6d:7c:7f:69:90:94:89:07:f5: 0d:55:cf:6c:34:1e:4d:9b:25:6d:fd:50:5e:46:3d: 55:de:49:9f:60:13:a3:9f:34:cc:7b:a3:c4:f9:d8: d9:c3:b8:3a:2f:54:3e:be:d3:8a:a2:cd:e4:13:5c: dd:d7:0c:7b:8a:98:ba:01:2e:22:89:ff:a6:22:74: 21:16:a4:98:50:e4:87:77:3b:df:4e:e1:80:4a:50: 8e:43:2a:ff:8d:20:de:32:99:02:2f:5a:fd:65:5f: 50:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:61:8A:D3:4D:44:93:79:DC:06:EF:E8:A8:D4:FC:97:CF:32:14:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/325875a8-7f1a-358a-a215-06cc79b97d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 172.83.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:d0:1f:02:53:3a:51:cc:f4:f4:c5:1c:3f:08:a3:c6:6c:13: 14:a5:ba:a8:f4:93:41:bd:97:6b:4e:ad:12:98:59:20:a4:f4: b7:bb:06:e9:e1:1e:22:0a:06:cf:0e:ad:77:ab:44:13:b1:e8: 1c:4b:0c:f5:16:23:c1:cf:04:20:51:1b:3e:4b:72:1c:25:ce: ff:85:89:4d:b8:28:5b:23:c4:eb:8c:a2:62:19:58:1f:de:0a: eb:63:82:9c:4a:94:08:22:24:e8:3e:1f:e9:84:eb:60:89:14: d0:42:da:09:30:e6:60:be:fa:8b:9a:aa:d7:87:46:b5:df:86: e7:d9:54:ce:38:14:46:73:6f:ab:f1:ba:4c:3d:dd:b8:84:43: a2:46:02:72:22:dc:ff:fe:93:37:4b:2e:fe:18:c7:8f:b1:16: a0:d7:d9:c0:60:50:0a:a6:cf:65:7e:49:e9:2c:f6:8e:95:07: 23:70:c3:fa:7a:57:49:eb:d2:3d:a7:40:6e:6c:32:22:a1:0c: e5:95:95:d5:22:20:cc:9e:16:fa:e4:cb:b5:b4:eb:e4:99:47: 3c:f3:0c:18:eb:87:66:ef:ca:88:42:d7:cd:18:f3:e0:b6:0f: 2a:9e:1d:09:59:21:3f:40:7b:6c:73:ec:7f:51:b3:23:38:7e: ae:99:ae:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplhXpZIJqOPApCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjBmYThhOGMtZDNjZi00OWZmLWFiMWEtNzk0ZWI0MmM0MjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj0cDheVpjeeysza2vBiDqSiGkM92GY8aB0N dOX0UIIxg8MT0ZT8WhpN9QF1TzMBIwIYEgPo9I7lMRoQUDaFf+kA98+LK9uY5ulL RG5YpByBCMWUP+kktnFzCsusj4SPQLAarWiXu6wuAzIYRvFN5+n29n/023bndKuH AHYe91CZdADYStiimecEwn2jfMa2taeiKj9i60vF2dNtfH9pkJSJB/UNVc9sNB5N myVt/VBeRj1V3kmfYBOjnzTMe6PE+djZw7g6L1Q+vtOKos3kE1zd1wx7ipi6AS4i if+mInQhFqSYUOSHdzvfTuGASlCOQyr/jSDeMpkCL1r9ZV9QAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONhitNNRJN53Abv6KjU/JfPMhRVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMzI1ODc1YTgtN2YxYS0z NThhLWEyMTUtMDZjYzc5Yjk3ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHQHwJTOlHM9PTFHD8Io8ZsExSluqj0k0G9l2tOrRKYWSCk9Le7Bunh HiIKBs8OrXerRBOx6BxLDPUWI8HPBCBRGz5Lchwlzv+FiU24KFsjxOuMomIZWB/e CutjgpxKlAgiJOg+H+mE62CJFNBC2gkw5mC++ouaqteHRrXfhufZVM44FEZzb6vx ukw93biEQ6JGAnIi3P/+kzdLLv4Yx4+xFqDX2cBgUAqmz2V+Seks9o6VByNww/p6 V0nr0j2nQG5sMiKhDOWVldUiIMyeFvrky7W06+SZRzzzDBjrh2bvyohC180Y8+C2 DyqeHQlZIT9Ae2xz7H9RsyM4fq6Zrrk= -----END CERTIFICATE-----Generated at Sat Apr 12 11:42:30 2025 by rpki-client