$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa File: caa97378-5f08-3b0d-b7e1-827ad74af39f.roa (raw, json) Hash identifier: waShOIEckZ+Pe9UFCHxZCLAX9dFMUrncxZuUkGFSkMo= Subject key identifier: CF:4B:A2:3C:70:DB:20:3F:22:D6:09:4A:03:C4:B6:91:75:A5:27:71 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F43285848C41B7D3A066364DA6023D400 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 36290 IP address blocks: 204.19.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7d:3a:06:63:64:da:60:23:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=2e8ca322-3e86-460f-98f8-e3769c1af3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:eb:35:fa:b3:41:10:85:8b:cb:f2:11:ad:c3: 22:1f:83:13:7f:05:ef:c7:2f:a2:15:1c:8c:fd:44: 95:71:0d:d1:ee:2d:bc:d5:f9:3c:81:7c:94:2a:1a: 9b:53:43:31:fb:42:02:77:26:c2:5e:58:1b:67:a9: 6d:4b:0b:5a:4d:3d:e0:1d:23:2d:fb:83:12:3f:f3: 32:4f:64:81:14:1b:f1:b6:ac:a7:fb:07:5a:71:27: 04:6d:8d:67:f8:84:87:8c:63:c6:07:3a:cf:69:15: 39:d6:bb:1b:e0:18:08:73:fd:54:fe:d4:fd:f5:42: 42:53:e9:1a:a4:c5:30:e9:85:68:2d:84:96:de:88: 4c:73:35:62:24:2d:05:82:0c:14:0b:0a:05:fe:02: 90:82:7a:dd:1e:85:e1:a5:a7:a5:7a:17:7e:2f:b7: 8e:c3:16:f5:35:eb:e3:5b:72:5b:6d:3b:9b:96:b2: 18:6e:64:68:6b:ba:67:84:02:89:ff:f8:cf:a9:8c: c6:5a:a1:67:5b:6a:0f:15:7f:51:67:52:eb:01:d5: b7:f0:bd:3b:10:cb:61:73:b3:aa:60:58:a5:6f:79: 4f:b6:ce:48:ca:40:5d:23:91:d6:73:e0:94:fc:57: b5:15:dd:e1:7c:05:61:35:4e:8a:0b:48:f8:7a:a8: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:A2:3C:70:DB:20:3F:22:D6:09:4A:03:C4:B6:91:75:A5:27:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/caa97378-5f08-3b0d-b7e1-827ad74af39f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.19.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:db:01:27:b2:25:1c:bc:63:55:85:1d:84:80:e9:a2:a1:08: dc:ac:d9:5a:9b:5b:d9:a8:53:7b:fa:4c:77:86:10:7f:0a:71: 3b:50:c6:44:2c:65:a6:e6:c6:26:da:e0:ef:68:aa:b6:b7:b8: 53:24:9c:78:98:81:4f:34:24:d1:71:1b:25:b0:30:e2:44:c1: 5c:f7:48:5c:1d:07:9c:60:83:7d:db:2b:ef:81:1b:e7:11:68: df:70:0b:0b:6e:b1:6c:f6:18:19:29:61:70:02:ae:0c:de:58: b5:4d:91:9e:8b:93:4d:75:a9:23:dc:c9:36:26:18:d8:bb:a8: 14:fb:e0:ec:39:01:95:f8:52:0d:fb:44:2c:de:35:12:f4:4a: ad:ab:12:ea:66:bd:b7:bd:a7:55:a0:7f:ce:a0:3e:16:c6:e1: 10:a3:c3:72:51:71:f6:7d:96:22:f1:f7:ab:31:c4:59:c1:1a: 20:30:d0:e5:60:1d:32:41:9f:67:01:a4:ac:c5:f2:7e:6f:41: 3a:e6:8a:0c:6d:c5:f1:5f:24:bf:7c:98:64:94:9a:97:a8:94: 4d:74:42:1b:43:54:ae:e2:03:a9:58:5b:5c:7f:d4:fc:41:da: 73:d5:70:4d:b4:9f:94:6c:37:17:dc:d4:bb:ae:2a:e3:df:f2: 4f:4b:bf:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG306BmNk2mAj1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk MmU4Y2EzMjItM2U4Ni00NjBmLTk4ZjgtZTM3NjljMWFmM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+s1+rNBEIWLy/IRrcMiH4MTfwXvxy+iFRyM /USVcQ3R7i281fk8gXyUKhqbU0Mx+0ICdybCXlgbZ6ltSwtaTT3gHSMt+4MSP/My T2SBFBvxtqyn+wdacScEbY1n+ISHjGPGBzrPaRU51rsb4BgIc/1U/tT99UJCU+ka pMUw6YVoLYSW3ohMczViJC0FggwUCwoF/gKQgnrdHoXhpaelehd+L7eOwxb1Nevj W3JbbTublrIYbmRoa7pnhAKJ//jPqYzGWqFnW2oPFX9RZ1LrAdW38L07EMthc7Oq YFilb3lPts5IykBdI5HWc+CU/Fe1Fd3hfAVhNU6KC0j4eqjahwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9Lojxw2yA/ItYJSgPEtpF1pSdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvY2FhOTczNzgtNWYwOC0z YjBkLWI3ZTEtODI3YWQ3NGFmMzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbbASeyJRy8Y1WFHYSA6aKhCNys2VqbW9moU3v6THeGEH8KcTtQxkQs Zabmxiba4O9oqra3uFMknHiYgU80JNFxGyWwMOJEwVz3SFwdB5xgg33bK++BG+cR aN9wCwtusWz2GBkpYXACrgzeWLVNkZ6Lk011qSPcyTYmGNi7qBT74Ow5AZX4Ug37 RCzeNRL0Sq2rEupmvbe9p1Wgf86gPhbG4RCjw3JRcfZ9liLx96sxxFnBGiAw0OVg HTJBn2cBpKzF8n5vQTrmigxtxfFfJL98mGSUmpeolE10QhtDVK7iA6lYW1x/1PxB 2nPVcE20n5RsNxfc1LuuKuPf8k9Lv04= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:30 2025 by rpki-client