$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4b2fc99e-f551-3c70-b8b5-4d262a41c5a4.roa File: 4b2fc99e-f551-3c70-b8b5-4d262a41c5a4.roa (raw, json) Hash identifier: 1yK3mGO+yz2yg5npeTzxO9BhFTm/lfQPgise6VroDHY= Subject key identifier: 0B:36:DF:E2:0C:C5:04:5E:5C:93:B2:4F:3F:64:A9:98:37:5E:D5:CE Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858490B4C2151101E3DD0EB32AC80 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4b2fc99e-f551-3c70-b8b5-4d262a41c5a4.roa Signing time: Sat 01 Mar 2025 14:00:52 +0000 ROA not before: Sat 01 Mar 2025 14:00:52 +0000 ROA not after: Fri 30 May 2025 13:00:52 +0000 asID: 61317 IP address blocks: 217.20.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0b:4c:21:51:10:1e:3d:d0:eb:32:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 1 14:00:52 2025 GMT Not After : May 30 13:00:52 2025 GMT Subject: CN=230db293-1721-4399-bfed-3298db62dc41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:29:3a:5c:23:56:4b:a7:97:80:8a:f3:10: 36:0f:b0:68:2b:93:6f:b5:04:e4:d9:25:74:81:ac: 88:ee:a6:87:09:cf:92:98:d9:0d:eb:3d:08:e8:6a: bb:4f:90:1c:14:45:b8:81:5e:5f:a7:1f:35:1a:b2: dc:9e:92:8e:e6:bc:47:62:b0:6d:12:39:d8:14:2a: af:54:c5:17:73:31:e9:e2:da:53:1f:d1:15:aa:f9: bb:2a:77:dd:9b:bd:33:7a:6f:1b:a6:ff:f6:fa:af: 7c:4f:79:36:fb:81:e3:2d:03:9a:1d:a6:38:16:3f: 50:a1:89:9f:83:31:2b:e9:21:b0:61:fb:04:93:5a: 27:0f:59:81:62:29:6c:9b:67:10:82:2d:ec:30:5b: 1d:c2:68:22:7d:61:fb:3a:05:03:95:d6:5e:b2:0d: 68:ef:d0:b0:f1:ae:e1:1f:28:99:c4:3a:38:ea:3a: e8:2c:29:cd:85:31:1f:87:a8:36:c6:72:5f:3b:0b: f8:c6:65:06:7c:73:4a:ac:b7:e4:b8:fa:fb:40:fa: bf:b4:71:72:56:25:71:6e:cc:cd:f8:13:ac:a6:df: be:a5:33:91:44:97:b7:88:ee:3f:e8:49:40:73:30: 0b:d1:a5:da:d1:7d:c3:34:fc:9c:a6:95:56:1e:d9: 6a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:36:DF:E2:0C:C5:04:5E:5C:93:B2:4F:3F:64:A9:98:37:5E:D5:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4b2fc99e-f551-3c70-b8b5-4d262a41c5a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 217.20.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:2c:d1:60:d2:bd:22:6c:0a:67:36:94:e4:ae:eb:58:b3:1e: a5:ed:70:59:cc:ee:20:96:19:dc:54:8a:95:3e:40:0f:64:06: 93:36:4f:31:cb:51:67:be:fd:61:24:be:79:54:ca:09:6d:0f: 1f:cb:ed:e8:96:5c:ee:bb:d0:7a:bf:1c:3b:7c:fd:95:f5:7e: 4f:7a:be:c5:e2:52:26:e5:79:7f:95:47:4a:5c:33:9d:c5:0b: 15:ae:83:cb:74:ac:90:53:ae:1e:0b:78:f9:4f:6f:75:6b:77: e7:6f:05:af:32:cf:f0:8d:bd:59:2f:33:1f:62:44:71:a6:8c: 68:b1:bc:f9:79:f9:52:37:bf:fd:ce:75:22:33:fc:e2:b7:11: 3a:0f:88:23:4b:c1:18:cc:1b:43:28:1e:fb:ac:2c:f0:2c:eb: d4:b2:14:c3:3c:90:a2:21:a2:a4:6c:32:3e:c9:b1:27:fa:f4: 19:94:0f:fc:5e:89:e1:dd:8d:c3:29:a1:77:02:63:b6:77:fd: 66:ab:93:ef:18:6e:2c:17:86:78:70:a4:d3:8d:e3:6a:00:4f: 10:6f:30:f1:f9:4f:3d:3c:bd:fa:5c:8d:9f:4a:40:4e:c1:44: 50:a8:34:da:96:28:7c:f2:5e:a1:df:a5:9a:a5:8c:13:c2:f9: 25:41:16:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCFREB490OsyrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk MjMwZGIyOTMtMTcyMS00Mzk5LWJmZWQtMzI5OGRiNjJkYzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2spOlwjVkunl4CK8xA2D7BoK5NvtQTk2SV0 gayI7qaHCc+SmNkN6z0I6Gq7T5AcFEW4gV5fpx81GrLcnpKO5rxHYrBtEjnYFCqv VMUXczHp4tpTH9EVqvm7Knfdm70zem8bpv/2+q98T3k2+4HjLQOaHaY4Fj9QoYmf gzEr6SGwYfsEk1onD1mBYilsm2cQgi3sMFsdwmgifWH7OgUDldZesg1o79Cw8a7h HyiZxDo46jroLCnNhTEfh6g2xnJfOwv4xmUGfHNKrLfkuPr7QPq/tHFyViVxbszN +BOspt++pTORRJe3iO4/6ElAczAL0aXa0X3DNPycppVWHtlqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAs23+IMxQReXJOyTz9kqZg3XtXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNGIyZmM5OWUtZjU1MS0z YzcwLWI4YjUtNGQyNjJhNDFjNWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2RTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMs0WDSvSJsCmc2lOSu61izHqXtcFnM7iCWGdxUipU+QA9kBpM2TzHL UWe+/WEkvnlUygltDx/L7eiWXO670Hq/HDt8/ZX1fk96vsXiUibleX+VR0pcM53F CxWug8t0rJBTrh4LePlPb3Vrd+dvBa8yz/CNvVkvMx9iRHGmjGixvPl5+VI3v/3O dSIz/OK3EToPiCNLwRjMG0MoHvusLPAs69SyFMM8kKIhoqRsMj7JsSf69BmUD/xe ieHdjcMpoXcCY7Z3/Wark+8YbiwXhnhwpNON42oATxBvMPH5Tz08vfpcjZ9KQE7B RFCoNNqWKHzyXqHfpZqljBPC+SVBFh0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:38 2025 by rpki-client