$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/503f3e1b-dedb-3f83-b9c5-54f306255b2c.roa File: 503f3e1b-dedb-3f83-b9c5-54f306255b2c.roa (raw, json) Hash identifier: zDzIfKX6/VeQDb4NDhCX1euSfAXMrb1VNJUM3nlVfno= Subject key identifier: F5:67:82:2C:2D:03:13:81:C6:11:0B:DC:78:EF:2D:D2:E0:3A:3B:EF Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F432858495ABEDF838E17193842542D80 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/503f3e1b-dedb-3f83-b9c5-54f306255b2c.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 7029 IP address blocks: 217.20.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:df:83:8e:17:19:38:42:54:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=35ed4ee0-a19b-4bdc-8aa5-5c76daaeae65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:60:a4:79:b0:07:c5:e1:b0:39:29:cd:31: 0b:9c:85:1e:be:0a:93:04:69:d2:aa:20:04:e9:e9: e5:5f:60:a0:c2:d5:61:bf:3a:fe:6a:ad:41:2a:ac: bd:0e:a2:bc:47:46:70:e5:ef:c6:f2:63:95:a7:67: 74:4b:23:f9:0d:e7:eb:7d:f8:4a:a9:c3:f5:85:15: 79:53:fd:d0:bf:92:d4:72:3f:a8:75:51:19:1d:af: ea:73:db:41:5b:94:b5:f0:b9:c6:38:e2:f5:91:e6: a3:ef:2b:53:67:26:e1:3a:b8:a7:cc:9a:62:ed:32: 7d:a7:bb:41:ec:4f:ba:8a:1f:61:4d:f0:db:3e:8c: f9:56:9b:07:9d:ed:ed:5f:45:8d:22:9d:3d:05:43: 25:16:30:78:30:fd:4b:ad:95:85:46:ea:b8:40:20: 91:10:7d:fc:11:29:0a:15:ac:b7:7b:7c:a8:58:a6: bd:6c:ed:5c:a0:bf:6a:64:d6:b4:22:2e:93:71:a5: 14:af:cb:a8:62:e3:5f:4d:8f:a1:b4:6b:28:1e:db: 54:eb:90:3d:bc:7d:45:aa:a8:8f:8c:b9:2b:79:63: 5c:88:2d:15:28:56:f0:59:73:20:c7:02:13:c2:28: 53:5d:c5:fe:a7:be:d0:3c:8f:70:0e:27:d8:3e:18: 39:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:67:82:2C:2D:03:13:81:C6:11:0B:DC:78:EF:2D:D2:E0:3A:3B:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/503f3e1b-dedb-3f83-b9c5-54f306255b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 217.20.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:86:b5:23:9c:e8:3a:30:7e:cd:14:f7:d7:97:22:14:53:59: 4d:a0:c1:cd:5b:d6:7b:1a:c9:8f:c9:61:76:b7:13:14:36:ca: 80:47:df:1d:47:a7:5f:da:0f:1a:9b:2a:4e:72:97:e9:ee:91: 12:c0:f7:63:8f:d2:00:eb:d4:e4:74:9c:09:50:0c:7e:80:54: 4d:81:1f:da:54:22:11:8c:59:0f:cf:14:3e:22:39:b7:4c:eb: a5:e8:f2:33:0e:c0:cd:d3:76:26:d9:be:a7:5d:06:bf:34:c7: 43:4f:d4:f4:7c:ea:23:56:a2:ee:e5:43:b0:7d:6e:fb:5c:16: 8d:1b:5d:b6:e3:16:eb:01:1f:00:1c:af:2a:2f:f4:e6:ad:42: 62:60:ae:28:57:23:ef:51:56:45:39:45:33:30:5b:93:cd:49: a9:b1:58:dc:4a:7e:13:36:d8:0c:58:d5:bd:bd:dd:b6:0f:f1: 60:8c:90:fd:91:fa:a8:1a:a7:f5:13:e7:68:6d:01:6c:a5:36: 40:1c:b4:26:a2:80:c9:a4:aa:0d:6b:d7:30:58:3c:b9:a0:26: 2b:5a:35:4f:fb:22:90:ec:8d:b0:7e:01:10:34:a1:10:2c:44: a3:1f:b5:11:21:7a:48:74:c9:3e:da:09:3f:99:c8:81:b5:4b: 82:3d:e6:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavt+DjhcZOEJULYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MzVlZDRlZTAtYTE5Yi00YmRjLThhYTUtNWM3NmRhYWVhZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u5gpHmwB8XhsDkpzTELnIUevgqTBGnSqiAE 6enlX2CgwtVhvzr+aq1BKqy9DqK8R0Zw5e/G8mOVp2d0SyP5DefrffhKqcP1hRV5 U/3Qv5LUcj+odVEZHa/qc9tBW5S18LnGOOL1keaj7ytTZybhOrinzJpi7TJ9p7tB 7E+6ih9hTfDbPoz5VpsHne3tX0WNIp09BUMlFjB4MP1LrZWFRuq4QCCREH38ESkK Fay3e3yoWKa9bO1coL9qZNa0Ii6TcaUUr8uoYuNfTY+htGsoHttU65A9vH1FqqiP jLkreWNciC0VKFbwWXMgxwITwihTXcX+p77QPI9wDifYPhg5bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVngiwtAxOBxhEL3HjvLdLgOjvvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNTAzZjNlMWItZGVkYi0z ZjgzLWI5YzUtNTRmMzA2MjU1YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqGtSOc6Dowfs0U99eXIhRTWU2gwc1b1nsayY/JYXa3ExQ2yoBH3x1H p1/aDxqbKk5yl+nukRLA92OP0gDr1OR0nAlQDH6AVE2BH9pUIhGMWQ/PFD4iObdM 66Xo8jMOwM3TdibZvqddBr80x0NP1PR86iNWou7lQ7B9bvtcFo0bXbbjFusBHwAc ryov9OatQmJgrihXI+9RVkU5RTMwW5PNSamxWNxKfhM22AxY1b293bYP8WCMkP2R +qgap/UT52htAWylNkActCaigMmkqg1r1zBYPLmgJitaNU/7IpDsjbB+ARA0oRAs RKMftREhekh0yT7aCT+ZyIG1S4I95k4= -----END CERTIFICATE-----Generated at Wed Apr 16 04:46:10 2025 by rpki-client