$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b400e87e-018c-3e74-a61d-6416c06baf20.roa File: b400e87e-018c-3e74-a61d-6416c06baf20.roa (raw, json) Hash identifier: ekQIDPaXJFmjQJbJJ9Q0FVTqo58j7Wsc7ftbKDy8Y78= Subject key identifier: FA:46:2B:72:06:44:43:D9:93:12:AA:91:BD:B2:37:65:64:B6:B8:9A Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584929E3C6057F8458DC45BB5BC0 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b400e87e-018c-3e74-a61d-6416c06baf20.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 395963 IP address blocks: 205.213.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:c6:05:7f:84:58:dc:45:bb:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=92e06744-7915-491f-b72e-5961d043ec83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:53:19:9d:c2:cb:5e:46:69:da:80:cf:b5: 39:8d:cd:a8:f5:85:28:21:86:1b:86:1f:ef:ea:b9: 1d:8f:5c:cd:07:d7:d5:89:13:0b:b4:fc:c2:48:3d: a8:b2:d4:1a:d5:27:7a:a1:12:41:63:d6:15:e1:25: 2f:3e:22:0c:55:e6:8c:87:d0:9e:75:96:1d:2c:ab: 1f:ef:47:54:4e:c6:6c:91:46:e7:13:c0:5f:6b:23: 22:5a:8f:92:97:7d:b9:3b:1d:1b:66:7c:2d:67:76: be:fe:e0:58:88:72:7e:29:ec:f2:5b:fc:fa:da:06: 25:52:b4:b8:dd:40:33:61:97:c7:55:b8:36:61:02: 0f:33:8d:0b:a3:eb:ea:93:fe:e0:3a:ee:8f:cf:fd: ef:17:ff:ea:50:ed:16:69:e4:37:79:60:bb:74:ff: f6:c3:ff:ca:e3:45:12:77:85:5c:58:f8:86:47:b1: 52:0e:10:00:58:f9:6f:b5:ff:79:1e:7b:ee:be:c4: 8d:2f:4e:96:e3:34:92:63:1b:ed:07:1a:cc:0a:7a: 82:08:15:48:31:fa:c1:3e:08:5f:96:3d:1a:34:0c: aa:fe:b0:72:7b:7e:65:5a:9e:01:5b:8e:2d:3c:c5: 8a:0c:18:c3:3a:49:f1:2b:5e:ba:3a:d7:e6:95:16: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:46:2B:72:06:44:43:D9:93:12:AA:91:BD:B2:37:65:64:B6:B8:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/b400e87e-018c-3e74-a61d-6416c06baf20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 205.213.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:df:2d:c0:a5:d6:ab:ee:4f:dd:22:02:5a:b5:66:49:7c:fd: d8:fe:fb:5e:e1:6f:51:0f:f3:22:40:98:4d:3e:ce:08:8a:9a: f7:ac:80:87:c4:7c:1e:e9:68:37:d9:c9:5a:47:c8:7e:85:f8: 1b:24:53:7a:fc:fa:65:eb:14:de:b8:cf:ad:6a:5b:e8:68:89: 94:ef:9e:ff:f1:6b:9d:30:2b:68:2e:69:97:95:62:f4:01:0a: 1c:9d:56:26:31:39:60:3d:66:96:db:11:a1:8a:d6:7c:d9:72: a3:22:00:1e:0c:45:d0:4b:ad:d0:46:ea:d4:ac:5c:a3:ad:a4: a2:00:5f:14:c4:31:14:56:e3:aa:29:53:85:89:16:6a:79:00: 2d:60:59:55:89:bc:46:5f:98:48:06:a3:65:8a:24:c5:91:6b: cf:4e:d9:29:58:79:31:0c:65:3d:9c:45:65:ee:d9:77:93:9b: 9e:5e:b3:72:47:20:2f:67:87:a9:9a:52:a8:ec:f8:3a:f7:d1: 8e:49:a4:e8:39:cd:a0:84:d9:e2:e1:a6:55:5e:1b:ea:1a:28: a4:d0:80:3e:05:4d:be:0e:f0:c2:35:e6:9e:70:59:1f:dd:db: be:f8:a1:e9:1e:77:72:65:93:a6:08:77:a4:e9:4d:0a:c3:60: 06:d3:ee:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp48YFf4RY3EW7W8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk OTJlMDY3NDQtNzkxNS00OTFmLWI3MmUtNTk2MWQwNDNlYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+5TGZ3Cy15GadqAz7U5jc2o9YUoIYYbhh/v 6rkdj1zNB9fViRMLtPzCSD2ostQa1Sd6oRJBY9YV4SUvPiIMVeaMh9CedZYdLKsf 70dUTsZskUbnE8BfayMiWo+Sl325Ox0bZnwtZ3a+/uBYiHJ+KezyW/z62gYlUrS4 3UAzYZfHVbg2YQIPM40Lo+vqk/7gOu6Pz/3vF//qUO0WaeQ3eWC7dP/2w//K40US d4VcWPiGR7FSDhAAWPlvtf95HnvuvsSNL06W4zSSYxvtBxrMCnqCCBVIMfrBPghf lj0aNAyq/rBye35lWp4BW44tPMWKDBjDOknxK166OtfmlRbg0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpGK3IGREPZkxKqkb2yN2VktriaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvYjQwMGU4N2UtMDE4Yy0z ZTc0LWE2MWQtNjQxNmMwNmJhZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzdUDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzfLcCl1qvuT90iAlq1Zkl8/dj++17hb1EP8yJAmE0+zgiKmvesgIfE fB7paDfZyVpHyH6F+BskU3r8+mXrFN64z61qW+hoiZTvnv/xa50wK2guaZeVYvQB ChydViYxOWA9ZpbbEaGK1nzZcqMiAB4MRdBLrdBG6tSsXKOtpKIAXxTEMRRW46op U4WJFmp5AC1gWVWJvEZfmEgGo2WKJMWRa89O2SlYeTEMZT2cRWXu2XeTm55es3JH IC9nh6maUqjs+Dr30Y5JpOg5zaCE2eLhplVeG+oaKKTQgD4FTb4O8MI15p5wWR/d 2774oeked3Jlk6YId6TpTQrDYAbT7rY= -----END CERTIFICATE-----Generated at Fri Apr 11 23:41:37 2025 by rpki-client