$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa File: 88e1c23f-3271-32f7-88d1-24b93968b4c1.roa (raw, json) Hash identifier: uoZeMOCVEbkHhLFdKL0Fc7eTZtaaVNBTTctXw5ADwVk= Subject key identifier: C4:E1:38:DC:BB:46:4F:14:F6:69:D2:3A:4F:92:B7:67:42:4F:A0:8A Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285848F92697B43235B1F22F7D9500 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 1280 IP address blocks: 204.152.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:97:b4:32:35:b1:f2:2f:7d:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=fed8f948-668f-476e-bb12-977e9710c401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:29:14:cf:02:73:2a:4b:b7:25:30:83:f4: 2a:15:fb:a6:09:5f:f2:8e:f5:13:9b:7b:43:12:09: 74:ff:98:dc:ed:49:fe:c0:a5:05:35:4d:1c:6b:e8: e6:0f:22:9a:6e:48:0b:b5:da:d1:99:7f:43:e5:80: e2:93:cc:3a:44:e6:e5:2e:5b:28:98:f6:3a:ec:3e: 20:f4:94:94:ec:92:29:b4:ac:95:b2:da:98:3c:af: 39:6d:df:42:87:3f:95:44:a1:05:e9:94:83:ea:90: 7b:3c:70:c9:44:f8:47:a5:14:5b:12:b5:a9:8e:c2: e4:55:05:82:af:7f:0c:6e:45:7e:c4:a4:c5:33:dc: 7f:e8:3d:0e:a2:77:9e:03:8f:74:65:19:87:1b:e8: 98:af:93:46:32:fc:12:3c:58:29:96:3a:8c:a3:7b: 97:26:1f:e2:e2:60:ec:c9:4f:13:80:32:b4:22:45: 8b:59:5e:de:77:ac:c9:07:12:3a:c2:91:e5:9c:67: e7:ed:0d:4a:5a:8f:1f:01:59:48:b9:37:a9:fd:28: 07:74:46:7b:18:cb:9b:25:e7:cb:84:59:0b:6b:46: c9:ad:ef:4c:5a:7a:c2:36:de:2a:a2:3c:9d:43:32: 6f:da:74:ad:b8:73:91:71:b0:db:d3:5b:f0:80:01: d1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E1:38:DC:BB:46:4F:14:F6:69:D2:3A:4F:92:B7:67:42:4F:A0:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:53:af:3a:0e:0f:ba:6c:0c:64:54:dc:bf:91:ef:53:6e:91: 38:87:b8:69:b3:6e:15:f6:f0:13:8e:f7:4e:26:1f:74:94:d0: 5e:98:e3:7a:0d:de:ba:94:dd:cd:7b:61:17:2a:81:2f:ad:de: a9:3d:5e:d4:4b:f4:d1:ac:73:1e:aa:7f:f5:f9:19:86:ea:7a: cf:9e:95:f6:df:6f:f9:3b:3b:33:27:fe:54:c6:78:c9:85:10: c0:42:88:f1:7b:cd:d9:87:7f:30:7d:62:76:07:10:7e:b9:87: 88:d5:10:b0:7b:bc:5a:61:5e:ea:49:cc:71:ce:e4:2e:6f:04: f8:f6:01:1a:22:d7:96:44:d3:fe:03:a5:70:0a:bd:60:84:ba: 90:ab:8a:4d:80:09:43:2a:43:29:87:ce:3c:2c:d0:9a:e4:19: 00:9a:d7:9a:f5:0a:da:ac:f4:97:60:d9:82:cf:01:80:d8:1e: 6b:43:0b:a0:26:a1:a3:ef:b7:c2:1d:48:1c:ad:57:40:69:80: bb:10:48:81:eb:20:ad:e3:36:99:b0:5e:63:f4:29:4c:77:d0: d5:59:22:6e:7f:52:82:5b:7f:ec:6c:e2:76:29:87:20:14:47: 61:04:1c:21:fe:ad:d7:e8:64:54:9c:6c:2a:2d:d2:5a:62:f9: 6c:f4:68:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jpe0MjWx8i99lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZmVkOGY5NDgtNjY4Zi00NzZlLWJiMTItOTc3ZTk3MTBjNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv28pFM8CcypLtyUwg/QqFfumCV/yjvUTm3tD Egl0/5jc7Un+wKUFNU0ca+jmDyKabkgLtdrRmX9D5YDik8w6ROblLlsomPY67D4g 9JSU7JIptKyVstqYPK85bd9Chz+VRKEF6ZSD6pB7PHDJRPhHpRRbErWpjsLkVQWC r38MbkV+xKTFM9x/6D0OoneeA490ZRmHG+iYr5NGMvwSPFgpljqMo3uXJh/i4mDs yU8TgDK0IkWLWV7ed6zJBxI6wpHlnGfn7Q1KWo8fAVlIuTep/SgHdEZ7GMubJefL hFkLa0bJre9MWnrCNt4qojydQzJv2nStuHORcbDb01vwgAHRNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMThONy7Rk8U9mnSOk+St2dCT6CKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODhlMWMyM2YtMzI3MS0z MmY3LTg4ZDEtMjRiOTM5NjhiNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtTrzoOD7psDGRU3L+R71NukTiHuGmzbhX28BOO904mH3SU0F6Y43oN 3rqU3c17YRcqgS+t3qk9XtRL9NGscx6qf/X5GYbqes+elfbfb/k7OzMn/lTGeMmF EMBCiPF7zdmHfzB9YnYHEH65h4jVELB7vFphXupJzHHO5C5vBPj2ARoi15ZE0/4D pXAKvWCEupCrik2ACUMqQymHzjws0JrkGQCa15r1Ctqs9Jdg2YLPAYDYHmtDC6Am oaPvt8IdSBytV0BpgLsQSIHrIK3jNpmwXmP0KUx30NVZIm5/UoJbf+xs4nYphyAU R2EEHCH+rdfoZFScbCot0lpi+Wz0aIs= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:32 2025 by rpki-client