$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa File: 504539a8-a450-354d-9c7e-6a0128d4ded2.roa (raw, json) Hash identifier: KsOO0ZIa1Zpifa/25lrJUhLt21M5DybHBnlg/+Kpvfs= Subject key identifier: 8D:2C:A2:5D:1D:FA:84:29:FD:7C:31:38:D9:01:D8:77:CA:83:65:BF Certificate issuer: /CN=c003af2f-f626-4f2a-a59d-433951f53b3b Certificate serial: 010D0C9F4328584968B42567F46C7237E7978500 Authority key identifier: A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 7132 IP address blocks: 204.17.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:25:67:f4:6c:72:37:e7:97:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c003af2f-f626-4f2a-a59d-433951f53b3b Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=effed43d-0bf0-4a45-8636-03efc259b533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:51:73:27:21:96:27:a7:2a:de:f3:0f:c4:4f: 5e:85:4b:f0:cf:b2:01:27:21:73:76:bd:d7:57:1b: a3:05:19:c2:f5:0b:c7:a4:38:06:c5:6c:06:27:b6: 78:6a:b6:6b:41:1d:d3:ca:c1:a4:6f:0e:83:48:ef: 1f:b0:cc:16:50:96:ef:0a:61:b9:fa:d1:b5:4e:de: ad:16:5f:4a:50:ee:f5:bc:78:9a:6d:b2:94:1a:dd: 53:1d:ae:12:cc:c7:7b:44:1f:74:de:5e:94:06:3e: ec:67:93:88:01:ae:72:6f:fc:ab:0c:d4:9d:c0:54: 58:27:8c:b9:d8:6d:ec:ba:11:8c:6d:ff:db:85:2c: c4:83:8c:5b:cb:3c:30:3a:63:f0:ac:85:24:6b:9e: d2:b3:f5:96:3f:85:9c:09:d4:80:1d:f6:60:f0:84: 00:e2:b0:c3:d2:2b:d2:fb:39:ce:67:f5:a6:83:a2: 48:4a:41:45:b6:64:32:8f:7c:ce:08:57:e7:58:bd: ec:97:21:a3:7d:63:f8:ac:55:1d:97:a7:72:86:99: ba:ba:bd:20:e1:1c:39:03:30:bd:17:c9:73:8e:3d: a2:e8:9b:b8:bd:ff:23:22:5d:4a:72:50:17:aa:93: b8:04:fa:89:a9:41:de:31:d0:02:33:58:4e:58:bc: 5d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2C:A2:5D:1D:FA:84:29:FD:7C:31:38:D9:01:D8:77:CA:83:65:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/504539a8-a450-354d-9c7e-6a0128d4ded2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b/c003af2f-f626-4f2a-a59d-433951f53b3b.crl X509v3 Authority Key Identifier: keyid:A1:DB:17:E6:35:CF:2D:CB:AA:53:2F:E8:00:D0:92:F1:94:24:AE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c003af2f-f626-4f2a-a59d-433951f53b3b.cer sbgp-ipAddrBlock: critical IPv4: 204.17.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:91:ba:4a:c3:07:39:9e:35:0a:dd:d0:34:38:11:fd:7a:07: 39:be:8b:6c:bd:19:24:12:d5:58:53:39:bd:75:7f:11:c7:16: be:a3:80:5f:1b:b8:ce:90:55:d2:56:23:b9:cd:b5:22:00:1a: b4:45:e3:0f:43:21:64:b4:e2:31:eb:28:89:52:f7:34:6c:a4: 94:96:7a:af:d8:01:a5:9b:6a:9b:bb:5c:3b:a5:d3:88:2d:d4: 95:e6:c1:1f:e3:6b:46:e5:89:58:c1:48:a5:74:a3:5f:a1:96: 77:99:f9:8e:85:1b:74:db:55:1b:26:fa:46:9c:1b:8d:49:97: e6:5d:e1:70:0c:23:ec:70:a4:8d:bd:52:70:20:cb:a5:33:49: a3:17:e3:e8:af:fc:1b:c0:d0:4c:40:08:62:3b:12:21:d0:08: aa:f9:0f:0c:8a:ab:bf:4a:d9:2a:e9:cf:30:53:bc:d2:eb:b9: ba:04:23:fc:68:9a:e5:b4:e8:5b:27:40:ab:9f:c0:29:25:c0: a3:f6:d0:18:ad:8c:7e:57:ea:6d:e9:e6:6d:7b:7a:34:21:4a: ef:f8:37:b8:8e:17:24:5a:47:32:ff:9e:df:01:6c:eb:95:21: 85:c5:34:5d:9e:f0:2b:00:a7:61:cc:2e:24:db:2d:70:37:c1: 2c:0c:78:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCVn9GxyN+eXhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAwM2FmMmYtZjYyNi00ZjJhLWE1OWQtNDMzOTUxZjUz YjNiMB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk ZWZmZWQ0M2QtMGJmMC00YTQ1LTg2MzYtMDNlZmMyNTliNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFFzJyGWJ6cq3vMPxE9ehUvwz7IBJyFzdr3X VxujBRnC9QvHpDgGxWwGJ7Z4arZrQR3TysGkbw6DSO8fsMwWUJbvCmG5+tG1Tt6t Fl9KUO71vHiabbKUGt1THa4SzMd7RB903l6UBj7sZ5OIAa5yb/yrDNSdwFRYJ4y5 2G3suhGMbf/bhSzEg4xbyzwwOmPwrIUka57Ss/WWP4WcCdSAHfZg8IQA4rDD0ivS +znOZ/Wmg6JISkFFtmQyj3zOCFfnWL3slyGjfWP4rFUdl6dyhpm6ur0g4Rw5AzC9 F8lzjj2i6Ju4vf8jIl1KclAXqpO4BPqJqUHeMdACM1hOWLxdzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0sol0d+oQp/XwxONkB2HfKg2W/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAz YWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5NTFmNTNiM2IvNTA0NTM5YTgtYTQ1MC0z NTRkLTljN2UtNmEwMTI4ZDRkZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzAwM2FmMmYtZjYyNi00ZjJhLWE1 OWQtNDMzOTUxZjUzYjNiL2MwMDNhZjJmLWY2MjYtNGYyYS1hNTlkLTQzMzk1MWY1 M2IzYi5jcmwwHwYDVR0jBBgwFoAUodsX5jXPLcuqUy/oANCS8ZQkroIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jMDAzYWYyZi1mNjI2LTRmMmEtYTU5ZC00MzM5 NTFmNTNiM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByRukrDBzmeNQrd0DQ4Ef16Bzm+i2y9GSQS1VhTOb11fxHHFr6jgF8b uM6QVdJWI7nNtSIAGrRF4w9DIWS04jHrKIlS9zRspJSWeq/YAaWbapu7XDul04gt 1JXmwR/ja0bliVjBSKV0o1+hlneZ+Y6FG3TbVRsm+kacG41Jl+Zd4XAMI+xwpI29 UnAgy6UzSaMX4+iv/BvA0ExACGI7EiHQCKr5DwyKq79K2SrpzzBTvNLruboEI/xo muW06FsnQKufwCklwKP20BitjH5X6m3p5m17ejQhSu/4N7iOFyRaRzL/nt8BbOuV IYXFNF2e8CsAp2HMLiTbLXA3wSwMeJs= -----END CERTIFICATE-----Generated at Fri Apr 11 21:11:12 2025 by rpki-client