$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/06a28e78-d98f-3c71-bf8b-ae64a6fe22ea.roa File: 06a28e78-d98f-3c71-bf8b-ae64a6fe22ea.roa (raw, json) Hash identifier: N3mO+4j2dGzFVcvjTtcGbw8v7R/CP5kuIOwh4HiM74I= Subject key identifier: DE:CB:93:85:45:2E:42:A3:77:09:76:FD:A9:E7:F4:06:46:BE:02:86 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F43285849287E6883D34FFAD0AFE6B300 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/06a28e78-d98f-3c71-bf8b-ae64a6fe22ea.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 173.247.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:68:83:d3:4f:fa:d0:af:e6:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=9d245dcf-0127-435a-80c5-3a18ff56211e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:06:3c:19:ea:fc:51:ae:9e:28:02:2c:33:38: 18:6c:96:62:a3:15:2e:ed:48:d4:b8:63:61:6e:dc: 04:91:61:af:34:c2:80:ef:e8:0a:f9:48:a6:15:ed: ab:36:eb:65:10:16:32:3c:aa:c4:8b:6f:6f:54:6d: 93:eb:60:25:08:ee:3e:32:09:cc:32:d4:80:16:62: 7c:26:93:41:2c:f3:a3:62:11:8d:56:29:2d:60:c2: e4:e7:b0:59:c3:f7:50:eb:5d:c6:1e:d4:a8:ab:83: 8d:f9:70:ea:6d:00:1a:26:cc:1a:f2:b6:ff:43:a6: 2a:da:0a:52:77:91:5c:9d:b3:30:a0:57:ba:8f:be: 87:0c:07:4e:80:e5:a7:23:14:a4:06:c6:84:91:f0: 20:cf:3d:13:f4:ee:97:f3:86:df:8f:38:23:0d:f0: 78:8e:f2:ee:8f:3e:5b:ba:d9:cd:52:2e:bd:c5:d4: fd:47:8f:ff:77:76:b0:a2:eb:58:54:9a:bc:b3:16: 5a:6c:01:b0:e5:2e:55:47:75:12:70:fb:28:7d:ed: 84:54:73:bf:c2:96:bb:b3:8f:43:89:2c:f1:f6:d0: 01:97:c0:4a:cc:94:4a:39:71:e3:e2:48:72:d6:59: 1e:31:97:41:17:40:73:50:9f:bf:7b:a1:84:ec:ed: 75:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:CB:93:85:45:2E:42:A3:77:09:76:FD:A9:E7:F4:06:46:BE:02:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/06a28e78-d98f-3c71-bf8b-ae64a6fe22ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: 173.247.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0b:31:17:d5:08:3b:7b:25:cb:92:bf:a7:6d:4e:0b:d1:60: a8:52:b2:d9:a7:bb:08:e7:da:51:5f:51:07:6f:d8:3b:95:c0: f3:3b:b3:56:fa:08:cb:8a:70:83:c6:02:44:42:51:51:06:e5: 9a:fa:f0:14:ef:cb:87:95:65:d7:8b:ff:35:06:4b:2d:bb:8e: 2a:2c:7b:4b:94:d5:99:84:ba:b4:22:f0:ff:0c:55:24:7d:ba: 90:0a:fd:1e:95:24:f1:56:be:57:fb:79:2b:6e:ee:0b:42:fc: 86:97:e7:66:2d:db:1e:a5:40:24:88:3c:39:ae:32:b2:1a:57: 91:e2:85:ac:87:94:80:bb:94:b0:15:ee:3e:5a:69:bb:f0:af: 10:0c:94:74:05:1b:2c:93:6c:1b:56:fa:92:bf:05:28:d6:b2: a2:d6:3a:fb:1d:f8:c8:3e:c2:e4:42:47:28:70:12:64:8d:83: 97:d0:c3:b0:a3:a1:96:aa:2f:86:69:66:72:f0:6f:fc:f4:83: 62:fb:98:93:42:04:16:c7:a3:4c:c3:e2:df:6f:50:4a:b3:78: d1:2e:68:e9:7e:8a:93:1a:ba:54:63:27:c3:f7:00:03:3a:56: d8:74:84:f9:14:09:62:00:8d:83:fc:ea:ab:c4:64:5c:a6:13: dd:39:31:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofmiD00/60K/mswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk OWQyNDVkY2YtMDEyNy00MzVhLTgwYzUtM2ExOGZmNTYyMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQY8Ger8Ua6eKAIsMzgYbJZioxUu7UjUuGNh btwEkWGvNMKA7+gK+UimFe2rNutlEBYyPKrEi29vVG2T62AlCO4+MgnMMtSAFmJ8 JpNBLPOjYhGNViktYMLk57BZw/dQ613GHtSoq4ON+XDqbQAaJswa8rb/Q6Yq2gpS d5FcnbMwoFe6j76HDAdOgOWnIxSkBsaEkfAgzz0T9O6X84bfjzgjDfB4jvLujz5b utnNUi69xdT9R4//d3awoutYVJq8sxZabAGw5S5VR3UScPsofe2EVHO/wpa7s49D iSzx9tABl8BKzJRKOXHj4khy1lkeMZdBF0BzUJ+/e6GE7O11kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7Lk4VFLkKjdwl2/ann9AZGvgKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvMDZhMjhlNzgtZDk4Zi0z YzcxLWJmOGItYWU2NGE2ZmUyMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0LMRfVCDt7JcuSv6dtTgvRYKhSstmnuwjn2lFfUQdv2DuVwPM7s1b6 CMuKcIPGAkRCUVEG5Zr68BTvy4eVZdeL/zUGSy27jiose0uU1ZmEurQi8P8MVSR9 upAK/R6VJPFWvlf7eStu7gtC/IaX52Yt2x6lQCSIPDmuMrIaV5HihayHlIC7lLAV 7j5aabvwrxAMlHQFGyyTbBtW+pK/BSjWsqLWOvsd+Mg+wuRCRyhwEmSNg5fQw7Cj oZaqL4ZpZnLwb/z0g2L7mJNCBBbHo0zD4t9vUEqzeNEuaOl+ipMaulRjJ8P3AAM6 Vth0hPkUCWIAjYP86qvEZFymE905MWg= -----END CERTIFICATE-----Generated at Fri Mar 14 08:35:46 2025 by rpki-client