$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa File: 953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa (raw, json) Hash identifier: dcOkpAEbaanVTVO9eQ9SKFCQC1ET/UDbdonH8NWYuxs= Subject key identifier: 93:48:C4:68:F2:06:36:3F:26:BA:40:CD:54:AE:09:38:68:EB:1B:8A Certificate issuer: /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Certificate serial: 010D0C9F4328584949FE939637D4AB8929D2F280 Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 398564 IP address blocks: 204.235.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:93:96:37:d4:ab:89:29:d2:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=a0484c8d-12dc-4dd9-ba67-618ccf8fd52f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:22:5c:ed:b6:a7:f9:9f:db:44:71:b6:c5:4d: d0:1c:48:e3:bf:b6:2f:1d:7d:10:8a:45:bb:0c:42: b4:7d:e2:76:0d:27:83:85:a8:c7:95:40:8b:5d:19: d1:e7:22:9e:7d:ba:35:fe:7d:06:62:98:e9:b9:af: c1:70:91:f1:19:d4:32:82:b1:c5:08:1d:10:cc:f7: 47:7b:1f:96:ef:05:88:e7:65:16:9b:2f:5b:74:74: f2:4c:19:99:28:59:49:8a:a1:46:ee:cb:d4:f7:8d: 92:87:fd:2a:71:bd:15:43:b8:4a:65:87:90:f6:57: 1f:08:92:c3:18:cc:01:ef:fa:e9:34:96:72:66:89: 37:e7:0d:d5:19:93:fa:8a:ad:f4:05:74:29:20:b6: e2:68:18:e5:a2:1b:f9:c2:4b:32:e2:8a:13:d4:78: da:a9:52:36:d3:e9:ed:8b:69:d4:5f:be:e1:f4:56: 7c:37:ad:d3:04:00:e3:5f:1d:3b:e7:dd:96:5c:6f: f8:d7:75:79:bc:06:33:ba:f5:87:50:11:9f:f7:d8: e8:e3:56:bd:45:e3:76:78:fe:00:10:30:6f:d4:cf: 81:d1:13:cb:16:f9:a0:4f:62:09:57:21:4f:5c:6d: 51:db:38:b2:ba:11:84:3c:9c:da:bb:7e:5d:de:14: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:48:C4:68:F2:06:36:3F:26:BA:40:CD:54:AE:09:38:68:EB:1B:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/953d9051-5a41-3fe2-83a9-aad90a5de4ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl X509v3 Authority Key Identifier: keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer sbgp-ipAddrBlock: critical IPv4: 204.235.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fe:2d:c9:8d:54:f2:05:f8:6e:c6:93:17:93:a7:eb:1e:bb: 62:9e:db:96:63:69:ad:4f:27:18:e4:16:cc:f7:13:d4:3c:31: 8c:7c:69:d8:e8:a1:cf:8c:8f:aa:5d:66:c7:2b:fb:b3:2d:9f: ad:60:e5:33:b4:b4:b2:92:da:d2:50:98:75:c4:d6:4e:bd:ad: 64:f7:08:bc:3a:f3:c2:b8:a5:5f:f8:10:70:11:f1:52:1c:47: 35:b1:1f:01:5e:c5:46:26:74:e0:4d:b4:d2:b0:1a:2e:3f:2f: c1:4f:67:64:53:5d:8e:2c:2d:a2:ee:72:d8:34:91:9b:02:83: 6d:64:a8:ae:85:64:37:a7:59:25:a4:f2:01:8b:44:1f:a8:89: 05:2e:6d:8a:c6:f1:db:fc:fe:a6:6d:14:71:22:b5:63:7a:97: 9b:86:bb:dd:d9:dd:b2:64:36:be:ae:a5:54:49:10:6f:c4:68: 18:eb:cd:5d:3b:ab:dd:22:0f:b4:60:68:9f:f7:7f:90:42:43: eb:fc:ff:b5:90:f2:b0:07:8c:d4:70:44:1d:5a:08:40:32:62: 7f:f3:3d:10:bb:e7:a8:aa:20:4f:bb:1f:68:40:6f:17:8b:ca: 9c:13:c5:ed:4a:18:81:98:85:78:dd:3d:05:61:b5:1f:82:3a: 26:ab:20:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pOWN9SriSnS8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmZmMxOTItZDRhOC00MTg5LWJhYjItY2U3YTM3ZWE2 ODNjMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk YTA0ODRjOGQtMTJkYy00ZGQ5LWJhNjctNjE4Y2NmOGZkNTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiJc7ban+Z/bRHG2xU3QHEjjv7YvHX0QikW7 DEK0feJ2DSeDhajHlUCLXRnR5yKefbo1/n0GYpjpua/BcJHxGdQygrHFCB0QzPdH ex+W7wWI52UWmy9bdHTyTBmZKFlJiqFG7svU942Sh/0qcb0VQ7hKZYeQ9lcfCJLD GMwB7/rpNJZyZok35w3VGZP6iq30BXQpILbiaBjlohv5wksy4ooT1HjaqVI20+nt i2nUX77h9FZ8N63TBADjXx07592WXG/413V5vAYzuvWHUBGf99jo41a9ReN2eP4A EDBv1M+B0RPLFvmgT2IJVyFPXG1R2ziyuhGEPJzau35d3hT51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNIxGjyBjY/JrpAzVSuCTho6xuKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZm YzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdlYTY4M2MvOTUzZDkwNTEtNWE0MS0z ZmUyLTgzYTktYWFkOTBhNWRlNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFmZmMxOTItZDRhOC00MTg5LWJh YjItY2U3YTM3ZWE2ODNjL2ExZmZjMTkyLWQ0YTgtNDE4OS1iYWIyLWNlN2EzN2Vh NjgzYy5jcmwwHwYDVR0jBBgwFoAUaLusZqgHi4Xm7ZwBPcI1vdKnq/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdh MzdlYTY4M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzOusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7+LcmNVPIF+G7GkxeTp+seu2Ke25Zjaa1PJxjkFsz3E9Q8MYx8adjo oc+Mj6pdZscr+7Mtn61g5TO0tLKS2tJQmHXE1k69rWT3CLw688K4pV/4EHAR8VIc RzWxHwFexUYmdOBNtNKwGi4/L8FPZ2RTXY4sLaLuctg0kZsCg21kqK6FZDenWSWk 8gGLRB+oiQUubYrG8dv8/qZtFHEitWN6l5uGu93Z3bJkNr6upVRJEG/EaBjrzV07 q90iD7RgaJ/3f5BCQ+v8/7WQ8rAHjNRwRB1aCEAyYn/zPRC756iqIE+7H2hAbxeL ypwTxe1KGIGYhXjdPQVhtR+COiarIKY= -----END CERTIFICATE-----Generated at Fri Apr 4 19:20:53 2025 by rpki-client