$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa File: 3cff4f2a-68ad-3c28-8482-467530c2801c.roa (raw, json) Hash identifier: PFJ6Wh9eX2XvyvDQQ2feWrGEixYL9JDUEmu7l3hF6zs= Subject key identifier: 34:38:85:C9:30:08:39:C7:77:00:F4:EC:77:12:F2:D1:6A:88:0E:67 Certificate issuer: /CN=c3c300ec-9927-491d-bd77-8107cc89e4f3 Certificate serial: 010D0C9F432858491246B6D613F5A91DE833D200 Authority key identifier: 9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 376 IP address blocks: 204.28.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b6:d6:13:f5:a9:1d:e8:33:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c300ec-9927-491d-bd77-8107cc89e4f3 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=79aa6b66-0ea3-42fa-9a5a-0cc22bc05309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:5b:ed:18:c4:11:f0:6b:c9:fa:70:53:17: 43:dd:78:d7:ad:b2:2d:1c:d3:b2:75:93:68:ba:3d: a5:95:b3:f6:c6:4f:ae:7a:3a:23:02:8c:02:cb:6e: 77:c5:29:60:66:fc:5f:ff:2a:23:1c:54:77:98:9d: 14:9b:14:ff:63:20:38:8d:bb:69:fc:2b:2f:63:30: 2c:2f:4c:24:cf:5e:3b:7f:a7:8e:3e:87:4d:9a:00: f5:29:48:73:e6:94:4b:6e:f2:12:50:43:4d:51:21: 99:af:b3:77:d7:1f:2e:16:64:28:9e:a5:c2:ad:bd: 04:5f:99:28:e9:e8:68:e5:75:23:90:5c:b3:de:ad: 89:62:fc:40:9a:03:4e:9b:91:b0:bc:99:27:70:83: 84:f6:ba:8d:a4:d6:56:b0:0b:02:eb:c1:8b:0d:41: a0:1c:16:e5:08:4b:61:4a:48:d0:51:ab:a2:9a:a2: 6d:b5:5c:56:06:c8:da:cf:47:b4:ec:7d:37:e3:b3: 51:a8:86:d4:bc:10:5f:a1:75:73:d4:36:5a:71:0a: 85:23:d6:9a:ef:d7:7b:0c:e4:dc:3e:84:0e:e2:d6: 5b:04:6b:d0:08:84:7b:aa:3d:44:e7:05:e7:a6:c9: 84:52:62:48:c8:fb:c0:78:b6:a5:c6:07:0c:6a:f1: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:38:85:C9:30:08:39:C7:77:00:F4:EC:77:12:F2:D1:6A:88:0E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/3cff4f2a-68ad-3c28-8482-467530c2801c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3/c3c300ec-9927-491d-bd77-8107cc89e4f3.crl X509v3 Authority Key Identifier: keyid:9C:DD:29:BA:43:16:0D:28:7A:F0:DE:BD:86:EE:1D:C4:34:36:71:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3c300ec-9927-491d-bd77-8107cc89e4f3.cer sbgp-ipAddrBlock: critical IPv4: 204.28.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d8:c6:6d:00:b3:74:dc:20:d5:2c:39:47:2a:07:2f:6e:29: 99:7e:87:c4:b4:09:8c:4d:2d:1f:6e:e5:f7:1e:0b:3c:e1:b2: b8:34:72:16:a1:3b:04:8d:fe:ca:b7:79:2a:35:af:5e:5e:74: fa:1e:44:1c:76:40:7d:ba:a5:d5:40:91:af:2f:7d:f2:da:5e: 67:77:97:69:cc:f1:16:93:56:f7:b2:bb:22:41:03:65:51:2d: 06:2d:c3:b4:1c:76:33:92:5e:b2:80:f1:49:60:a1:a5:be:f1: 7e:1b:62:c7:70:01:a4:56:11:28:12:84:65:49:68:1a:50:79: 48:c7:4c:f7:2b:30:84:e1:e8:de:66:86:2d:1b:8f:a2:4d:f0: f3:bc:8c:3c:89:5f:66:7d:e1:5b:9e:24:72:ac:f4:3f:36:db: 12:83:1e:d1:b6:d9:b3:e7:ad:62:d2:9a:1d:fe:ff:d7:53:04: 03:63:8e:87:5c:2b:83:6d:c8:f5:88:72:28:c7:55:f6:5a:96: e9:36:7d:bb:e9:fc:fd:1a:54:3f:a2:bb:d5:41:3d:6b:fe:57: 88:c7:fe:3a:4a:e4:f5:ab:76:1a:53:b4:77:7d:99:ff:df:e0: ca:5d:2c:fb:0d:61:be:a8:b0:96:9d:35:57:21:e2:02:b9:d8: ab:a3:76:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrbWE/WpHegz0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNjMzAwZWMtOTkyNy00OTFkLWJkNzctODEwN2NjODll NGYzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NzlhYTZiNjYtMGVhMy00MmZhLTlhNWEtMGNjMjJiYzA1MzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uVb7RjEEfBryfpwUxdD3XjXrbItHNOydZNo uj2llbP2xk+uejojAowCy253xSlgZvxf/yojHFR3mJ0UmxT/YyA4jbtp/CsvYzAs L0wkz147f6eOPodNmgD1KUhz5pRLbvISUENNUSGZr7N31x8uFmQonqXCrb0EX5ko 6eho5XUjkFyz3q2JYvxAmgNOm5GwvJkncIOE9rqNpNZWsAsC68GLDUGgHBblCEth SkjQUauimqJttVxWBsjaz0e07H0347NRqIbUvBBfoXVz1DZacQqFI9aa79d7DOTc PoQO4tZbBGvQCIR7qj1E5wXnpsmEUmJIyPvAeLalxgcMavGvYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQ4hckwCDnHdwD07HcS8tFqiA5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2Mz MDBlYy05OTI3LTQ5MWQtYmQ3Ny04MTA3Y2M4OWU0ZjMvM2NmZjRmMmEtNjhhZC0z YzI4LTg0ODItNDY3NTMwYzI4MDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzNjMzAwZWMtOTkyNy00OTFkLWJk NzctODEwN2NjODllNGYzL2MzYzMwMGVjLTk5MjctNDkxZC1iZDc3LTgxMDdjYzg5 ZTRmMy5jcmwwHwYDVR0jBBgwFoAUnN0pukMWDSh68N69hu4dxDQ2cYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jM2MzMDBlYy05OTI3LTQ5MWQtYmQ3Ny04MTA3 Y2M4OWU0ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBxjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDYxm0As3TcINUsOUcqBy9uKZl+h8S0CYxNLR9u5fceCzzhsrg0chah OwSN/sq3eSo1r15edPoeRBx2QH26pdVAka8vffLaXmd3l2nM8RaTVveyuyJBA2VR LQYtw7QcdjOSXrKA8UlgoaW+8X4bYsdwAaRWESgShGVJaBpQeUjHTPcrMITh6N5m hi0bj6JN8PO8jDyJX2Z94VueJHKs9D822xKDHtG22bPnrWLSmh3+/9dTBANjjodc K4NtyPWIcijHVfZaluk2fbvp/P0aVD+iu9VBPWv+V4jH/jpK5PWrdhpTtHd9mf/f 4MpdLPsNYb6osJadNVch4gK52Kujdh8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:17:27 2025 by rpki-client