$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa File: 51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa (raw, json) Hash identifier: 0fmhY3lKqunEm1Y30dvWRw4eJThqba7s+iqffoOdVOw= Subject key identifier: 38:9A:50:86:64:39:B6:4F:D6:19:07:D5:D2:E9:61:70:D2:75:88:9E Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F432858494CC94E3F092432F62EE4E5C0 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 13332 IP address blocks: 172.84.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4e:3f:09:24:32:f6:2e:e4:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=b61cca55-df4e-439a-a5ab-d91699d5e3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:5e:88:83:49:13:69:8b:9b:7e:06:4f:17: fc:95:f2:0e:71:d6:ec:7f:e9:36:7a:77:e7:b8:66: 5d:85:47:2b:16:fd:09:59:47:bc:5c:1a:51:e3:03: 60:5e:b3:b6:5c:24:fe:fa:4e:40:bd:33:80:54:c2: e0:e3:41:b3:6a:74:35:e5:c5:cb:f7:a1:f2:28:72: e5:b8:50:2e:5d:34:4b:12:99:52:a4:38:f2:0f:8c: 1c:4e:f9:ec:05:2f:d0:57:f7:10:05:a1:c2:25:e2: d5:99:fc:3c:33:15:0a:3a:15:64:8a:7d:ae:b0:3c: e1:80:c9:47:32:aa:0c:6e:b2:9b:c7:ab:52:06:94: 1c:05:37:d7:80:50:a4:9d:02:ac:ae:cf:10:fb:e4: ad:f7:bc:6a:54:ff:c2:19:2a:c6:e7:b7:21:7f:d8: 72:8a:88:42:a8:06:78:0c:9a:de:1d:ac:15:d9:d0: d9:be:64:13:27:1d:2d:08:cf:08:f5:40:5e:56:6c: d7:ae:73:64:74:45:3e:30:5b:c0:5c:2e:e4:df:29: cc:84:1b:f0:eb:74:55:20:60:66:ca:0a:c2:24:f0: 58:75:ea:13:05:da:b3:7d:41:26:c6:1d:c1:a5:70: 39:ba:27:90:7b:a7:3b:d9:47:78:5f:f3:59:cf:95: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9A:50:86:64:39:B6:4F:D6:19:07:D5:D2:E9:61:70:D2:75:88:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/51c4ef0e-96db-371c-9698-a87e72dfdfa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0a:f1:e9:dc:49:42:79:41:fc:c8:7f:1e:04:d8:b4:06:14: 53:d0:f3:67:e3:0d:e7:85:99:6d:f9:9f:d1:bc:e1:71:28:e0: 0a:f4:09:f9:99:bb:1c:8f:e3:b6:eb:9d:21:48:22:53:c5:b2: 71:1d:22:1e:14:23:0e:47:cf:59:1d:96:eb:6e:69:e1:fd:c1: db:74:4d:98:2e:f1:53:3c:db:eb:6f:d0:6d:d1:fb:24:fa:69: 85:13:2c:25:53:c3:19:e4:f5:62:53:70:e7:ab:67:fb:1d:c2: 68:71:11:36:91:33:ac:7d:a0:f5:bd:44:c4:3f:e3:b3:7e:c0: 27:ee:b2:77:f2:ae:58:8a:64:27:17:9b:a5:97:00:df:02:6a: c2:9d:25:d7:51:26:ac:b9:29:61:9f:28:f9:72:a7:3e:d2:f3: d6:ea:36:1f:0b:10:2c:d9:d6:5c:25:f2:fd:a7:95:42:d0:2d: e5:fe:a4:01:e2:9d:40:5a:a1:8f:8a:82:31:ba:6e:61:ea:2e: 86:82:7a:a0:1e:29:d5:8d:cb:1c:94:7f:c6:35:d8:15:41:88: 33:60:60:b3:01:f3:3b:1f:00:9c:2e:9c:5e:42:60:0f:52:e8: 02:13:62:13:b2:88:0e:7a:63:cd:3a:44:af:0c:15:d0:39:ae: e5:be:5d:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyU4/CSQy9i7k5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjYxY2NhNTUtZGY0ZS00MzlhLWE1YWItZDkxNjk5ZDVlM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDFeiINJE2mLm34GTxf8lfIOcdbsf+k2enfn uGZdhUcrFv0JWUe8XBpR4wNgXrO2XCT++k5AvTOAVMLg40GzanQ15cXL96HyKHLl uFAuXTRLEplSpDjyD4wcTvnsBS/QV/cQBaHCJeLVmfw8MxUKOhVkin2usDzhgMlH MqoMbrKbx6tSBpQcBTfXgFCknQKsrs8Q++St97xqVP/CGSrG57chf9hyiohCqAZ4 DJreHawV2dDZvmQTJx0tCM8I9UBeVmzXrnNkdEU+MFvAXC7k3ynMhBvw63RVIGBm ygrCJPBYdeoTBdqzfUEmxh3BpXA5uieQe6c72Ud4X/NZz5UIpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiaUIZkObZP1hkH1dLpYXDSdYieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvNTFjNGVmMGUtOTZkYi0z NzFjLTk2OTgtYTg3ZTcyZGZkZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEK8encSUJ5QfzIfx4E2LQGFFPQ82fjDeeFmW35n9G84XEo4Ar0CfmZ uxyP47brnSFIIlPFsnEdIh4UIw5Hz1kdlutuaeH9wdt0TZgu8VM82+tv0G3R+yT6 aYUTLCVTwxnk9WJTcOerZ/sdwmhxETaRM6x9oPW9RMQ/47N+wCfusnfyrliKZCcX m6WXAN8CasKdJddRJqy5KWGfKPlypz7S89bqNh8LECzZ1lwl8v2nlULQLeX+pAHi nUBaoY+KgjG6bmHqLoaCeqAeKdWNyxyUf8Y12BVBiDNgYLMB8zsfAJwunF5CYA9S 6AITYhOyiA56Y806RK8MFdA5ruW+XbI= -----END CERTIFICATE-----Generated at Fri Apr 4 18:50:50 2025 by rpki-client