$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa File: d23c1663-1dc9-338f-b7d7-799b68465589.roa (raw, json) Hash identifier: UnYq6PvDIy4qvFnaoqLlCYNjpptevfme0DFXcwN9Zog= Subject key identifier: 73:B1:78:DD:89:0C:E8:26:4A:96:66:DC:3B:97:65:45:A0:1C:5D:7C Certificate issuer: /CN=10aa04f0-7421-4813-bfda-269303d05d1d Certificate serial: 010D0C9F43285849797443D63AB738735F8AF100 Authority key identifier: 4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa Signing time: Thu 10 Apr 2025 01:00:46 +0000 ROA not before: Thu 10 Apr 2025 01:00:46 +0000 ROA not after: Wed 09 Jul 2025 01:00:46 +0000 asID: 77 IP address blocks: 204.9.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:79:74:43:d6:3a:b7:38:73:5f:8a:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10aa04f0-7421-4813-bfda-269303d05d1d Validity Not Before: Apr 10 01:00:46 2025 GMT Not After : Jul 9 01:00:46 2025 GMT Subject: CN=6d08a08d-9cbf-4efb-9d77-468a3f46f8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:39:72:c3:df:f3:8d:f1:e7:2c:f6:ce:7c:77: 6a:4b:58:e6:c1:cb:10:80:ec:d1:a2:09:bc:42:72: bb:42:32:8d:48:00:d1:22:40:31:d1:8d:00:47:f5: c6:99:82:a6:7f:57:ea:c4:4f:73:3b:e2:12:1c:fa: 56:9f:2b:4d:00:d1:62:f1:b0:a8:ce:8e:86:0e:d7: f0:47:6d:a0:62:57:d0:49:2f:d7:f3:0d:bb:a4:51: da:87:7b:d4:34:28:24:98:12:bd:e8:35:41:bf:20: 76:3d:ab:cd:fc:17:af:7b:82:83:12:f0:ae:78:54: f1:f8:d3:ed:4f:45:07:47:92:d1:9c:3f:60:df:fc: 7d:2f:09:7a:72:a2:54:c4:0a:5e:bc:2d:c6:d4:4d: e2:ff:3f:83:00:27:56:93:02:8e:d7:af:4f:e4:d4: 23:86:2e:1b:51:bd:30:2d:87:84:d1:60:68:c0:a1: a2:27:e3:39:47:95:28:84:1f:23:18:7a:29:40:18: 93:a3:99:f1:b0:43:4e:2e:f8:4b:cd:b9:5e:85:59: 2a:e2:b1:d2:cf:a6:a0:7a:d5:49:48:f8:ac:3e:1f: 2a:f4:7a:2c:f1:ec:12:b5:2d:da:7e:72:f1:fb:b4: 4f:74:13:30:ea:68:93:79:1e:74:dc:b5:d2:d7:59: 39:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B1:78:DD:89:0C:E8:26:4A:96:66:DC:3B:97:65:45:A0:1C:5D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/d23c1663-1dc9-338f-b7d7-799b68465589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d/10aa04f0-7421-4813-bfda-269303d05d1d.crl X509v3 Authority Key Identifier: keyid:4C:67:C6:2B:93:24:A6:E4:6A:F7:D6:8B:AA:7D:A5:9F:6A:13:7E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/10aa04f0-7421-4813-bfda-269303d05d1d.cer sbgp-ipAddrBlock: critical IPv4: 204.9.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:12:26:df:4d:25:37:05:d9:3b:eb:56:4a:33:90:5a:7f:a5: f9:92:a2:c9:d5:f3:7a:5e:72:dc:b7:b9:7a:64:f2:3d:08:dc: fc:5a:07:1e:f4:83:a1:cc:94:1d:f0:f2:34:a5:74:7e:6d:d5: 2f:71:dc:5f:c1:a0:c7:c1:49:ea:44:c8:ac:37:4b:e3:1b:34: ee:84:03:01:2c:26:23:c0:f1:a0:68:a3:e7:04:9e:0a:fe:eb: 63:cd:95:61:45:48:df:6d:b3:2e:b5:e9:40:4c:46:ba:3d:b3: 67:50:71:6d:87:0e:4e:58:dd:3a:39:30:c7:d6:9e:9d:5b:69: 08:4f:a5:80:96:56:24:5f:d5:aa:47:eb:15:bb:a6:70:98:2a: 5c:0a:24:ae:a2:ba:b1:37:12:dd:32:b5:8b:4e:5f:f9:97:c9: d7:a6:8a:bf:c1:2b:24:f8:eb:34:d0:59:5e:ed:85:3c:13:0c: 00:e8:e7:c5:80:3b:f2:04:ee:d4:b5:2a:b2:56:a6:b1:86:d8: c9:1e:dd:a7:58:ef:c5:74:09:a6:d0:f6:2e:8b:38:12:dd:cc: c2:65:68:15:ce:75:9e:06:ed:5d:5f:c5:ec:c4:93:35:14:5a: eb:56:fb:62:f9:13:0e:9f:b4:40:1b:30:83:b3:20:57:80:13: c2:0c:4c:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl5dEPWOrc4c1+K8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBhYTA0ZjAtNzQyMS00ODEzLWJmZGEtMjY5MzAzZDA1 ZDFkMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk NmQwOGEwOGQtOWNiZi00ZWZiLTlkNzctNDY4YTNmNDZmOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTlyw9/zjfHnLPbOfHdqS1jmwcsQgOzRogm8 QnK7QjKNSADRIkAx0Y0AR/XGmYKmf1fqxE9zO+ISHPpWnytNANFi8bCozo6GDtfw R22gYlfQSS/X8w27pFHah3vUNCgkmBK96DVBvyB2PavN/Beve4KDEvCueFTx+NPt T0UHR5LRnD9g3/x9Lwl6cqJUxApevC3G1E3i/z+DACdWkwKO169P5NQjhi4bUb0w LYeE0WBowKGiJ+M5R5UohB8jGHopQBiTo5nxsENOLvhLzblehVkq4rHSz6agetVJ SPisPh8q9Hos8ewStS3afnLx+7RPdBMw6miTeR503LXS11k5TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOxeN2JDOgmSpZm3DuXZUWgHF18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMGFh MDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkzMDNkMDVkMWQvZDIzYzE2NjMtMWRjOS0z MzhmLWI3ZDctNzk5YjY4NDY1NTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTBhYTA0ZjAtNzQyMS00ODEzLWJm ZGEtMjY5MzAzZDA1ZDFkLzEwYWEwNGYwLTc0MjEtNDgxMy1iZmRhLTI2OTMwM2Qw NWQxZC5jcmwwHwYDVR0jBBgwFoAUTGfGK5MkpuRq99aLqn2ln2oTfgIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMGFhMDRmMC03NDIxLTQ4MTMtYmZkYS0yNjkz MDNkMDVkMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADASJt9NJTcF2TvrVkozkFp/pfmSosnV83pecty3uXpk8j0I3PxaBx70 g6HMlB3w8jSldH5t1S9x3F/BoMfBSepEyKw3S+MbNO6EAwEsJiPA8aBoo+cEngr+ 62PNlWFFSN9tsy616UBMRro9s2dQcW2HDk5Y3To5MMfWnp1baQhPpYCWViRf1apH 6xW7pnCYKlwKJK6iurE3Et0ytYtOX/mXydemir/BKyT46zTQWV7thTwTDADo58WA O/IE7tS1KrJWprGG2Mke3adY78V0CabQ9i6LOBLdzMJlaBXOdZ4G7V1fxezEkzUU WutW+2L5Ew6ftEAbMIOzIFeAE8IMTNk= -----END CERTIFICATE-----Generated at Sat Apr 12 15:31:45 2025 by rpki-client