$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa File: 488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa (raw, json) Hash identifier: cRbzWY3YOg5j3P+U7t7yMzScN2sRXbFXbQ5aEODX5vc= Subject key identifier: B3:FB:7D:12:68:51:7C:27:04:32:D6:35:97:59:38:43:0C:C3:21:DE Certificate issuer: /CN=86906b9d-26ff-4ce8-b900-62739db43657 Certificate serial: 010D0C9F4328584981D45629BE71A7140CED8400 Authority key identifier: 5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa Signing time: Sun 13 Apr 2025 01:00:44 +0000 ROA not before: Sun 13 Apr 2025 01:00:44 +0000 ROA not after: Sat 12 Jul 2025 01:00:44 +0000 asID: 6653 IP address blocks: 204.10.124.0/22 maxlen: 24 204.16.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:d4:56:29:be:71:a7:14:0c:ed:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86906b9d-26ff-4ce8-b900-62739db43657 Validity Not Before: Apr 13 01:00:44 2025 GMT Not After : Jul 12 01:00:44 2025 GMT Subject: CN=f92a145a-7885-4be1-b1af-a0e31ff123b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ca:54:e5:3a:c3:a5:7c:aa:1c:03:91:42:ec: bb:31:67:cb:66:cb:63:55:90:51:ac:3a:c8:ab:5c: 6b:77:60:f6:5d:ef:20:6c:4e:1c:f4:b8:d5:8f:06: 29:52:c3:5d:2b:46:ce:cf:8e:a7:6d:42:01:74:c6: af:9f:25:5e:54:04:26:b2:ee:d5:11:44:af:f6:3d: 7f:a7:17:79:da:ba:70:b2:c3:48:c0:12:1b:c0:7e: 19:0a:a4:79:5b:b3:9a:ce:40:4f:2e:67:72:fc:f0: 83:05:f8:a3:28:c0:11:b7:39:92:96:86:f0:ef:ad: ef:60:91:cf:d8:6c:db:84:9e:86:dd:dd:9f:c9:89: e3:b5:70:ea:e8:79:4f:ac:2f:84:7d:3e:d5:4b:1d: 18:62:f7:fd:97:6a:64:12:44:da:25:e7:d3:31:e4: a9:02:fb:c0:58:93:98:90:22:68:c9:b5:a9:5e:2c: 49:ea:14:a2:27:49:07:82:d6:0e:0a:d1:b8:01:d7: 81:90:70:d0:b9:e7:c0:02:b1:74:bb:9d:27:85:18: ab:a9:33:d2:f9:a5:1e:2b:ed:cb:7f:ce:ba:f8:f9: c8:69:11:85:63:2a:cb:0f:83:6f:f5:24:88:1d:36: 01:eb:5b:39:9e:58:ef:3d:6f:c2:fd:72:97:54:87: 8c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FB:7D:12:68:51:7C:27:04:32:D6:35:97:59:38:43:0C:C3:21:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/488d32f0-ded5-3ce9-8e8b-50bccb65c6d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657/86906b9d-26ff-4ce8-b900-62739db43657.crl X509v3 Authority Key Identifier: keyid:5B:94:E8:6F:5C:93:0B:59:F0:CF:9A:AC:09:79:95:CE:ED:96:3F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86906b9d-26ff-4ce8-b900-62739db43657.cer sbgp-ipAddrBlock: critical IPv4: 204.10.124.0/22 204.16.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5b:14:5b:84:67:f8:a1:79:6f:c1:17:a6:3d:59:4e:c2:0a: 16:51:1f:b0:c9:8d:3f:4f:f4:29:ef:3b:44:53:d9:92:a3:da: 97:2b:93:50:43:a5:b8:db:aa:9a:d2:6b:01:0b:af:46:8a:cc: d5:97:34:39:11:3d:fb:23:31:c4:a6:1e:c0:d1:f3:59:f3:bc: aa:4c:89:db:ef:dd:56:67:a4:37:37:f0:08:64:1c:7c:52:2f: 9b:20:b7:e2:47:f0:a5:c3:b7:0c:d3:5c:a5:0d:79:bc:8b:79: 80:fd:05:ec:cb:7d:c6:0d:87:55:3a:27:00:e4:08:74:bf:05: 09:4e:48:03:7b:5f:57:2b:f4:fc:de:c1:3a:10:96:87:f0:82: 94:79:bc:4f:11:b5:94:d5:da:70:b7:56:3c:5b:e5:ca:13:c9: 60:3e:4b:31:30:b7:3e:c7:72:41:f8:51:37:25:25:23:10:c6: ad:07:41:9a:1b:6b:c7:92:b7:1d:d5:9f:32:09:77:e6:75:52: 53:2e:e7:cc:02:39:43:35:3d:29:7e:28:22:f7:28:f2:c0:cc: 6c:6c:8b:bb:f0:29:c6:4f:42:87:0f:d4:c0:04:52:1e:0b:e6: 32:6f:a7:a7:44:2c:4b:41:8c:ea:9c:39:c3:2e:97:47:4a:ff: 0e:91:5d:d0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmB1FYpvnGnFAzthAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY5MDZiOWQtMjZmZi00Y2U4LWI5MDAtNjI3MzlkYjQz NjU3MB4XDTI1MDQxMzAxMDA0NFoXDTI1MDcxMjAxMDA0NFowLzEtMCsGA1UEAxMk ZjkyYTE0NWEtNzg4NS00YmUxLWIxYWYtYTBlMzFmZjEyM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcpU5TrDpXyqHAORQuy7MWfLZstjVZBRrDrI q1xrd2D2Xe8gbE4c9LjVjwYpUsNdK0bOz46nbUIBdMavnyVeVAQmsu7VEUSv9j1/ pxd52rpwssNIwBIbwH4ZCqR5W7OazkBPLmdy/PCDBfijKMARtzmSlobw763vYJHP 2GzbhJ6G3d2fyYnjtXDq6HlPrC+EfT7VSx0YYvf9l2pkEkTaJefTMeSpAvvAWJOY kCJoybWpXixJ6hSiJ0kHgtYOCtG4AdeBkHDQuefAArF0u50nhRirqTPS+aUeK+3L f866+PnIaRGFYyrLD4Nv9SSIHTYB61s5nljvPW/C/XKXVIeMDQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLP7fRJoUXwnBDLWNZdZOEMMwyHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Njkw NmI5ZC0yNmZmLTRjZTgtYjkwMC02MjczOWRiNDM2NTcvNDg4ZDMyZjAtZGVkNS0z Y2U5LThlOGItNTBiY2NiNjVjNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODY5MDZiOWQtMjZmZi00Y2U4LWI5 MDAtNjI3MzlkYjQzNjU3Lzg2OTA2YjlkLTI2ZmYtNGNlOC1iOTAwLTYyNzM5ZGI0 MzY1Ny5jcmwwHwYDVR0jBBgwFoAUW5Tob1yTC1nwz5qsCXmVzu2WP6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NjkwNmI5ZC0yNmZmLTRjZTgtYjkwMC02Mjcz OWRiNDM2NTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzAp8AwQC zBDgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC9bFFuEZ/iheW/BF6Y9WU7CChZRH7DJjT9P9CnvO0RT2ZKj 2pcrk1BDpbjbqprSawELr0aKzNWXNDkRPfsjMcSmHsDR81nzvKpMidvv3VZnpDc3 8AhkHHxSL5sgt+JH8KXDtwzTXKUNebyLeYD9BezLfcYNh1U6JwDkCHS/BQlOSAN7 X1cr9PzewToQlofwgpR5vE8RtZTV2nC3Vjxb5coTyWA+SzEwtz7HckH4UTclJSMQ xq0HQZoba8eStx3VnzIJd+Z1UlMu58wCOUM1PSl+KCL3KPLAzGxsi7vwKcZPQocP 1MAEUh4L5jJvp6dELEtBjOqcOcMul0dK/w6RXdA= -----END CERTIFICATE-----Generated at Sun Apr 13 03:15:09 2025 by rpki-client