$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/c3177fb6-decc-3b5e-8ece-859075b2f441.roa File: c3177fb6-decc-3b5e-8ece-859075b2f441.roa (raw, json) Hash identifier: P0Kq0nP98J4afhXwhZeWrn1DmHDXfG1DigqEcKO70xs= Subject key identifier: 40:AC:1C:E2:61:45:89:47:D8:D8:CC:4C:10:80:EF:C4:9F:8F:F9:CD Certificate issuer: /CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Certificate serial: 010D0C9F43285848A996329ADF36A9D5D97FD040 Authority key identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/c3177fb6-decc-3b5e-8ece-859075b2f441.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 397913 IP address blocks: 204.108.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:32:9a:df:36:a9:d5:d9:7f:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=f15bb24a-23e8-4c8e-9481-99f0ef236b58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c5:87:a2:2c:14:61:64:b6:3f:6d:47:ea:5f: fa:5b:ee:7b:2d:f5:93:59:9e:1f:f3:11:32:ae:c1: 8f:03:ab:55:22:55:42:80:1b:84:ef:86:4d:fd:a5: 87:86:a0:b1:43:31:47:fc:05:74:33:fe:0e:22:ce: 73:fc:14:59:b2:90:35:f1:8c:e6:74:a7:1d:ce:07: 74:66:ef:3c:1f:ce:64:bb:d7:a7:21:18:e3:fe:a9: e8:17:4a:60:8c:e0:3a:ca:b8:6b:3d:8c:ca:70:95: 18:44:1a:e3:d0:83:12:1f:c7:4a:09:c9:85:08:49: c0:34:d3:b0:75:7b:87:12:b4:de:af:ee:b7:c2:53: a9:7c:ce:65:e2:78:30:f1:ec:16:4f:e8:35:31:44: db:94:b8:72:8b:1c:87:8d:5e:f1:5f:8e:69:5e:64: b8:ff:e9:9c:04:9f:e7:9d:b9:81:57:a0:fb:cc:ea: 65:0c:da:36:75:7d:a7:74:46:3d:4a:f7:06:fd:db: df:48:4e:38:a6:71:db:e9:ec:3e:01:79:ac:56:e6: 69:90:54:ae:46:a4:c7:7b:2c:5e:50:8e:42:13:55: ee:dd:85:ee:07:fe:9f:a0:85:39:71:fe:16:a6:65: 8e:ea:8b:12:60:18:04:36:e3:da:51:eb:a2:d2:3f: d9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AC:1C:E2:61:45:89:47:D8:D8:CC:4C:10:80:EF:C4:9F:8F:F9:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/c3177fb6-decc-3b5e-8ece-859075b2f441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl X509v3 Authority Key Identifier: keyid:F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer sbgp-ipAddrBlock: critical IPv4: 204.108.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:84:f9:9a:b7:cc:b7:66:6a:41:61:4a:64:45:22:2d:12:c8: 50:4c:c1:e4:ea:66:5f:76:e5:6d:90:07:9e:27:4d:91:66:d7: 5b:f6:c0:10:74:48:42:2c:6e:16:96:a8:61:65:35:ba:11:ce: e4:41:8e:a9:0d:db:7b:93:79:7e:ac:68:7b:70:79:36:35:bf: 40:3b:2c:e7:98:86:fb:66:49:5a:6a:a7:5d:17:2e:b1:43:fa: a4:42:17:6c:a4:ff:c6:79:a4:96:cf:8a:e0:79:f1:58:24:82: cc:63:76:f2:38:b5:42:d6:93:e4:16:c6:06:e4:65:24:4c:ac: ae:7c:32:5f:3f:2c:6f:37:31:ac:c9:ad:ca:87:c1:83:e1:a6: 0b:81:61:15:8e:97:88:9d:6d:cf:90:1f:43:08:46:3f:2d:18: 44:6c:9e:30:53:04:f6:fd:84:52:17:13:76:f3:98:2e:ac:12: 81:58:68:97:b5:39:11:f3:c1:f9:33:ff:4f:7e:cc:29:78:38: a3:0e:52:21:2c:df:df:88:11:dd:9f:ec:f1:58:88:04:54:0e: 32:28:cd:84:79:70:38:48:8e:46:7e:52:97:d5:58:37:cd:c9: 5b:69:5b:a6:9a:2c:b2:60:02:96:92:21:4a:7d:c1:e7:59:e8: 2b:6a:9b:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipljKa3zap1dl/0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0MjI0YmEtODM0MC00YTJlLTk4NmEtNWUxZjliMmMy MTgyMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjE1YmIyNGEtMjNlOC00YzhlLTk0ODEtOTlmMGVmMjM2YjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8WHoiwUYWS2P21H6l/6W+57LfWTWZ4f8xEy rsGPA6tVIlVCgBuE74ZN/aWHhqCxQzFH/AV0M/4OIs5z/BRZspA18YzmdKcdzgd0 Zu88H85ku9enIRjj/qnoF0pgjOA6yrhrPYzKcJUYRBrj0IMSH8dKCcmFCEnANNOw dXuHErTer+63wlOpfM5l4ngw8ewWT+g1MUTblLhyixyHjV7xX45pXmS4/+mcBJ/n nbmBV6D7zOplDNo2dX2ndEY9SvcG/dvfSE44pnHb6ew+AXmsVuZpkFSuRqTHeyxe UI5CE1Xu3YXuB/6foIU5cf4WpmWO6osSYBgENuPaUeui0j/ZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECsHOJhRYlH2NjMTBCA78Sfj/nNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMjQy MjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIyYzIxODIvYzMxNzdmYjYtZGVjYy0z YjVlLThlY2UtODU5MDc1YjJmNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjI0MjI0YmEtODM0MC00YTJlLTk4 NmEtNWUxZjliMmMyMTgyL2IyNDIyNGJhLTgzNDAtNGEyZS05ODZhLTVlMWY5YjJj MjE4Mi5jcmwwHwYDVR0jBBgwFoAU89PtdRCVoFhnc1ph75f51vMWlLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFm OWIyYzIxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiE+Zq3zLdmakFhSmRFIi0SyFBMweTqZl925W2QB54nTZFm11v2wBB0 SEIsbhaWqGFlNboRzuRBjqkN23uTeX6saHtweTY1v0A7LOeYhvtmSVpqp10XLrFD +qRCF2yk/8Z5pJbPiuB58VgkgsxjdvI4tULWk+QWxgbkZSRMrK58Ml8/LG83MazJ rcqHwYPhpguBYRWOl4idbc+QH0MIRj8tGERsnjBTBPb9hFIXE3bzmC6sEoFYaJe1 ORHzwfkz/09+zCl4OKMOUiEs39+IEd2f7PFYiARUDjIozYR5cDhIjkZ+UpfVWDfN yVtpW6aaLLJgApaSIUp9wedZ6Ctqm/Q= -----END CERTIFICATE-----Generated at Sat Apr 12 00:22:46 2025 by rpki-client