$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa File: 5d5c344a-e189-3864-9d26-6e969f78a1f1.roa (raw, json) Hash identifier: oNdnsmtuHN8ODlZyVIm8SlrGW3TR/3G1JAEiHDBv/Vs= Subject key identifier: 49:36:86:F9:C8:28:E3:7F:AB:F1:E6:72:13:4B:13:18:E3:8C:51:02 Certificate issuer: /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Certificate serial: 010D0C9F43285848F4F69CF2E3C84173EA780C00 Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 18914 IP address blocks: 204.8.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:9c:f2:e3:c8:41:73:ea:78:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1efe4b96-7ccd-4733-aceb-812f34d3fbed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:48:89:7f:ac:1a:61:0a:23:43:c4:2a:3d:8a: d5:94:86:12:86:c1:17:ea:e1:13:ac:70:88:f1:9b: 5d:f3:36:d6:5a:fe:28:c5:81:60:9b:3b:53:28:b5: ee:8d:3f:94:df:27:e9:7e:db:8b:2f:fb:50:39:07: 23:4d:62:4e:9c:fa:cf:61:5e:09:cb:8d:49:ce:98: 47:40:ea:9c:f2:f2:b9:7f:4c:7c:28:5f:7b:91:a5: 17:09:25:a2:7b:76:ca:9b:37:d4:86:61:d9:5c:08: 56:32:90:7a:5c:03:8f:e1:74:80:8b:7b:4f:16:33: e9:3c:c0:18:36:e9:14:de:9c:c9:f6:5b:27:7e:d2: 4c:04:38:46:1d:a5:2d:e8:30:0d:84:1b:fe:c3:84: 51:df:56:c5:1f:d6:ea:54:a9:56:3d:bc:8e:f7:02: a0:45:96:8f:6b:94:91:df:67:db:77:71:66:41:08: d8:1b:f9:58:61:22:12:53:02:6d:79:5b:47:2b:f3: 8a:e0:5b:51:bf:55:35:2b:2e:e4:15:73:df:f6:01: b8:1f:4a:42:cc:63:e6:78:a2:97:b8:1e:ca:de:3a: 1f:51:54:d8:7a:9d:f7:1f:cb:04:bf:7e:50:6c:6e: df:38:66:af:24:eb:a6:0c:93:cc:2e:61:de:4d:e5: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:36:86:F9:C8:28:E3:7F:AB:F1:E6:72:13:4B:13:18:E3:8C:51:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl X509v3 Authority Key Identifier: keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer sbgp-ipAddrBlock: critical IPv4: 204.8.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5f:24:e0:3f:e5:dd:d2:bf:6b:0b:ac:58:9a:78:48:0e:f2: 8a:4c:2a:de:1d:a8:68:fe:08:f4:5a:f3:07:c6:3f:8a:15:85: 90:18:65:d2:2e:7d:17:05:36:99:96:66:b3:8c:d1:c2:eb:58: 1f:92:be:74:2c:ca:07:87:0a:a3:80:c6:68:ad:e1:6f:a6:e1: 71:48:87:a5:fb:c3:e2:6b:83:35:b0:2d:19:9f:85:86:27:10: 73:81:05:3d:8a:91:33:ea:19:f9:d7:4e:b2:ac:3f:0e:c4:7f: e2:3e:b7:2e:82:09:00:ca:21:5e:7a:d9:24:1e:e0:c2:7c:64: 17:1b:3f:10:0a:29:33:06:87:ec:96:6b:ac:fd:33:54:03:9e: 2d:01:c3:84:4e:09:8d:d6:c5:8e:86:b0:19:03:19:a3:d3:66: d6:45:9e:72:7c:99:d9:b3:fc:28:e7:8c:da:a1:d6:83:ff:95: 26:05:bd:fe:b5:a0:e6:ba:70:fe:90:07:5b:f0:85:b9:da:71: 26:38:41:c6:47:14:40:9c:1a:0f:a6:45:17:83:a3:65:da:7f: dc:0d:4a:13:a4:bf:84:6e:9f:e0:8b:8f:a6:b3:30:2b:a4:4d: 6b:81:9a:95:4c:2d:04:fb:76:bb:9f:d4:b6:99:7c:8b:c4:e2: 62:2d:db:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pzy48hBc+p4DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj NzJhMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MWVmZTRiOTYtN2NjZC00NzMzLWFjZWItODEyZjM0ZDNmYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUiJf6waYQojQ8QqPYrVlIYShsEX6uETrHCI 8Ztd8zbWWv4oxYFgmztTKLXujT+U3yfpftuLL/tQOQcjTWJOnPrPYV4Jy41JzphH QOqc8vK5f0x8KF97kaUXCSWie3bKmzfUhmHZXAhWMpB6XAOP4XSAi3tPFjPpPMAY NukU3pzJ9lsnftJMBDhGHaUt6DANhBv+w4RR31bFH9bqVKlWPbyO9wKgRZaPa5SR 32fbd3FmQQjYG/lYYSISUwJteVtHK/OK4FtRv1U1Ky7kFXPf9gG4H0pCzGPmeKKX uB7K3jofUVTYep33H8sEv35QbG7fOGavJOumDJPMLmHeTeXWNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEk2hvnIKON/q/HmchNLExjjjFECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvNWQ1YzM0NGEtZTE4OS0z ODY0LTlkMjYtNmU5NjlmNzhhMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5 ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1 NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAhkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdfJOA/5d3Sv2sLrFiaeEgO8opMKt4dqGj+CPRa8wfGP4oVhZAYZdIu fRcFNpmWZrOM0cLrWB+SvnQsygeHCqOAxmit4W+m4XFIh6X7w+JrgzWwLRmfhYYn EHOBBT2KkTPqGfnXTrKsPw7Ef+I+ty6CCQDKIV562SQe4MJ8ZBcbPxAKKTMGh+yW a6z9M1QDni0Bw4ROCY3WxY6GsBkDGaPTZtZFnnJ8mdmz/CjnjNqh1oP/lSYFvf61 oOa6cP6QB1vwhbnacSY4QcZHFECcGg+mRReDo2Xaf9wNShOkv4Run+CLj6azMCuk TWuBmpVMLQT7druf1LaZfIvE4mIt25U= -----END CERTIFICATE-----Generated at Sat Apr 12 00:19:49 2025 by rpki-client