$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa File: 844a594c-7e4b-3b8f-aaee-aec765543f6a.roa (raw, json) Hash identifier: sA0ABYprkNwYiZSalBdMXexfE4eegYbwSCO+D8bZsQ8= Subject key identifier: AD:35:30:EE:C3:A4:A4:BA:D4:B3:A9:92:D3:78:26:20:29:7B:C4:14 Certificate issuer: /CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Certificate serial: 010D0C9F432858494E84A047976099CFB698CCC0 Authority key identifier: 33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa Signing time: Tue 25 Mar 2025 15:54:06 +0000 ROA not before: Tue 25 Mar 2025 15:54:06 +0000 ROA not after: Mon 23 Jun 2025 15:54:06 +0000 asID: 376 IP address blocks: 204.19.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:84:a0:47:97:60:99:cf:b6:98:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18291d4d-da48-4b25-84d6-3df88f2fed54 Validity Not Before: Mar 25 15:54:06 2025 GMT Not After : Jun 23 15:54:06 2025 GMT Subject: CN=edc1ac2e-1af6-4be8-93ef-5a8f5954b70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:a9:88:4c:5a:22:d2:5a:35:92:1e:f1:2a: 24:70:9e:49:d1:6f:41:51:05:00:29:8c:b2:ee:e4: 3d:56:c0:08:8c:26:e3:8f:f3:94:19:ac:0f:34:b1: f3:c0:0c:dc:91:3a:7d:3e:f4:99:0a:4d:ee:8f:18: 6c:36:76:6a:90:df:ad:1a:4f:c7:0c:22:82:ef:ee: 20:c5:23:2f:cc:35:28:2d:d7:34:46:3d:84:06:d6: 7e:f9:34:4e:17:06:42:c4:c2:4f:a8:5f:fb:7f:13: bb:fb:07:6e:b8:0b:df:ca:b6:57:9d:05:6b:6e:f7: 90:95:e0:ab:df:ec:b0:8a:df:bb:58:0b:16:09:8d: 95:5e:29:94:c3:3e:00:c3:68:d2:fc:47:2a:e1:31: b9:67:dc:83:f6:f7:0c:6a:f1:a5:b5:90:0a:10:cf: 35:7d:09:63:f2:c2:8c:72:2c:13:4b:44:e4:0b:6d: fb:b2:0c:ca:4f:40:b5:4c:fe:bc:59:f9:d9:a9:d6: e3:5d:a3:3f:26:d9:1c:b4:7d:80:05:41:c7:66:59: c8:9c:6a:6e:83:e7:85:f6:7c:ad:3f:80:99:24:f4: 6e:88:4b:3d:0e:e9:35:ad:78:a2:30:2b:70:f1:c7: d5:66:1f:b2:dc:14:56:78:96:04:88:16:b6:35:1b: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:35:30:EE:C3:A4:A4:BA:D4:B3:A9:92:D3:78:26:20:29:7B:C4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/844a594c-7e4b-3b8f-aaee-aec765543f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl X509v3 Authority Key Identifier: keyid:33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer sbgp-ipAddrBlock: critical IPv4: 204.19.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:2a:0b:7a:ee:cd:0b:c5:b7:cb:5d:1f:1c:cb:9c:fd:f3:96: 60:dd:3e:fb:59:26:fa:8b:7b:39:79:17:48:11:c7:f2:66:52: f5:ee:8f:60:e7:8f:ea:1b:e7:a6:9d:8f:c9:66:4c:be:50:a5: 43:58:30:aa:31:ed:58:97:ce:88:a8:42:7f:dc:d6:a6:fa:4b: b3:c5:13:dd:c8:da:9d:1f:aa:4b:11:0e:d7:1b:ed:d2:1f:e8: 8b:ff:81:cc:fc:93:4a:b9:d2:ca:eb:d4:92:1d:a3:f2:6c:d0: 45:07:7c:62:70:a3:c8:e3:a1:54:92:c7:e0:0a:45:ae:4e:53: 54:13:6e:6a:8e:c1:01:40:9b:21:01:6e:f6:32:cf:1f:3e:45: 2a:e7:db:30:ec:1e:d6:62:30:36:10:bb:1a:68:cb:5b:d2:40: 64:41:0e:7c:93:0d:36:fe:22:35:b8:48:c7:94:ef:0a:1a:8c: 6b:e0:e8:42:0f:9c:be:26:49:ce:4c:6a:db:48:67:22:4e:33: b3:af:5d:e6:05:b5:c8:c0:c1:f4:04:35:a2:83:a4:45:1e:05: ac:40:ec:29:58:1a:24:da:bb:fe:7a:df:d6:89:98:56:e2:4b: 12:1e:49:8f:ce:d7:41:9c:9d:00:bf:ca:d0:83:37:c1:f4:0d: ab:48:f2:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOhKBHl2CZz7aYzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTgyOTFkNGQtZGE0OC00YjI1LTg0ZDYtM2RmODhmMmZl ZDU0MB4XDTI1MDMyNTE1NTQwNloXDTI1MDYyMzE1NTQwNlowLzEtMCsGA1UEAxMk ZWRjMWFjMmUtMWFmNi00YmU4LTkzZWYtNWE4ZjU5NTRiNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmGpiExaItJaNZIe8SokcJ5J0W9BUQUAKYyy 7uQ9VsAIjCbjj/OUGawPNLHzwAzckTp9PvSZCk3ujxhsNnZqkN+tGk/HDCKC7+4g xSMvzDUoLdc0Rj2EBtZ++TROFwZCxMJPqF/7fxO7+wduuAvfyrZXnQVrbveQleCr 3+ywit+7WAsWCY2VXimUwz4Aw2jS/Ecq4TG5Z9yD9vcMavGltZAKEM81fQlj8sKM ciwTS0TkC237sgzKT0C1TP68WfnZqdbjXaM/JtkctH2ABUHHZlnInGpug+eF9nyt P4CZJPRuiEs9Duk1rXiiMCtw8cfVZh+y3BRWeJYEiBa2NRt/fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK01MO7DpKS61LOpktN4JiApe8QUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xODI5 MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4OGYyZmVkNTQvODQ0YTU5NGMtN2U0Yi0z YjhmLWFhZWUtYWVjNzY1NTQzZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTgyOTFkNGQtZGE0OC00YjI1LTg0 ZDYtM2RmODhmMmZlZDU0LzE4MjkxZDRkLWRhNDgtNGIyNS04NGQ2LTNkZjg4ZjJm ZWQ1NC5jcmwwHwYDVR0jBBgwFoAUM9lgbdXMKovJHNAJgMgAwq5YgtkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xODI5MWQ0ZC1kYTQ4LTRiMjUtODRkNi0zZGY4 OGYyZmVkNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBMXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQqC3ruzQvFt8tdHxzLnP3zlmDdPvtZJvqLezl5F0gRx/JmUvXuj2Dn j+ob56adj8lmTL5QpUNYMKox7ViXzoioQn/c1qb6S7PFE93I2p0fqksRDtcb7dIf 6Iv/gcz8k0q50srr1JIdo/Js0EUHfGJwo8jjoVSSx+AKRa5OU1QTbmqOwQFAmyEB bvYyzx8+RSrn2zDsHtZiMDYQuxpoy1vSQGRBDnyTDTb+IjW4SMeU7woajGvg6EIP nL4mSc5MattIZyJOM7OvXeYFtcjAwfQENaKDpEUeBaxA7ClYGiTau/5639aJmFbi SxIeSY/O10GcnQC/ytCDN8H0DatI8iA= -----END CERTIFICATE-----Generated at Sun Apr 6 08:25:39 2025 by rpki-client