$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa File: d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa (raw, json) Hash identifier: FxlsOnnIZhIKPWKDf9lmJ4mupymQ77pY7inS2J8C8vY= Subject key identifier: 78:5D:96:93:19:C1:A1:CC:E6:27:13:F4:B6:36:00:B9:DA:E3:50:44 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285848E2D103B2168502A9D4E40180 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 46687 IP address blocks: 173.44.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:03:b2:16:85:02:a9:d4:e4:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=b3fceece-768f-4aaa-94c1-9f15023d01c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:80:81:6f:8b:94:d6:b9:44:01:5a:b3:00:0b: b1:28:82:3a:89:74:39:2a:60:2d:9b:8e:51:81:a2: e2:4b:d1:91:66:ac:b6:e0:f6:a1:5e:91:ae:43:d1: 7e:a9:ae:c0:49:88:60:00:56:0f:36:ed:f9:ae:4a: 6c:45:da:ce:21:3b:4e:24:f9:3f:df:5e:80:4b:eb: 14:1a:b2:53:93:d6:72:51:a3:79:81:8f:62:7b:37: bd:d2:49:e0:ee:27:60:2c:0b:6f:48:ce:d3:03:22: ee:6d:80:38:20:78:4c:bc:ee:75:7a:20:4a:e4:50: c7:73:64:99:87:55:c3:0e:59:5f:07:82:eb:55:c9: 10:6d:2c:29:9e:f2:de:95:ad:8e:dc:d0:27:4b:2d: 6d:4a:4b:7d:83:89:02:48:a1:14:73:c7:ec:e6:a6: 55:2c:3a:14:19:3d:7a:cc:fe:9d:60:bf:33:cf:e8: e8:56:77:39:e2:09:bc:ac:1a:c9:18:1b:cc:59:1b: 21:dd:16:83:97:e0:5d:1a:ca:be:ed:bb:fe:04:58: 15:c3:d5:b2:d4:ef:d4:aa:54:28:b0:4f:0c:1c:a2: 18:a7:a7:7b:0d:52:da:30:91:bb:e3:9c:ac:3b:bb: d1:90:09:87:30:38:a9:7b:46:f7:9b:e6:64:3b:65: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5D:96:93:19:C1:A1:CC:E6:27:13:F4:B6:36:00:B9:DA:E3:50:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 173.44.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:2a:59:57:35:5c:6a:c2:1a:ab:c8:3e:3b:5c:eb:f4:dd:e4: e2:b5:26:09:fb:52:7c:d8:30:9d:3e:08:56:ba:12:4a:7b:97: 3e:0c:80:e0:31:7a:88:51:6f:38:4f:aa:36:53:f8:14:f9:6a: 7d:b1:51:7b:e1:68:b5:ca:4d:79:6f:e5:9e:25:9c:06:68:4c: 78:e9:8c:9b:22:11:9d:b7:96:1f:26:87:42:e1:93:46:29:13: c7:60:7f:59:2b:bd:3c:70:64:df:3c:3f:d6:cb:b9:64:12:a4: 5a:47:4d:24:59:b9:b4:5b:38:8a:04:12:0c:cb:1d:08:8e:d5: b2:45:a8:6f:3a:19:67:c1:38:1e:de:95:f9:10:cb:e7:ef:17: 91:5c:26:75:21:d8:7e:af:ca:bc:83:a7:ec:ad:1e:d3:c4:44: 7a:cc:3b:0d:0e:f4:88:2f:c2:e4:a9:dc:1b:75:6c:02:da:52: ec:97:f3:73:10:0c:05:76:17:54:cf:59:25:b6:68:7b:37:0e: 34:2c:c4:c2:50:36:a8:72:3c:07:bd:30:01:c8:63:71:46:50: c4:f9:eb:8f:f5:13:09:e4:e4:c1:6d:8d:f8:c8:1d:67:46:0f: 03:32:91:a9:03:ed:18:7a:fb:1b:5c:01:f8:a7:5d:28:80:c5: d2:b2:15:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QOyFoUCqdTkAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk YjNmY2VlY2UtNzY4Zi00YWFhLTk0YzEtOWYxNTAyM2QwMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44CBb4uU1rlEAVqzAAuxKII6iXQ5KmAtm45R gaLiS9GRZqy24PahXpGuQ9F+qa7ASYhgAFYPNu35rkpsRdrOITtOJPk/316AS+sU GrJTk9ZyUaN5gY9ieze90kng7idgLAtvSM7TAyLubYA4IHhMvO51eiBK5FDHc2SZ h1XDDllfB4LrVckQbSwpnvLela2O3NAnSy1tSkt9g4kCSKEUc8fs5qZVLDoUGT16 zP6dYL8zz+joVnc54gm8rBrJGBvMWRsh3RaDl+BdGsq+7bv+BFgVw9Wy1O/UqlQo sE8MHKIYp6d7DVLaMJG745ysO7vRkAmHMDipe0b3m+ZkO2WBIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhdlpMZwaHM5icT9LY2ALna41BEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDJjZGNkNzctYWUzMS0z NjliLTlmNjMtY2UyYTQ2Y2M4ZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrSx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4qWVc1XGrCGqvIPjtc6/Td5OK1Jgn7UnzYMJ0+CFa6Ekp7lz4MgOAx eohRbzhPqjZT+BT5an2xUXvhaLXKTXlv5Z4lnAZoTHjpjJsiEZ23lh8mh0Lhk0Yp E8dgf1krvTxwZN88P9bLuWQSpFpHTSRZubRbOIoEEgzLHQiO1bJFqG86GWfBOB7e lfkQy+fvF5FcJnUh2H6vyryDp+ytHtPERHrMOw0O9IgvwuSp3Bt1bALaUuyX83MQ DAV2F1TPWSW2aHs3DjQsxMJQNqhyPAe9MAHIY3FGUMT564/1Ewnk5MFtjfjIHWdG DwMykakD7Rh6+xtcAfinXSiAxdKyFe4= -----END CERTIFICATE-----Generated at Sat Apr 12 15:34:09 2025 by rpki-client