$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/dea4a2fc-0903-3302-b458-78b62049a403.roa File: dea4a2fc-0903-3302-b458-78b62049a403.roa (raw, json) Hash identifier: QsJoaCBMM31e/DNTQOD0vf5ibIPd6AicrrJwRJ4tU8A= Subject key identifier: 24:92:51:A1:B2:5C:25:41:17:6A:68:D6:4F:85:29:EA:66:22:58:02 Certificate issuer: /CN=564c92f5-eb04-448d-8939-379434b228b3 Certificate serial: 010D0C9F43285848E59BBD3495D3B31B053F4180 Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/dea4a2fc-0903-3302-b458-78b62049a403.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 30324 IP address blocks: 204.83.21.0/24 maxlen: 24 204.83.22.0/24 maxlen: 24 204.83.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:bd:34:95:d3:b3:1b:05:3f:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=048ddb0a-4096-41e0-8d7d-a564b995777a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ad:24:83:d9:49:95:ff:6b:c6:ed:f6:69:8b: c0:2d:58:85:59:e4:e6:e2:da:63:34:18:a0:be:2e: ef:51:b0:b3:be:b2:ed:fa:57:88:3a:57:6d:0d:92: c4:5d:61:96:f5:aa:50:70:68:8d:5f:9f:69:3c:a4: d0:41:60:41:89:49:2c:5a:2e:c0:96:0b:96:f7:d5: e4:65:56:de:c4:32:98:34:34:2e:4d:93:a1:fb:d3: 63:1e:f2:f6:10:55:a1:23:11:5b:ac:58:3f:8a:5a: 24:5b:27:9e:52:60:44:6c:e6:bc:87:ca:2c:90:a2: 3a:63:37:3d:cf:a9:b9:22:d9:b4:81:77:e7:b6:73: ae:70:fe:7d:f0:89:8e:6f:3a:81:18:18:a9:59:06: 81:f6:4d:51:15:26:90:00:51:50:03:66:76:84:f8: 28:ba:a3:83:e1:34:bb:8e:80:ec:a1:61:26:05:88: 9f:f3:de:69:54:73:b9:f7:38:36:c5:06:5d:c8:fe: f9:b0:c9:1b:78:bb:6b:e7:18:43:09:c4:06:06:2c: b4:ee:82:09:34:17:e4:d4:d8:e2:39:b3:3c:1e:cb: a3:25:0e:df:11:a5:a8:25:fd:56:51:a9:5e:05:55: 21:49:7f:3e:95:95:f8:62:3a:be:21:a8:59:d4:10: 77:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:51:A1:B2:5C:25:41:17:6A:68:D6:4F:85:29:EA:66:22:58:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/dea4a2fc-0903-3302-b458-78b62049a403.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl X509v3 Authority Key Identifier: keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer sbgp-ipAddrBlock: critical IPv4: 204.83.21.0-204.83.23.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e2:c6:37:ac:ae:70:da:4b:3d:25:16:7a:3e:aa:05:63:14: fa:f6:43:52:ed:a0:1e:a0:89:cb:53:11:8e:5e:98:1e:77:90: dd:59:6d:90:e7:58:b7:1f:62:cb:b4:4e:1a:01:33:59:bd:36: 2a:4a:9b:56:8a:f0:30:14:01:e6:d7:39:e8:7d:b3:b9:9a:e1: 3b:47:85:f8:e3:02:b2:7c:bb:f4:43:4d:1b:95:42:aa:86:da: bb:dc:63:7b:5a:f0:4d:73:1c:3a:0c:60:2a:80:9b:ba:a4:38: e7:e3:97:1f:fd:40:da:f9:97:92:fc:67:06:23:4d:26:3c:78: 89:43:b7:96:fa:af:b5:3a:5e:60:b8:41:9c:c2:32:d1:03:e2: 7f:99:58:0a:8d:3f:cb:97:16:b1:72:2b:65:f3:d1:ca:73:d9: 9c:d7:04:8a:48:24:9a:08:70:b0:9d:15:56:35:07:e9:18:f0: 67:82:73:66:ac:03:38:81:f9:f5:cc:8f:d1:c5:59:d4:2d:6b: 5c:f4:2f:04:a0:99:43:61:3a:25:fd:b7:30:5c:04:13:9d:3e: 03:75:53:cd:36:21:7d:67:dc:fc:33:fb:43:8f:2b:e2:72:c6: 97:e7:6b:3e:d5:b7:b4:d0:08:1b:04:a3:3c:11:41:4f:91:0b: 24:80:d4:09 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEjlm700ldOzGwU/QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIy OGIzMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk MDQ4ZGRiMGEtNDA5Ni00MWUwLThkN2QtYTU2NGI5OTU3NzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg60kg9lJlf9rxu32aYvALViFWeTm4tpjNBig vi7vUbCzvrLt+leIOldtDZLEXWGW9apQcGiNX59pPKTQQWBBiUksWi7AlguW99Xk ZVbexDKYNDQuTZOh+9NjHvL2EFWhIxFbrFg/ilokWyeeUmBEbOa8h8oskKI6Yzc9 z6m5Itm0gXfntnOucP598ImObzqBGBipWQaB9k1RFSaQAFFQA2Z2hPgouqOD4TS7 joDsoWEmBYif895pVHO59zg2xQZdyP75sMkbeLtr5xhDCcQGBiy07oIJNBfk1Nji ObM8HsujJQ7fEaWoJf1WUaleBVUhSX8+lZX4Yjq+IahZ1BB3fwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCSSUaGyXCVBF2po1k+FKepmIlgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjRj OTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvZGVhNGEyZmMtMDkwMy0z MzAyLWI0NTgtNzhiNjIwNDlhNDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTY0YzkyZjUtZWIwNC00NDhkLTg5 MzktMzc5NDM0YjIyOGIzLzU2NGM5MmY1LWViMDQtNDQ4ZC04OTM5LTM3OTQzNGIy MjhiMy5jcmwwHwYDVR0jBBgwFoAU3XZv4maXpZNiEaRYPOTVyeFZ1IAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0 MzRiMjI4YjMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMUxUD BAPMUxAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAceLGN6yucNpLPSUWej6qBWMU+vZDUu2gHqCJy1MRjl6Y HneQ3VltkOdYtx9iy7ROGgEzWb02KkqbVorwMBQB5tc56H2zuZrhO0eF+OMCsny7 9ENNG5VCqobau9xje1rwTXMcOgxgKoCbuqQ45+OXH/1A2vmXkvxnBiNNJjx4iUO3 lvqvtTpeYLhBnMIy0QPif5lYCo0/y5cWsXIrZfPRynPZnNcEikgkmghwsJ0VVjUH 6RjwZ4JzZqwDOIH59cyP0cVZ1C1rXPQvBKCZQ2E6Jf23MFwEE50+A3VTzTYhfWfc /DP7Q48r4nLGl+drPtW3tNAIGwSjPBFBT5ELJIDUCQ== -----END CERTIFICATE-----Generated at Fri Apr 11 21:25:48 2025 by rpki-client