$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8580d4d-3e67-3243-8692-2b99e8c8f19a.roa File: b8580d4d-3e67-3243-8692-2b99e8c8f19a.roa (raw, json) Hash identifier: YnQG7CI75HFe3GpRK8RFYc8YQQklWdEMRhW7OCTPtKM= Subject key identifier: E3:83:3F:C0:5F:AA:C0:68:30:B2:30:A3:EC:02:3B:20:DC:1E:5B:E2 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F43285848E9CBEF61302A63A45FD3C1C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8580d4d-3e67-3243-8692-2b99e8c8f19a.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 26683 IP address blocks: 204.252.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:ef:61:30:2a:63:a4:5f:d3:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=d850daa8-c9d7-453b-8554-43a64742c059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f2:bb:f4:cb:13:6f:67:fb:c9:b7:51:bd:ca: 45:bd:a5:c0:3e:27:62:de:61:06:dc:44:38:96:4f: 9e:00:87:57:de:cf:4c:ba:45:12:50:00:f5:0c:3b: 6e:e1:ff:52:cf:4e:14:2f:07:3c:73:49:c0:21:79: 0d:bd:da:fb:33:0f:26:8d:f3:48:f4:37:20:83:79: 8b:7e:f9:f1:f7:eb:8a:5e:e8:dc:f4:2f:9f:41:fc: b8:0c:5b:e5:54:f5:c1:02:78:1a:99:ae:e0:0f:69: a2:4f:4e:e5:22:36:94:cb:2a:c0:2a:64:f2:f4:3a: 97:26:e6:1a:d7:cd:b6:12:8e:56:f3:c3:be:46:4c: c3:6e:2b:1d:64:14:46:eb:e9:fe:e5:7f:34:08:04: a4:8a:d8:bd:78:00:26:f4:73:74:9c:c0:87:12:9c: 6e:42:95:04:64:fd:4a:d0:f1:4b:87:a7:8f:0b:23: 75:e7:49:e7:22:b1:75:61:aa:04:22:b3:e2:0d:db: 39:82:d4:f1:44:1c:f2:9c:b4:14:00:a2:ce:a2:df: d4:40:0a:4d:28:a4:b0:89:c3:f7:d6:94:3a:26:77: 5c:fb:6b:a9:25:3f:46:3b:05:7c:e1:a6:b6:2a:0c: 4e:54:63:3c:08:a5:da:ff:d6:67:95:45:a6:0b:fc: fb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:83:3F:C0:5F:AA:C0:68:30:B2:30:A3:EC:02:3B:20:DC:1E:5B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b8580d4d-3e67-3243-8692-2b99e8c8f19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 204.252.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:13:74:24:44:be:65:4f:79:61:2e:46:79:98:7d:fe:74:08: ce:a0:08:ea:3b:4a:e5:35:dc:3f:7e:c5:d0:5c:87:0d:2f:bd: e9:ef:68:c0:15:f8:e8:42:20:21:0e:69:ab:11:a4:f8:21:cf: 6a:8d:35:65:ab:ae:20:21:5b:4d:41:da:6f:fd:fd:73:a7:5c: f7:0f:88:bd:6e:62:46:17:98:3c:b8:1a:5f:45:cd:c4:db:0a: 36:0c:e7:04:b0:b0:a4:72:05:8c:bd:07:5b:7e:69:ba:6d:a0: f8:30:d3:99:91:95:96:5f:58:47:50:a5:df:5a:b5:b2:2b:5c: 73:bc:1a:bb:58:e9:ed:5d:07:6c:e2:8a:25:4a:9c:d7:f9:eb: c2:8e:81:f0:46:b8:16:2e:a3:91:8a:c7:be:f5:47:e5:33:ef: b4:ef:1b:5b:76:8e:1a:dc:bd:e3:0b:a6:32:73:55:a4:0e:ce: 3e:7c:94:d9:8e:27:1e:ba:8d:82:80:6c:7e:e6:51:6a:17:ec: 8f:29:96:c1:f0:66:04:d4:8c:21:ae:c0:92:1b:73:b4:b3:45: 6e:ba:8c:25:ed:f9:04:e1:92:0e:6c:f1:c0:c9:45:3f:19:e1: 02:70:43:71:39:83:02:35:46:81:1e:eb:51:93:aa:b3:e9:0e: 94:c0:0b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+9hMCpjpF/TwcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk ZDg1MGRhYTgtYzlkNy00NTNiLTg1NTQtNDNhNjQ3NDJjMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvK79MsTb2f7ybdRvcpFvaXAPidi3mEG3EQ4 lk+eAIdX3s9MukUSUAD1DDtu4f9Sz04ULwc8c0nAIXkNvdr7Mw8mjfNI9Dcgg3mL fvnx9+uKXujc9C+fQfy4DFvlVPXBAngama7gD2miT07lIjaUyyrAKmTy9DqXJuYa 1822Eo5W88O+RkzDbisdZBRG6+n+5X80CASkiti9eAAm9HN0nMCHEpxuQpUEZP1K 0PFLh6ePCyN150nnIrF1YaoEIrPiDds5gtTxRBzynLQUAKLOot/UQApNKKSwicP3 1pQ6Jndc+2upJT9GOwV84aa2KgxOVGM8CKXa/9ZnlUWmC/z7IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOODP8BfqsBoMLIwo+wCOyDcHlviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYjg1ODBkNGQtM2U2Ny0z MjQzLTg2OTItMmI5OWU4YzhmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzPyjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0TdCREvmVPeWEuRnmYff50CM6gCOo7SuU13D9+xdBchw0vvenvaMAV +OhCICEOaasRpPghz2qNNWWrriAhW01B2m/9/XOnXPcPiL1uYkYXmDy4Gl9FzcTb CjYM5wSwsKRyBYy9B1t+abptoPgw05mRlZZfWEdQpd9atbIrXHO8GrtY6e1dB2zi iiVKnNf568KOgfBGuBYuo5GKx771R+Uz77TvG1t2jhrcveMLpjJzVaQOzj58lNmO Jx66jYKAbH7mUWoX7I8plsHwZgTUjCGuwJIbc7SzRW66jCXt+QThkg5s8cDJRT8Z 4QJwQ3E5gwI1RoEe61GTqrPpDpTACzA= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:19 2025 by rpki-client