$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa File: 54986207-7a58-36f6-8e77-f8161fa1649c.roa (raw, json) Hash identifier: KOXRVEp8Su+dHzWFmPpgnci/wKHmkMig7y4oyGjC+fc= Subject key identifier: CA:43:87:89:F6:9E:67:1B:1C:0E:E4:33:03:4E:F5:AC:17:D2:DF:18 Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Certificate serial: 010D0C9F432858493C091CAA90B33B3D60599800 Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 14500 IP address blocks: 173.244.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:1c:aa:90:b3:3b:3d:60:59:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=359362ba-9381-4684-985e-001c0587ce98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:15:9a:c3:6d:66:7c:ec:fd:a5:c0:ca:ed: 0f:74:83:4e:bd:d7:0a:d3:f7:b7:db:62:e3:04:ff: ce:2f:79:a4:ec:45:e0:df:d0:bd:d7:8e:68:95:e5: cb:7f:f3:72:27:6d:30:45:09:e2:0d:9b:22:6b:8a: ce:34:70:98:ce:43:c5:86:db:a1:a2:33:be:ab:47: fa:da:39:d3:66:d7:f8:cd:5b:d0:28:29:ae:4a:8b: 36:0b:35:78:5a:5c:3a:3e:cf:65:f4:1f:48:ae:a2: 62:10:de:7c:b5:28:fa:7d:48:90:bb:79:00:fd:09: 12:ac:01:b8:41:f5:91:21:e1:ee:8d:e4:6c:84:5f: 8f:a0:f2:0d:af:e8:67:cb:42:8c:af:ed:50:98:c3: 3c:09:b7:6f:f9:5b:e9:62:de:a0:66:fc:88:04:ec: 9e:01:79:57:d4:18:75:1a:5b:5a:1a:5a:4c:b9:d0: 2b:df:f3:6f:20:5b:e3:ed:59:1e:6d:2d:00:41:f1: 05:49:53:39:a1:a7:de:8b:9b:b7:48:03:c3:5e:f4: 96:8d:27:f9:26:ca:06:cf:c4:ec:3c:ae:60:5b:33: 58:68:6f:df:18:80:0e:39:df:07:32:9b:ae:5e:f1: 49:76:62:6c:3e:e5:35:a5:c7:68:0f:04:2b:cf:22: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:43:87:89:F6:9E:67:1B:1C:0E:E4:33:03:4E:F5:AC:17:D2:DF:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/54986207-7a58-36f6-8e77-f8161fa1649c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl X509v3 Authority Key Identifier: keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer sbgp-ipAddrBlock: critical IPv4: 173.244.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:07:64:d0:cb:24:a9:21:bd:26:91:b6:9b:34:2e:c8:19:ec: fd:a1:39:6e:fe:8b:7e:51:ef:dc:6a:60:3e:de:81:06:f1:23: e7:64:07:ba:2f:60:86:28:4d:db:32:74:39:10:d9:0f:bd:1c: a8:27:fa:cc:e9:99:86:1e:58:06:10:6f:30:fd:53:37:12:95: 85:9a:b1:f4:7e:ec:14:7e:ed:b3:82:44:57:39:25:70:2f:88: 93:72:17:0b:13:ab:34:b2:de:6b:f0:08:2c:bd:70:f1:d5:79: c8:04:ea:d7:3e:0a:5b:bd:8e:af:fa:3b:fd:74:18:50:28:dd: 5c:75:41:ed:70:17:cd:c8:46:dd:5b:94:98:96:33:fc:8b:0e: 41:fe:33:64:b6:ce:55:4d:07:af:49:56:85:13:7b:0e:fd:57: d6:f9:fc:76:de:4f:40:f2:0d:5a:77:4b:28:77:31:8e:8a:d4: 54:12:74:84:cf:60:f6:5f:6f:df:f4:9b:b1:ae:78:7f:9f:07: 58:30:6d:ed:55:f0:e4:a6:e6:8a:04:11:fb:ce:e3:19:29:fb: 53:b5:80:05:4e:b9:30:94:0f:e8:f3:46:f7:42:ed:7b:67:6b: 91:9c:e8:60:3b:b1:8c:44:67:26:eb:ca:8d:3c:48:52:17:4c: 7e:e4:1a:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CRyqkLM7PWBZmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2 ZDQ3MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MzU5MzYyYmEtOTM4MS00Njg0LTk4NWUtMDAxYzA1ODdjZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHAVmsNtZnzs/aXAyu0PdINOvdcK0/e322Lj BP/OL3mk7EXg39C9145oleXLf/NyJ20wRQniDZsia4rONHCYzkPFhtuhojO+q0f6 2jnTZtf4zVvQKCmuSos2CzV4Wlw6Ps9l9B9IrqJiEN58tSj6fUiQu3kA/QkSrAG4 QfWRIeHujeRshF+PoPINr+hny0KMr+1QmMM8Cbdv+VvpYt6gZvyIBOyeAXlX1Bh1 GltaGlpMudAr3/NvIFvj7VkebS0AQfEFSVM5oafei5u3SAPDXvSWjSf5JsoGz8Ts PK5gWzNYaG/fGIAOOd8HMpuuXvFJdmJsPuU1pcdoDwQrzyL09QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpDh4n2nmcbHA7kMwNO9awX0t8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5 YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvNTQ5ODYyMDctN2E1OC0z NmY2LThlNzctZjgxNjFmYTE2NDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWZjOWM0YzctZGU0YS00MDY2LTg3 MGUtMzgzZDc3MGQ2ZDQ3L2FmYzljNGM3LWRlNGEtNDA2Ni04NzBlLTM4M2Q3NzBk NmQ0Ny5jcmwwHwYDVR0jBBgwFoAUXX3Bvtm/pH6PXLAL1PiCUDDM2fIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNk NzcwZDZkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUHZNDLJKkhvSaRtps0LsgZ7P2hOW7+i35R79xqYD7egQbxI+dkB7ov YIYoTdsydDkQ2Q+9HKgn+szpmYYeWAYQbzD9UzcSlYWasfR+7BR+7bOCRFc5JXAv iJNyFwsTqzSy3mvwCCy9cPHVecgE6tc+Clu9jq/6O/10GFAo3Vx1Qe1wF83IRt1b lJiWM/yLDkH+M2S2zlVNB69JVoUTew79V9b5/HbeT0DyDVp3Syh3MY6K1FQSdITP YPZfb9/0m7GueH+fB1gwbe1V8OSm5ooEEfvO4xkp+1O1gAVOuTCUD+jzRvdC7Xtn a5Gc6GA7sYxEZybryo08SFIXTH7kGlc= -----END CERTIFICATE-----Generated at Sat Apr 12 15:26:33 2025 by rpki-client