$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa File: 1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa (raw, json) Hash identifier: 9WeeuU1k4MuxOuEvVhVMK946bHzKXqClbyJJz1cclJI= Subject key identifier: A0:34:06:1D:1C:F5:F9:43:E7:71:D8:D5:B6:37:2A:0D:0D:99:FF:B1 Certificate issuer: /CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Certificate serial: 010D0C9F43285849B14A022C7408177449479E80 Authority key identifier: 6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 20940 IP address blocks: 216.238.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:02:2c:74:08:17:74:49:47:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee74c799-7d4c-4df3-b711-296c34338ef5 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fe722656-0044-47ac-bfe5-63b341e8eff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:48:d8:40:9d:75:ae:a0:65:56:bd:68:64:66: 82:4b:18:df:d3:1c:54:37:46:b6:3e:7e:a6:ca:9c: 23:c4:4b:9e:60:7d:4e:3b:ad:ea:a8:2e:cd:49:ff: 31:23:04:c9:37:4c:a9:da:cc:fe:9c:d7:bd:c3:59: 3b:7e:2b:15:6d:18:0d:44:5e:5b:7c:9d:45:49:c8: 7e:f2:80:e7:39:29:59:59:ec:51:20:3b:ea:47:b1: 83:91:df:12:e9:4a:ec:97:59:cf:88:a8:a3:23:ae: 7d:4c:05:68:79:e4:85:d7:e4:e1:63:4c:60:eb:63: d1:b5:97:92:e6:90:5c:5d:73:bd:ff:11:d2:24:28: 8e:51:1e:24:ad:ba:77:44:af:0b:6e:8f:90:51:ac: 5b:b7:4b:73:0c:0e:3b:5f:ba:83:5b:dd:d6:47:cb: 99:62:d1:36:ee:50:1e:81:38:bd:bd:87:e0:92:88: 17:bc:5e:38:a2:ac:5d:80:2b:72:79:5d:5e:ca:28: e9:d8:3e:2c:8e:e6:4e:6d:26:c4:e3:f4:4a:67:08: f7:d5:20:49:6c:18:cd:e1:bf:28:48:07:9c:19:0a: 0e:72:76:e3:e6:b1:b1:ef:8e:b9:39:db:8a:7a:f9: 7f:ea:b3:5c:5e:10:88:f4:f2:de:d0:5d:e7:1e:d0: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:34:06:1D:1C:F5:F9:43:E7:71:D8:D5:B6:37:2A:0D:0D:99:FF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/1a12e9d1-bf40-3240-880e-24f9bd5ae078.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5/ee74c799-7d4c-4df3-b711-296c34338ef5.crl X509v3 Authority Key Identifier: keyid:6C:D7:E0:0F:38:36:3A:E8:C9:32:0B:B7:C3:96:05:B7:19:AC:F7:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ee74c799-7d4c-4df3-b711-296c34338ef5.cer sbgp-ipAddrBlock: critical IPv4: 216.238.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:58:e6:7f:d6:be:82:f9:6d:6d:85:52:78:2e:3c:a7:46:90: 38:21:de:9b:37:96:cf:df:c6:fe:89:bc:a7:81:e5:3b:fe:7a: 58:64:04:d1:a5:c5:be:58:03:71:45:b2:dd:c6:1a:df:80:08: 8b:0f:95:4a:d1:a6:01:98:83:4b:35:25:2b:d4:d6:cc:98:87: 28:74:95:35:3b:ab:a9:2e:be:4c:6e:c5:11:0a:58:c5:83:95: ef:4d:85:f0:43:8b:23:b1:dd:98:a8:20:91:71:ab:46:0c:22: d1:11:1e:95:7c:c7:0d:3c:41:f1:69:23:6a:72:05:39:59:91: 97:d3:4c:5e:64:7c:85:3e:c4:ab:03:56:18:5b:df:c8:88:b9: 8c:a5:81:4f:7f:ad:70:9c:00:d0:fd:fb:ae:42:06:73:a8:fc: d0:da:bb:7c:76:ad:20:66:c9:f9:80:09:8d:6e:11:ad:ab:07: ee:7b:23:2e:b5:05:c7:d3:da:de:16:6e:fe:2c:49:03:34:8a: ae:5b:92:35:a2:23:8f:9d:e3:52:e7:29:b3:4b:0c:24:05:aa: 0a:76:93:72:c7:3b:3f:9f:cc:5e:8d:d5:1b:e2:7d:8e:d3:f8: 7c:bf:44:43:11:e3:10:f6:5b:74:55:d5:e2:99:b4:e8:fe:69: b7:90:f3:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSgIsdAgXdElHnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3NGM3OTktN2Q0Yy00ZGYzLWI3MTEtMjk2YzM0MzM4 ZWY1MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmU3MjI2NTYtMDA0NC00N2FjLWJmZTUtNjNiMzQxZThlZmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0jYQJ11rqBlVr1oZGaCSxjf0xxUN0a2Pn6m ypwjxEueYH1OO63qqC7NSf8xIwTJN0yp2sz+nNe9w1k7fisVbRgNRF5bfJ1FSch+ 8oDnOSlZWexRIDvqR7GDkd8S6Ursl1nPiKijI659TAVoeeSF1+ThY0xg62PRtZeS 5pBcXXO9/xHSJCiOUR4krbp3RK8Lbo+QUaxbt0tzDA47X7qDW93WR8uZYtE27lAe gTi9vYfgkogXvF44oqxdgCtyeV1eyijp2D4sjuZObSbE4/RKZwj31SBJbBjN4b8o SAecGQoOcnbj5rGx7465OduKevl/6rNcXhCI9PLe0F3nHtAnNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKA0Bh0c9flD53HY1bY3Kg0Nmf+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0 Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZjMzQzMzhlZjUvMWExMmU5ZDEtYmY0MC0z MjQwLTg4MGUtMjRmOWJkNWFlMDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWU3NGM3OTktN2Q0Yy00ZGYzLWI3 MTEtMjk2YzM0MzM4ZWY1L2VlNzRjNzk5LTdkNGMtNGRmMy1iNzExLTI5NmMzNDMz OGVmNS5jcmwwHwYDVR0jBBgwFoAUbNfgDzg2OujJMgu3w5YFtxms98QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZTc0Yzc5OS03ZDRjLTRkZjMtYjcxMS0yOTZj MzQzMzhlZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O6TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFY5n/WvoL5bW2FUnguPKdGkDgh3ps3ls/fxv6JvKeB5Tv+elhkBNGl xb5YA3FFst3GGt+ACIsPlUrRpgGYg0s1JSvU1syYhyh0lTU7q6kuvkxuxREKWMWD le9NhfBDiyOx3ZioIJFxq0YMItERHpV8xw08QfFpI2pyBTlZkZfTTF5kfIU+xKsD Vhhb38iIuYylgU9/rXCcAND9+65CBnOo/NDau3x2rSBmyfmACY1uEa2rB+57Iy61 BcfT2t4Wbv4sSQM0iq5bkjWiI4+d41LnKbNLDCQFqgp2k3LHOz+fzF6N1RvifY7T +Hy/REMR4xD2W3RV1eKZtOj+abeQ8/g= -----END CERTIFICATE-----Generated at Sat May 10 21:46:31 2025 by rpki-client