$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5423aaa5-1c3a-33b4-83e3-5c73ba829c83.roa File: 5423aaa5-1c3a-33b4-83e3-5c73ba829c83.roa (raw, json) Hash identifier: 5GEa2T4KuPJ9hAGNYeb7dnX7fh7hjWMYH8O6iRxUHyA= Subject key identifier: 28:23:74:5E:62:42:DB:F5:1B:F0:8F:36:52:30:66:FA:B7:CC:84:7F Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849CBCF86C0EC3B451654C07680 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5423aaa5-1c3a-33b4-83e3-5c73ba829c83.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 42 IP address blocks: 204.26.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:86:c0:ec:3b:45:16:54:c0:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=b010786a-93c0-44a1-b63d-33f65eb5fb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:34:1c:bf:be:c2:de:93:fa:6e:6b:33:f1: f2:d0:ba:be:b0:0b:f9:99:37:a5:d7:f8:b4:b3:77: d6:c6:a9:51:3b:d4:72:fd:76:1a:11:4f:27:b1:43: 7e:96:19:dd:31:a2:f3:45:ee:c5:8c:a6:45:45:1e: a8:08:24:e3:a1:8a:a4:4b:90:7c:14:36:0d:93:e7: bd:64:ef:56:25:80:93:ef:6e:f3:ac:34:af:64:c7: bb:a5:2f:0e:5c:67:8e:14:a6:21:06:99:0b:58:df: ae:d7:19:d6:81:4c:50:07:ab:99:4a:8d:3d:5f:7f: 20:df:fb:f4:5a:d3:95:90:ec:80:ca:10:38:84:0a: 00:9e:1e:a5:38:3d:7a:d2:be:55:0b:bd:f2:1b:b7: fa:48:b0:c9:00:79:4d:dd:36:c1:50:36:24:54:03: 70:33:0a:ae:a5:48:d5:d9:18:09:ea:ed:62:12:f7: d2:bf:3c:fb:85:0e:7b:4a:89:54:95:c8:2b:00:fe: d3:1e:37:0a:cd:8d:66:ca:9c:3c:63:41:65:7e:af: 24:dc:5d:0d:fe:b4:4c:20:8e:bc:5e:fa:bc:fa:6f: 59:08:57:e4:fb:ca:86:26:32:48:aa:a7:64:58:b6: 4f:8b:83:c2:e9:71:63:48:17:fc:8d:db:68:24:d8: 6c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:23:74:5E:62:42:DB:F5:1B:F0:8F:36:52:30:66:FA:B7:CC:84:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/5423aaa5-1c3a-33b4-83e3-5c73ba829c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 204.26.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7a:87:81:94:03:17:92:4e:28:3e:08:78:80:32:3c:69:7d: ca:bd:13:d1:b0:2e:bf:f5:1a:a3:9a:37:09:0e:ef:b3:56:a8: ff:ef:16:9f:91:8f:c8:a1:de:ef:35:3e:ac:93:1b:ea:ab:36: c5:94:2b:49:7d:7b:4e:c2:e0:16:59:b0:24:68:e2:92:3d:e1: 5d:ea:e7:09:17:5b:c8:bc:8e:1e:7a:52:0e:9b:c9:be:e4:0f: cd:57:c1:48:dd:a9:6e:fb:30:6d:36:9b:c4:e4:83:b3:82:4c: 6a:44:57:ab:89:2f:b0:d3:0a:e9:6c:8e:41:8b:75:3d:c7:ba: ed:db:36:a9:af:23:c9:d0:c7:27:c2:d8:86:24:dd:a9:3c:8e: b0:38:47:ba:76:37:9d:f3:aa:89:be:13:8e:fe:57:78:94:48: 04:96:ee:e7:c7:20:c7:73:be:09:c4:5c:fb:29:82:69:35:e7: 71:ec:aa:e5:bd:18:fa:89:8e:9e:d5:a6:9c:a3:c8:2d:d8:e7: fb:76:6e:a3:1e:5a:af:7d:57:21:3f:53:df:6c:86:50:5d:60: 92:80:48:a1:73:a7:12:b7:60:8d:ed:01:45:10:6e:67:bd:96: 01:1e:f5:90:13:5f:3b:60:09:2c:7c:42:07:58:90:82:46:a7: f4:3b:ac:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4bA7DtFFlTAdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YjAxMDc4NmEtOTNjMC00NGExLWI2M2QtMzNmNjVlYjVmYjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDw0HL++wt6T+m5rM/Hy0Lq+sAv5mTel1/i0 s3fWxqlRO9Ry/XYaEU8nsUN+lhndMaLzRe7FjKZFRR6oCCTjoYqkS5B8FDYNk+e9 ZO9WJYCT727zrDSvZMe7pS8OXGeOFKYhBpkLWN+u1xnWgUxQB6uZSo09X38g3/v0 WtOVkOyAyhA4hAoAnh6lOD160r5VC73yG7f6SLDJAHlN3TbBUDYkVANwMwqupUjV 2RgJ6u1iEvfSvzz7hQ57SolUlcgrAP7THjcKzY1mypw8Y0Flfq8k3F0N/rRMII68 Xvq8+m9ZCFfk+8qGJjJIqqdkWLZPi4PC6XFjSBf8jdtoJNhsywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgjdF5iQtv1G/CPNlIwZvq3zIR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvNTQyM2FhYTUtMWMzYS0z M2I0LTgzZTMtNWM3M2JhODI5YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBo5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd6h4GUAxeSTig+CHiAMjxpfcq9E9GwLr/1GqOaNwkO77NWqP/vFp+R j8ih3u81PqyTG+qrNsWUK0l9e07C4BZZsCRo4pI94V3q5wkXW8i8jh56Ug6byb7k D81XwUjdqW77MG02m8Tkg7OCTGpEV6uJL7DTCulsjkGLdT3Huu3bNqmvI8nQxyfC 2IYk3ak8jrA4R7p2N53zqom+E47+V3iUSASW7ufHIMdzvgnEXPspgmk153HsquW9 GPqJjp7VppyjyC3Y5/t2bqMeWq99VyE/U99shlBdYJKASKFzpxK3YI3tAUUQbme9 lgEe9ZATXztgCSx8QgdYkIJGp/Q7rOQ= -----END CERTIFICATE-----Generated at Sun May 11 15:57:48 2025 by rpki-client