$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa File: 7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa (raw, json) Hash identifier: V2h21LXceQ5yJ0+Wc67FtZSrng4TXL6zYinw+bGvtT8= Subject key identifier: DB:53:34:00:28:8F:CC:AC:33:2A:C0:5B:4C:14:C9:F8:FC:0D:DB:ED Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F43285849C904DFDC911C4B2351F74240 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 139267 IP address blocks: 173.243.224.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:df:dc:91:1c:4b:23:51:f7:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=0684f67d-732d-40c5-9750-e50dbf141751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:0f:87:00:d4:af:24:5b:9a:9c:2b:92:1d: 35:25:d8:74:a9:44:79:41:8d:c0:65:48:fd:f4:3b: 11:2a:ed:fd:0d:71:bf:e1:ec:0b:f2:82:a3:e5:a8: 83:13:b1:51:67:d6:7f:bc:e4:c6:84:0f:13:ed:f7: 0a:3e:c6:be:e1:da:6a:66:7b:c6:82:88:61:82:07: 30:69:51:a0:12:5d:01:8b:c5:5a:74:a1:51:b3:7f: 75:17:5c:11:fa:11:29:ff:d0:85:80:cf:bd:8d:ec: ca:34:74:13:e5:73:31:1d:7a:d0:88:90:62:48:93: 15:d9:6b:79:11:ea:9d:ec:9b:fe:0e:7f:f5:ce:c9: 9f:21:14:55:13:b4:76:f2:e3:e2:e0:4c:36:4e:7f: 47:0c:b9:f5:ab:42:c0:19:2d:04:e1:84:8d:85:99: 05:a7:ab:6e:ab:49:17:46:88:ef:7a:c2:a1:2d:a8: 1a:54:0d:a7:e3:a9:ab:30:6e:f2:59:32:44:3f:46: 99:a7:2e:ee:97:27:6a:5f:72:25:c5:86:38:f7:c2: 74:d9:6e:e1:c4:de:48:f0:ae:05:3c:4b:86:38:06: 69:bc:4f:c6:76:31:a9:d8:6e:aa:45:e5:c3:2f:9e: ed:b2:f9:e8:32:ec:ab:60:07:89:7f:bb:9a:4c:0a: 47:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:53:34:00:28:8F:CC:AC:33:2A:C0:5B:4C:14:C9:F8:FC:0D:DB:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/7a500706-91a1-37b0-a16e-a02ac9aa38ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 173.243.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:dd:52:e0:11:c0:37:8d:a3:14:9e:ea:90:12:97:84:aa:b6: 4e:49:fd:4f:a1:f2:25:bb:a0:04:18:f3:4e:60:41:5a:ec:37: b2:93:59:1d:63:42:23:70:fe:bc:6d:be:b1:d8:45:a4:55:24: 3f:2b:d0:9b:8f:39:8a:ff:d6:ab:e4:f0:e0:3d:f6:97:6e:89: df:c0:c0:dd:dc:90:ed:01:16:7f:ed:d2:45:18:b5:5d:75:24: c9:e3:3b:2c:59:88:11:c2:93:6d:46:a7:59:3e:71:9a:2f:e1: f2:f4:af:8e:60:03:91:a5:51:65:dc:cd:af:fe:ba:31:93:82: 61:36:73:0e:f1:2a:22:3b:95:75:74:7e:db:ec:ff:8f:a6:7d: 8b:98:ed:24:d0:ae:24:be:6a:eb:d4:50:cd:43:f2:d5:f2:57: f7:e1:39:14:26:95:8b:fa:92:21:72:f1:f2:d2:ad:65:a4:96: c8:5f:16:f8:11:80:5c:78:3a:9d:0b:b2:35:82:04:7a:80:27: 86:14:bb:7f:21:8e:ec:dd:59:75:74:c5:2a:4f:65:4e:9d:08: 6f:2e:c5:78:8f:45:0d:ec:3b:ae:7c:56:e7:44:ea:59:a0:45: 7d:f7:db:4c:6d:2e:d0:9b:17:fe:09:2f:70:b1:b9:e3:16:89: 3d:48:98:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBN/ckRxLI1H3QkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MDY4NGY2N2QtNzMyZC00MGM1LTk3NTAtZTUwZGJmMTQxNzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBcPhwDUryRbmpwrkh01Jdh0qUR5QY3AZUj9 9DsRKu39DXG/4ewL8oKj5aiDE7FRZ9Z/vOTGhA8T7fcKPsa+4dpqZnvGgohhggcw aVGgEl0Bi8VadKFRs391F1wR+hEp/9CFgM+9jezKNHQT5XMxHXrQiJBiSJMV2Wt5 Eeqd7Jv+Dn/1zsmfIRRVE7R28uPi4Ew2Tn9HDLn1q0LAGS0E4YSNhZkFp6tuq0kX RojvesKhLagaVA2n46mrMG7yWTJEP0aZpy7ulydqX3IlxYY498J02W7hxN5I8K4F PEuGOAZpvE/GdjGp2G6qReXDL57tsvnoMuyrYAeJf7uaTApH1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtTNAAoj8ysMyrAW0wUyfj8DdvtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvN2E1MDA3MDYtOTFhMS0z N2IwLWExNmUtYTAyYWM5YWEzOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjdUuARwDeNoxSe6pASl4Sqtk5J/U+h8iW7oAQY805gQVrsN7KTWR1j QiNw/rxtvrHYRaRVJD8r0JuPOYr/1qvk8OA99pduid/AwN3ckO0BFn/t0kUYtV11 JMnjOyxZiBHCk21Gp1k+cZov4fL0r45gA5GlUWXcza/+ujGTgmE2cw7xKiI7lXV0 ftvs/4+mfYuY7STQriS+auvUUM1D8tXyV/fhORQmlYv6kiFy8fLSrWWklshfFvgR gFx4Op0LsjWCBHqAJ4YUu38hjuzdWXV0xSpPZU6dCG8uxXiPRQ3sO658VudE6lmg RX3320xtLtCbF/4JL3CxueMWiT1ImK8= -----END CERTIFICATE-----Generated at Sat May 10 04:52:46 2025 by rpki-client