$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/1c213eca-2928-3702-abc1-b5482041c1b4.roa File: 1c213eca-2928-3702-abc1-b5482041c1b4.roa (raw, json) Hash identifier: kOcjyQcALSMCJlzhipd47IfNy3YM8cWQpVZ+d+k1Eq0= Subject key identifier: 6C:D0:6A:87:A1:07:B1:09:EA:94:DC:F1:FA:CD:96:BB:7B:89:D8:4F Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285849C0A4E09C4E204543A154A000 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/1c213eca-2928-3702-abc1-b5482041c1b4.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 4005 IP address blocks: 204.59.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e0:9c:4e:20:45:43:a1:54:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=dc96c4bd-9ccb-4cdd-8c1e-d8c25cf9423c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:b3:12:88:1f:4a:d8:ad:32:87:0d:10:2e: 54:9f:1f:93:5d:ef:9f:98:cc:c1:33:0d:c5:c4:d4: 33:39:3f:56:5a:cb:46:b6:ba:bf:f7:48:f0:a6:0b: ef:28:84:2a:10:88:89:cf:6c:37:84:d1:a6:3f:52: 26:43:b5:2c:a2:36:35:ab:92:89:e7:eb:80:48:88: b3:a4:6e:9d:b3:03:a3:45:81:07:91:be:8e:f9:a0: 8c:5e:a2:4f:87:de:b6:85:2a:6a:88:81:04:21:42: 58:a5:01:a7:ed:6a:0f:ec:b8:d8:20:ba:b5:d8:dc: dd:4a:48:a9:bd:15:eb:c5:7a:1c:12:ae:17:83:0d: a4:b2:88:b7:ff:82:20:0a:ac:f1:54:ce:42:45:8b: 49:24:a5:fa:16:41:00:02:ea:bd:14:39:a1:4a:d1: 6e:25:8b:1c:e2:4a:a6:14:62:c7:62:0d:96:4b:34: ad:fc:ef:cc:28:ab:5e:93:81:18:68:f9:90:b7:da: d4:06:2b:20:80:4f:7f:4d:29:e9:52:02:2d:64:f7: 0a:59:a0:b9:8c:ed:69:20:4a:86:21:5d:40:5d:75: 73:bc:fc:b1:f1:c7:20:2e:1d:e2:b1:e8:f3:0f:b2: e5:44:77:43:c0:0b:02:b1:9d:b1:46:ba:af:24:d8: a2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D0:6A:87:A1:07:B1:09:EA:94:DC:F1:FA:CD:96:BB:7B:89:D8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/1c213eca-2928-3702-abc1-b5482041c1b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 204.59.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ff:d8:78:e9:24:55:d6:82:5f:f7:40:b3:d1:7e:6d:ea:29: 79:51:ed:0b:38:03:d8:35:a9:e6:24:fe:01:5e:6a:b4:d4:83: fc:c3:b9:91:cd:63:e6:f5:5a:65:49:90:aa:f6:b1:f5:2b:0f: 74:d2:c3:4b:3d:fa:8c:fa:5e:3f:f5:7f:a5:46:71:fd:cf:06: be:97:18:09:28:58:01:33:65:5a:aa:a6:69:e7:5f:25:db:8a: 95:7f:17:c9:19:a4:77:9b:fb:49:65:19:80:40:28:ca:aa:32: e9:35:ba:b4:22:c5:cf:5b:cc:be:2a:83:2b:9c:1d:1a:6f:46: 65:02:a2:d3:d4:7d:1b:79:7e:87:de:7a:a6:8b:e4:0b:72:f4: e5:38:95:de:f9:bc:20:cd:7b:c2:7f:09:83:0b:c6:b9:fd:9b: c7:df:3e:3b:3e:60:b4:02:d9:a9:62:7f:e4:76:bf:80:02:be: ec:7d:d6:2e:30:2d:28:8c:bd:e8:a1:eb:63:7b:59:5c:d1:c6: f2:a6:ea:9c:1a:c6:38:74:2a:6c:62:ea:2a:79:e2:61:91:b8: 44:39:df:1e:24:d7:f5:fc:29:c2:6c:f3:79:58:4d:3a:59:80: 32:47:a3:c3:fc:d7:74:58:b8:51:8e:f1:2f:73:38:e9:35:6c: 25:26:a7:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOCcTiBFQ6FUoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGM5NmM0YmQtOWNjYi00Y2RkLThjMWUtZDhjMjVjZjk0MjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjizEogfStitMocNEC5Unx+TXe+fmMzBMw3F xNQzOT9WWstGtrq/90jwpgvvKIQqEIiJz2w3hNGmP1ImQ7UsojY1q5KJ5+uASIiz pG6dswOjRYEHkb6O+aCMXqJPh962hSpqiIEEIUJYpQGn7WoP7LjYILq12NzdSkip vRXrxXocEq4Xgw2ksoi3/4IgCqzxVM5CRYtJJKX6FkEAAuq9FDmhStFuJYsc4kqm FGLHYg2WSzSt/O/MKKtek4EYaPmQt9rUBisggE9/TSnpUgItZPcKWaC5jO1pIEqG IV1AXXVzvPyx8ccgLh3isejzD7LlRHdDwAsCsZ2xRrqvJNiiowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzQaoehB7EJ6pTc8frNlrt7idhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMWMyMTNlY2EtMjkyOC0z NzAyLWFiYzEtYjU0ODIwNDFjMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDshMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKj/2HjpJFXWgl/3QLPRfm3qKXlR7Qs4A9g1qeYk/gFearTUg/zDuZHN Y+b1WmVJkKr2sfUrD3TSw0s9+oz6Xj/1f6VGcf3PBr6XGAkoWAEzZVqqpmnnXyXb ipV/F8kZpHeb+0llGYBAKMqqMuk1urQixc9bzL4qgyucHRpvRmUCotPUfRt5fofe eqaL5Aty9OU4ld75vCDNe8J/CYMLxrn9m8ffPjs+YLQC2alif+R2v4ACvux91i4w LSiMveih62N7WVzRxvKm6pwaxjh0Kmxi6ip54mGRuEQ53x4k1/X8KcJs83lYTTpZ gDJHo8P813RYuFGO8S9zOOk1bCUmp4k= -----END CERTIFICATE-----Generated at Sun May 11 22:02:06 2025 by rpki-client