$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/ac5fc896-96df-3cd9-af98-94feef82259b.roa File: ac5fc896-96df-3cd9-af98-94feef82259b.roa (raw, json) Hash identifier: UthtSyhG3a8aivu/rpSP70bA1iyvIPXnypIpRV+T6eA= Subject key identifier: 54:93:81:E2:2F:B6:C2:55:EC:A7:B8:5C:B3:9D:49:A3:15:41:87:AD Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285849C0A4D6C1EB58A961252C5900 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/ac5fc896-96df-3cd9-af98-94feef82259b.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 5511 IP address blocks: 204.59.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:d6:c1:eb:58:a9:61:25:2c:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=69de69bf-4e9e-421b-85fe-040578bbf66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:01:85:b2:35:50:c9:02:f2:55:ba:c1:a3:9c: f7:f6:c7:79:18:8b:32:34:50:b6:72:fe:4d:64:7b: ba:32:1b:ba:43:21:c8:c3:97:fb:e8:cc:e7:da:f2: 1a:ab:26:36:f7:c0:a5:b5:3c:77:ff:24:f1:fd:5c: 04:2c:be:40:52:09:5a:1d:7d:2e:25:76:4d:7d:3e: 4a:bd:25:92:84:79:75:b6:f3:1b:95:04:84:4a:dc: a0:88:db:b7:f9:2b:89:62:3e:fc:5e:11:e6:b5:1d: fe:5e:b8:fb:37:1e:49:a3:22:32:1e:67:ca:2d:da: 38:4b:e5:1e:4a:b2:c9:5b:6e:1f:80:91:9c:25:b9: cf:5b:27:53:fa:57:ce:19:98:b7:89:61:4c:2a:a7: 7a:ed:be:5c:95:76:17:a5:e9:4e:6c:fa:63:39:56: cb:62:95:12:38:b0:90:59:93:e5:8d:51:e3:ee:9e: 87:e5:55:c5:6d:4c:86:ce:4d:3e:a2:d7:2e:de:bb: 44:b0:46:f0:17:21:ac:74:8c:c3:09:80:98:12:82: 9c:98:58:94:c1:97:1d:ac:f5:e1:0a:10:00:77:69: a4:17:73:81:8f:35:63:ab:c5:66:a9:f6:29:18:7f: 5c:a6:eb:19:c2:fe:19:50:e4:4a:9a:a4:e8:c5:7c: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:93:81:E2:2F:B6:C2:55:EC:A7:B8:5C:B3:9D:49:A3:15:41:87:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/ac5fc896-96df-3cd9-af98-94feef82259b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 204.59.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:cd:06:d6:21:e5:30:c6:56:a6:63:37:38:72:6d:7f:6e:88: a6:9d:67:6b:69:c2:ed:88:af:cc:4a:7e:e0:74:6b:82:ed:4d: d7:b9:2c:8f:94:3c:72:17:b3:f9:1b:bb:10:09:1a:3c:7e:b7: 14:1d:ec:0e:f7:e8:49:e0:de:2a:d2:f5:aa:2e:0b:99:0b:22: 26:c7:a1:7e:6a:9e:7d:33:aa:3c:96:19:99:dd:89:d2:ec:99: ab:0c:24:6d:72:bf:0f:cc:3c:12:84:61:32:2b:ac:b6:d6:09: 7e:ae:56:14:42:a1:b6:05:94:45:b3:d3:20:ed:22:63:d4:b3: 76:b4:d5:a2:42:6e:60:9f:23:1f:44:02:94:04:3b:94:e3:06: a8:b1:75:84:c9:ad:d5:35:1d:6d:1d:a6:c1:17:dd:f6:42:ae: 3d:29:8f:83:c0:2c:9c:8c:db:0e:ce:12:03:4e:79:49:ad:39: a5:7b:9a:d0:a2:97:51:ed:9e:d0:48:f4:88:4e:8a:4b:26:fd: 6c:09:17:f7:05:76:94:f6:3d:eb:9b:49:3c:7c:80:a3:55:1d: 0f:cd:07:78:9d:36:05:66:9c:ea:69:53:d9:e0:9c:8f:ef:ed: 40:89:ec:d5:19:ff:42:c4:c5:fd:ee:3c:ac:13:82:f5:62:e8: 8e:f0:ed:40 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnApNbB61ipYSUsWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk NjlkZTY5YmYtNGU5ZS00MjFiLTg1ZmUtMDQwNTc4YmJmNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAGFsjVQyQLyVbrBo5z39sd5GIsyNFC2cv5N ZHu6Mhu6QyHIw5f76Mzn2vIaqyY298CltTx3/yTx/VwELL5AUglaHX0uJXZNfT5K vSWShHl1tvMblQSEStygiNu3+SuJYj78XhHmtR3+Xrj7Nx5JoyIyHmfKLdo4S+Ue SrLJW24fgJGcJbnPWydT+lfOGZi3iWFMKqd67b5clXYXpelObPpjOVbLYpUSOLCQ WZPljVHj7p6H5VXFbUyGzk0+otcu3rtEsEbwFyGsdIzDCYCYEoKcmFiUwZcdrPXh ChAAd2mkF3OBjzVjq8VmqfYpGH9cpusZwv4ZUORKmqToxXyCqQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFSTgeIvtsJV7Ke4XLOdSaMVQYetMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvYWM1ZmM4OTYtOTZkZi0z Y2Q5LWFmOTgtOTRmZWVmODIyNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzDswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQM0G1iHlMMZWpmM3OHJtf26Ipp1na2nC7YivzEp+4HRrgu1N17ksj5Q8 chez+Ru7EAkaPH63FB3sDvfoSeDeKtL1qi4LmQsiJsehfmqefTOqPJYZmd2J0uyZ qwwkbXK/D8w8EoRhMiusttYJfq5WFEKhtgWURbPTIO0iY9SzdrTVokJuYJ8jH0QC lAQ7lOMGqLF1hMmt1TUdbR2mwRfd9kKuPSmPg8AsnIzbDs4SA055Sa05pXua0KKX Ue2e0Ej0iE6KSyb9bAkX9wV2lPY965tJPHyAo1UdD80HeJ02BWac6mlT2eCcj+/t QIns1Rn/QsTF/e48rBOC9WLojvDtQA== -----END CERTIFICATE-----Generated at Sun May 11 02:06:52 2025 by rpki-client