$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa File: 376815db-2a35-3f76-bafa-0b1653000f0b.roa (raw, json) Hash identifier: 6VWDjuiZ1uvaii0tsdlnREpQd+bGn7xOpWKnbbLWczg= Subject key identifier: 97:36:90:0D:66:14:05:14:FA:53:69:50:72:C1:EE:88:8A:F1:A8:15 Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Certificate serial: 010D0C9F43285849BDDA28F3A6059F2712A17500 Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 50304 IP address blocks: 172.102.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:28:f3:a6:05:9f:27:12:a1:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=8d483ae7-90d3-489f-92bb-15e05fd518fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:39:3a:9d:bf:ea:03:dc:a5:1c:9f:7c:ec:4b: 02:6f:56:a9:c3:a5:b1:8b:28:ae:03:ec:11:4a:0c: 19:5d:33:05:32:b7:35:d6:86:14:65:17:c8:c7:69: 7a:1d:64:f0:62:75:18:11:7f:1f:12:e7:81:3d:cd: 1f:ac:79:09:e5:dd:f8:fa:cb:f1:8a:66:83:d8:1a: 30:3d:61:b5:cd:9a:df:06:c1:60:bd:4a:be:c1:f5: 5d:55:21:1b:dc:9c:d6:c5:f1:73:71:41:11:64:87: 95:a7:14:4e:e2:c5:96:4d:ac:63:5c:7a:ae:8b:e6: c0:9f:5d:71:d6:41:a2:90:1e:c1:95:d1:8a:a7:16: 6a:ad:3e:7c:65:e9:0d:b9:0b:39:e5:13:58:00:58: 4e:8b:e0:92:bf:0e:3c:a3:c3:d6:78:42:d9:7a:0b: 22:75:35:4f:41:88:96:60:fa:b1:dc:ca:79:f8:06: 8f:c9:e8:f5:14:10:d1:12:45:6a:7e:20:80:b2:81: 20:4a:25:a6:82:35:c5:67:71:bf:a9:90:71:22:a5: 50:74:55:62:8e:e8:36:70:ed:66:bc:00:c0:89:41: e7:91:eb:dd:ea:7f:92:18:4b:1d:ac:f1:56:75:c5: 95:a2:a0:f4:a7:0d:bf:76:6d:05:be:ed:67:41:8a: 91:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:36:90:0D:66:14:05:14:FA:53:69:50:72:C1:EE:88:8A:F1:A8:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/376815db-2a35-3f76-bafa-0b1653000f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl X509v3 Authority Key Identifier: keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer sbgp-ipAddrBlock: critical IPv4: 172.102.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:4a:ef:87:94:6f:08:c1:bc:f4:eb:c6:fb:36:7c:50:22:58: a2:d3:b1:b2:81:bd:fd:c8:22:59:10:a4:0a:d9:fa:30:6e:ab: bb:4e:58:6f:2c:dc:dd:a7:7b:9b:d6:28:dc:09:60:93:d5:f2: 73:df:0e:91:3a:1a:77:6a:07:3a:18:89:43:d9:b0:65:d7:18: d0:38:92:bd:95:61:73:86:6a:22:a5:04:e9:69:1c:d2:6b:6e: 07:25:ee:6e:e3:7f:82:2e:ef:16:0b:88:7b:65:e9:59:71:98: 58:f1:6f:fb:b6:98:94:35:58:fe:9c:1e:38:75:a6:90:d3:0c: 9c:2d:a8:b9:bc:ed:d0:ab:b2:4b:80:41:e3:ec:44:0f:69:61: 95:98:e1:60:d8:1c:b9:cf:62:1c:30:98:1c:2a:94:84:f2:be: f7:fa:f4:9c:e0:54:68:96:83:80:96:d3:3f:e1:fd:84:82:fd: e5:38:73:90:2f:cf:15:50:5a:ba:55:24:54:64:5c:24:e2:ab: 88:f6:6b:48:b6:95:ba:3b:8e:90:72:ea:b5:aa:ce:be:2f:b6: 86:08:11:1c:10:32:e5:0e:3f:c5:8f:98:b2:fe:ed:89:33:7b: 7b:c3:1e:65:81:1d:65:68:26:03:b2:72:e9:12:04:6a:48:ed: 15:38:12:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92ijzpgWfJxKhdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NjQxMmYtNTdkNy00OWJhLWI1MTQtNmIxYzZhYjQz M2E0MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk OGQ0ODNhZTctOTBkMy00ODlmLTkyYmItMTVlMDVmZDUxOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Tk6nb/qA9ylHJ987EsCb1apw6WxiyiuA+wR SgwZXTMFMrc11oYUZRfIx2l6HWTwYnUYEX8fEueBPc0frHkJ5d34+svximaD2Bow PWG1zZrfBsFgvUq+wfVdVSEb3JzWxfFzcUERZIeVpxRO4sWWTaxjXHqui+bAn11x 1kGikB7BldGKpxZqrT58ZekNuQs55RNYAFhOi+CSvw48o8PWeELZegsidTVPQYiW YPqx3Mp5+AaPyej1FBDREkVqfiCAsoEgSiWmgjXFZ3G/qZBxIqVQdFVijug2cO1m vADAiUHnkevd6n+SGEsdrPFWdcWVoqD0pw2/dm0Fvu1nQYqRtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc2kA1mFAUU+lNpUHLB7oiK8agVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2 NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFjNmFiNDMzYTQvMzc2ODE1ZGItMmEzNS0z Zjc2LWJhZmEtMGIxNjUzMDAwZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDY5NjQxMmYtNTdkNy00OWJhLWI1 MTQtNmIxYzZhYjQzM2E0LzQ2OTY0MTJmLTU3ZDctNDliYS1iNTE0LTZiMWM2YWI0 MzNhNC5jcmwwHwYDVR0jBBgwFoAUDEqUiZ1mzw8ZEo8f9lmkgUdYNdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Njk2NDEyZi01N2Q3LTQ5YmEtYjUxNC02YjFj NmFiNDMzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFK74eUbwjBvPTrxvs2fFAiWKLTsbKBvf3IIlkQpArZ+jBuq7tOWG8s 3N2ne5vWKNwJYJPV8nPfDpE6GndqBzoYiUPZsGXXGNA4kr2VYXOGaiKlBOlpHNJr bgcl7m7jf4Iu7xYLiHtl6VlxmFjxb/u2mJQ1WP6cHjh1ppDTDJwtqLm87dCrskuA QePsRA9pYZWY4WDYHLnPYhwwmBwqlITyvvf69JzgVGiWg4CW0z/h/YSC/eU4c5Av zxVQWrpVJFRkXCTiq4j2a0i2lbo7jpBy6rWqzr4vtoYIERwQMuUOP8WPmLL+7Ykz e3vDHmWBHWVoJgOycukSBGpI7RU4EoE= -----END CERTIFICATE-----Generated at Sun May 11 09:11:19 2025 by rpki-client