$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa File: 9477d30f-60e1-349b-9381-c5e6e73f84d7.roa (raw, json) Hash identifier: tUd7tv48K4FDYmSYU+VA3aH8HPoCFIEEOKGzQTHEW1E= Subject key identifier: A9:17:1F:0B:27:21:58:36:A2:F1:62:95:D8:F3:2E:7C:11:08:B5:8A Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F43285849B57A0FAB52B65ED125449540 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 400226 IP address blocks: 204.197.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:0f:ab:52:b6:5e:d1:25:44:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=073c61f3-9204-4ae6-99b5-9b3ff4994755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:7e:93:1b:6d:ad:49:08:e9:b3:a5:c4:01: e1:bd:df:f7:45:dd:7c:16:1d:3e:6d:2b:37:69:0d: f7:ca:d7:04:0a:ad:03:95:46:3f:db:ae:a3:53:76: 9a:4c:46:0b:52:ee:27:ec:c2:79:ed:3b:66:e7:d8: 2d:86:2f:f5:b1:8d:1f:44:6d:51:05:0d:83:d2:72: 1c:20:d8:7d:e4:06:a9:d3:32:91:8c:0e:23:0f:ce: a4:4c:a7:8a:a2:e0:fb:b2:02:87:0f:07:44:4b:87: 33:21:0e:2b:04:01:f8:f7:ad:4d:4e:18:66:99:8b: f7:73:a0:71:a1:96:d7:1b:4e:2f:b8:c0:78:c7:92: ae:93:85:6f:2a:e3:2c:40:7f:f5:56:17:09:a1:70: 53:3d:e8:63:ea:92:10:91:34:ff:14:de:2f:c6:08: 1e:5c:6c:c6:ac:83:6e:43:a6:ca:24:80:ac:1e:fe: e1:62:42:2a:68:ec:7d:4c:8f:45:c2:0e:f6:d1:52: d6:cf:ff:f7:ec:4f:3e:2b:3c:ef:fa:09:67:e6:51: 70:95:d1:07:fa:d8:ca:b1:87:e7:4c:7b:64:10:83: d2:67:51:ea:cf:14:f5:9a:d3:dc:ed:3b:7a:74:f9: 2a:96:74:d6:21:b1:c2:d2:68:f8:49:71:48:04:24: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:17:1F:0B:27:21:58:36:A2:F1:62:95:D8:F3:2E:7C:11:08:B5:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/9477d30f-60e1-349b-9381-c5e6e73f84d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c1:85:42:5a:49:b6:c2:c1:4c:5f:f7:59:36:c6:76:6f:f5: 5a:98:57:34:36:3c:d5:0e:1f:89:54:f8:be:d7:ec:29:a5:f0: f2:1d:be:e7:fc:fc:75:b7:89:a3:44:e7:b5:53:1b:50:3a:e7: 95:ab:7e:9d:c3:64:85:9c:e7:02:78:19:52:21:f1:82:56:cc: 8f:67:02:a6:8b:ee:cb:9a:1a:60:4f:8c:3d:b6:4f:16:d9:85: 5a:b0:66:f5:1a:1e:09:fc:b5:84:7f:fc:1b:15:87:1d:5c:c8: 35:0e:9b:45:5c:ec:43:42:f8:1d:18:72:43:de:d9:55:f6:2e: 30:99:0d:b7:4d:c9:b6:9c:af:6f:7b:84:0e:9f:0c:23:9a:9c: 0b:f2:8f:34:6b:f7:aa:38:e5:02:53:4c:8d:7f:d9:33:35:b9: 28:df:02:44:a2:06:5a:3a:90:3c:09:d5:e6:ae:a7:05:3f:77: b5:66:34:0d:9f:2a:b8:e1:dc:5f:91:59:87:d7:8e:21:01:f0: d8:8f:0d:1b:27:43:a4:f8:26:24:90:01:36:d2:58:ba:ad:09: 94:cb:a2:ff:b9:5e:30:26:f6:87:f5:2c:2d:2b:37:b4:2e:b2: e1:7c:97:da:e8:7b:20:e0:fd:84:4f:5d:02:37:10:33:76:9e: db:ff:fe:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eg+rUrZe0SVElUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk MDczYzYxZjMtOTIwNC00YWU2LTk5YjUtOWIzZmY0OTk0NzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0V+kxttrUkI6bOlxAHhvd/3Rd18Fh0+bSs3 aQ33ytcECq0DlUY/266jU3aaTEYLUu4n7MJ57Ttm59gthi/1sY0fRG1RBQ2D0nIc INh95Aap0zKRjA4jD86kTKeKouD7sgKHDwdES4czIQ4rBAH4961NThhmmYv3c6Bx oZbXG04vuMB4x5Kuk4VvKuMsQH/1VhcJoXBTPehj6pIQkTT/FN4vxggeXGzGrINu Q6bKJICsHv7hYkIqaOx9TI9Fwg720VLWz//37E8+Kzzv+gln5lFwldEH+tjKsYfn THtkEIPSZ1HqzxT1mtPc7Tt6dPkqlnTWIbHC0mj4SXFIBCQY9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkXHwsnIVg2ovFildjzLnwRCLWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvOTQ3N2QzMGYtNjBlMS0z NDliLTkzODEtYzVlNmU3M2Y4NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPBhUJaSbbCwUxf91k2xnZv9VqYVzQ2PNUOH4lU+L7X7Cml8PIdvuf8 /HW3iaNE57VTG1A655Wrfp3DZIWc5wJ4GVIh8YJWzI9nAqaL7suaGmBPjD22TxbZ hVqwZvUaHgn8tYR//BsVhx1cyDUOm0Vc7ENC+B0YckPe2VX2LjCZDbdNybacr297 hA6fDCOanAvyjzRr96o45QJTTI1/2TM1uSjfAkSiBlo6kDwJ1eaupwU/d7VmNA2f Krjh3F+RWYfXjiEB8NiPDRsnQ6T4JiSQATbSWLqtCZTLov+5XjAm9of1LC0rN7Qu suF8l9roeyDg/YRPXQI3EDN2ntv//vo= -----END CERTIFICATE-----Generated at Sat May 10 20:36:42 2025 by rpki-client