$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/f5bf30b6-f0c9-37bc-ad10-e5fc2ad5be44.roa File: f5bf30b6-f0c9-37bc-ad10-e5fc2ad5be44.roa (raw, json) Hash identifier: jmiwWcuUJ5qDI7pRcsastftTrI8y97UD5b+ITs9mmUw= Subject key identifier: 9E:AA:D6:80:9D:C7:CA:0B:1B:56:21:6F:79:78:D6:53:AB:51:2C:77 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849C3FA2F6832F484A74E570240 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/f5bf30b6-f0c9-37bc-ad10-e5fc2ad5be44.roa Signing time: Tue 06 May 2025 17:40:33 +0000 ROA not before: Tue 06 May 2025 17:40:33 +0000 ROA not after: Mon 04 Aug 2025 17:40:33 +0000 asID: 174 IP address blocks: 204.118.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c3:fa:2f:68:32:f4:84:a7:4e:57:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: May 6 17:40:33 2025 GMT Not After : Aug 4 17:40:33 2025 GMT Subject: CN=2449e141-29e9-4655-b7fb-e6f9c76cf230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:3d:dc:4e:21:35:2d:df:a1:52:6b:99:42: d3:8a:bb:70:d4:31:c8:f2:62:8a:9c:ce:ac:db:d6: 0a:99:10:7e:a5:c4:54:75:f4:60:38:4e:37:75:4b: ba:13:4d:bc:ed:e4:25:42:48:8c:1e:68:07:7b:b7: d9:d1:d3:35:f2:83:b6:bc:c8:89:60:00:53:75:63: 34:7c:4e:88:e5:bb:56:16:3d:27:37:ef:c1:aa:99: e4:a5:6c:08:8f:c0:d3:d9:8b:f6:04:99:fc:6d:a3: e8:98:00:eb:14:db:0d:51:bf:3b:71:8f:78:92:8a: 47:1a:2a:15:33:c3:8b:9e:60:1c:c4:5c:63:72:4b: 6e:c0:29:0d:8b:21:f7:f7:8e:86:c1:08:78:96:5a: b8:ae:5c:0f:fb:e8:fd:3c:be:45:44:f1:bd:01:f4: da:99:c5:0a:95:6c:01:46:ab:ae:d1:95:7d:a5:8d: af:26:fb:24:80:c4:15:64:4c:3b:f8:a1:a0:e6:60: 80:25:c8:c6:fb:be:72:a6:b3:e0:f7:14:a2:76:2e: 42:60:65:4e:e3:b8:28:b6:66:40:2f:74:08:04:59: 01:c8:8f:1a:5d:d4:86:36:5b:2e:37:03:31:3d:43: 5d:39:68:64:42:ae:ec:0f:45:e5:f5:1b:6a:d0:97: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AA:D6:80:9D:C7:CA:0B:1B:56:21:6F:79:78:D6:53:AB:51:2C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/f5bf30b6-f0c9-37bc-ad10-e5fc2ad5be44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.118.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:f3:4a:44:21:cf:34:9c:7b:32:c7:42:e9:51:37:1e:00:86: 52:54:aa:2c:74:3c:65:db:90:1d:57:b0:94:bb:f2:be:51:a2: 3b:11:66:e9:db:eb:4a:2b:02:72:69:da:8a:55:17:36:49:52: 7f:ad:36:7e:82:3b:1b:f4:84:72:22:cb:97:7e:45:e9:fd:6d: d5:a2:e2:6a:8d:0e:3e:06:c4:51:c1:24:fc:a8:ca:7b:ff:51: 6a:21:0e:d8:e8:83:ce:b0:b4:d1:9d:57:c0:6c:d8:9a:13:8a: dd:c8:f7:fc:90:14:2f:58:d3:d0:61:6f:1a:21:f9:1d:77:69: e6:1a:b9:a6:af:f8:52:aa:b7:79:a8:1a:53:ee:0f:6a:c2:b6: 81:1a:8b:54:41:10:46:89:c8:42:30:13:8e:f9:5f:5d:74:7f: 9d:d6:f6:c7:ba:ec:4e:0f:08:19:a5:32:ba:a2:35:5d:2a:68: b8:cd:16:85:1e:af:85:a8:af:0f:8c:17:0b:89:27:84:9d:dd: e9:44:81:e1:9a:60:1c:c3:cf:55:03:0a:4c:d5:50:5e:d8:a2: 1a:8c:e5:03:fc:46:24:a8:f5:53:db:ea:49:85:47:b9:b7:0a: 26:5b:e0:ab:2d:af:09:28:b1:fc:c0:a8:78:43:f8:89:61:54: 1a:d2:42:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnD+i9oMvSEp05XAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDUwNjE3NDAzM1oXDTI1MDgwNDE3NDAzM1owLzEtMCsGA1UEAxMk MjQ0OWUxNDEtMjllOS00NjU1LWI3ZmItZTZmOWM3NmNmMjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ493E4hNS3foVJrmULTirtw1DHI8mKKnM6s 29YKmRB+pcRUdfRgOE43dUu6E0287eQlQkiMHmgHe7fZ0dM18oO2vMiJYABTdWM0 fE6I5btWFj0nN+/BqpnkpWwIj8DT2Yv2BJn8baPomADrFNsNUb87cY94kopHGioV M8OLnmAcxFxjcktuwCkNiyH3946GwQh4llq4rlwP++j9PL5FRPG9AfTamcUKlWwB Rquu0ZV9pY2vJvskgMQVZEw7+KGg5mCAJcjG+75yprPg9xSidi5CYGVO47gotmZA L3QIBFkByI8aXdSGNlsuNwMxPUNdOWhkQq7sD0Xl9Rtq0JduvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6q1oCdx8oLG1Yhb3l41lOrUSx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZjViZjMwYjYtZjBjOS0z N2JjLWFkMTAtZTVmYzJhZDViZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHYWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7zSkQhzzScezLHQulRNx4AhlJUqix0PGXbkB1XsJS78r5RojsRZunb 60orAnJp2opVFzZJUn+tNn6COxv0hHIiy5d+Ren9bdWi4mqNDj4GxFHBJPyoynv/ UWohDtjog86wtNGdV8Bs2JoTit3I9/yQFC9Y09Bhbxoh+R13aeYauaav+FKqt3mo GlPuD2rCtoEai1RBEEaJyEIwE475X110f53W9se67E4PCBmlMrqiNV0qaLjNFoUe r4Worw+MFwuJJ4Sd3elEgeGaYBzDz1UDCkzVUF7YohqM5QP8RiSo9VPb6kmFR7m3 CiZb4KstrwkosfzAqHhD+IlhVBrSQtc= -----END CERTIFICATE-----Generated at Sun May 11 05:21:31 2025 by rpki-client