$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/655b0b0a-036a-3a4e-8d5b-5e20c96f47e8.roa File: 655b0b0a-036a-3a4e-8d5b-5e20c96f47e8.roa (raw, json) Hash identifier: GtvYAk2pg9IEHygmhYR8cpMSa6ErYIrWK+aUcTzZkl4= Subject key identifier: D6:C6:D2:F7:28:F7:96:4E:CB:72:EF:9A:6F:4D:58:B4:2C:86:2A:ED Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F43285848F7C13E23E6F7C9D63C887FC0 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/655b0b0a-036a-3a4e-8d5b-5e20c96f47e8.roa Signing time: Sat 22 Feb 2025 14:00:52 +0000 ROA not before: Sat 22 Feb 2025 14:00:52 +0000 ROA not after: Fri 23 May 2025 13:00:52 +0000 asID: 399244 IP address blocks: 204.77.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f7:c1:3e:23:e6:f7:c9:d6:3c:88:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Feb 22 14:00:52 2025 GMT Not After : May 23 13:00:52 2025 GMT Subject: CN=af603c32-1381-4d1c-9d39-f1d594a19b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1a:07:28:66:58:27:61:ca:a4:7a:5d:ae:80: 2d:cb:f7:36:c8:26:78:ad:6a:8c:83:e6:8c:2e:5e: 43:d9:89:41:7a:5c:e0:d1:43:7b:86:0c:b3:fe:aa: e0:a0:e1:1e:23:eb:c8:7a:4e:b7:c3:78:6f:d0:67: b6:f9:ce:19:79:ac:cf:cb:55:e0:a7:59:05:4d:f7: 57:28:a7:8e:88:dc:74:ab:c9:fb:e4:29:2b:71:23: 17:30:81:4e:12:bd:b0:3b:a4:3f:aa:7b:5c:85:43: 05:1f:99:36:81:f4:44:fb:ab:26:a6:13:4d:e1:5d: e2:de:18:fd:96:0b:29:76:a9:b4:d2:51:45:3b:fb: 2f:73:30:c0:a0:61:b4:f6:95:f6:7d:5a:8a:2d:3b: 72:11:65:5e:f6:99:e3:29:41:57:7c:84:74:4d:a9: 5b:10:ae:bd:f0:af:f3:44:26:df:7f:60:44:e6:d9: de:8e:e2:c5:e0:c2:da:ac:6a:4e:71:fd:3f:8c:4e: 84:2d:e3:6f:6b:89:18:4e:5a:0c:69:df:3d:de:bc: 6a:c8:f6:6e:80:83:bf:c7:b7:72:f1:d8:37:15:7b: 35:de:e7:76:cf:cf:b0:ac:f7:92:59:f4:1b:e0:33: 02:b9:1d:09:63:2d:a6:f0:57:2b:52:e0:2b:85:e0: 16:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C6:D2:F7:28:F7:96:4E:CB:72:EF:9A:6F:4D:58:B4:2C:86:2A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/655b0b0a-036a-3a4e-8d5b-5e20c96f47e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 204.77.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9c:61:54:c8:51:5f:f0:aa:64:02:0b:2b:d8:2d:7a:0f:02: c2:ec:a1:be:b2:ca:4f:8d:f1:98:c9:53:9d:9d:a0:51:62:23: cd:c6:90:36:68:1c:30:fc:db:2d:38:b4:7f:20:fe:2f:c2:df: 38:18:99:8a:f5:2a:2c:b6:3a:79:86:56:64:8b:eb:25:73:bc: 7b:1b:ba:04:4e:cd:30:6d:d4:05:4d:c4:38:91:d4:9f:1b:94: c4:f4:a7:e4:6b:56:52:dd:95:ba:8e:24:0e:6c:38:c3:85:96: 57:ec:86:82:06:8c:d0:f4:72:63:6f:25:f4:33:d6:11:4d:6a: 4a:c2:9b:ce:e3:73:16:13:cf:de:5c:95:c4:f5:71:cf:b6:a8: 69:f0:8f:23:28:42:4e:20:c4:01:60:59:5b:07:cc:30:cd:82: d1:d3:5f:99:c2:89:b4:81:bb:71:97:a7:57:bd:4f:1e:aa:29: a2:f1:ce:39:b3:8c:e1:57:57:a9:3d:1a:4d:3a:4b:ca:47:da: ae:c1:3b:c9:4a:c0:18:65:9a:e9:f4:ec:f8:56:c3:b8:b3:61: 3b:21:3f:0b:88:72:54:b6:f8:5e:66:68:68:34:45:a3:64:ce: 21:4e:29:74:87:3a:7b:ba:8f:9d:96:94:c9:92:71:0b:a6:98: b8:74:8a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj3wT4j5vfJ1jyIf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MDIyMjE0MDA1MloXDTI1MDUyMzEzMDA1MlowLzEtMCsGA1UEAxMk YWY2MDNjMzItMTM4MS00ZDFjLTlkMzktZjFkNTk0YTE5YjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hoHKGZYJ2HKpHpdroAty/c2yCZ4rWqMg+aM Ll5D2YlBelzg0UN7hgyz/qrgoOEeI+vIek63w3hv0Ge2+c4ZeazPy1Xgp1kFTfdX KKeOiNx0q8n75CkrcSMXMIFOEr2wO6Q/qntchUMFH5k2gfRE+6smphNN4V3i3hj9 lgspdqm00lFFO/svczDAoGG09pX2fVqKLTtyEWVe9pnjKUFXfIR0TalbEK698K/z RCbff2BE5tnejuLF4MLarGpOcf0/jE6ELeNva4kYTloMad893rxqyPZugIO/x7dy 8dg3FXs13ud2z8+wrPeSWfQb4DMCuR0JYy2m8FcrUuArheAWnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbG0vco95ZOy3Lvmm9NWLQshirtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvNjU1YjBiMGEtMDM2YS0z YTRlLThkNWItNWUyMGM5NmY0N2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHicYVTIUV/wqmQCCyvYLXoPAsLsob6yyk+N8ZjJU52doFFiI83GkDZo HDD82y04tH8g/i/C3zgYmYr1Kiy2OnmGVmSL6yVzvHsbugROzTBt1AVNxDiR1J8b lMT0p+RrVlLdlbqOJA5sOMOFllfshoIGjND0cmNvJfQz1hFNakrCm87jcxYTz95c lcT1cc+2qGnwjyMoQk4gxAFgWVsHzDDNgtHTX5nCibSBu3GXp1e9Tx6qKaLxzjmz jOFXV6k9Gk06S8pH2q7BO8lKwBhlmun07PhWw7izYTshPwuIclS2+F5maGg0RaNk ziFOKXSHOnu6j52WlMmScQummLh0ivM= -----END CERTIFICATE-----Generated at Sun May 11 05:28:07 2025 by rpki-client