$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa File: a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa (raw, json) Hash identifier: kNLdvvdvcv5FTuFHPdHvdmppW05pf6QZBBiGIILau1s= Subject key identifier: 01:77:02:CE:93:3F:ED:E1:7E:BD:38:52:5C:45:42:D1:64:5B:56:24 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285849806F11597B161AC5FF9E5A00 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 19165 IP address blocks: 173.247.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:11:59:7b:16:1a:c5:ff:9e:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=150fa732-e72e-434f-ad2b-0f384dd2b3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c1:d1:4d:de:b3:a2:2a:7c:40:64:d9:8d:f5: 2a:46:d4:5d:c5:7d:4e:95:82:66:ac:cc:17:63:5c: 71:f3:51:78:57:71:14:84:2e:81:de:82:ef:90:a7: 84:8d:27:d7:3e:e4:86:37:e5:6b:6d:04:a2:35:fc: 2f:35:44:45:8d:52:7c:fa:71:d5:3d:a9:7c:08:f1: 38:14:93:49:6a:61:e6:5e:e5:a9:2f:12:3a:01:cd: 09:f5:39:89:d7:9c:45:11:28:cc:c9:7c:fd:b6:5c: de:a4:b0:d0:4b:c2:d7:5d:8a:a1:ca:c3:1b:74:29: f6:5b:0c:d3:3a:a5:12:45:63:0a:f5:2a:b5:63:64: df:3c:ab:c4:5c:af:eb:47:93:d5:d5:b3:8f:b7:c5: 77:b7:58:03:49:41:89:f9:07:1e:ef:78:d2:e4:80: c8:32:58:92:16:e0:ac:6a:db:77:ca:c6:d9:c0:0e: 71:87:38:c1:f9:b2:92:d4:87:77:22:e5:39:ce:d9: 5e:9d:5d:3e:27:7f:d0:dc:ec:0a:34:07:29:80:10: ab:ad:87:48:99:c2:da:a6:3a:e4:2c:f9:f7:ac:4c: 9f:11:bb:a2:da:a7:01:3a:3b:4f:4a:b5:0a:6a:2f: 26:13:8e:5b:0a:32:53:97:6e:23:51:89:38:5b:9c: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:77:02:CE:93:3F:ED:E1:7E:BD:38:52:5C:45:42:D1:64:5B:56:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 173.247.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d8:83:34:63:1c:97:72:54:bd:07:8d:f6:a9:bf:50:04:1d: 71:28:b3:e1:fa:8d:38:64:ae:d4:77:8b:6f:67:f2:6b:54:dd: 47:97:27:47:c9:32:26:1e:3a:b1:12:fb:1b:7f:11:67:ec:8f: 02:01:ee:04:6a:58:9c:b9:3b:db:a2:20:54:52:7f:8e:c8:25: 49:a4:fb:05:6d:dc:b5:86:9a:bb:13:66:a4:96:87:8e:da:97: 78:69:d3:ef:29:cb:72:c8:1f:e7:78:13:05:4c:1f:c9:03:42: f1:0b:6a:73:c2:94:60:ab:4b:02:fa:a0:8a:9a:4f:43:65:d0: 2e:71:4d:73:5e:50:06:2c:cf:2c:8b:84:79:5a:f3:fd:b0:41: 18:74:4a:01:40:90:53:fd:cd:39:93:3c:80:36:be:10:ca:ba: 7b:10:5b:74:be:6b:fe:48:46:0f:68:31:92:33:9f:83:30:35: 79:26:f3:2f:fc:15:45:43:11:00:03:fc:24:b4:de:fe:8e:4c: 2a:4d:20:a8:cb:6f:11:86:a1:a8:79:f3:f7:db:b0:dd:3e:dc: cd:03:6c:c4:26:9c:9b:88:3c:2d:9f:88:62:96:f5:fe:01:28: e1:b5:a9:97:e0:90:73:43:0a:09:92:ed:64:48:a3:1e:6d:ec: a3:a6:fc:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxFZexYaxf+eWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MTUwZmE3MzItZTcyZS00MzRmLWFkMmItMGYzODRkZDJiM2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcHRTd6zoip8QGTZjfUqRtRdxX1OlYJmrMwX Y1xx81F4V3EUhC6B3oLvkKeEjSfXPuSGN+VrbQSiNfwvNURFjVJ8+nHVPal8CPE4 FJNJamHmXuWpLxI6Ac0J9TmJ15xFESjMyXz9tlzepLDQS8LXXYqhysMbdCn2WwzT OqUSRWMK9Sq1Y2TfPKvEXK/rR5PV1bOPt8V3t1gDSUGJ+Qce73jS5IDIMliSFuCs att3ysbZwA5xhzjB+bKS1Id3IuU5ztlenV0+J3/Q3OwKNAcpgBCrrYdImcLapjrk LPn3rEyfEbui2qcBOjtPSrUKai8mE45bCjJTl24jUYk4W5wz3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF3As6TP+3hfr04UlxFQtFkW1YkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYTAyZTk1YzgtNTg2NC0z OTY1LTk3MTgtNDljOWNjNWE3Y2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErffAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLYgzRjHJdyVL0Hjfapv1AEHXEos+H6jThkrtR3i29n8mtU3UeXJ0fJ MiYeOrES+xt/EWfsjwIB7gRqWJy5O9uiIFRSf47IJUmk+wVt3LWGmrsTZqSWh47a l3hp0+8py3LIH+d4EwVMH8kDQvELanPClGCrSwL6oIqaT0Nl0C5xTXNeUAYszyyL hHla8/2wQRh0SgFAkFP9zTmTPIA2vhDKunsQW3S+a/5IRg9oMZIzn4MwNXkm8y/8 FUVDEQAD/CS03v6OTCpNIKjLbxGGoah58/fbsN0+3M0DbMQmnJuIPC2fiGKW9f4B KOG1qZfgkHNDCgmS7WRIox5t7KOm/OQ= -----END CERTIFICATE-----Generated at Wed May 14 02:45:16 2025 by rpki-client