$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa File: d77f1a9d-1504-37be-979a-7b6e3ced878c.roa (raw, json) Hash identifier: elQZLqfsTwkOnZ2Hc7gvK29FT6Wo/qtTX8jChWlZnfc= Subject key identifier: 64:A0:7B:26:D2:D3:DF:33:CB:06:F7:7F:EE:67:B7:6C:F4:54:AA:6B Certificate issuer: /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Certificate serial: 010D0C9F43285849A3548389ECF4309CBE2FD900 Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 18612 IP address blocks: 204.14.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:83:89:ec:f4:30:9c:be:2f:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=7e2a71d1-b4b8-4e6e-9b5a-4f48a353e9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7f:1f:f3:56:2f:87:c0:66:6c:26:f2:c4:8a: 21:6c:95:ed:f1:e2:b2:6e:d7:bb:55:3d:a7:47:50: 05:fb:93:9b:cb:b6:bc:2e:ef:f9:d0:55:65:66:4c: 18:f0:26:e1:ef:9d:f1:89:a5:fb:1e:f1:cf:e8:b9: 24:ff:bf:d3:ce:1c:f1:2e:9d:dc:17:96:22:c3:3b: 27:0c:aa:ce:e0:47:93:c4:45:1f:a4:95:33:1a:00: 9c:31:79:6c:f2:1a:fc:3f:17:22:3d:0b:dd:15:82: b4:58:45:27:b3:f1:9c:7e:b8:04:4a:2c:00:75:56: b3:cf:51:61:9f:93:8d:d5:83:11:d5:73:c8:ad:43: 94:17:14:5d:91:96:f7:50:3e:d7:30:16:80:55:cb: b5:5d:be:a6:d4:58:3d:3b:0c:c7:25:d8:3f:dc:3a: 17:3d:77:53:05:e0:39:63:33:47:f6:9b:d3:b3:73: d9:0d:c8:2e:81:31:c0:3e:30:bc:0e:0f:0e:a0:f5: 68:2c:34:f5:c4:4e:53:40:3b:9f:1f:ac:a9:b9:d1: 58:f4:27:6e:52:f5:2c:6b:06:05:0b:4a:aa:52:19: 1c:ba:20:84:4e:af:29:0c:ad:57:e3:22:44:0f:f0: b4:81:b3:87:cb:b9:08:b7:6a:25:58:96:31:c3:4f: da:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A0:7B:26:D2:D3:DF:33:CB:06:F7:7F:EE:67:B7:6C:F4:54:AA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl X509v3 Authority Key Identifier: keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer sbgp-ipAddrBlock: critical IPv4: 204.14.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:1d:da:8f:79:d4:67:05:5e:e8:c1:59:9e:49:0b:3f:af:af: 75:ba:a6:01:6a:61:ea:31:00:93:03:cb:d8:a0:47:d0:02:ca: 6f:79:1d:b4:a6:93:29:80:69:4f:ad:93:18:cf:72:2d:93:27: 48:af:f3:7b:ac:ad:c6:fb:ce:1f:2d:b3:73:f4:47:51:55:e1: 3f:7b:19:f9:00:4c:47:10:9b:74:3f:fa:4c:6d:67:5a:7b:03: 0b:83:d7:d3:20:e1:a3:4f:68:ca:3f:35:99:a2:06:d1:4b:6a: 9e:ad:1f:6b:67:f9:02:5a:a5:a7:4f:7a:8f:29:cc:b5:f5:8e: 14:f4:41:77:98:4a:16:cc:a1:a8:1d:1c:b8:bb:d5:20:01:b8: 45:76:92:e7:97:13:57:67:1e:42:d6:27:c2:2f:fc:e9:5f:b6: d7:cb:31:f6:29:f5:87:66:85:75:9a:34:68:4b:5f:6e:a4:da: cd:3e:ea:35:28:3a:f5:66:a0:80:76:8f:9b:a6:ab:0c:59:d8: db:1b:00:89:4b:87:27:60:fa:03:49:24:a0:85:f7:3a:50:74: de:b3:f0:ef:cc:58:97:e3:01:97:5d:41:fd:e5:12:d3:d7:e8: 99:8f:39:a8:6e:4f:d2:d6:71:0b:b5:58:3b:f8:aa:9c:58:8b: d7:65:95:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIOJ7PQwnL4v2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFkMDhlNWMtNzllNC00Njk3LWEwMmUtZjM3ZWEyZGIy ODljMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk N2UyYTcxZDEtYjRiOC00ZTZlLTliNWEtNGY0OGEzNTNlOWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH8f81Yvh8BmbCbyxIohbJXt8eKybte7VT2n R1AF+5Oby7a8Lu/50FVlZkwY8Cbh753xiaX7HvHP6Lkk/7/TzhzxLp3cF5Yiwzsn DKrO4EeTxEUfpJUzGgCcMXls8hr8PxciPQvdFYK0WEUns/GcfrgESiwAdVazz1Fh n5ON1YMR1XPIrUOUFxRdkZb3UD7XMBaAVcu1Xb6m1Fg9OwzHJdg/3DoXPXdTBeA5 YzNH9pvTs3PZDcgugTHAPjC8Dg8OoPVoLDT1xE5TQDufH6ypudFY9CduUvUsawYF C0qqUhkcuiCETq8pDK1X4yJED/C0gbOHy7kIt2olWJYxw0/a2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSgeybS098zywb3f+5nt2z0VKprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWQw OGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdlYTJkYjI4OWMvZDc3ZjFhOWQtMTUwNC0z N2JlLTk3OWEtN2I2ZTNjZWQ4NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFkMDhlNWMtNzllNC00Njk3LWEw MmUtZjM3ZWEyZGIyODljLzYxZDA4ZTVjLTc5ZTQtNDY5Ny1hMDJlLWYzN2VhMmRi Mjg5Yy5jcmwwHwYDVR0jBBgwFoAUIl1mkAJyYRWljfPscpZzsqSMpdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWQwOGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdl YTJkYjI4OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQd2o951GcFXujBWZ5JCz+vr3W6pgFqYeoxAJMDy9igR9ACym95HbSm kymAaU+tkxjPci2TJ0iv83usrcb7zh8ts3P0R1FV4T97GfkATEcQm3Q/+kxtZ1p7 AwuD19Mg4aNPaMo/NZmiBtFLap6tH2tn+QJapadPeo8pzLX1jhT0QXeYShbMoagd HLi71SABuEV2kueXE1dnHkLWJ8Iv/OlfttfLMfYp9YdmhXWaNGhLX26k2s0+6jUo OvVmoIB2j5umqwxZ2NsbAIlLhydg+gNJJKCF9zpQdN6z8O/MWJfjAZddQf3lEtPX 6JmPOahuT9LWcQu1WDv4qpxYi9dllXc= -----END CERTIFICATE-----Generated at Wed May 14 02:32:05 2025 by rpki-client