$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/32586da4-14f0-38f9-934f-66a03b230d6e.roa File: 32586da4-14f0-38f9-934f-66a03b230d6e.roa (raw, json) Hash identifier: 9DjPQBy6QdJ4K9x/CSPpmPtbNeQEv3miOzgv81K+zAA= Subject key identifier: D3:D6:20:BA:05:69:00:BC:8B:9C:E0:C3:A2:E4:F4:E4:E1:A3:8D:1A Certificate issuer: /CN=91294759-5da4-4acf-8f32-7c022824b443 Certificate serial: 010D0C9F43285849B0469192169F37184306F400 Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/32586da4-14f0-38f9-934f-66a03b230d6e.roa Signing time: Tue 29 Apr 2025 16:18:17 +0000 ROA not before: Tue 29 Apr 2025 16:18:17 +0000 ROA not after: Mon 28 Jul 2025 16:18:17 +0000 asID: 3477 IP address blocks: 204.193.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b0:46:91:92:16:9f:37:18:43:06:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443 Validity Not Before: Apr 29 16:18:17 2025 GMT Not After : Jul 28 16:18:17 2025 GMT Subject: CN=1ebbf889-d76b-48ad-805b-691063a9ceec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:4c:c3:dd:91:7d:7b:f7:21:10:cc:e8:33: 89:4d:ea:0e:67:89:62:4f:08:5d:a7:b3:c3:a0:4f: 70:5c:2c:dd:6e:8b:3f:8d:71:22:35:d5:12:d3:fb: 56:24:0a:9e:3d:93:d7:f6:ee:ac:55:6a:fb:5f:0a: 75:03:cf:91:8b:c4:38:c0:bb:a7:04:1a:0f:2f:57: a6:1e:ed:fb:80:d0:3c:de:62:ae:a5:60:07:87:cb: e9:27:bc:62:d2:cd:0b:4a:42:b5:a7:67:b9:bc:1d: be:23:cd:57:72:d0:ff:27:d9:36:4f:9e:d4:b1:c3: 9e:8f:b3:18:ca:33:30:50:51:3d:d8:57:0b:b0:5b: 8b:95:fe:88:13:09:c4:d1:87:43:e4:c4:5f:fd:c7: d1:07:c3:1b:40:5f:62:07:6a:46:c3:f6:b8:b3:22: c4:60:fc:f3:dc:02:83:54:c9:72:e9:48:06:0b:5e: 03:9d:71:ba:d6:0b:79:bd:b7:fd:27:e5:0d:3a:9b: b9:6f:7c:75:a2:d9:a3:73:a0:e5:e8:db:7a:35:22: 56:9c:f3:f9:7e:fd:bd:bd:0d:67:19:8a:6e:bb:f0: ee:6b:9e:51:53:2a:73:cd:7e:c0:3b:dc:aa:34:b6: 51:4c:b1:92:e4:5b:55:22:e2:8c:a3:b6:3a:e0:97: d0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D6:20:BA:05:69:00:BC:8B:9C:E0:C3:A2:E4:F4:E4:E1:A3:8D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/32586da4-14f0-38f9-934f-66a03b230d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl X509v3 Authority Key Identifier: keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer sbgp-ipAddrBlock: critical IPv4: 204.193.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1e:11:12:ae:44:22:49:2e:69:fe:72:cb:74:c5:80:37:5a: aa:3c:6c:eb:c1:bc:7f:0e:0a:f8:29:0e:29:3f:64:1b:66:64: 18:32:63:b1:3d:d5:fa:68:4a:1d:c4:43:5c:6f:e4:d0:b3:0f: ce:9a:0e:dd:38:e4:ed:fa:c1:aa:22:61:fd:ab:74:49:b8:57: 22:cb:de:db:98:37:05:c4:38:11:d2:ba:be:84:fa:4d:55:c5: 26:a2:dd:be:32:9b:f7:f6:ea:f9:af:41:2e:f7:1e:ed:29:73: 08:a3:ac:c3:5a:e0:d1:a5:84:a1:e0:dc:1c:a9:fe:28:38:59: 2d:ef:54:31:35:1b:e7:01:19:ae:86:a2:ea:e6:70:05:53:96: 09:eb:0e:be:af:26:70:1f:da:27:4e:fb:bb:1e:79:18:06:fc: 26:6a:2a:0b:d7:ba:9b:62:8a:69:a1:df:62:d8:7e:44:27:c8: 37:1c:d3:a0:e6:2f:11:0e:04:d1:3e:88:0e:c8:db:ef:0d:08: 74:04:7f:26:e4:79:97:f8:34:75:6e:05:7e:4b:30:4d:07:2c: ff:75:a9:8f:c6:89:26:d8:fe:d1:60:22:cd:95:f2:4c:7b:c9: de:3d:50:e7:0d:01:5f:51:35:db:5c:73:9f:db:d1:5e:61:b4: b2:be:09:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmwRpGSFp83GEMG9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEyOTQ3NTktNWRhNC00YWNmLThmMzItN2MwMjI4MjRi NDQzMB4XDTI1MDQyOTE2MTgxN1oXDTI1MDcyODE2MTgxN1owLzEtMCsGA1UEAxMk MWViYmY4ODktZDc2Yi00OGFkLTgwNWItNjkxMDYzYTljZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIpMw92RfXv3IRDM6DOJTeoOZ4liTwhdp7PD oE9wXCzdbos/jXEiNdUS0/tWJAqePZPX9u6sVWr7Xwp1A8+Ri8Q4wLunBBoPL1em Hu37gNA83mKupWAHh8vpJ7xi0s0LSkK1p2e5vB2+I81XctD/J9k2T57UscOej7MY yjMwUFE92FcLsFuLlf6IEwnE0YdD5MRf/cfRB8MbQF9iB2pGw/a4syLEYPzz3AKD VMly6UgGC14DnXG61gt5vbf9J+UNOpu5b3x1otmjc6Dl6Nt6NSJWnPP5fv29vQ1n GYpuu/Dua55RUypzzX7AO9yqNLZRTLGS5FtVIuKMo7Y64JfQbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPWILoFaQC8i5zgw6Lk9OTho40aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MTI5 NDc1OS01ZGE0LTRhY2YtOGYzMi03YzAyMjgyNGI0NDMvMzI1ODZkYTQtMTRmMC0z OGY5LTkzNGYtNjZhMDNiMjMwZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTEyOTQ3NTktNWRhNC00YWNmLThm MzItN2MwMjI4MjRiNDQzLzkxMjk0NzU5LTVkYTQtNGFjZi04ZjMyLTdjMDIyODI0 YjQ0My5jcmwwHwYDVR0jBBgwFoAUSuN5k6zYRUipskeneD83OSfgDyIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85MTI5NDc1OS01ZGE0LTRhY2YtOGYzMi03YzAy MjgyNGI0NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIeERKuRCJJLmn+cst0xYA3Wqo8bOvBvH8OCvgpDik/ZBtmZBgyY7E9 1fpoSh3EQ1xv5NCzD86aDt045O36waoiYf2rdEm4VyLL3tuYNwXEOBHSur6E+k1V xSai3b4ym/f26vmvQS73Hu0pcwijrMNa4NGlhKHg3Byp/ig4WS3vVDE1G+cBGa6G ourmcAVTlgnrDr6vJnAf2idO+7seeRgG/CZqKgvXuptiimmh32LYfkQnyDcc06Dm LxEOBNE+iA7I2+8NCHQEfybkeZf4NHVuBX5LME0HLP91qY/GiSbY/tFgIs2V8kx7 yd49UOcNAV9RNdtcc5/b0V5htLK+CXI= -----END CERTIFICATE-----Generated at Wed May 7 09:11:36 2025 by rpki-client