$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/42e24f98-7174-36d7-9ae1-030f2e5202bc.roa File: 42e24f98-7174-36d7-9ae1-030f2e5202bc.roa (raw, json) Hash identifier: i7MSO5CEL1S4akVbuuuTL2e6J5AZulU/bgH591c6B9Q= Subject key identifier: 35:AC:5C:05:65:71:5F:66:14:11:19:AF:4E:58:2A:8E:56:58:AC:C5 Certificate issuer: /CN=1dd142d7-5311-487b-9c11-f16950e4d57d Certificate serial: 010D0C9F43285849D85F873CB16CE5D233C0A43C Authority key identifier: 47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/42e24f98-7174-36d7-9ae1-030f2e5202bc.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 393919 IP address blocks: 173.241.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:87:3c:b1:6c:e5:d2:33:c0:a4:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd142d7-5311-487b-9c11-f16950e4d57d Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=df1f7e70-abc1-47f7-9bee-0ac5c74719c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:c7:f4:3d:14:67:35:85:fa:27:ff:f4:ae: fb:67:d3:36:af:2d:e0:54:a7:65:55:68:46:3b:0c: 6a:c4:db:2a:ee:4a:36:a6:e2:3c:05:e8:9f:55:9b: 98:2b:55:8d:87:a4:7b:69:41:e0:9d:d8:13:65:3f: 40:1e:40:90:8b:7c:db:e9:d8:34:1d:b1:3e:48:f4: 6f:29:a9:22:c1:01:06:b3:fd:45:29:c0:68:16:ad: b1:bc:34:1e:a6:e2:76:af:18:30:96:7e:cc:ae:b6: e5:d1:80:27:7a:15:7c:67:cf:3a:cf:20:04:c4:5b: cb:b6:4b:85:c8:23:f1:94:18:16:25:9f:5b:da:4f: 6c:a1:5d:53:48:90:1c:9e:d9:e1:71:78:91:00:54: 2a:d9:46:7c:39:59:03:6e:5a:4c:2d:02:13:3e:b8: 6d:ac:52:51:d5:7b:57:be:84:77:b5:c2:9e:d8:ad: a5:6e:6f:5f:fe:fb:66:95:14:4d:09:6c:94:86:a9: ac:60:78:07:7f:10:3c:2a:f0:d5:b7:18:30:4c:bc: 75:1e:b6:7a:4a:b9:39:8c:bf:69:8b:69:bd:b5:70: 70:09:4e:5e:da:07:43:56:00:ee:77:e3:bd:fc:32: 21:4c:36:d5:aa:30:ab:a1:35:d7:cf:71:84:e3:23: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AC:5C:05:65:71:5F:66:14:11:19:AF:4E:58:2A:8E:56:58:AC:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/42e24f98-7174-36d7-9ae1-030f2e5202bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl X509v3 Authority Key Identifier: keyid:47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer sbgp-ipAddrBlock: critical IPv4: 173.241.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7b:12:06:ef:91:28:0d:8d:df:63:28:92:c9:95:ae:0e:15: ff:be:88:ed:01:a2:a1:b6:9c:29:d7:8a:f4:aa:bb:e7:f6:f2: e1:54:1b:fb:26:da:71:de:54:16:76:57:60:82:d1:a7:c0:00: 1d:0b:fe:95:05:e9:17:a9:b6:1f:d4:5d:45:b4:8c:9d:83:ca: 45:0b:a9:7d:3c:d6:af:b4:bf:27:1a:70:4a:f2:be:96:d5:ea: 15:e9:80:30:29:9a:fa:86:bf:51:02:22:04:a3:c7:b7:c2:52: 76:91:23:17:41:54:29:e1:37:7a:a5:5d:5b:f3:44:f6:ef:e9: 7c:e4:0d:6a:88:c9:4d:3e:cc:2a:ff:43:81:66:98:3e:e8:56: 3d:02:70:75:ed:a2:5e:32:cf:32:ac:60:38:c1:d4:be:63:f5: 08:ca:cf:1d:4b:0f:50:55:68:ac:8c:b9:2d:e2:8f:9a:9b:b1: f3:6c:c5:c3:b2:50:d7:81:96:d5:c9:f7:5c:0f:87:ea:91:27: c9:bc:82:8e:af:06:86:1e:5f:fa:82:8a:2a:3a:7c:80:c5:ec: f0:42:0f:1e:30:74:14:fe:b7:2e:fc:41:22:98:c2:cf:b7:55: 4a:1f:12:d5:f4:c1:03:cd:5e:c7:ed:17:05:52:69:a2:e4:57: 63:ce:f1:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4c8sWzl0jPApDwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkMTQyZDctNTMxMS00ODdiLTljMTEtZjE2OTUwZTRk NTdkMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZGYxZjdlNzAtYWJjMS00N2Y3LTliZWUtMGFjNWM3NDcxOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzTH9D0UZzWF+if/9K77Z9M2ry3gVKdlVWhG OwxqxNsq7ko2puI8BeifVZuYK1WNh6R7aUHgndgTZT9AHkCQi3zb6dg0HbE+SPRv KakiwQEGs/1FKcBoFq2xvDQepuJ2rxgwln7Mrrbl0YAnehV8Z886zyAExFvLtkuF yCPxlBgWJZ9b2k9soV1TSJAcntnhcXiRAFQq2UZ8OVkDblpMLQITPrhtrFJR1XtX voR3tcKe2K2lbm9f/vtmlRRNCWyUhqmsYHgHfxA8KvDVtxgwTLx1HrZ6Srk5jL9p i2m9tXBwCU5e2gdDVgDud+O9/DIhTDbVqjCroTXXz3GE4yNMWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWsXAVlcV9mFBEZr05YKo5WWKzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQx NDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5NTBlNGQ1N2QvNDJlMjRmOTgtNzE3NC0z NmQ3LTlhZTEtMDMwZjJlNTIwMmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWRkMTQyZDctNTMxMS00ODdiLTlj MTEtZjE2OTUwZTRkNTdkLzFkZDE0MmQ3LTUzMTEtNDg3Yi05YzExLWYxNjk1MGU0 ZDU3ZC5jcmwwHwYDVR0jBBgwFoAURy2x5B5MCwnHXiyrNWyEEIuA9qEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZGQxNDJkNy01MzExLTQ4N2ItOWMxMS1mMTY5 NTBlNGQ1N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl7EgbvkSgNjd9jKJLJla4OFf++iO0BoqG2nCnXivSqu+f28uFUG/sm 2nHeVBZ2V2CC0afAAB0L/pUF6Repth/UXUW0jJ2DykULqX081q+0vycacEryvpbV 6hXpgDApmvqGv1ECIgSjx7fCUnaRIxdBVCnhN3qlXVvzRPbv6XzkDWqIyU0+zCr/ Q4FmmD7oVj0CcHXtol4yzzKsYDjB1L5j9QjKzx1LD1BVaKyMuS3ij5qbsfNsxcOy UNeBltXJ91wPh+qRJ8m8go6vBoYeX/qCiio6fIDF7PBCDx4wdBT+ty78QSKYws+3 VUofEtX0wQPNXsftFwVSaaLkV2PO8bg= -----END CERTIFICATE-----Generated at Tue Jul 1 06:49:11 2025 by rpki-client