$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa File: 25e1f105-51dc-3628-8af3-fd38d010fc75.roa (raw, json) Hash identifier: bXXwu8N2zXJEHpbIXoZnMZCT+CQw7iq5SWSsKVR326M= Subject key identifier: FC:8A:19:69:A5:FA:6B:52:BC:96:7B:53:58:D5:E4:B2:06:05:8E:26 Certificate issuer: /CN=77258d44-b15b-4045-943b-356f0becdaa2 Certificate serial: 010D0C9F432858499DBF2DD6E1CD06CA88530140 Authority key identifier: 6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 399554 IP address blocks: 209.35.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:2d:d6:e1:cd:06:ca:88:53:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77258d44-b15b-4045-943b-356f0becdaa2 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=422d00c0-dcf0-4037-9b54-7d59e89115f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:33:6f:64:f9:a9:d0:87:69:87:59:f2:9b:1d: 97:f6:78:98:4a:61:4e:d8:3d:34:66:1b:46:81:b7: 73:e0:2c:d9:2c:68:e0:95:fc:52:e4:5d:f8:79:de: 80:48:7f:15:03:d5:7d:e2:cb:cf:35:c7:69:a3:32: 27:c1:d2:37:fe:41:65:10:6c:d4:98:16:14:ce:0a: 83:bc:78:17:24:91:58:ee:b1:52:17:43:f7:28:dd: 12:37:f3:94:10:1d:dd:b5:24:00:2c:dd:90:c0:cb: f6:13:3f:35:62:18:58:aa:22:b1:3a:e8:a1:42:13: 4f:2b:13:09:98:5e:54:e7:e7:16:bc:2c:94:22:0f: 38:e6:da:f5:40:66:0e:a4:60:02:fc:9d:3f:6a:d2: 91:2b:17:b6:50:ab:1b:91:af:97:fb:5e:e2:ae:2d: b5:0d:c6:4d:b9:a8:e1:54:b9:fe:bd:af:82:6a:a9: 85:3a:1d:41:0b:7a:24:de:04:31:93:eb:6b:52:62: 00:18:73:06:21:e4:de:4b:c4:2f:82:42:44:eb:36: a3:cc:70:00:1a:d2:31:09:83:ca:1c:e9:d8:c8:5d: 4e:33:71:07:a1:01:ca:2f:86:02:25:00:ce:b7:29: 4c:63:1c:99:50:c0:2b:0a:06:06:08:ac:1e:88:ac: 9c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8A:19:69:A5:FA:6B:52:BC:96:7B:53:58:D5:E4:B2:06:05:8E:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/25e1f105-51dc-3628-8af3-fd38d010fc75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2/77258d44-b15b-4045-943b-356f0becdaa2.crl X509v3 Authority Key Identifier: keyid:6A:A3:AF:A8:B1:21:12:15:87:14:BE:FC:BE:68:10:47:20:C6:F7:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/77258d44-b15b-4045-943b-356f0becdaa2.cer sbgp-ipAddrBlock: critical IPv4: 209.35.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:27:ad:71:fe:c6:19:c9:51:b3:c9:f9:35:88:01:1e:65:16: 95:f9:de:b8:62:41:d9:2f:d3:44:b0:fa:7c:66:fc:e0:6d:78: 7f:e5:c5:00:e6:8b:9f:b4:1e:6d:36:c9:07:f7:76:c1:15:dd: b6:84:83:3d:e4:58:65:be:f4:9a:b3:43:82:72:bf:21:a8:84: 4b:1f:17:3d:ce:5f:4e:63:4d:04:cc:d5:39:0d:56:f4:8c:c0: ef:cf:a4:16:16:6f:79:30:f5:fa:f3:95:42:eb:a3:70:d0:c6: 6e:7d:1f:4d:5e:1b:18:c3:a5:fb:c6:ed:6f:e9:a4:8b:32:dd: 81:62:d6:a2:a6:be:40:65:ef:31:a8:9c:b7:2d:90:0f:9e:7a: d1:eb:42:85:e7:48:09:e7:95:6c:6b:53:ea:a1:b9:f8:2f:0b: 38:12:d2:5d:8e:a3:8e:ad:4e:0a:bb:ac:ad:29:82:70:fb:73: e1:93:d2:2f:13:25:14:7b:57:b3:a0:54:18:77:be:5b:8a:41: a8:1c:be:f8:12:6c:a3:86:ea:51:e0:2b:9f:76:54:e6:23:51: d8:9b:1b:6e:41:85:7e:33:0c:46:eb:13:1b:20:42:9c:36:15: e6:ea:70:e0:a2:aa:31:c2:f1:19:f1:1f:8d:07:44:5c:0d:78: dd:ab:8f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvy3W4c0GyohTAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzcyNThkNDQtYjE1Yi00MDQ1LTk0M2ItMzU2ZjBiZWNk YWEyMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk NDIyZDAwYzAtZGNmMC00MDM3LTliNTQtN2Q1OWU4OTExNWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TNvZPmp0Idph1nymx2X9niYSmFO2D00ZhtG gbdz4CzZLGjglfxS5F34ed6ASH8VA9V94svPNcdpozInwdI3/kFlEGzUmBYUzgqD vHgXJJFY7rFSF0P3KN0SN/OUEB3dtSQALN2QwMv2Ez81YhhYqiKxOuihQhNPKxMJ mF5U5+cWvCyUIg845tr1QGYOpGAC/J0/atKRKxe2UKsbka+X+17iri21DcZNuajh VLn+va+CaqmFOh1BC3ok3gQxk+trUmIAGHMGIeTeS8QvgkJE6zajzHAAGtIxCYPK HOnYyF1OM3EHoQHKL4YCJQDOtylMYxyZUMArCgYGCKweiKycUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyKGWml+mtSvJZ7U1jV5LIGBY4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83NzI1 OGQ0NC1iMTViLTQwNDUtOTQzYi0zNTZmMGJlY2RhYTIvMjVlMWYxMDUtNTFkYy0z NjI4LThhZjMtZmQzOGQwMTBmYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzcyNThkNDQtYjE1Yi00MDQ1LTk0 M2ItMzU2ZjBiZWNkYWEyLzc3MjU4ZDQ0LWIxNWItNDA0NS05NDNiLTM1NmYwYmVj ZGFhMi5jcmwwHwYDVR0jBBgwFoAUaqOvqLEhEhWHFL78vmgQRyDG97swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83NzI1OGQ0NC1iMTViLTQwNDUtOTQzYi0zNTZm MGJlY2RhYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0SOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEnrXH+xhnJUbPJ+TWIAR5lFpX53rhiQdkv00Sw+nxm/OBteH/lxQDm i5+0Hm02yQf3dsEV3baEgz3kWGW+9JqzQ4JyvyGohEsfFz3OX05jTQTM1TkNVvSM wO/PpBYWb3kw9frzlULro3DQxm59H01eGxjDpfvG7W/ppIsy3YFi1qKmvkBl7zGo nLctkA+eetHrQoXnSAnnlWxrU+qhufgvCzgS0l2Oo46tTgq7rK0pgnD7c+GT0i8T JRR7V7OgVBh3vluKQagcvvgSbKOG6lHgK592VOYjUdibG25BhX4zDEbrExsgQpw2 FebqcOCiqjHC8RnxH40HRFwNeN2rj7c= -----END CERTIFICATE-----Generated at Sat May 10 18:57:52 2025 by rpki-client