$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa File: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (raw, json) Hash identifier: V1u1KIXNzDu0NeN4y4bleHwm9v0joj2ooy4vdoob3dY= Subject key identifier: A4:35:F4:34:43:C0:18:DD:32:EC:0C:61:C1:BC:12:A8:51:D1:52:E8 Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F432858496FAF165316974033B5C84E90 Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa Signing time: Sun 06 Apr 2025 13:01:01 +0000 ROA not before: Sun 06 Apr 2025 13:01:01 +0000 ROA not after: Sat 05 Jul 2025 13:01:01 +0000 asID: 32242 IP address blocks: 172.102.2.0/24 maxlen: 24 172.102.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6f:af:16:53:16:97:40:33:b5:c8:4e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Apr 6 13:01:01 2025 GMT Not After : Jul 5 13:01:01 2025 GMT Subject: CN=26ed6b3c-5fa1-451c-b63f-626e5558ffa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:fd:12:3f:08:62:c5:52:29:f4:24:e7:58: 8e:d5:eb:54:02:1a:24:a7:4c:52:86:fe:db:66:54: 57:7e:fa:af:d3:d9:a7:69:b3:b3:96:ec:9d:8f:92: 62:c3:58:05:9b:ad:c2:1e:6e:7c:c2:ae:05:88:37: 0c:bb:fb:f6:8c:02:19:9c:5f:55:67:46:d2:d9:48: be:a8:c5:10:5f:59:7f:2d:4d:79:5f:42:c3:81:a3: f9:dc:5f:a2:01:34:a3:6a:a4:4f:18:e9:1c:50:86: 95:42:b5:ea:f9:0c:c6:6c:8b:d7:4c:78:97:46:3e: 82:fb:23:fa:81:89:75:ee:f7:1e:a2:ea:67:be:24: 34:f9:c7:13:8c:fc:44:aa:7f:5f:55:4d:69:f6:c4: 06:50:bc:ca:0c:b3:4c:94:34:2e:50:5d:dd:08:72: ac:3b:e6:27:77:c6:05:84:45:95:8a:0f:12:28:bd: 35:47:75:71:75:da:89:65:71:c4:a3:6f:62:34:16: b7:05:e8:ec:c8:0d:58:d8:fa:d3:00:24:e2:7a:e9: e5:e2:58:f9:11:ce:9d:67:a5:4c:ee:ce:7c:ae:41: 1a:02:32:b3:86:65:8f:9b:31:8a:e8:0f:57:09:7c: 5d:36:47:5c:4c:fe:8f:87:7d:73:6e:cd:bc:2a:42: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:35:F4:34:43:C0:18:DD:32:EC:0C:61:C1:BC:12:A8:51:D1:52:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/70eb2d09-bf51-3793-8af3-831217b8a04e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv4: 172.102.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7f:e4:33:38:46:8d:20:9c:18:e9:c6:d9:be:7c:9f:4b:9b: ed:5f:b2:53:24:09:7d:4c:a6:68:d6:23:f9:f9:d4:87:5a:38: 04:b1:b1:2a:ae:35:69:7e:fa:4b:46:6c:48:72:6e:e2:c1:af: 57:30:53:9b:6c:23:8a:51:54:09:37:65:9e:f0:a4:a6:3e:ba: 3d:ce:34:8c:e8:c3:61:d9:b0:32:b5:df:05:c6:60:2a:a5:ea: 3b:d0:ab:66:37:de:fa:7d:69:a8:2a:64:cf:1a:f0:6a:e9:4e: af:d3:80:c2:93:bf:fc:28:41:db:40:bd:a0:0c:7f:45:bb:12: 28:f8:0e:e6:cf:dd:23:76:a8:3d:6b:31:6b:dd:8a:9a:65:2e: 7e:f5:e8:f9:81:be:77:8a:3a:35:33:ef:63:b8:75:1a:f1:ae: c7:4d:41:4c:ae:da:57:d2:7a:ba:2b:13:79:63:8e:08:3b:17: 5c:15:52:5c:cf:17:f4:70:8a:e2:5c:13:5d:49:1a:ce:b6:41: ef:39:ee:ae:ac:c4:c1:77:de:fa:4e:4f:11:cd:64:dd:58:2b: eb:87:dc:d3:ff:34:eb:ee:9f:e2:c8:d2:81:23:c8:64:6c:1b: 54:4e:c9:d0:89:23:c0:a0:02:9b:db:6c:47:3f:9e:cb:3a:3c: 42:22:3e:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrxZTFpdAM7XITpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk MjZlZDZiM2MtNWZhMS00NTFjLWI2M2YtNjI2ZTU1NThmZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zD9Ej8IYsVSKfQk51iO1etUAhokp0xShv7b ZlRXfvqv09mnabOzluydj5Jiw1gFm63CHm58wq4FiDcMu/v2jAIZnF9VZ0bS2Ui+ qMUQX1l/LU15X0LDgaP53F+iATSjaqRPGOkcUIaVQrXq+QzGbIvXTHiXRj6C+yP6 gYl17vceoupnviQ0+ccTjPxEqn9fVU1p9sQGULzKDLNMlDQuUF3dCHKsO+Ynd8YF hEWVig8SKL01R3VxddqJZXHEo29iNBa3BejsyA1Y2PrTACTieunl4lj5Ec6dZ6VM 7s58rkEaAjKzhmWPmzGK6A9XCXxdNkdcTP6Ph31zbs28KkKWNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ19DRDwBjdMuwMYcG8EqhR0VLoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvNzBlYjJkMDktYmY1MS0z NzkzLThhZjMtODMxMjE3YjhhMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5/5DM4Ro0gnBjpxtm+fJ9Lm+1fslMkCX1MpmjWI/n51IdaOASxsSqu NWl++ktGbEhybuLBr1cwU5tsI4pRVAk3ZZ7wpKY+uj3ONIzow2HZsDK13wXGYCql 6jvQq2Y33vp9aagqZM8a8GrpTq/TgMKTv/woQdtAvaAMf0W7Eij4DubP3SN2qD1r MWvdipplLn716PmBvneKOjUz72O4dRrxrsdNQUyu2lfSerorE3ljjgg7F1wVUlzP F/RwiuJcE11JGs62Qe857q6sxMF33vpOTxHNZN1YK+uH3NP/NOvun+LI0oEjyGRs G1ROydCJI8CgApvbbEc/nss6PEIiPuw= -----END CERTIFICATE-----Generated at Mon May 12 03:09:41 2025 by rpki-client