$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/c3177fb6-decc-3b5e-8ece-859075b2f441.roa File: c3177fb6-decc-3b5e-8ece-859075b2f441.roa (raw, json) Hash identifier: CP4j707rj7roI4UD+/YqAQMu88zid4ETjB9jhLSs+NU= Subject key identifier: 5D:ED:4F:37:74:26:C7:ED:52:01:2B:CC:CD:06:16:2A:5C:6E:9A:60 Certificate issuer: /CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Certificate serial: 010D0C9F4328584988CF313130C454422B558580 Authority key identifier: F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/c3177fb6-decc-3b5e-8ece-859075b2f441.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397913 IP address blocks: 204.108.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:31:31:30:c4:54:42:2b:55:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b24224ba-8340-4a2e-986a-5e1f9b2c2182 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=2a2ad0f7-06ca-4776-af97-71a271384895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:af:42:00:12:ac:ac:fc:3d:69:69:8a:bc:8d: 3f:23:32:35:d5:06:a0:be:89:44:5e:4a:aa:0f:1c: 20:32:4d:48:8e:d5:44:d9:03:01:8c:2c:d8:8b:10: d7:3c:37:d4:80:7b:41:e2:6a:67:03:e3:0a:a0:64: 47:64:ee:85:d8:f8:88:00:93:c7:30:35:cf:5a:f5: e5:69:e0:3d:92:22:8c:64:fe:a1:6f:54:16:c1:f4: da:f0:5f:dd:da:ef:60:70:92:90:f6:46:8d:37:44: 0a:04:95:9c:1c:7b:e3:f1:70:90:08:e6:58:dc:43: bf:9b:0b:3d:1e:f5:94:fc:73:23:3b:54:4c:c8:d2: f2:1e:81:8f:c9:68:38:06:27:df:4e:aa:fd:97:53: b3:ae:e8:62:29:52:c1:54:ab:12:c6:25:db:e5:c4: 4e:39:34:41:92:bc:85:6c:4a:cb:5a:ab:17:33:ec: 10:68:df:4d:59:10:50:92:af:d1:ef:d3:26:11:93: 64:1b:e6:6e:02:36:28:c7:e9:0f:14:87:fe:07:77: cc:ae:27:18:90:32:51:8d:a5:e8:97:5c:78:82:91: e6:60:73:bc:70:86:02:80:2b:d3:d4:da:4b:b7:fc: 83:ed:b9:2d:43:79:c7:d8:1c:90:71:dc:35:87:5e: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:ED:4F:37:74:26:C7:ED:52:01:2B:CC:CD:06:16:2A:5C:6E:9A:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/c3177fb6-decc-3b5e-8ece-859075b2f441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182/b24224ba-8340-4a2e-986a-5e1f9b2c2182.crl X509v3 Authority Key Identifier: keyid:F3:D3:ED:75:10:95:A0:58:67:73:5A:61:EF:97:F9:D6:F3:16:94:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b24224ba-8340-4a2e-986a-5e1f9b2c2182.cer sbgp-ipAddrBlock: critical IPv4: 204.108.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:a1:24:c3:52:12:66:92:01:8d:f1:41:62:7c:a2:c4:c9:e1: 25:e1:b0:98:58:25:78:8a:06:43:40:d3:77:2b:5d:a3:2f:62: 20:5a:ba:31:ef:87:01:cc:26:68:80:d1:23:70:3a:f4:9e:8e: 4e:fd:6d:dc:4b:40:be:1d:86:44:29:f8:e5:73:0a:d1:97:8c: 4a:04:54:f0:6c:3f:af:c1:7d:18:69:7d:79:a6:08:6f:48:08: 52:ba:5e:61:5e:58:7b:15:a4:77:bd:5b:00:00:e1:29:03:90: e1:49:f2:6f:9d:63:3f:7b:a6:96:83:aa:5f:b4:f8:d4:57:d0: 3b:4c:e6:80:c4:92:7c:f3:e8:09:5b:6f:33:17:80:c3:24:0b: 10:7d:75:1d:b3:db:38:00:33:10:fc:d5:ea:45:71:09:95:06: 80:9a:30:d8:6c:99:7d:4f:cd:08:da:87:e1:41:e8:91:c4:4a: 6d:6a:a9:89:65:ad:f2:9e:8e:fe:0d:71:66:b2:c8:38:b8:d7: 27:f4:9c:8c:6e:90:88:5f:3b:05:be:46:0b:2a:e9:a6:24:57: 6a:dc:f5:30:7c:73:aa:c3:f8:33:be:3b:37:3c:29:f5:f6:76: 32:2e:f0:4d:31:cc:4c:16:b3:92:4b:82:71:85:7f:5b:35:c8: 4d:bc:c4:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzzExMMRUQitVhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI0MjI0YmEtODM0MC00YTJlLTk4NmEtNWUxZjliMmMy MTgyMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk MmEyYWQwZjctMDZjYS00Nzc2LWFmOTctNzFhMjcxMzg0ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa9CABKsrPw9aWmKvI0/IzI11QagvolEXkqq DxwgMk1IjtVE2QMBjCzYixDXPDfUgHtB4mpnA+MKoGRHZO6F2PiIAJPHMDXPWvXl aeA9kiKMZP6hb1QWwfTa8F/d2u9gcJKQ9kaNN0QKBJWcHHvj8XCQCOZY3EO/mws9 HvWU/HMjO1RMyNLyHoGPyWg4BiffTqr9l1OzruhiKVLBVKsSxiXb5cROOTRBkryF bErLWqsXM+wQaN9NWRBQkq/R79MmEZNkG+ZuAjYox+kPFIf+B3fMricYkDJRjaXo l1x4gpHmYHO8cIYCgCvT1NpLt/yD7bktQ3nH2ByQcdw1h15VTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3tTzd0JsftUgErzM0GFipcbppgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMjQy MjRiYS04MzQwLTRhMmUtOTg2YS01ZTFmOWIyYzIxODIvYzMxNzdmYjYtZGVjYy0z YjVlLThlY2UtODU5MDc1YjJmNDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjI0MjI0YmEtODM0MC00YTJlLTk4 NmEtNWUxZjliMmMyMTgyL2IyNDIyNGJhLTgzNDAtNGEyZS05ODZhLTVlMWY5YjJj MjE4Mi5jcmwwHwYDVR0jBBgwFoAU89PtdRCVoFhnc1ph75f51vMWlLwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iMjQyMjRiYS04MzQwLTRhMmUtOTg2YS01ZTFm OWIyYzIxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGy2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+hJMNSEmaSAY3xQWJ8osTJ4SXhsJhYJXiKBkNA03crXaMvYiBaujHv hwHMJmiA0SNwOvSejk79bdxLQL4dhkQp+OVzCtGXjEoEVPBsP6/BfRhpfXmmCG9I CFK6XmFeWHsVpHe9WwAA4SkDkOFJ8m+dYz97ppaDql+0+NRX0DtM5oDEknzz6Alb bzMXgMMkCxB9dR2z2zgAMxD81epFcQmVBoCaMNhsmX1PzQjah+FB6JHESm1qqYll rfKejv4NcWayyDi41yf0nIxukIhfOwW+Rgsq6aYkV2rc9TB8c6rD+DO+Ozc8KfX2 djIu8E0xzEwWs5JLgnGFf1s1yE28xDM= -----END CERTIFICATE-----Generated at Sun May 11 14:39:56 2025 by rpki-client