$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa File: 1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa (raw, json) Hash identifier: 1cVlt8e3OMAnYryM6ZGvXiaFBS9/KhMSWqrk125qOqs= Subject key identifier: 45:61:AE:57:89:DC:DB:5C:F0:F4:33:8D:0C:CC:34:F9:44:A8:EF:05 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F43285849D4A064AC9ED501D4EA521300 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa Signing time: Mon 12 May 2025 16:48:22 +0000 ROA not before: Mon 12 May 2025 16:48:22 +0000 ROA not after: Sun 10 Aug 2025 16:48:22 +0000 asID: 174 IP address blocks: 173.232.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:a0:64:ac:9e:d5:01:d4:ea:52:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 12 16:48:22 2025 GMT Not After : Aug 10 16:48:22 2025 GMT Subject: CN=ea118d80-3312-448a-a1ba-9aacfed1a183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:53:0b:a3:99:9a:78:f6:ed:12:f1:9d:77:7e: 47:59:a2:71:ea:a9:d5:b3:85:dc:3e:f7:54:c2:5a: 58:b0:a5:f2:95:9d:e2:e4:1e:6a:d8:0b:a8:f6:1f: 84:84:b2:15:6c:06:f0:4f:94:96:53:f6:1b:93:51: f6:4f:d4:65:19:5c:ee:07:f7:69:8c:a2:27:69:fb: 14:a9:36:f2:2f:1c:63:1e:56:6a:10:1a:51:ef:19: ca:c9:84:75:cc:d9:2f:42:ae:2b:9f:09:ba:18:9e: ba:39:62:e8:01:c1:4e:da:d9:52:69:a2:56:9c:65: 1d:70:5b:82:21:ea:f2:71:8e:f2:23:b9:ac:e3:1b: ee:3a:55:1a:99:db:07:09:51:b0:e7:a6:f8:b9:57: 4f:85:b3:fa:d4:16:8b:e0:e3:3c:8e:da:00:c9:5f: e6:17:92:4d:d4:06:ed:1c:74:66:0c:83:01:dd:9c: fd:73:11:2c:03:35:59:e6:84:83:05:af:72:6b:94: 59:2c:4f:23:b3:92:3a:cd:86:f1:4f:4d:35:22:9c: 22:08:79:06:e4:90:43:5b:92:5f:95:c8:b5:f1:91: 52:b2:5a:cc:f1:13:94:3e:05:fb:b3:f3:c4:86:49: e3:43:ce:80:61:b6:95:19:a7:23:32:8b:91:eb:e8: e7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:61:AE:57:89:DC:DB:5C:F0:F4:33:8D:0C:CC:34:F9:44:A8:EF:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:88:ea:b8:7b:1c:69:14:6f:22:be:a6:74:c9:fa:30:d5:17: 36:1f:4e:09:1e:77:2c:59:60:12:2b:36:94:5c:98:01:6f:8a: e5:1c:b8:3c:2c:bf:28:7b:9f:36:99:8a:ac:e2:da:63:48:7d: 4a:b4:61:55:7a:7e:05:99:0e:05:40:e9:52:32:dd:ad:f5:bf: 3a:1f:c5:72:cb:de:54:c8:0c:09:32:f0:d6:77:15:15:de:78: bb:f4:79:2c:26:0b:17:71:94:02:e5:11:5f:e9:b6:18:fc:27: a4:79:b2:43:31:76:17:ba:d8:b9:d2:21:9d:1a:1f:6b:11:10: a1:9e:d3:00:9c:cc:04:f6:8a:47:6b:6c:20:b1:8b:5c:0a:42: 35:2a:74:5f:87:89:67:bc:3f:bc:5d:99:18:4d:86:57:b1:52: 63:c6:0f:0b:77:42:ca:1f:fb:cd:0e:bc:66:17:3b:ed:93:f3: b5:79:b9:d5:38:bd:8b:40:05:6e:85:7b:c3:b1:b2:c6:73:c5: 6d:59:d0:db:6e:a9:94:96:92:ef:0f:32:21:98:a7:60:e4:11: 74:6b:0b:03:58:ca:9b:e9:e1:cb:fb:19:21:98:52:a1:fc:a8: 23:40:93:61:bd:1c:a8:45:2e:b3:a1:c5:59:04:4f:64:04:a9: 44:17:65:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUoGSsntUB1OpSEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDUxMjE2NDgyMloXDTI1MDgxMDE2NDgyMlowLzEtMCsGA1UEAxMk ZWExMThkODAtMzMxMi00NDhhLWExYmEtOWFhY2ZlZDFhMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVMLo5maePbtEvGdd35HWaJx6qnVs4XcPvdU wlpYsKXylZ3i5B5q2Auo9h+EhLIVbAbwT5SWU/Ybk1H2T9RlGVzuB/dpjKInafsU qTbyLxxjHlZqEBpR7xnKyYR1zNkvQq4rnwm6GJ66OWLoAcFO2tlSaaJWnGUdcFuC IerycY7yI7ms4xvuOlUamdsHCVGw56b4uVdPhbP61BaL4OM8jtoAyV/mF5JN1Abt HHRmDIMB3Zz9cxEsAzVZ5oSDBa9ya5RZLE8js5I6zYbxT001IpwiCHkG5JBDW5Jf lci18ZFSslrM8ROUPgX7s/PEhknjQ86AYbaVGacjMouR6+jneQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVhrleJ3Ntc8PQzjQzMNPlEqO8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMWQwM2EyY2QtMDFhYS0z MGQ3LWEyZDAtZjgxYjg4OTExN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAreihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaI6rh7HGkUbyK+pnTJ+jDVFzYfTgkedyxZYBIrNpRcmAFviuUcuDws vyh7nzaZiqzi2mNIfUq0YVV6fgWZDgVA6VIy3a31vzofxXLL3lTIDAky8NZ3FRXe eLv0eSwmCxdxlALlEV/pthj8J6R5skMxdhe62LnSIZ0aH2sREKGe0wCczAT2ikdr bCCxi1wKQjUqdF+HiWe8P7xdmRhNhlexUmPGDwt3Qsof+80OvGYXO+2T87V5udU4 vYtABW6Fe8OxssZzxW1Z0NtuqZSWku8PMiGYp2DkEXRrCwNYypvp4cv7GSGYUqH8 qCNAk2G9HKhFLrOhxVkET2QEqUQXZW0= -----END CERTIFICATE-----Generated at Tue May 13 20:35:59 2025 by rpki-client