$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/c717200a-1ad3-3d75-a56e-886f9c66ae64.roa File: c717200a-1ad3-3d75-a56e-886f9c66ae64.roa (raw, json) Hash identifier: G332yLYw+v32wcJco1Hde+Agltu/jE859ztOY4/yuDQ= Subject key identifier: A6:16:19:84:9D:61:D1:CE:D5:44:B8:85:D5:C4:BF:5B:07:B0:80:90 Certificate issuer: /CN=e9687864-e283-4f19-98f3-a437efb373e8 Certificate serial: 010D0C9F432858497F099C85187EE0B6FD403380 Authority key identifier: 0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/c717200a-1ad3-3d75-a56e-886f9c66ae64.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 22772 IP address blocks: 204.17.32.0/19 maxlen: 24 209.104.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:9c:85:18:7e:e0:b6:fd:40:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9687864-e283-4f19-98f3-a437efb373e8 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=2fa8b995-af1e-49d9-9cfa-93a7bcc00258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:19:6e:aa:ff:91:3c:7a:82:5a:7c:1d:eb: 22:bd:5c:ad:e8:63:bd:19:44:cb:f2:ea:b7:0d:5c: ce:18:52:09:5a:18:9d:11:9e:95:2a:87:96:4b:f3: 71:40:dd:91:31:28:b3:6d:05:69:13:e7:73:bc:e0: 8a:22:f3:ea:8e:e8:b5:ae:30:21:d3:78:ce:96:a6: 15:e2:00:64:13:84:23:2c:8a:98:2d:d2:9e:1f:d4: 90:19:76:62:fb:60:e6:0b:8f:40:bb:0d:bf:14:c0: d9:2e:87:ab:ce:c8:ed:be:f6:0a:77:46:97:1f:b5: bf:68:2e:b5:66:f9:70:79:d5:24:f8:ca:52:c9:03: 8f:e0:d3:a3:31:9d:88:db:4e:b2:5d:d7:e5:c9:3a: 7e:51:19:95:01:27:8b:ba:02:05:0e:58:41:51:53: 27:76:27:f8:c4:a4:f9:e6:f9:a4:96:14:da:0c:4d: b3:43:c7:84:00:cb:a4:54:13:73:f2:16:24:66:c5: 56:87:e5:11:52:65:b1:f1:80:81:be:33:7e:91:9f: 5d:5b:ae:e8:28:e9:3c:7c:ea:83:7a:f4:8b:09:c1: c1:46:9f:25:23:66:d6:04:2e:b4:0c:2d:0f:66:69: 7b:a6:b1:49:e4:71:ce:17:69:12:a0:c8:29:21:dd: b7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:16:19:84:9D:61:D1:CE:D5:44:B8:85:D5:C4:BF:5B:07:B0:80:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/c717200a-1ad3-3d75-a56e-886f9c66ae64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl X509v3 Authority Key Identifier: keyid:0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer sbgp-ipAddrBlock: critical IPv4: 204.17.32.0/19 209.104.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7d:9e:d3:37:ae:31:71:a6:12:03:cb:9e:4d:af:ff:22:b8: 86:46:07:5a:5b:8c:ca:6e:56:a3:7d:f1:d7:5a:d0:3f:7b:40: a9:9a:df:6b:da:5b:54:47:1c:06:8e:7a:af:d9:19:81:6c:bb: 6e:3a:61:5e:87:72:fd:64:0c:b2:31:ba:e3:15:56:d4:60:00: 58:01:b0:c1:b9:c7:4d:88:cc:36:02:33:84:aa:fc:01:b8:0c: cb:87:8e:7b:60:36:b0:1e:2f:3e:d9:dd:cd:6f:3e:2a:73:7d: 18:f9:3a:24:ec:26:19:96:5c:da:5e:30:a1:ca:66:ae:c0:9e: c0:bd:0f:f6:1f:c0:90:4a:e8:00:32:2a:a2:cd:a0:8c:bc:fd: cb:a3:71:57:de:7b:9f:48:bc:3c:f3:9d:89:b5:87:28:c5:39: 28:e8:9e:5d:f8:63:71:03:39:cd:f9:6b:7d:bb:b7:bb:31:31: 2a:43:11:a1:93:72:b8:e1:84:28:fa:9c:11:5e:82:2c:ed:af: 1e:27:b5:b2:13:78:10:92:54:4d:14:5d:3f:5c:a3:34:ff:af: 02:8d:58:a5:49:ef:3b:8d:ed:9e:4d:b2:6b:01:22:a8:94:71: 46:5c:8b:6b:12:90:fc:39:ef:4f:b6:0f:61:8c:8f:53:f6:86: 96:c4:ea:9f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEl/CZyFGH7gtv1AM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2ODc4NjQtZTI4My00ZjE5LTk4ZjMtYTQzN2VmYjM3 M2U4MB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk MmZhOGI5OTUtYWYxZS00OWQ5LTljZmEtOTNhN2JjYzAwMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOcZbqr/kTx6glp8HesivVyt6GO9GUTL8uq3 DVzOGFIJWhidEZ6VKoeWS/NxQN2RMSizbQVpE+dzvOCKIvPqjui1rjAh03jOlqYV 4gBkE4QjLIqYLdKeH9SQGXZi+2DmC49Auw2/FMDZLoerzsjtvvYKd0aXH7W/aC61 ZvlwedUk+MpSyQOP4NOjMZ2I206yXdflyTp+URmVASeLugIFDlhBUVMndif4xKT5 5vmklhTaDE2zQ8eEAMukVBNz8hYkZsVWh+URUmWx8YCBvjN+kZ9dW67oKOk8fOqD evSLCcHBRp8lI2bWBC60DC0PZml7prFJ5HHOF2kSoMgpId23OQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKYWGYSdYdHO1US4hdXEv1sHsICQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTY4 Nzg2NC1lMjgzLTRmMTktOThmMy1hNDM3ZWZiMzczZTgvYzcxNzIwMGEtMWFkMy0z ZDc1LWE1NmUtODg2ZjljNjZhZTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk2ODc4NjQtZTI4My00ZjE5LTk4 ZjMtYTQzN2VmYjM3M2U4L2U5Njg3ODY0LWUyODMtNGYxOS05OGYzLWE0MzdlZmIz NzNlOC5jcmwwHwYDVR0jBBgwFoAUDrmDJwH3BnrLpZyaXmHLx9lYw+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTY4Nzg2NC1lMjgzLTRmMTktOThmMy1hNDM3 ZWZiMzczZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFzBEgAwQF 0WgAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADZ9ntM3rjFxphIDy55Nr/8iuIZGB1pbjMpuVqN98dda0D97 QKma32vaW1RHHAaOeq/ZGYFsu246YV6Hcv1kDLIxuuMVVtRgAFgBsMG5x02IzDYC M4Sq/AG4DMuHjntgNrAeLz7Z3c1vPipzfRj5OiTsJhmWXNpeMKHKZq7AnsC9D/Yf wJBK6AAyKqLNoIy8/cujcVfee59IvDzznYm1hyjFOSjonl34Y3EDOc35a327t7sx MSpDEaGTcrjhhCj6nBFegiztrx4ntbITeBCSVE0UXT9cozT/rwKNWKVJ7zuN7Z5N smsBIqiUcUZci2sSkPw570+2D2GMj1P2hpbE6p8= -----END CERTIFICATE-----Generated at Sat May 10 03:37:59 2025 by rpki-client