$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa File: 3e3631a7-6a34-3455-850a-0ec197b42195.roa (raw, json) Hash identifier: uvPO8IGak9jwPOwueam12olwYE+H/1f9BnDiBvcrsMA= Subject key identifier: 71:9F:F0:C0:73:E8:24:6A:BA:0A:8C:33:4A:0F:0C:4A:54:5C:D9:91 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F43285848A99626A145053E7F835519F4 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 800 IP address blocks: 207.32.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:26:a1:45:05:3e:7f:83:55:19:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=69801a1c-9b62-4863-a30d-08135b150a6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:56:de:57:07:b7:8a:ee:d7:90:b3:45:b1:1a: 37:ac:fa:91:bd:74:ba:de:14:c3:39:f6:2e:0c:db: e3:29:ac:a8:5e:40:01:53:1c:c5:02:af:84:b0:92: f8:21:28:27:1a:aa:e2:81:58:fa:02:f3:90:b1:fb: 63:3f:e5:0c:a2:d9:30:d7:0d:23:a6:6b:38:a8:09: ee:eb:7d:24:2c:b9:13:64:b2:9b:cd:cd:fc:2e:2d: 13:ea:f6:71:ad:1d:79:ef:f9:24:f5:5c:21:b5:36: b8:2a:19:0d:15:71:1b:10:d5:5f:e8:73:55:6e:91: 4f:65:c2:2b:5f:82:39:2d:2e:85:f3:37:f7:a7:23: b9:81:18:59:ab:5f:79:05:b8:c3:78:9a:ad:c7:d5: c4:b1:a6:d0:31:1e:46:f0:72:58:95:aa:a9:b6:fb: 84:9d:66:ae:6e:a9:2b:c0:6e:ad:4e:69:75:a7:52: a2:57:cf:84:5f:ea:f6:9c:a0:84:6a:4d:24:0e:fe: c2:dc:8b:61:21:f6:9e:55:af:cf:ec:4b:3c:61:34: 6a:59:fa:26:8c:c4:4a:58:f4:44:49:64:08:54:b4: d6:1a:24:8d:ce:b2:4f:16:96:94:1c:c9:6f:39:f7: 11:de:0e:11:87:3e:56:5a:6e:81:35:a3:01:5f:26: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9F:F0:C0:73:E8:24:6A:BA:0A:8C:33:4A:0F:0C:4A:54:5C:D9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 207.32.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e6:8e:4a:cc:a6:c8:88:84:4a:97:e5:6d:3a:50:fb:6c:4c: 51:1b:b2:2d:aa:55:96:80:ab:3a:45:d1:ac:f9:12:6b:23:ab: 95:64:42:3b:5c:3c:c8:7b:1b:b9:9a:63:bc:f3:0b:8f:c4:4a: c6:7e:ae:e0:3b:44:91:17:ac:d0:69:31:9f:86:d8:95:39:bc: ad:f4:27:d1:43:06:9d:cb:9f:c1:5d:ec:49:66:a2:f0:8e:70: 03:4e:bd:a5:f2:91:fb:f5:1a:65:25:aa:9d:f8:54:93:c9:df: e9:87:34:8e:d5:b0:fa:dc:8d:f8:da:86:10:5a:af:6f:51:6b: 9e:b8:ae:ad:0c:72:da:bb:f6:37:b0:44:44:06:e5:6c:fd:00: bb:3b:bd:80:66:b1:45:28:c6:c7:13:70:62:ce:94:8c:b6:9e: a6:64:6d:7f:1a:d1:b9:b3:b4:d1:c2:ef:0e:8b:5f:22:1d:9c: f2:1f:f2:bb:6d:da:de:d1:62:9f:e0:d7:e0:08:8f:0b:27:cd: be:b7:4b:df:2e:f0:ef:c0:32:76:76:6e:d1:99:7c:17:ef:a3: 8b:e7:21:27:fa:85:55:8f:81:41:8b:8e:a2:27:ef:05:31:49: 01:80:df:d2:04:c0:4d:9e:c6:da:9f:26:74:41:ac:dd:cb:85: 15:2a:73:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEipliahRQU+f4NVGfQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk Njk4MDFhMWMtOWI2Mi00ODYzLWEzMGQtMDgxMzViMTUwYTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFbeVwe3iu7XkLNFsRo3rPqRvXS63hTDOfYu DNvjKayoXkABUxzFAq+EsJL4ISgnGqrigVj6AvOQsftjP+UMotkw1w0jpms4qAnu 630kLLkTZLKbzc38Li0T6vZxrR157/kk9VwhtTa4KhkNFXEbENVf6HNVbpFPZcIr X4I5LS6F8zf3pyO5gRhZq195BbjDeJqtx9XEsabQMR5G8HJYlaqptvuEnWaubqkr wG6tTml1p1KiV8+EX+r2nKCEak0kDv7C3IthIfaeVa/P7Es8YTRqWfomjMRKWPRE SWQIVLTWGiSNzrJPFpaUHMlvOfcR3g4Rhz5WWm6BNaMBXybGYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGf8MBz6CRqugqMM0oPDEpUXNmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvM2UzNjMxYTctNmEzNC0z NDU1LTg1MGEtMGVjMTk3YjQyMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjmjkrMpsiIhEqX5W06UPtsTFEbsi2qVZaAqzpF0az5Emsjq5VkQjtc PMh7G7maY7zzC4/ESsZ+ruA7RJEXrNBpMZ+G2JU5vK30J9FDBp3Ln8Fd7ElmovCO cANOvaXykfv1GmUlqp34VJPJ3+mHNI7VsPrcjfjahhBar29Ra564rq0Mctq79jew REQG5Wz9ALs7vYBmsUUoxscTcGLOlIy2nqZkbX8a0bmztNHC7w6LXyIdnPIf8rtt 2t7RYp/g1+AIjwsnzb63S98u8O/AMnZ2btGZfBfvo4vnISf6hVWPgUGLjqIn7wUx SQGA39IEwE2extqfJnRBrN3LhRUqcwk= -----END CERTIFICATE-----Generated at Sat Apr 5 18:11:17 2025 by rpki-client