$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/cedfec36-7604-34c8-94e0-386e140ea60f.roa File: cedfec36-7604-34c8-94e0-386e140ea60f.roa (raw, json) Hash identifier: qugXWIFOQCobpxZix6bwxM1ChBbhF4nVye8pAvHvDv0= Subject key identifier: 7D:AD:72:C4:89:AD:69:36:19:8B:79:14:78:34:DA:F4:22:F0:8E:6F Certificate issuer: /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Certificate serial: 010D0C9F432858493C09416657C0D57C3839C128 Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/cedfec36-7604-34c8-94e0-386e140ea60f.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 23528 IP address blocks: 168.203.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:41:66:57:c0:d5:7c:38:39:c1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=cadc26ff-05a6-4b84-ad52-8bdc82c92bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:7c:89:6c:ed:51:e4:2f:31:09:be:ed:b7: 37:89:29:90:45:43:bb:27:da:6f:34:a7:aa:bb:e4: 2b:b2:fb:74:91:b5:d1:cd:62:e2:09:9a:f9:c2:80: fb:93:e9:08:f2:40:af:f0:bd:8c:63:24:41:a5:8d: 59:40:e1:5b:6e:10:e9:18:01:64:c2:ca:60:8c:59: ab:9f:c5:04:61:27:06:11:5f:91:ad:cc:2d:0d:ff: 13:66:38:09:23:2f:4b:ba:2b:f5:44:3c:ff:a9:27: f0:c5:d1:d3:b9:4b:f0:5a:a3:5a:dd:17:38:23:ec: 76:06:e6:82:55:1b:a1:33:11:fd:b2:41:03:19:72: fd:79:57:9f:af:d2:7c:ee:4f:f3:5d:c6:1b:5b:fc: f0:b4:90:db:9b:7d:d9:d6:7c:60:4b:f8:05:33:03: 08:1d:6f:f2:37:44:7a:b7:95:b9:b8:5c:c8:8e:7e: a9:db:61:dd:62:0e:e9:74:f4:a1:bc:23:ec:3e:4f: 6a:82:9f:6a:72:67:b5:bf:79:82:57:50:af:9c:83: ef:67:a4:45:b4:c6:cf:1a:72:ea:5a:f4:29:2b:4e: 12:4b:45:0e:33:43:62:b2:5e:42:e0:5f:e3:26:3b: f9:3c:98:82:e1:69:7e:c7:e9:a3:7a:f5:b4:90:9b: f1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AD:72:C4:89:AD:69:36:19:8B:79:14:78:34:DA:F4:22:F0:8E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/cedfec36-7604-34c8-94e0-386e140ea60f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl X509v3 Authority Key Identifier: keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer sbgp-ipAddrBlock: critical IPv4: 168.203.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:61:01:0c:e9:7a:3b:0a:e3:69:28:79:d7:ba:39:7e:6b:c5: 18:95:16:f6:0d:7c:94:51:06:42:35:0b:95:90:e5:e5:d5:57: a8:38:03:b3:ad:48:f5:cf:c2:ba:43:b7:3e:dd:08:1b:e8:e8: ed:ab:d0:3d:e1:c7:c4:cf:55:ef:5f:09:7f:8f:80:38:18:f7: 96:f8:b4:03:38:ad:4f:7e:e0:23:60:81:b5:24:51:cb:1d:a8: 85:6f:90:72:8a:47:18:7e:3b:fa:1b:7e:53:78:29:5c:34:a8: fa:59:a6:2d:b2:aa:d3:fd:45:6e:68:54:6f:cb:51:8b:ef:ab: c0:e8:68:c5:48:43:7c:09:53:a7:bc:17:9b:40:0f:7e:00:23: 3d:55:4f:84:1a:c4:00:59:48:21:1f:bb:a6:a1:fa:e0:7c:d4: fa:2e:15:49:87:f2:66:d8:87:9f:80:84:62:b5:4d:09:09:80: 8d:06:95:27:d1:f3:8e:99:22:94:aa:6e:93:8b:36:5f:3d:d8: db:b9:07:55:87:51:11:f6:a3:23:b2:a4:59:99:d4:e7:45:61: e9:e2:dd:76:95:d0:90:f1:dc:54:d6:dc:73:24:d4:7b:0d:d7: 67:0d:11:2e:df:5b:b8:ce:60:72:1d:d4:49:a7:a5:26:60:4f: ce:44:06:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUFmV8DVfDg5wSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM4YzgzMTYtMDhkYy00YmVmLTk5ZjYtYTQxNmZmYTBi MDRhMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk Y2FkYzI2ZmYtMDVhNi00Yjg0LWFkNTItOGJkYzgyYzkyYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryB8iWztUeQvMQm+7bc3iSmQRUO7J9pvNKeq u+Qrsvt0kbXRzWLiCZr5woD7k+kI8kCv8L2MYyRBpY1ZQOFbbhDpGAFkwspgjFmr n8UEYScGEV+RrcwtDf8TZjgJIy9Luiv1RDz/qSfwxdHTuUvwWqNa3Rc4I+x2BuaC VRuhMxH9skEDGXL9eVefr9J87k/zXcYbW/zwtJDbm33Z1nxgS/gFMwMIHW/yN0R6 t5W5uFzIjn6p22HdYg7pdPShvCPsPk9qgp9qcme1v3mCV1CvnIPvZ6RFtMbPGnLq WvQpK04SS0UOM0Nisl5C4F/jJjv5PJiC4Wl+x+mjevW0kJvxKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2tcsSJrWk2GYt5FHg02vQi8I5vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81Yzhj ODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2ZmZhMGIwNGEvY2VkZmVjMzYtNzYwNC0z NGM4LTk0ZTAtMzg2ZTE0MGVhNjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNWM4YzgzMTYtMDhkYy00YmVmLTk5 ZjYtYTQxNmZmYTBiMDRhLzVjOGM4MzE2LTA4ZGMtNGJlZi05OWY2LWE0MTZmZmEw YjA0YS5jcmwwHwYDVR0jBBgwFoAUMTSeCHAsq7KeL7SqUigmFPMcCSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81YzhjODMxNi0wOGRjLTRiZWYtOTlmNi1hNDE2 ZmZhMGIwNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqMssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5hAQzpejsK42koede6OX5rxRiVFvYNfJRRBkI1C5WQ5eXVV6g4A7Ot SPXPwrpDtz7dCBvo6O2r0D3hx8TPVe9fCX+PgDgY95b4tAM4rU9+4CNggbUkUcsd qIVvkHKKRxh+O/obflN4KVw0qPpZpi2yqtP9RW5oVG/LUYvvq8DoaMVIQ3wJU6e8 F5tAD34AIz1VT4QaxABZSCEfu6ah+uB81PouFUmH8mbYh5+AhGK1TQkJgI0GlSfR 846ZIpSqbpOLNl892Nu5B1WHURH2oyOypFmZ1OdFYeni3XaV0JDx3FTW3HMk1HsN 12cNES7fW7jOYHId1EmnpSZgT85EBsc= -----END CERTIFICATE-----Generated at Sun Apr 6 03:22:41 2025 by rpki-client