$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/2c4683b1-b87b-3f37-9728-d2367121d5da.roa File: 2c4683b1-b87b-3f37-9728-d2367121d5da.roa (raw, json) Hash identifier: t6GylgWJbfYNxohIw89ZyjK/L2jKHvzfkL7/r6Md7gw= Subject key identifier: 35:9B:98:0F:A4:CC:5F:8C:E4:6F:FC:58:AE:20:C1:59:1B:E5:E6:45 Certificate issuer: /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Certificate serial: 010D0C9F43285848DA70F3740A4797784D37A080 Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/2c4683b1-b87b-3f37-9728-d2367121d5da.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 395123 IP address blocks: 202.69.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f3:74:0a:47:97:78:4d:37:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=50a5d291-94e8-4fbc-962f-83c09dea3d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:c5:77:71:13:83:32:b0:18:6c:1a:e8:10: 76:dd:34:ca:0c:b0:17:78:6c:35:10:2f:6d:0b:1a: 1a:83:11:67:80:4e:08:e9:12:92:ce:2f:0f:53:fa: 0c:d4:fc:5a:b2:45:3d:e9:70:c4:3c:66:d6:67:6d: ee:91:c3:4a:71:4f:4d:5f:84:3d:ef:2c:30:e4:4e: 30:b1:a3:93:32:29:ab:39:c8:83:54:30:7e:ca:43: 4f:7c:b2:31:24:29:2f:dc:17:ff:3d:05:29:45:73: bf:af:d3:8c:33:2b:46:dd:87:a0:4a:a4:51:9d:00: 89:d1:fa:5c:39:ef:a2:f0:4d:ad:97:6b:cf:95:85: ac:ca:f8:41:db:27:c3:61:ed:7a:84:ee:c2:98:a1: ef:55:cd:08:4d:87:61:02:25:a6:55:73:49:2c:f8: 28:8a:63:1d:db:56:13:66:7b:67:92:a9:d5:b4:a2: 23:24:af:87:ef:65:0e:c1:7a:65:38:1b:46:e9:de: 83:37:db:83:ef:d6:90:8e:4d:75:bd:d7:8e:f6:46: a7:8b:1e:ba:51:ff:fb:af:23:1f:0a:63:99:52:49: 27:2f:8c:5d:6c:55:b2:db:bd:ce:4e:1d:36:88:11: 04:17:52:a1:70:34:6d:a8:e5:93:70:14:1b:c5:60: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:9B:98:0F:A4:CC:5F:8C:E4:6F:FC:58:AE:20:C1:59:1B:E5:E6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/2c4683b1-b87b-3f37-9728-d2367121d5da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl X509v3 Authority Key Identifier: keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer sbgp-ipAddrBlock: critical IPv4: 202.69.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f9:f6:8c:b5:d6:c0:3b:62:b1:ad:54:3b:1b:b8:9a:2b:40: 6e:a8:93:ea:a5:ca:5a:10:db:b8:16:ee:57:15:f6:23:79:70: 9d:14:80:c7:53:bc:6f:44:6d:c1:71:2c:9d:5f:cd:41:52:20: 1e:8d:f5:0b:54:f8:33:e8:b0:bc:e2:cc:40:32:3f:7a:59:0d: cc:ca:c3:19:6b:37:6a:a3:e6:bf:9b:c8:ae:3b:e7:8f:0e:0e: bc:fe:86:75:3d:1e:43:6e:87:5f:e4:af:92:81:20:2e:87:7f: 89:db:d0:88:0e:b6:1a:66:46:09:f3:e3:f0:98:9c:27:a8:7f: 29:3b:2a:af:8d:cb:56:56:8d:53:8b:1e:7f:28:f0:1b:eb:af: b8:3d:f4:72:f0:ce:73:dd:23:01:dc:52:bf:57:99:84:3e:6d: 09:46:2c:31:09:bd:c5:c3:fd:3e:f7:6c:93:50:98:e2:e8:82: de:71:3b:9d:68:b8:d0:9b:4b:45:03:6d:f5:3d:b3:b3:cc:89: 15:6c:42:02:45:b4:b0:6d:e5:c8:c6:46:fd:b3:d1:33:c7:df: ea:fe:71:fa:f1:fd:c5:99:0c:bc:5d:b0:9a:e8:65:34:fb:04: b1:d5:ae:9e:cb:e8:12:2d:0f:1d:4b:e6:92:a3:95:11:10:36: 9f:e7:80:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPN0CkeXeE03oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE4YTZmNzktMDhmZi00NTEyLTlmM2UtNThjNDJhODRl ZDI1MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk NTBhNWQyOTEtOTRlOC00ZmJjLTk2MmYtODNjMDlkZWEzZDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGvFd3ETgzKwGGwa6BB23TTKDLAXeGw1EC9t CxoagxFngE4I6RKSzi8PU/oM1PxaskU96XDEPGbWZ23ukcNKcU9NX4Q97yww5E4w saOTMimrOciDVDB+ykNPfLIxJCkv3Bf/PQUpRXO/r9OMMytG3YegSqRRnQCJ0fpc Oe+i8E2tl2vPlYWsyvhB2yfDYe16hO7CmKHvVc0ITYdhAiWmVXNJLPgoimMd21YT ZntnkqnVtKIjJK+H72UOwXplOBtG6d6DN9uD79aQjk11vdeO9kanix66Uf/7ryMf CmOZUkknL4xdbFWy273OTh02iBEEF1KhcDRtqOWTcBQbxWCZdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWbmA+kzF+M5G/8WK4gwVkb5eZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YThh NmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0MmE4NGVkMjUvMmM0NjgzYjEtYjg3Yi0z ZjM3LTk3MjgtZDIzNjcxMjFkNWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmE4YTZmNzktMDhmZi00NTEyLTlm M2UtNThjNDJhODRlZDI1LzZhOGE2Zjc5LTA4ZmYtNDUxMi05ZjNlLTU4YzQyYTg0 ZWQyNS5jcmwwHwYDVR0jBBgwFoAUwsB6azjvqoFVWA83c9qfk0ges38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82YThhNmY3OS0wOGZmLTQ1MTItOWYzZS01OGM0 MmE4NGVkMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAykWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb59oy11sA7YrGtVDsbuJorQG6ok+qlyloQ27gW7lcV9iN5cJ0UgMdT vG9EbcFxLJ1fzUFSIB6N9QtU+DPosLzizEAyP3pZDczKwxlrN2qj5r+byK47548O Drz+hnU9HkNuh1/kr5KBIC6Hf4nb0IgOthpmRgnz4/CYnCeofyk7Kq+Ny1ZWjVOL Hn8o8Bvrr7g99HLwznPdIwHcUr9XmYQ+bQlGLDEJvcXD/T73bJNQmOLogt5xO51o uNCbS0UDbfU9s7PMiRVsQgJFtLBt5cjGRv2z0TPH3+r+cfrx/cWZDLxdsJroZTT7 BLHVrp7L6BItDx1L5pKjlREQNp/ngIU= -----END CERTIFICATE-----Generated at Wed Apr 9 01:53:37 2025 by rpki-client