$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c637dc4-11d8-333d-a55f-c95f3e1747e4.roa File: 8c637dc4-11d8-333d-a55f-c95f3e1747e4.roa (raw, json) Hash identifier: OmDIT+CnLQlH1b8vICeYaNGmaLYyZpwlTaS7fggDWpM= Subject key identifier: FD:05:0A:6B:24:52:65:E9:18:7E:F2:84:2B:A8:F9:E1:CC:80:E0:F9 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F43285849213440226E81D29E2B0CE80C Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c637dc4-11d8-333d-a55f-c95f3e1747e4.roa Signing time: Sun 09 Mar 2025 10:20:47 +0000 ROA not before: Sun 09 Mar 2025 10:20:47 +0000 ROA not after: Sat 07 Jun 2025 10:20:47 +0000 asID: 21552 IP address blocks: 204.101.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:40:22:6e:81:d2:9e:2b:0c:e8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:47 2025 GMT Not After : Jun 7 10:20:47 2025 GMT Subject: CN=ed11cbc0-158a-448c-969e-10b109c00579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f8:05:32:78:05:7b:18:c3:4d:33:e3:61:26: 67:c5:f2:c5:b2:a9:c7:69:ae:fc:34:45:c4:4f:42: 9f:34:6e:6a:cf:18:70:76:ef:e6:ef:e7:b1:fd:42: 1b:c6:26:bc:60:93:cd:18:16:12:80:d9:ee:a5:71: 9c:26:d5:02:82:54:07:17:32:7a:a7:c0:a3:f3:56: db:7d:c9:c7:d3:bd:c6:d1:0d:2d:4b:11:42:e6:7f: bf:1e:c6:81:09:35:41:a4:a7:36:f3:95:45:59:1b: 11:7f:9c:9f:3d:c3:51:24:56:dd:d0:1d:89:a0:ac: ba:6d:15:54:1a:8b:78:3b:00:c0:00:63:d8:fe:10: 0d:56:d7:d9:fb:74:1a:1e:ea:52:78:d2:53:ac:e8: 61:19:fd:b5:75:cb:ce:a5:1a:91:1e:d3:33:65:6d: 22:5b:3f:78:91:af:5d:7d:0d:46:e3:1b:92:8a:ea: d3:a8:80:06:f4:93:70:f1:53:f2:25:e9:9a:13:f3: 1e:b3:0d:d3:f7:5f:b9:5f:ed:b3:5b:ec:62:3f:f3: 89:82:cc:1a:b2:29:e5:ba:d6:da:0e:10:bf:14:85: 77:68:06:43:86:2d:0e:96:bd:26:d9:02:c0:80:f4: b3:c5:19:2e:ae:73:25:2d:54:97:f2:a9:49:6b:07: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:05:0A:6B:24:52:65:E9:18:7E:F2:84:2B:A8:F9:E1:CC:80:E0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c637dc4-11d8-333d-a55f-c95f3e1747e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 204.101.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:15:ed:6b:e3:41:57:b7:5d:22:30:28:41:af:03:ea:92:d5: 99:17:96:53:f3:ad:37:1f:8b:be:0a:26:48:6f:a6:3a:cf:fd: 92:97:be:12:88:9b:86:e0:ca:10:dd:a0:a0:a3:a2:38:b2:ee: e9:4c:7a:ef:0c:bb:68:4c:ca:bb:e6:4a:b9:84:88:55:e7:a0: 5b:ea:e8:cb:6a:48:ff:d0:cd:f6:89:ed:82:1e:de:c7:50:d7: 90:8d:cc:fb:3b:a6:cc:05:e7:9b:4e:85:ce:df:62:01:7e:1d: d4:47:4b:36:93:05:f2:de:c8:c6:d6:c3:25:26:35:d9:87:71: 10:10:f3:da:ef:aa:a2:a5:1c:0b:81:88:49:45:78:3f:83:c2: da:c1:6c:eb:b0:c9:d1:09:4c:c0:ef:92:cd:36:c6:69:51:f0: c8:a8:0f:9b:b8:e8:51:16:68:89:3f:37:d5:96:da:8f:a5:e1: 8c:84:46:e7:20:7c:45:02:18:77:42:ed:b7:c9:aa:6c:9f:06: e0:80:da:1a:c7:fe:a6:57:02:c3:02:1c:d4:07:f7:79:ce:88: 59:53:a2:58:56:b8:97:48:21:2c:f6:10:5c:a8:67:7d:2c:3d: 0b:63:d5:a7:98:0b:0f:35:8e:55:93:4d:ab:c8:e3:4e:2e:26: 20:ec:f7:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNEAiboHSnisM6AwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjA0N1oXDTI1MDYwNzEwMjA0N1owLzEtMCsGA1UEAxMk ZWQxMWNiYzAtMTU4YS00NDhjLTk2OWUtMTBiMTA5YzAwNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvgFMngFexjDTTPjYSZnxfLFsqnHaa78NEXE T0KfNG5qzxhwdu/m7+ex/UIbxia8YJPNGBYSgNnupXGcJtUCglQHFzJ6p8Cj81bb fcnH073G0Q0tSxFC5n+/HsaBCTVBpKc285VFWRsRf5yfPcNRJFbd0B2JoKy6bRVU Got4OwDAAGPY/hANVtfZ+3QaHupSeNJTrOhhGf21dcvOpRqRHtMzZW0iWz94ka9d fQ1G4xuSiurTqIAG9JNw8VPyJemaE/Mesw3T91+5X+2zW+xiP/OJgswasinlutba DhC/FIV3aAZDhi0Olr0m2QLAgPSzxRkurnMlLVSX8qlJawdrIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0FCmskUmXpGH7yhCuo+eHMgOD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOGM2MzdkYzQtMTFkOC0z MzNkLWE1NWYtYzk1ZjNlMTc0N2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwV7WvjQVe3XSIwKEGvA+qS1ZkXllPzrTcfi74KJkhvpjrP/ZKXvhKI m4bgyhDdoKCjojiy7ulMeu8Mu2hMyrvmSrmEiFXnoFvq6MtqSP/QzfaJ7YIe3sdQ 15CNzPs7pswF55tOhc7fYgF+HdRHSzaTBfLeyMbWwyUmNdmHcRAQ89rvqqKlHAuB iElFeD+DwtrBbOuwydEJTMDvks02xmlR8MioD5u46FEWaIk/N9WW2o+l4YyERucg fEUCGHdC7bfJqmyfBuCA2hrH/qZXAsMCHNQH93nOiFlTolhWuJdIISz2EFyoZ30s PQtj1aeYCw81jlWTTavI404uJiDs9yQ= -----END CERTIFICATE-----Generated at Mon Apr 7 16:49:14 2025 by rpki-client