$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c78609ca-74a0-3677-a5be-7d8811baca50.roa File: c78609ca-74a0-3677-a5be-7d8811baca50.roa (raw, json) Hash identifier: 82eTQ6xe0RJ6Y/rtC3a1v6IZhTi6YTcIPpelUvFFd7s= Subject key identifier: 61:AC:80:89:D2:B9:81:B2:48:B4:02:5E:28:5C:9D:DB:B4:70:D8:37 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584921344243CE8E309FB41B9180 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c78609ca-74a0-3677-a5be-7d8811baca50.roa Signing time: Sun 09 Mar 2025 10:20:48 +0000 ROA not before: Sun 09 Mar 2025 10:20:48 +0000 ROA not after: Sat 07 Jun 2025 10:20:48 +0000 asID: 397168 IP address blocks: 204.101.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:34:42:43:ce:8e:30:9f:b4:1b:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Mar 9 10:20:48 2025 GMT Not After : Jun 7 10:20:48 2025 GMT Subject: CN=a857898e-9aca-4c9a-aedc-58c76870ae72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:ff:a8:c3:d5:87:04:15:90:d0:1c:ba:6b: 16:04:22:e0:7c:0f:0a:6c:a1:e3:82:3a:ae:6d:c4: 67:7c:ed:b8:e2:fe:18:4f:fb:38:d3:25:cb:8d:a3: 15:4c:57:9b:c2:38:8f:ca:a4:c8:85:22:4a:21:1f: 49:81:8b:9f:e3:7b:80:99:b3:d8:58:56:ab:7f:bf: 2f:be:c3:0e:55:32:ce:8f:77:77:5b:e0:70:c1:13: a4:92:c7:b8:57:29:78:1e:61:7f:f3:b1:82:3f:bf: f1:43:19:db:5e:d7:10:45:00:b7:c2:d1:8d:c5:4b: 27:3a:96:d6:f9:5b:5a:d4:9b:14:d8:b0:89:ca:13: 03:57:a5:a0:7f:18:1a:68:78:a6:f0:93:04:f3:55: 08:84:29:d3:ba:3d:66:64:f5:9b:20:96:06:38:36: 65:5e:98:d2:40:b7:22:89:74:fe:7d:d2:9e:49:b1: 67:e3:04:37:f9:83:88:86:88:28:bc:39:49:01:ca: 4e:90:7b:c3:1c:f3:8b:05:d3:58:90:48:6b:31:b5: ca:6c:d3:24:e7:4c:cd:8b:28:66:6d:62:f3:05:27: 1b:e8:5f:47:ad:bf:d6:70:cf:05:ba:43:53:ec:50: 7f:24:e1:af:15:10:6b:23:88:05:cb:cb:a9:09:77: bf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AC:80:89:D2:B9:81:B2:48:B4:02:5E:28:5C:9D:DB:B4:70:D8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c78609ca-74a0-3677-a5be-7d8811baca50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 204.101.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:88:9e:5a:f7:53:01:29:bc:20:52:65:7e:0a:ca:07:5f:8b: df:4b:74:29:8f:cf:50:2b:e3:2d:ef:47:27:82:7c:4b:53:a8: b4:b4:13:14:3a:89:f6:50:36:33:7c:f7:79:79:d8:6b:e1:b2: 9c:d0:e1:85:66:bb:d0:5c:b4:02:9d:81:ef:fd:5e:1e:cd:d2: c6:b5:6d:f5:2f:15:e0:ed:41:35:11:dd:2d:d1:c0:5f:de:3b: ab:d0:5d:14:3a:e2:35:40:92:d9:38:e9:ae:00:a4:5a:34:93: ae:cf:7c:0f:f0:ac:4c:fe:08:8d:c7:1f:69:40:38:89:df:f1: 29:db:b4:a7:65:91:5e:3a:3e:f1:38:62:fb:d3:25:cd:23:cb: 9d:cb:68:f6:e7:ba:c7:ac:64:19:0d:a1:9f:26:a9:9a:77:70: 2a:09:af:6d:39:f3:b1:bd:59:ee:4c:6e:65:81:f8:24:d5:9d: 3b:27:61:78:bd:8b:62:c1:d6:f1:48:3d:13:3b:09:a4:1d:6a: a3:ed:ae:d1:7d:ba:4d:a2:c3:d2:98:94:ee:2f:b8:58:d8:38: b2:13:36:bb:92:11:c3:e4:d9:83:37:f5:e3:23:1b:c8:bc:8a: 83:c2:8a:ac:b8:2f:f6:99:bc:ca:53:f5:db:68:fd:02:3f:52: db:c6:59:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNEJDzo4wn7QbkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MDMwOTEwMjA0OFoXDTI1MDYwNzEwMjA0OFowLzEtMCsGA1UEAxMk YTg1Nzg5OGUtOWFjYS00YzlhLWFlZGMtNThjNzY4NzBhZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYz/qMPVhwQVkNAcumsWBCLgfA8KbKHjgjqu bcRnfO244v4YT/s40yXLjaMVTFebwjiPyqTIhSJKIR9JgYuf43uAmbPYWFarf78v vsMOVTLOj3d3W+BwwROkkse4Vyl4HmF/87GCP7/xQxnbXtcQRQC3wtGNxUsnOpbW +Vta1JsU2LCJyhMDV6WgfxgaaHim8JME81UIhCnTuj1mZPWbIJYGODZlXpjSQLci iXT+fdKeSbFn4wQ3+YOIhogovDlJAcpOkHvDHPOLBdNYkEhrMbXKbNMk50zNiyhm bWLzBScb6F9Hrb/WcM8FukNT7FB/JOGvFRBrI4gFy8upCXe/YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGsgInSuYGySLQCXihcndu0cNg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYzc4NjA5Y2EtNzRhMC0z Njc3LWE1YmUtN2Q4ODExYmFjYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeInlr3UwEpvCBSZX4Kygdfi99LdCmPz1Ar4y3vRyeCfEtTqLS0ExQ6 ifZQNjN893l52GvhspzQ4YVmu9BctAKdge/9Xh7N0sa1bfUvFeDtQTUR3S3RwF/e O6vQXRQ64jVAktk46a4ApFo0k67PfA/wrEz+CI3HH2lAOInf8SnbtKdlkV46PvE4 YvvTJc0jy53LaPbnusesZBkNoZ8mqZp3cCoJr20587G9We5MbmWB+CTVnTsnYXi9 i2LB1vFIPRM7CaQdaqPtrtF9uk2iw9KYlO4vuFjYOLITNruSEcPk2YM39eMjG8i8 ioPCiqy4L/aZvMpT9dto/QI/UtvGWRc= -----END CERTIFICATE-----Generated at Mon Apr 7 17:00:54 2025 by rpki-client