$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa File: 0fa138cc-579e-337f-844b-d4a832c956c9.roa (raw, json) Hash identifier: fA334bPLbSGsiqJScf40MZGka4Wz649uwNKiT8bj1mg= Subject key identifier: 2F:5E:7E:B5:A5:3F:EF:BD:CA:C7:AF:56:18:59:11:34:52:04:05:EA Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F432858493B849F44D189174B06FDFCE0 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa Signing time: Tue 18 Mar 2025 20:33:44 +0000 ROA not before: Tue 18 Mar 2025 20:33:44 +0000 ROA not after: Mon 16 Jun 2025 20:33:44 +0000 asID: 55039 IP address blocks: 208.66.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:84:9f:44:d1:89:17:4b:06:fd:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Mar 18 20:33:44 2025 GMT Not After : Jun 16 20:33:44 2025 GMT Subject: CN=0bb62c1c-6c7a-407c-a9f6-e67caefea260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f5:54:ff:ab:a1:04:a8:fa:c6:fc:08:37:b5: cc:81:07:0b:8e:ed:60:ae:56:33:1d:74:98:a0:d3: 38:c2:26:85:4e:35:9c:08:65:e9:df:68:99:93:7b: 80:28:c6:12:30:1e:c1:29:ec:39:d3:bd:58:16:7f: 11:43:f3:37:bb:7e:34:0a:9d:68:8c:fe:14:1d:e6: 77:18:c0:85:80:18:6a:df:47:46:5b:11:3a:5b:d6: bc:68:5e:d6:fb:0b:9c:fb:73:ef:96:32:67:9d:59: 4c:8f:9f:7c:a1:bb:6e:28:a4:17:e8:f8:ed:78:58: 45:e7:f5:00:35:d3:00:7f:ca:ed:75:b5:25:f0:26: 9d:e9:92:24:99:27:bf:7f:ea:50:d3:f9:26:11:6d: 27:41:cd:68:71:de:06:28:09:7a:32:f9:67:8e:a6: a9:94:51:42:ab:6f:9a:a3:cd:14:bc:7c:f1:78:9d: ec:44:89:10:be:e3:23:dd:c2:83:67:fb:47:6b:72: 5e:26:15:b0:e9:77:fb:1c:00:71:03:f3:89:4f:0d: 6b:ed:14:88:58:a2:18:b5:76:e2:5b:ca:dc:c9:f1: cc:5b:62:a9:a1:c8:6e:a6:ba:5d:3a:a7:0b:08:ab: 9c:bf:7e:62:bd:4b:30:67:01:e4:11:60:16:ef:f8: 8f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5E:7E:B5:A5:3F:EF:BD:CA:C7:AF:56:18:59:11:34:52:04:05:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 208.66.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e7:4e:91:65:3f:22:d5:83:41:e8:6a:88:a2:ee:03:47:97: 18:a0:18:13:fc:00:ac:bd:e1:60:70:70:ed:2e:a4:16:9c:f4: bc:6a:86:3c:79:88:cb:77:d5:9f:a8:45:d8:84:78:6d:0c:c2: 3b:be:bd:64:90:3c:21:40:bb:c8:28:10:af:1c:3e:0a:68:bf: a2:a9:f5:12:76:82:08:89:e5:0f:22:e5:67:e1:47:38:28:d0: 69:87:62:9c:78:7e:5a:ea:9b:4e:e0:e6:c8:86:ca:9c:c2:b2: 93:b7:2f:0a:a6:0e:9e:a3:d7:da:cd:ac:59:45:af:3c:02:c4: 67:54:32:28:ab:d7:96:c7:75:5f:d8:15:6a:66:d4:be:cd:b9: 56:65:77:b0:df:2f:44:bf:04:18:b2:73:5f:de:f9:03:06:27: df:fa:c1:cd:e8:19:bb:9e:a5:d1:6e:a6:2d:fc:23:35:e9:0f: 77:b2:20:a3:c3:bf:ee:fc:ed:60:e5:fe:45:2c:b4:a5:1c:fc: fb:f5:9b:b2:31:7b:60:df:cd:62:d3:4e:16:73:5d:c7:02:65: af:5a:dd:9a:f2:2c:a9:f0:72:36:5b:7a:f7:1e:2a:95:7f:be: 7b:24:0c:4a:2c:a1:7c:04:4e:16:1c:b8:c7:2e:7f:44:49:b9: b8:75:e4:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk7hJ9E0YkXSwb9/OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MDMxODIwMzM0NFoXDTI1MDYxNjIwMzM0NFowLzEtMCsGA1UEAxMk MGJiNjJjMWMtNmM3YS00MDdjLWE5ZjYtZTY3Y2FlZmVhMjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvVU/6uhBKj6xvwIN7XMgQcLju1grlYzHXSY oNM4wiaFTjWcCGXp32iZk3uAKMYSMB7BKew5071YFn8RQ/M3u340Cp1ojP4UHeZ3 GMCFgBhq30dGWxE6W9a8aF7W+wuc+3PvljJnnVlMj598obtuKKQX6PjteFhF5/UA NdMAf8rtdbUl8Cad6ZIkmSe/f+pQ0/kmEW0nQc1ocd4GKAl6MvlnjqaplFFCq2+a o80UvHzxeJ3sRIkQvuMj3cKDZ/tHa3JeJhWw6Xf7HABxA/OJTw1r7RSIWKIYtXbi W8rcyfHMW2KpochuprpdOqcLCKucv35ivUswZwHkEWAW7/iPawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9efrWlP++9ysevVhhZETRSBAXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMGZhMTM4Y2MtNTc5ZS0z MzdmLTg0NGItZDRhODMyYzk1NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrnTpFlPyLVg0Hoaoii7gNHlxigGBP8AKy94WBwcO0upBac9Lxqhjx5 iMt31Z+oRdiEeG0Mwju+vWSQPCFAu8goEK8cPgpov6Kp9RJ2ggiJ5Q8i5WfhRzgo 0GmHYpx4flrqm07g5siGypzCspO3LwqmDp6j19rNrFlFrzwCxGdUMiir15bHdV/Y FWpm1L7NuVZld7DfL0S/BBiyc1/e+QMGJ9/6wc3oGbuepdFupi38IzXpD3eyIKPD v+787WDl/kUstKUc/Pv1m7Ixe2DfzWLTThZzXccCZa9a3ZryLKnwcjZbevceKpV/ vnskDEosoXwEThYcuMcuf0RJubh15Mk= -----END CERTIFICATE-----Generated at Sat Apr 5 05:29:52 2025 by rpki-client