$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/a343194d-a3fd-3ad5-9596-72ca12e911b4.roa File: a343194d-a3fd-3ad5-9596-72ca12e911b4.roa (raw, json) Hash identifier: K6lNkWS2nr5eCFdyWOXyea7yzVCDPbcWmQJ68a9nEqU= Subject key identifier: BA:EB:4F:2B:66:9B:5B:AD:57:DF:48:EF:B2:45:89:E6:B2:B3:C5:C3 Certificate issuer: /CN=5deff3d1-d421-448c-9f01-4b862c33f101 Certificate serial: 010D0C9F432858489BA0ADD20DFB6B114585CFA0 Authority key identifier: FC:E0:A2:44:24:B7:BD:CD:93:76:35:B7:ED:E9:FE:B6:81:37:25:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/a343194d-a3fd-3ad5-9596-72ca12e911b4.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 25657 IP address blocks: 204.62.114.0/24 maxlen: 27 204.62.115.0/24 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:ad:d2:0d:fb:6b:11:45:85:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5deff3d1-d421-448c-9f01-4b862c33f101 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=fa791450-fbb4-4919-9ade-9bafed0872d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:f7:6b:dc:9d:6c:64:be:e0:b8:cc:3c:72: fa:da:72:fd:33:64:99:47:e5:a9:89:36:5f:1c:f8: 79:18:6a:d1:0a:2e:d7:44:d4:f2:b2:da:c6:71:8c: 76:ba:7d:81:4a:97:60:cc:d3:6e:61:d4:06:02:3a: 94:af:fa:d5:68:02:34:53:3c:c1:a8:0a:73:0f:71: 3c:fb:ab:54:bf:85:28:68:f6:ec:9d:ec:41:dd:96: 80:d2:88:ae:3d:95:fa:ef:54:fa:c6:d0:7c:cb:8f: 5c:ff:36:24:47:bd:0b:5d:84:f3:3e:b4:71:75:c1: fd:5a:5d:13:01:20:a4:e9:d6:f5:32:44:b9:4f:05: a5:a0:df:bd:e1:5b:6b:73:1e:8e:de:bb:df:a2:a2: fb:7c:f7:1e:13:d3:7f:c3:9a:f4:d1:21:a4:36:f9: 82:6f:19:fd:f9:37:0c:42:87:41:83:aa:1e:e4:2f: df:58:72:f0:b6:59:7a:83:bf:b7:c7:2f:64:e5:e4: 3e:77:00:e1:7e:48:6d:a8:f9:19:cb:44:b7:1b:6a: e5:b1:d2:f0:f2:3f:12:40:ef:a2:ce:ae:68:16:fb: 6e:a9:2f:8b:00:74:c3:21:97:ad:84:89:2c:89:8b: 6d:9b:b7:af:92:d1:5d:ff:3f:3a:90:85:f1:83:96: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EB:4F:2B:66:9B:5B:AD:57:DF:48:EF:B2:45:89:E6:B2:B3:C5:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/a343194d-a3fd-3ad5-9596-72ca12e911b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.crl X509v3 Authority Key Identifier: keyid:FC:E0:A2:44:24:B7:BD:CD:93:76:35:B7:ED:E9:FE:B6:81:37:25:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101.cer sbgp-ipAddrBlock: critical IPv4: 204.62.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:1c:92:b4:08:c1:51:f7:e1:70:23:04:39:01:e0:bd:c4:b1: e7:b2:08:66:56:04:54:98:fe:ab:25:3d:00:e3:35:b1:53:63: db:77:22:27:7e:bc:69:46:0b:bb:0e:27:ec:96:6d:23:ef:12: 4a:16:46:b5:2a:52:17:c6:ea:ff:7c:36:b2:19:7c:52:7d:ac: 61:dd:36:36:4a:c7:c1:e7:b5:3a:11:eb:aa:44:e5:ca:ce:ae: 8c:69:63:8d:08:7b:c7:99:d5:68:56:80:9a:72:28:9d:af:eb: c6:08:b9:7e:05:62:d2:60:8c:2f:f9:29:ca:3c:a8:fd:4a:c6: 69:04:a7:f5:f9:73:1f:09:1d:1f:79:a6:a7:09:30:f0:4f:19: bb:b0:a8:9d:81:30:9a:d2:37:68:05:ff:dd:c6:db:7d:43:a0: 71:44:8d:ff:19:c9:8f:2c:ad:4a:e4:76:4c:93:a1:eb:fb:e7: ba:1b:bf:36:27:5d:ba:6f:a2:44:49:99:28:8c:bf:ca:1d:ce: 73:12:2e:0c:9e:a9:f3:fb:a0:f3:c6:2c:60:f6:36:0c:1b:85: 46:78:83:7e:65:f8:e5:f2:c2:d4:96:4c:ec:f6:9e:35:02:73: 4d:03:d0:be:43:1f:ec:3a:e6:8b:c4:bf:e8:e1:55:4d:41:a1: 0a:5f:32:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboK3SDftrEUWFz6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRlZmYzZDEtZDQyMS00NDhjLTlmMDEtNGI4NjJjMzNm MTAxMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk ZmE3OTE0NTAtZmJiNC00OTE5LTlhZGUtOWJhZmVkMDg3MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4b3a9ydbGS+4LjMPHL62nL9M2SZR+WpiTZf HPh5GGrRCi7XRNTystrGcYx2un2BSpdgzNNuYdQGAjqUr/rVaAI0UzzBqApzD3E8 +6tUv4UoaPbsnexB3ZaA0oiuPZX671T6xtB8y49c/zYkR70LXYTzPrRxdcH9Wl0T ASCk6db1MkS5TwWloN+94Vtrcx6O3rvfoqL7fPceE9N/w5r00SGkNvmCbxn9+TcM QodBg6oe5C/fWHLwtll6g7+3xy9k5eQ+dwDhfkhtqPkZy0S3G2rlsdLw8j8SQO+i zq5oFvtuqS+LAHTDIZethIksiYttm7evktFd/z86kIXxg5aMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrrTytmm1utV99I77JFieays8XDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZGVm ZjNkMS1kNDIxLTQ0OGMtOWYwMS00Yjg2MmMzM2YxMDEvYTM0MzE5NGQtYTNmZC0z YWQ1LTk1OTYtNzJjYTEyZTkxMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWRlZmYzZDEtZDQyMS00NDhjLTlm MDEtNGI4NjJjMzNmMTAxLzVkZWZmM2QxLWQ0MjEtNDQ4Yy05ZjAxLTRiODYyYzMz ZjEwMS5jcmwwHwYDVR0jBBgwFoAU/OCiRCS3vc2TdjW37en+toE3Jc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZGVmZjNkMS1kNDIxLTQ0OGMtOWYwMS00Yjg2 MmMzM2YxMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzD5yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0ckrQIwVH34XAjBDkB4L3EseeyCGZWBFSY/qslPQDjNbFTY9t3Iid+ vGlGC7sOJ+yWbSPvEkoWRrUqUhfG6v98NrIZfFJ9rGHdNjZKx8HntToR66pE5crO roxpY40Ie8eZ1WhWgJpyKJ2v68YIuX4FYtJgjC/5Kco8qP1KxmkEp/X5cx8JHR95 pqcJMPBPGbuwqJ2BMJrSN2gF/93G231DoHFEjf8ZyY8srUrkdkyToev757obvzYn XbpvokRJmSiMv8odznMSLgyeqfP7oPPGLGD2NgwbhUZ4g35l+OXywtSWTOz2njUC c00D0L5DH+w65ovEv+jhVU1BoQpfMiM= -----END CERTIFICATE-----Generated at Sat Apr 5 09:40:16 2025 by rpki-client