$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/450b8e4c-d668-3931-b207-a712d28e3174.roa File: 450b8e4c-d668-3931-b207-a712d28e3174.roa (raw, json) Hash identifier: nFe/diGRZYUXog04pTTpGFWjlJdXhCkvOciQpTyHmYY= Subject key identifier: 7E:F3:36:22:D8:74:A8:DD:DE:81:07:EA:A2:40:12:42:12:80:62:C7 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F43285849287E53C2280A557F1ABD2900 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/450b8e4c-d668-3931-b207-a712d28e3174.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 22140 IP address blocks: 206.29.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:53:c2:28:0a:55:7f:1a:bd:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=7d020a1e-f553-4231-bc24-d24b358bc1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b7:80:2f:ad:92:e0:d3:bf:ca:53:6c:fc:de: 4d:07:a2:63:79:f1:43:f5:4b:8b:27:94:db:5b:24: 1a:31:60:07:c2:87:5f:b3:cf:82:d0:ab:77:8d:10: 88:72:65:1a:08:99:56:2a:b8:7b:2f:43:e2:2c:8e: 60:56:ba:e1:78:19:95:cb:87:fd:d8:4c:78:77:7d: 6d:2c:97:60:f6:09:20:d4:21:3e:ec:69:51:b0:0e: 61:c0:e1:cb:cd:37:38:c6:a7:3a:cf:d1:fd:01:12: 63:5a:68:52:8f:17:29:08:68:53:3e:7e:aa:68:56: bc:68:04:ab:5a:a9:c0:c9:9a:a6:28:ab:5a:12:bd: 2a:44:c2:b3:fe:31:0c:da:43:6d:f3:99:84:76:df: 77:01:0a:cc:1b:13:9b:e4:1e:46:6c:b4:c2:ba:fc: cd:da:8a:f3:95:93:d8:d3:42:c3:f0:db:59:ef:9e: c8:20:4f:84:8a:b5:48:03:45:2b:fd:03:ab:3b:38: c3:a0:d5:50:7f:48:6f:f3:e4:e3:b6:09:a9:ed:db: e1:7c:80:5a:4c:d9:a7:10:2e:b4:64:49:59:06:2e: 0e:6d:49:aa:2d:54:96:61:95:5e:15:6b:57:b4:24: 79:d5:58:a7:53:3d:48:ef:c1:36:22:97:bc:b1:3f: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F3:36:22:D8:74:A8:DD:DE:81:07:EA:A2:40:12:42:12:80:62:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/450b8e4c-d668-3931-b207-a712d28e3174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 206.29.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:00:22:c3:a0:59:2d:a1:c0:de:ff:1b:c9:53:c3:05:63:68: 0e:05:61:d1:80:49:01:56:18:c2:43:20:64:8d:1d:79:f3:b1: f2:64:c9:7d:ca:7e:cb:e9:8a:ab:a0:c7:d4:96:ae:c1:11:84: 2e:d1:8a:1a:7c:0d:01:0a:8c:58:03:0f:5f:a8:c8:dd:ad:69: c7:11:f9:c9:02:c0:75:c9:2c:99:08:84:da:32:2c:2e:23:57: 59:8e:94:83:9e:8b:ad:b2:66:a8:07:a4:88:0e:a7:e6:8c:6e: 2d:6f:b9:e0:c4:4e:cb:03:ae:ad:0e:1f:6c:42:96:08:11:b2: ec:e5:9c:e4:d6:87:e6:7a:3d:bc:08:df:4c:9f:e5:a5:92:5c: fe:ae:47:7d:fa:5b:f8:f8:a5:75:4f:5e:fc:0e:dd:77:68:40: 6c:7f:97:6d:07:c7:0f:45:0d:ee:6d:f0:05:6c:7a:b7:20:81: 37:05:e7:4b:1e:cc:67:1f:ae:32:13:ce:c2:7d:1f:89:44:f4: 84:1a:e2:7e:48:b0:29:b5:27:18:9b:1a:2e:54:0f:23:c4:c4: 4b:61:bc:f6:d0:c8:87:17:90:70:2e:4e:1d:a5:72:a0:4e:26: 12:ae:56:05:d8:d8:4c:de:bb:be:ff:9b:23:80:4e:58:2b:64: af:c2:5b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkoflPCKApVfxq9KQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk N2QwMjBhMWUtZjU1My00MjMxLWJjMjQtZDI0YjM1OGJjMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLeAL62S4NO/ylNs/N5NB6JjefFD9UuLJ5Tb WyQaMWAHwodfs8+C0Kt3jRCIcmUaCJlWKrh7L0PiLI5gVrrheBmVy4f92Ex4d31t LJdg9gkg1CE+7GlRsA5hwOHLzTc4xqc6z9H9ARJjWmhSjxcpCGhTPn6qaFa8aASr WqnAyZqmKKtaEr0qRMKz/jEM2kNt85mEdt93AQrMGxOb5B5GbLTCuvzN2orzlZPY 00LD8NtZ757IIE+EirVIA0Ur/QOrOzjDoNVQf0hv8+Tjtgmp7dvhfIBaTNmnEC60 ZElZBi4ObUmqLVSWYZVeFWtXtCR51VinUz1I78E2Ipe8sT8PbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7zNiLYdKjd3oEH6qJAEkISgGLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvNDUwYjhlNGMtZDY2OC0z OTMxLWIyMDctYTcxMmQyOGUzMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzh2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoAIsOgWS2hwN7/G8lTwwVjaA4FYdGASQFWGMJDIGSNHXnzsfJkyX3K fsvpiqugx9SWrsERhC7Rihp8DQEKjFgDD1+oyN2taccR+ckCwHXJLJkIhNoyLC4j V1mOlIOei62yZqgHpIgOp+aMbi1vueDETssDrq0OH2xClggRsuzlnOTWh+Z6PbwI 30yf5aWSXP6uR336W/j4pXVPXvwO3XdoQGx/l20Hxw9FDe5t8AVsercggTcF50se zGcfrjITzsJ9H4lE9IQa4n5IsCm1JxibGi5UDyPExEthvPbQyIcXkHAuTh2lcqBO JhKuVgXY2Ezeu77/myOATlgrZK/CW8s= -----END CERTIFICATE-----Generated at Sat Apr 5 13:15:04 2025 by rpki-client