$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/dd37a563-a484-3e3c-a379-3494b69517c6.roa File: dd37a563-a484-3e3c-a379-3494b69517c6.roa (raw, json) Hash identifier: fShERfUAX2cW0sCxdyRu8iIy32bCoNNtjTga0FBGYV0= Subject key identifier: 2A:C5:47:E6:E4:46:A1:1B:A5:9C:72:B9:12:86:22:DD:15:6B:57:7E Certificate issuer: /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Certificate serial: 010D0C9F432858491ED6E37D95E5B447D6C258C0 Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/dd37a563-a484-3e3c-a379-3494b69517c6.roa Signing time: Sat 08 Mar 2025 14:00:52 +0000 ROA not before: Sat 08 Mar 2025 14:00:52 +0000 ROA not after: Fri 06 Jun 2025 13:00:52 +0000 asID: 174 IP address blocks: 63.161.104.0/24 maxlen: 24 63.161.105.0/24 maxlen: 24 2600:2:110::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1e:d6:e3:7d:95:e5:b4:47:d6:c2:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d Validity Not Before: Mar 8 14:00:52 2025 GMT Not After : Jun 6 13:00:52 2025 GMT Subject: CN=046caf4d-0fcd-45b6-876b-7a67b8daed19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:a5:ad:48:f1:cb:cc:b9:9f:2c:1f:08:a7: 43:3a:5d:44:4c:fd:0c:5c:cd:5a:39:13:c1:5a:1c: 6b:76:6a:70:03:90:80:0a:26:dd:1c:e8:2f:36:9d: e9:92:66:a1:d3:77:0b:76:40:99:51:45:94:d7:2d: fb:f4:d0:1f:57:08:de:59:6d:3e:e2:7e:b7:04:b2: 5a:30:8e:d1:44:b0:2f:75:00:79:00:a0:fd:5d:aa: 49:87:2f:ea:03:a0:b4:a8:41:ff:97:be:41:07:60: 79:46:17:58:0e:49:c0:15:10:e4:be:f7:50:4a:51: ca:6d:47:90:7f:64:15:d9:cf:6f:5f:c2:96:97:6a: b7:ad:e5:9d:fb:36:5c:93:0c:12:1a:85:be:0a:dd: 0d:3d:51:f2:e3:57:fe:8c:e8:93:a2:e8:cf:30:0f: 0b:a6:ff:b0:da:50:e0:25:aa:53:26:05:d1:02:90: 0d:ca:c2:d4:6c:ec:de:45:86:39:25:9e:9f:e2:7e: e1:f8:ec:3f:60:3f:2b:d4:dd:01:5d:65:9e:b3:59: e7:49:84:f9:72:6e:4d:d5:d4:8f:a3:e6:b5:a1:8c: 6c:64:2f:57:1d:4f:19:28:93:cd:06:d7:c5:8f:b1: cb:ce:05:d9:dd:8a:f4:96:b5:e3:fe:32:65:e4:08: 2e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:47:E6:E4:46:A1:1B:A5:9C:72:B9:12:86:22:DD:15:6B:57:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/dd37a563-a484-3e3c-a379-3494b69517c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl X509v3 Authority Key Identifier: keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer sbgp-ipAddrBlock: critical IPv4: 63.161.104.0/23 IPv6: 2600:2:110::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:58:7d:e0:44:c1:fb:48:56:16:b4:80:a2:80:8a:61:5f:d4: 5d:f7:f6:d1:1c:7c:62:a0:6a:cb:55:eb:9f:0f:43:8e:d4:21: 68:1e:b1:e5:7a:1e:c9:41:31:39:6d:10:a5:11:bd:4a:ab:ba: e3:e5:3c:1e:cf:b7:de:81:11:e0:ee:66:35:4f:f4:d6:b8:2a: 06:0b:41:7a:4a:7c:cd:57:3d:4b:86:be:99:e5:28:7a:3d:fa: 2d:36:c0:63:ce:15:21:29:02:31:f0:f7:ab:45:46:34:89:c3: 62:fb:c8:2e:2f:bb:80:62:e9:ce:4d:40:3f:26:32:54:53:d9: c9:88:63:c4:ec:c5:33:ba:25:d3:7b:7a:b0:4b:f8:b8:b8:59: 47:8c:63:b0:6c:a9:01:e6:5d:f2:1d:4b:8a:12:16:25:dd:dc: 4c:64:1f:3a:fb:95:f8:1f:62:64:b3:d5:83:6a:44:0a:c6:25: d4:e7:9f:69:0a:a1:d0:90:64:9b:60:22:45:f2:6b:48:18:13: 75:0d:18:b2:00:68:20:97:c4:8e:b8:3e:7f:39:b3:5c:4d:ad: ae:34:79:73:e2:68:be:1e:b3:6d:6c:99:74:d2:9f:6f:09:88: 75:4a:42:9d:23:42:98:65:71:8e:bf:d1:62:dd:71:ad:9a:f7: c2:23:43:6c -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEke1uN9leW0R9bCWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk ZjZkMB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk MDQ2Y2FmNGQtMGZjZC00NWI2LTg3NmItN2E2N2I4ZGFlZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw+lrUjxy8y5nywfCKdDOl1ETP0MXM1aORPB WhxrdmpwA5CACibdHOgvNp3pkmah03cLdkCZUUWU1y379NAfVwjeWW0+4n63BLJa MI7RRLAvdQB5AKD9XapJhy/qA6C0qEH/l75BB2B5RhdYDknAFRDkvvdQSlHKbUeQ f2QV2c9vX8KWl2q3reWd+zZckwwSGoW+Ct0NPVHy41f+jOiToujPMA8Lpv+w2lDg JapTJgXRApANysLUbOzeRYY5JZ6f4n7h+Ow/YD8r1N0BXWWes1nnSYT5cm5N1dSP o+a1oYxsZC9XHU8ZKJPNBtfFj7HLzgXZ3Yr0lrXj/jJl5AguoQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCrFR+bkRqEbpZxyuRKGIt0Va1d+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvZGQzN2E1NjMtYTQ4NC0z ZTNjLWEzNzktMzQ5NGI2OTUxN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy ZWIyMmRmNmQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBP6FoMA8E AgACMAkDBwQmAAACARAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAelh94ETB+0hWFrSAooCKYV/UXff20Rx8 YqBqy1Xrnw9DjtQhaB6x5XoeyUExOW0QpRG9Squ64+U8Hs+33oER4O5mNU/01rgq BgtBekp8zVc9S4a+meUoej36LTbAY84VISkCMfD3q0VGNInDYvvILi+7gGLpzk1A PyYyVFPZyYhjxOzFM7ol03t6sEv4uLhZR4xjsGypAeZd8h1LihIWJd3cTGQfOvuV +B9iZLPVg2pECsYl1OefaQqh0JBkm2AiRfJrSBgTdQ0YsgBoIJfEjrg+fzmzXE2t rjR5c+Jovh6zbWyZdNKfbwmIdUpCnSNCmGVxjr/RYt1xrZr3wiNDbA== -----END CERTIFICATE-----Generated at Fri Mar 14 13:20:12 2025 by rpki-client