$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa File: 5317c311-b69c-3892-b288-522c8ee207cf.roa (raw, json) Hash identifier: ZfiPZ88cjfM5PZdBEXoPfJEvCf8Bvr/0R7sNHW9Y7ok= Subject key identifier: D2:E7:42:54:4C:EA:3E:3D:1E:5D:83:CA:2D:6C:98:D2:CD:67:73:42 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849AD1A025D25C9EB9634267440 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 3949 IP address blocks: 204.2.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:02:5d:25:c9:eb:96:34:26:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=1796cd0d-1a8e-4d8a-8062-e953072a37e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:18:86:49:9f:ca:d6:4d:f5:f8:63:11:0b:67: b1:1c:2b:27:23:25:10:2f:a3:50:08:31:80:83:fc: 61:b8:b0:d4:06:c9:03:9e:27:5d:6a:0a:4e:a7:65: b6:d1:84:1e:c7:89:dc:65:9d:3c:3b:22:f1:d6:7b: 8e:7a:ea:ed:8c:32:d7:1f:5b:6d:a1:e8:47:f0:35: 8c:4c:eb:e7:96:56:83:9f:66:8b:53:7c:c3:43:65: 3a:f1:24:8c:7e:19:e5:74:a3:81:32:f6:f4:90:f2: 69:c7:fb:26:0f:3b:e0:ed:b1:8d:37:77:cc:c4:a5: 5c:9d:5a:5c:9a:87:e7:d2:9e:7f:69:ea:b9:0c:23: d4:10:e0:8d:ca:eb:24:63:29:92:62:14:df:d1:ce: 49:e6:5f:9f:bd:91:6b:cf:2c:57:9a:8c:dc:e8:4f: 70:0c:3c:a4:f7:27:b6:0a:53:0f:c5:12:36:c1:e1: 2b:2e:7f:54:4f:a1:55:b9:c6:6e:d0:5c:00:29:48: a4:cc:d5:ea:9e:6d:44:f0:c0:45:63:9b:e4:e6:d6: cf:56:4a:39:59:8a:bb:be:1b:4b:aa:82:fd:47:b3: bf:fd:02:34:6f:a1:97:15:59:a7:8c:94:b9:fc:33: 0f:ca:14:4b:02:26:6a:04:f8:71:87:eb:8a:4d:eb: 3d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E7:42:54:4C:EA:3E:3D:1E:5D:83:CA:2D:6C:98:D2:CD:67:73:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5317c311-b69c-3892-b288-522c8ee207cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f8:45:d3:c0:be:c0:e5:b8:cf:5b:5f:01:58:f8:a5:b1:51: 59:5f:7e:05:8c:76:8a:0b:30:b5:63:92:62:d0:01:eb:77:78: c9:d9:1c:05:7f:aa:23:af:43:77:57:f5:03:c7:40:8e:0f:60: 84:9a:4d:f3:fe:20:89:73:44:52:f9:c1:4d:75:83:10:eb:d2: e1:11:d0:e3:f0:52:2d:e9:b4:8f:de:64:4f:d0:02:67:df:39: d4:e5:4f:c4:5f:8e:0e:dc:4a:d7:98:2a:17:96:48:ff:31:23: 97:b2:92:6b:b0:59:22:7d:79:97:ca:47:f3:50:70:d8:9a:8a: 59:fe:50:ab:e2:6b:0d:c8:73:76:1b:91:a1:67:32:51:ab:64: 6a:b5:bc:34:89:aa:27:ee:fa:42:89:e9:65:f8:6f:74:99:e6: df:8e:9a:ef:60:66:61:33:e1:81:49:b3:90:72:9d:97:d3:7f: 02:3c:8b:be:52:6f:1d:f8:28:15:6f:35:a9:48:91:70:24:43: 91:08:86:29:3f:d8:d3:9d:6e:f9:6c:49:4b:b0:8a:4d:e9:fd: e2:6c:f1:c8:f2:01:15:73:58:92:cf:34:6b:54:11:5e:9b:3a: ff:84:53:08:95:c7:3c:34:bb:3a:65:77:3e:5c:6f:a2:41:95: b8:aa:13:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgJdJcnrljQmdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MTc5NmNkMGQtMWE4ZS00ZDhhLTgwNjItZTk1MzA3MmEzN2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxiGSZ/K1k31+GMRC2exHCsnIyUQL6NQCDGA g/xhuLDUBskDniddagpOp2W20YQex4ncZZ08OyLx1nuOeurtjDLXH1ttoehH8DWM TOvnllaDn2aLU3zDQ2U68SSMfhnldKOBMvb0kPJpx/smDzvg7bGNN3fMxKVcnVpc mofn0p5/aeq5DCPUEOCNyuskYymSYhTf0c5J5l+fvZFrzyxXmozc6E9wDDyk9ye2 ClMPxRI2weErLn9UT6FVucZu0FwAKUikzNXqnm1E8MBFY5vk5tbPVko5WYq7vhtL qoL9R7O//QI0b6GXFVmnjJS5/DMPyhRLAiZqBPhxh+uKTes9kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLnQlRM6j49Hl2Dyi1smNLNZ3NCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTMxN2MzMTEtYjY5Yy0z ODkyLWIyODgtNTIyYzhlZTIwN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj4RdPAvsDluM9bXwFY+KWxUVlffgWMdooLMLVjkmLQAet3eMnZHAV/ qiOvQ3dX9QPHQI4PYISaTfP+IIlzRFL5wU11gxDr0uER0OPwUi3ptI/eZE/QAmff OdTlT8Rfjg7cSteYKheWSP8xI5eykmuwWSJ9eZfKR/NQcNiailn+UKviaw3Ic3Yb kaFnMlGrZGq1vDSJqifu+kKJ6WX4b3SZ5t+Omu9gZmEz4YFJs5BynZfTfwI8i75S bx34KBVvNalIkXAkQ5EIhik/2NOdbvlsSUuwik3p/eJs8cjyARVzWJLPNGtUEV6b Ov+EUwiVxzw0uzpldz5cb6JBlbiqEyE= -----END CERTIFICATE-----Generated at Tue May 20 10:13:55 2025 by rpki-client