$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/db543947-2169-3dfb-b2f9-fa34abb5eed6.roa File: db543947-2169-3dfb-b2f9-fa34abb5eed6.roa (raw, json) Hash identifier: 0dqVmxCmFY5Ch/cKIqWxSY6Oq+a8WWTQoNZJDryqVr8= Subject key identifier: CA:1E:43:67:CC:E7:CF:F6:8E:72:07:1E:01:17:F8:24:A0:5E:DC:48 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858494733EE9D06971E538A5BAA80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/db543947-2169-3dfb-b2f9-fa34abb5eed6.roa Signing time: Sun 23 Mar 2025 01:00:39 +0000 ROA not before: Sun 23 Mar 2025 01:00:39 +0000 ROA not after: Sat 21 Jun 2025 01:00:39 +0000 asID: 45102 IP address blocks: 206.54.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:33:ee:9d:06:97:1e:53:8a:5b:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 23 01:00:39 2025 GMT Not After : Jun 21 01:00:39 2025 GMT Subject: CN=52b00166-7212-447f-a20b-3307472a9ad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:58:2f:d0:e3:70:4c:55:9e:d4:1d:cf:85:17: 66:66:58:b9:31:8d:a4:8e:d4:0d:b2:1f:81:bb:74: 7b:87:41:be:64:dd:02:a3:b2:ef:32:6c:98:98:86: 2e:b9:7b:39:ca:b8:10:00:74:2d:84:74:9c:b4:ab: 6e:45:6c:c6:18:86:99:d8:36:b2:bc:54:0d:f6:2d: c4:9b:ac:88:c8:6c:bf:88:f2:82:d2:9f:a3:0c:7c: d6:17:96:00:36:39:07:74:d3:00:90:d6:f0:12:8e: b2:28:01:34:f2:2f:88:26:eb:19:ed:84:34:3b:3e: 9c:87:94:df:8d:1f:a2:1f:ab:c9:b1:86:8d:40:0d: 7b:a5:77:0a:b1:e8:7c:03:59:ec:3d:9d:a2:a9:66: b2:83:fe:33:af:87:6d:f0:99:f6:6c:2a:19:75:4a: 44:02:37:29:a7:7f:58:a5:22:3c:74:3b:74:9b:ca: c6:06:bf:7a:0f:13:2c:86:be:c9:81:0c:30:37:96: eb:38:e7:bd:69:84:4c:13:a9:e7:50:46:10:60:15: 41:1f:e5:35:3f:c4:f8:3d:b2:ad:cf:60:3b:51:59: 27:c8:35:a9:32:cb:1a:c6:f6:4f:bd:38:14:88:2f: 7c:02:9b:a1:1f:74:77:8a:66:9c:e6:33:87:77:d0: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:1E:43:67:CC:E7:CF:F6:8E:72:07:1E:01:17:F8:24:A0:5E:DC:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/db543947-2169-3dfb-b2f9-fa34abb5eed6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:76:c4:88:0b:77:9c:8a:3e:49:0e:88:25:1c:2d:cf:8c:6a: 2b:07:4c:90:63:9d:c8:56:92:36:84:18:14:b9:1a:0a:f1:bf: a3:e2:4a:8b:70:a7:51:7c:fe:ff:6f:1a:da:13:c2:63:1a:b5: c5:4a:80:3c:45:fc:c7:55:76:25:a4:80:64:e2:a2:4d:71:6c: 81:fd:9e:16:aa:43:39:db:58:08:4c:c7:11:6e:09:37:26:0b: dd:7e:bf:c2:63:49:cd:16:6d:5f:18:af:0b:61:42:df:6f:af: da:46:64:20:ca:b2:3d:0b:d0:6e:93:76:db:f3:6f:c0:3b:28: 50:35:1a:30:0b:36:9d:8b:c1:4f:92:c3:21:45:d8:a3:25:98: 03:11:1b:e1:86:88:1b:f8:4b:3b:f5:92:e2:c5:1d:9d:94:a0: bf:18:a1:b2:83:01:6f:19:51:40:1c:8f:74:82:6e:24:ab:3d: 85:2a:00:80:8a:3b:0f:e1:74:21:7e:ca:19:d8:e2:2c:95:d5: 4f:b4:74:ec:04:28:40:99:08:36:96:d8:57:5e:9b:4b:78:17: a9:bf:11:13:7a:e4:78:08:0c:a0:fc:d4:8b:43:00:b0:79:ed: 31:ae:d9:a9:5e:09:e9:17:33:17:cf:62:1c:1e:68:ba:02:74: 49:e1:79:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+6dBpceU4pbqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk NTJiMDAxNjYtNzIxMi00NDdmLWEyMGItMzMwNzQ3MmE5YWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVgv0ONwTFWe1B3PhRdmZli5MY2kjtQNsh+B u3R7h0G+ZN0Co7LvMmyYmIYuuXs5yrgQAHQthHSctKtuRWzGGIaZ2DayvFQN9i3E m6yIyGy/iPKC0p+jDHzWF5YANjkHdNMAkNbwEo6yKAE08i+IJusZ7YQ0Oz6ch5Tf jR+iH6vJsYaNQA17pXcKseh8A1nsPZ2iqWayg/4zr4dt8Jn2bCoZdUpEAjcpp39Y pSI8dDt0m8rGBr96DxMshr7JgQwwN5brOOe9aYRME6nnUEYQYBVBH+U1P8T4PbKt z2A7UVknyDWpMssaxvZPvTgUiC98ApuhH3R3imac5jOHd9Bl+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoeQ2fM58/2jnIHHgEX+CSgXtxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZGI1NDM5NDctMjE2OS0z ZGZiLWIyZjktZmEzNGFiYjVlZWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzjYSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF2xIgLd5yKPkkOiCUcLc+MaisHTJBjnchWkjaEGBS5Ggrxv6PiSotw p1F8/v9vGtoTwmMatcVKgDxF/MdVdiWkgGTiok1xbIH9nhaqQznbWAhMxxFuCTcm C91+v8JjSc0WbV8YrwthQt9vr9pGZCDKsj0L0G6Tdtvzb8A7KFA1GjALNp2LwU+S wyFF2KMlmAMRG+GGiBv4Szv1kuLFHZ2UoL8YobKDAW8ZUUAcj3SCbiSrPYUqAICK Ow/hdCF+yhnY4iyV1U+0dOwEKECZCDaW2Fdem0t4F6m/ERN65HgIDKD81ItDALB5 7TGu2aleCekXMxfPYhweaLoCdEnheaY= -----END CERTIFICATE-----Generated at Fri Apr 4 17:26:25 2025 by rpki-client