$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5637e173-3e78-350b-928e-7c47064f489f.roa File: 5637e173-3e78-350b-928e-7c47064f489f.roa (raw, json) Hash identifier: J4yfyVVokEbRYaSzPlDWOMZCSqJrwbTXtxKsA6eS7P4= Subject key identifier: 1D:6E:50:CE:9E:85:08:BC:8C:44:46:A9:EF:87:BB:7B:52:75:FF:14 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F432858490CB16D07FF5058D5002602A0 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5637e173-3e78-350b-928e-7c47064f489f.roa Signing time: Sun 02 Mar 2025 02:00:40 +0000 ROA not before: Sun 02 Mar 2025 02:00:40 +0000 ROA not after: Sat 31 May 2025 01:00:40 +0000 asID: 51964 IP address blocks: 200.30.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0c:b1:6d:07:ff:50:58:d5:00:26:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Mar 2 02:00:40 2025 GMT Not After : May 31 01:00:40 2025 GMT Subject: CN=16395eee-0c33-43be-b00c-e2619131f064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:a8:2e:d7:6d:3a:c4:31:b8:b9:e2:ec:4d: 6d:77:05:40:42:fe:b3:b8:c5:e9:95:43:05:5b:4d: ae:95:1d:37:fa:6d:58:6a:b6:98:b6:ad:d6:29:0b: 7e:20:3d:20:6d:a6:5d:8c:c7:ed:94:20:8a:56:16: 8f:ee:f1:8b:f0:72:05:ea:25:8c:4c:46:b1:03:a5: f7:3a:77:2d:07:ce:fc:03:79:06:52:39:6f:e0:68: 2a:c1:94:66:8d:4c:d8:04:a8:9b:81:7e:19:65:eb: 07:80:1e:56:d6:21:6d:05:2c:6e:4a:eb:74:9d:8c: 6e:46:53:c5:e3:3a:e3:ff:bc:96:8c:7e:77:73:5a: c3:94:1e:78:9f:3d:50:3c:4c:cd:12:da:9f:eb:37: 13:c6:06:b2:2c:c3:ca:54:7f:22:d8:3c:35:d2:44: 6d:1e:cc:b8:82:52:79:7f:52:80:fb:ba:5c:aa:6d: 31:c5:a0:9a:8b:d7:f3:51:71:6b:9e:07:93:3b:4c: 3a:fe:af:e8:9b:a7:84:e6:4a:88:a5:f1:e0:1c:a9: b0:63:7c:f2:60:c8:2b:1b:8d:9f:cc:94:7c:cf:40: a2:9b:b3:77:7f:42:ce:89:57:dd:23:8e:18:3a:00: a3:ab:f8:35:71:d4:80:52:e4:95:67:38:48:b4:ce: 61:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6E:50:CE:9E:85:08:BC:8C:44:46:A9:EF:87:BB:7B:52:75:FF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5637e173-3e78-350b-928e-7c47064f489f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 200.30.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d5:77:60:7e:6d:95:78:df:a5:02:0d:9a:8d:fb:d4:42:a1: 57:18:1e:4b:f5:bc:44:ea:c7:9c:d1:1a:03:7a:74:dd:48:ce: 64:9a:64:13:41:d5:b4:a9:41:20:81:b7:ee:3e:43:eb:fc:e4: b7:a8:80:6c:e5:06:34:18:88:63:3e:7a:45:52:2c:03:f8:6e: 9f:de:e3:d2:19:9d:af:e2:89:66:67:56:a6:75:20:cb:20:02: a0:9c:38:e9:d8:1e:9d:7d:82:b6:38:de:03:bc:52:9f:a1:e1: 20:80:97:0f:39:b9:e6:4a:a1:7f:b4:ca:af:56:28:d0:f4:fa: be:bd:b5:a1:de:76:60:1f:ab:3b:d1:e0:66:d3:ed:12:e1:09: e0:1f:c0:a9:8d:e8:b4:55:8d:bd:fb:3e:9f:35:11:05:a0:00: 20:b2:d0:04:63:31:e9:e2:31:e1:cf:b8:d7:0f:cd:80:1d:f4: 3a:a1:74:dc:53:28:06:34:a8:1a:8a:93:29:c0:c9:82:6a:39: 80:c1:6c:cf:2f:73:60:2e:ea:7f:4e:60:9c:a8:52:ca:a3:b5: 72:33:b7:89:2d:37:d3:23:a3:42:06:d3:b9:05:3e:b1:5b:50: 5a:4d:2f:fa:97:6b:8c:f1:1c:9d:52:33:d5:8f:66:e9:e7:a2: 8b:c3:d9:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkMsW0H/1BY1QAmAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDMwMjAyMDA0MFoXDTI1MDUzMTAxMDA0MFowLzEtMCsGA1UEAxMk MTYzOTVlZWUtMGMzMy00M2JlLWIwMGMtZTI2MTkxMzFmMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iKoLtdtOsQxuLni7E1tdwVAQv6zuMXplUMF W02ulR03+m1YaraYtq3WKQt+ID0gbaZdjMftlCCKVhaP7vGL8HIF6iWMTEaxA6X3 OnctB878A3kGUjlv4GgqwZRmjUzYBKibgX4ZZesHgB5W1iFtBSxuSut0nYxuRlPF 4zrj/7yWjH53c1rDlB54nz1QPEzNEtqf6zcTxgayLMPKVH8i2Dw10kRtHsy4glJ5 f1KA+7pcqm0xxaCai9fzUXFrngeTO0w6/q/om6eE5kqIpfHgHKmwY3zyYMgrG42f zJR8z0Cim7N3f0LOiVfdI44YOgCjq/g1cdSAUuSVZzhItM5hSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1uUM6ehQi8jERGqe+Hu3tSdf8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvNTYzN2UxNzMtM2U3OC0z NTBiLTkyOGUtN2M0NzA2NGY0ODlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLVd2B+bZV436UCDZqN+9RCoVcYHkv1vETqx5zRGgN6dN1IzmSaZBNB 1bSpQSCBt+4+Q+v85LeogGzlBjQYiGM+ekVSLAP4bp/e49IZna/iiWZnVqZ1IMsg AqCcOOnYHp19grY43gO8Up+h4SCAlw85ueZKoX+0yq9WKND0+r69taHedmAfqzvR 4GbT7RLhCeAfwKmN6LRVjb37Pp81EQWgACCy0ARjMeniMeHPuNcPzYAd9DqhdNxT KAY0qBqKkynAyYJqOYDBbM8vc2Au6n9OYJyoUsqjtXIzt4ktN9Mjo0IG07kFPrFb UFpNL/qXa4zxHJ1SM9WPZunnoovD2bk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:20 2025 by rpki-client