$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa File: 6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa (raw, json) Hash identifier: 8FMLVvg/E0bwG9J3tstFAJavn0RFcF8bFzMQE/8uDHI= Subject key identifier: 3B:3C:9E:F9:DC:CD:B5:F0:A0:5F:AC:BD:24:D5:E6:1E:38:4F:0D:DF Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F43285848E16BD7B67F538BE8C10260E0 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 4005 IP address blocks: 204.59.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:d7:b6:7f:53:8b:e8:c1:02:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=d85c7c2d-4f70-46a8-843d-f74abe62afb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e3:2d:2a:8d:2f:b8:c2:97:cb:c3:ba:bc:09: 87:74:1e:8e:97:bf:67:9a:c1:31:b5:e2:5b:cc:5c: 36:45:56:5d:5a:00:fd:79:d7:06:29:d7:e8:d7:b0: ce:5a:c9:a7:7a:f4:88:90:85:a7:7c:fe:a7:da:2e: 7e:12:a2:e5:6b:7e:f6:49:47:d7:da:f6:89:3c:96: 17:69:fa:30:64:87:56:4f:0c:50:3c:d7:a6:e4:f1: 29:72:e3:9e:58:49:d3:c6:cb:47:70:af:09:33:a3: 17:66:3c:6c:13:02:b7:26:b4:fd:0d:f7:2e:bf:a7: 3c:15:06:7b:b8:56:54:5e:aa:b8:df:4b:4e:02:64: c3:80:e0:bd:f5:4b:4a:c7:90:45:c9:a7:2a:a0:0d: bc:95:ec:da:93:c4:ea:7d:26:2f:bf:24:d7:00:44: da:59:a2:aa:b3:f2:e7:f8:fd:b4:17:64:7d:05:21: 16:f5:5d:27:ca:37:bf:c6:1f:91:1f:81:c2:99:07: 12:b5:49:e3:41:d5:e0:e9:df:9c:d5:68:4e:29:33: 03:0a:48:89:f2:b8:e5:74:00:78:db:cb:9d:af:58: 76:07:fb:cd:7c:93:ca:15:d9:d8:c5:d4:76:52:4c: 2d:37:fb:1c:f7:bd:72:e8:5c:f8:38:71:39:39:05: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3C:9E:F9:DC:CD:B5:F0:A0:5F:AC:BD:24:D5:E6:1E:38:4F:0D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/6f5585b4-8ced-341c-b3e2-e64a8cfbc5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 204.59.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:82:97:46:31:b2:fd:49:f9:c6:17:a8:31:2c:b9:9e:74:19: 66:9a:e1:7c:2a:e7:00:e1:67:1d:80:16:d7:1c:18:0b:d6:5d: 1f:d3:e1:15:72:7c:8d:a0:9a:75:56:83:a7:7b:3a:d9:9f:b9: e4:48:fb:8c:b6:90:0e:88:66:7d:1c:e5:80:2f:97:3b:85:ec: 78:0f:f4:56:22:b2:4b:b6:d7:f7:61:06:c3:39:89:c8:17:99: ee:5b:d9:0f:55:0b:26:21:55:91:ce:4f:9d:8f:2f:8e:ea:89: b1:b8:42:db:15:81:d4:26:d9:25:67:e3:24:6e:5c:cb:58:2c: 09:4e:d2:90:69:5f:8e:4e:1a:f7:17:dc:e1:19:ab:25:ea:13: 68:54:a8:4d:60:2f:62:b0:85:2e:b5:3d:20:b5:c0:7a:19:7d: ca:5b:81:da:eb:79:39:df:de:e8:0e:8d:e7:50:45:2b:43:7f: 39:3c:51:fb:2b:33:82:0c:d8:50:6b:79:62:b6:f0:fe:03:60: 07:71:a2:06:7c:fb:e2:36:95:db:6f:71:a1:40:f2:a3:d3:72: da:93:69:4c:76:0c:fc:ff:79:0e:65:de:e8:31:81:68:f5:90: 8c:3c:6b:ca:f6:cf:02:60:83:33:33:52:31:3d:ab:c8:8d:9e: c3:28:33:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9e2f1OL6MECYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDg1YzdjMmQtNGY3MC00NmE4LTg0M2QtZjc0YWJlNjJhZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OMtKo0vuMKXy8O6vAmHdB6Ol79nmsExteJb zFw2RVZdWgD9edcGKdfo17DOWsmnevSIkIWnfP6n2i5+EqLla372SUfX2vaJPJYX afowZIdWTwxQPNem5PEpcuOeWEnTxstHcK8JM6MXZjxsEwK3JrT9Dfcuv6c8FQZ7 uFZUXqq430tOAmTDgOC99UtKx5BFyacqoA28lezak8TqfSYvvyTXAETaWaKqs/Ln +P20F2R9BSEW9V0nyje/xh+RH4HCmQcStUnjQdXg6d+c1WhOKTMDCkiJ8rjldAB4 28udr1h2B/vNfJPKFdnYxdR2UkwtN/sc971y6Fz4OHE5OQVQwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDs8nvnczbXwoF+svSTV5h44Tw3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvNmY1NTg1YjQtOGNlZC0z NDFjLWIzZTItZTY0YThjZmJjNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDsiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMeCl0Yxsv1J+cYXqDEsuZ50GWaa4Xwq5wDhZx2AFtccGAvWXR/T4RVy fI2gmnVWg6d7OtmfueRI+4y2kA6IZn0c5YAvlzuF7HgP9FYisku21/dhBsM5icgX me5b2Q9VCyYhVZHOT52PL47qibG4QtsVgdQm2SVn4yRuXMtYLAlO0pBpX45OGvcX 3OEZqyXqE2hUqE1gL2KwhS61PSC1wHoZfcpbgdrreTnf3ugOjedQRStDfzk8Ufsr M4IM2FBreWK28P4DYAdxogZ8++I2ldtvcaFA8qPTctqTaUx2DPz/eQ5l3ugxgWj1 kIw8a8r2zwJggzMzUjE9q8iNnsMoM2Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:03 2025 by rpki-client