$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f73e40b8-69f0-335d-8119-fd699381e1cc.roa File: f73e40b8-69f0-335d-8119-fd699381e1cc.roa (raw, json) Hash identifier: lgbylKH6aa63vy5aF8CmREQLOb3XbVr3zfD3yie1cwk= Subject key identifier: 43:12:DB:34:C4:6B:F3:7F:AD:F8:EA:61:A6:70:59:1E:F2:53:E1:6F Certificate issuer: /CN=f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b Certificate serial: 010D0C9F4328584940397C6F294E4FAC54434780 Authority key identifier: B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f73e40b8-69f0-335d-8119-fd699381e1cc.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 393256 IP address blocks: 204.124.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7c:6f:29:4e:4f:ac:54:43:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=7d9f3918-7020-4f33-a39f-cdf17931d04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:69:0e:68:99:a3:eb:00:d8:04:64:28:32:3f: 08:95:9c:ff:a7:b0:98:f6:bc:9f:37:88:9f:8b:e8: e8:70:d9:26:2e:26:65:55:6e:50:e4:19:03:26:d8: b2:61:6a:80:57:a7:01:a4:54:60:3b:36:14:e2:35: 14:c5:9c:35:ea:d5:03:e7:2f:b5:58:fb:a5:57:07: 87:aa:87:a0:78:d3:35:b6:60:d3:e8:3a:2b:ee:a8: 42:48:b6:4b:84:5f:b0:80:8c:89:22:e3:b1:d9:33: e2:c5:b7:d4:5e:a1:cf:b4:b5:9d:77:3d:af:02:f7: 47:5c:ca:18:e4:23:60:8a:06:bd:c9:67:99:39:6a: 07:65:df:43:cf:7b:18:67:36:82:f5:2d:79:46:11: ad:f4:a4:2e:42:c1:71:e6:51:d5:68:29:4f:8c:bc: f7:9f:5b:e0:b2:92:24:12:2f:33:75:9e:98:7c:15: bd:52:3c:a8:82:65:d7:97:0a:bf:4f:9e:0f:4c:56: d6:2f:d0:06:5f:33:03:ff:c7:f1:41:ab:f0:ad:df: 11:2b:3a:3a:55:96:8e:dd:c1:fc:3a:fc:11:56:30: 48:38:06:a0:57:73:da:d4:30:e1:bf:39:43:e7:b2: d1:5b:d8:ea:c3:37:31:0c:2b:ea:3b:47:c1:e7:68: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:12:DB:34:C4:6B:F3:7F:AD:F8:EA:61:A6:70:59:1E:F2:53:E1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f73e40b8-69f0-335d-8119-fd699381e1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.crl X509v3 Authority Key Identifier: keyid:B0:45:5A:47:7F:BD:57:A1:D1:B9:26:DF:C1:61:94:52:E0:2F:26:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f57db5d5-d0da-4eb6-93a4-e4c1a33dd23b.cer sbgp-ipAddrBlock: critical IPv4: 204.124.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:ea:fb:92:94:00:b6:37:8c:e4:d6:5e:af:55:4c:81:26:ac: ba:85:25:86:e3:8a:27:31:85:79:ba:ba:75:82:aa:76:91:2c: a4:c2:71:39:45:8a:a5:be:ef:73:fa:6a:60:e8:3b:f5:67:1d: 76:4b:d2:00:9a:9e:56:8c:37:b2:c4:64:2b:29:8d:96:1b:e3: c2:02:37:fc:a6:ce:cd:20:65:ae:ba:d2:9d:fb:7f:b8:4c:4f: 97:ce:6a:a5:e0:e9:29:68:a6:d3:d7:fa:10:37:17:dc:d8:f2: 8d:1c:c0:b7:64:ab:62:65:d7:25:07:a8:dd:53:5b:cc:23:17: 09:cb:9b:f5:d1:4f:cd:61:75:e3:62:b0:58:cc:92:16:3a:99: 35:2f:7c:6c:4d:6e:82:b4:54:24:c8:3b:4e:13:53:65:08:c1: 2c:ed:d2:ee:37:4d:d8:a0:b1:0b:c2:f0:91:52:a3:06:58:e7: 5a:aa:41:32:98:fa:f1:8e:aa:a1:47:9d:43:26:db:7f:0c:21: 57:1f:51:72:7c:87:9e:71:98:d1:d4:6b:06:14:db:e7:43:8e: fc:df:b1:ff:fe:d7:78:a2:79:45:7c:69:57:8b:d2:c2:2c:24: bf:22:26:9c:35:1b:6d:8a:a1:80:46:61:01:e3:90:69:70:f6: b6:e0:77:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXxvKU5PrFRDR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjU3ZGI1ZDUtZDBkYS00ZWI2LTkzYTQtZTRjMWEzM2Rk MjNiMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk N2Q5ZjM5MTgtNzAyMC00ZjMzLWEzOWYtY2RmMTc5MzFkMDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGkOaJmj6wDYBGQoMj8IlZz/p7CY9ryfN4if i+jocNkmLiZlVW5Q5BkDJtiyYWqAV6cBpFRgOzYU4jUUxZw16tUD5y+1WPulVweH qoegeNM1tmDT6Dor7qhCSLZLhF+wgIyJIuOx2TPixbfUXqHPtLWddz2vAvdHXMoY 5CNgiga9yWeZOWoHZd9Dz3sYZzaC9S15RhGt9KQuQsFx5lHVaClPjLz3n1vgspIk Ei8zdZ6YfBW9UjyogmXXlwq/T54PTFbWL9AGXzMD/8fxQavwrd8RKzo6VZaO3cH8 OvwRVjBIOAagV3Pa1DDhvzlD57LRW9jqwzcxDCvqO0fB52jfRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMS2zTEa/N/rfjqYaZwWR7yU+FvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNTdk YjVkNS1kMGRhLTRlYjYtOTNhNC1lNGMxYTMzZGQyM2IvZjczZTQwYjgtNjlmMC0z MzVkLTgxMTktZmQ2OTkzODFlMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjU3ZGI1ZDUtZDBkYS00ZWI2LTkz YTQtZTRjMWEzM2RkMjNiL2Y1N2RiNWQ1LWQwZGEtNGViNi05M2E0LWU0YzFhMzNk ZDIzYi5jcmwwHwYDVR0jBBgwFoAUsEVaR3+9V6HRuSbfwWGUUuAvJi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNTdkYjVkNS1kMGRhLTRlYjYtOTNhNC1lNGMx YTMzZGQyM2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzHyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbq+5KUALY3jOTWXq9VTIEmrLqFJYbjiicxhXm6unWCqnaRLKTCcTlF iqW+73P6amDoO/VnHXZL0gCanlaMN7LEZCspjZYb48ICN/ymzs0gZa660p37f7hM T5fOaqXg6SloptPX+hA3F9zY8o0cwLdkq2Jl1yUHqN1TW8wjFwnLm/XRT81hdeNi sFjMkhY6mTUvfGxNboK0VCTIO04TU2UIwSzt0u43TdigsQvC8JFSowZY51qqQTKY +vGOqqFHnUMm238MIVcfUXJ8h55xmNHUawYU2+dDjvzfsf/+13iieUV8aVeL0sIs JL8iJpw1G22KoYBGYQHjkGlw9rbgd4Q= -----END CERTIFICATE-----Generated at Fri Apr 11 21:18:15 2025 by rpki-client