$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7df2fe02-cb07-3301-bf42-2244cd105357.roa File: 7df2fe02-cb07-3301-bf42-2244cd105357.roa (raw, json) Hash identifier: 8Va2EsPz4cNVfOUIpShNUdJUagu6tOVDM4pQTpb1Mew= Subject key identifier: 7A:B5:9F:F8:7E:7E:E4:16:55:AD:2B:51:7D:C8:37:79:0B:25:52:D9 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858491511631B534E2904C6FDD860 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7df2fe02-cb07-3301-bf42-2244cd105357.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:63:1b:53:4e:29:04:c6:fd:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=f60116b7-ceb9-4532-b179-1e0397b66072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:68:99:17:3a:e9:f4:cb:4b:18:e9:2a:44:1e: 89:65:68:6b:8a:20:61:c4:cd:03:0d:00:dd:f4:a7: a4:67:af:11:21:76:fb:56:24:66:e5:ca:bd:75:37: f3:64:b8:43:6e:6d:e3:53:6a:21:63:d8:4e:7c:2b: 52:3f:0f:ea:ab:18:1d:d6:e5:30:ea:5e:78:35:ed: 17:c5:c2:0f:18:50:9b:68:33:0b:45:3b:f3:01:17: a2:16:9e:dd:5a:4c:18:6d:e4:14:b5:96:0c:3b:b8: 85:30:58:8e:a5:c4:7e:64:52:1b:1b:43:59:03:30: 2d:10:4a:4e:cc:1c:6c:71:f4:74:ee:f5:43:e0:eb: 40:94:e3:fe:4a:aa:12:ae:74:e0:c5:1a:21:75:77: bf:34:41:8d:3c:b5:69:b0:26:ae:c9:d0:f2:28:2b: ad:c1:1a:d0:8f:dc:fd:29:76:3c:e1:d7:1c:ab:62: 48:2f:5e:21:0b:4b:a2:45:13:d5:4d:d9:bb:a2:37: a1:d1:94:c6:80:4b:a5:59:6c:11:10:ab:e4:82:2a: 05:94:62:b1:78:5f:27:fb:02:cb:c9:e9:0f:c9:de: 98:df:41:7f:f3:bc:18:46:ef:97:aa:a1:00:4a:3e: 1a:bb:46:0d:41:bb:d4:22:e4:59:ec:1c:47:3d:fb: f1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B5:9F:F8:7E:7E:E4:16:55:AD:2B:51:7D:C8:37:79:0B:25:52:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7df2fe02-cb07-3301-bf42-2244cd105357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:41:e4:2c:01:eb:b0:a0:a6:21:a5:ec:11:8c:f8:af:ae:20: 43:98:3c:f6:fc:d1:2d:9e:b3:25:d6:7b:99:8c:5a:13:84:ad: 9d:94:20:40:c8:2d:b9:67:8c:2f:04:29:fc:c2:1e:42:87:f3: 63:20:2c:5b:91:07:35:9d:0c:09:ff:64:db:e1:9e:f9:ff:8d: ea:a3:56:1c:82:4d:44:86:81:7d:2c:5f:65:ba:32:ea:16:e7: 4f:75:e8:c8:5c:80:fd:88:78:55:41:0f:d5:5f:5b:c9:d2:94: 6a:51:88:92:c5:dd:a6:bf:f1:7b:4b:19:5f:36:7d:c9:38:8f: 91:80:24:71:5d:1e:88:cf:0b:3f:8f:7f:60:3e:8a:53:01:5d: e2:89:98:55:a2:cf:69:57:0c:37:83:e0:e5:50:24:4e:fd:32: 99:5f:43:56:84:4e:44:97:5e:eb:fe:c7:bb:4c:6a:52:b8:85: 25:bf:cd:f1:10:55:d6:b6:c3:ca:8c:89:dc:3e:5c:0b:ff:0f: 93:42:ea:0c:50:1f:15:55:59:95:84:94:50:2d:06:ba:55:14: 2f:c7:f1:e0:a3:26:ac:8c:ba:63:b0:47:1d:5f:fa:ce:8d:12: f3:fe:e7:3e:48:bb:39:e1:fd:05:ff:c8:22:2f:3c:cc:55:a7: 7a:cd:53:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWMbU04pBMb92GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk ZjYwMTE2YjctY2ViOS00NTMyLWIxNzktMWUwMzk3YjY2MDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGiZFzrp9MtLGOkqRB6JZWhriiBhxM0DDQDd 9KekZ68RIXb7ViRm5cq9dTfzZLhDbm3jU2ohY9hOfCtSPw/qqxgd1uUw6l54Ne0X xcIPGFCbaDMLRTvzAReiFp7dWkwYbeQUtZYMO7iFMFiOpcR+ZFIbG0NZAzAtEEpO zBxscfR07vVD4OtAlOP+SqoSrnTgxRohdXe/NEGNPLVpsCauydDyKCutwRrQj9z9 KXY84dccq2JIL14hC0uiRRPVTdm7ojeh0ZTGgEulWWwREKvkgioFlGKxeF8n+wLL yekPyd6Y30F/87wYRu+XqqEASj4au0YNQbvUIuRZ7BxHPfvxwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHq1n/h+fuQWVa0rUX3IN3kLJVLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvN2RmMmZlMDItY2IwNy0z MzAxLWJmNDItMjI0NGNkMTA1MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZB5CwB67CgpiGl7BGM+K+uIEOYPPb80S2esyXWe5mMWhOErZ2UIEDI LblnjC8EKfzCHkKH82MgLFuRBzWdDAn/ZNvhnvn/jeqjVhyCTUSGgX0sX2W6MuoW 50916MhcgP2IeFVBD9VfW8nSlGpRiJLF3aa/8XtLGV82fck4j5GAJHFdHojPCz+P f2A+ilMBXeKJmFWiz2lXDDeD4OVQJE79MplfQ1aETkSXXuv+x7tMalK4hSW/zfEQ Vda2w8qMidw+XAv/D5NC6gxQHxVVWZWElFAtBrpVFC/H8eCjJqyMumOwRx1f+s6N EvP+5z5Iuznh/QX/yCIvPMxVp3rNU6g= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:41 2025 by rpki-client