$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c96c282b-8c51-3548-83bc-00ad7dc2bb40.roa File: c96c282b-8c51-3548-83bc-00ad7dc2bb40.roa (raw, json) Hash identifier: LXb0UTZ2UpG3bJG6a/xQua3LFJwEbU4agoTY2VAMin8= Subject key identifier: 17:47:0F:CC:2C:D3:5A:E2:4B:7B:2D:55:83:66:9A:F6:E3:4F:71:3B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858491511617D26737898C63DC100 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c96c282b-8c51-3548-83bc-00ad7dc2bb40.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:61:7d:26:73:78:98:c6:3d:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=f583737a-9c8c-4434-8d84-71f45184c4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:45:6c:63:f0:cb:91:79:16:03:21:a7:0c:d8: ce:8d:c3:50:21:a1:1a:85:a6:82:c7:19:aa:df:f0: 73:5e:b7:59:9f:37:79:bd:85:df:c9:82:49:fe:1d: 91:58:39:f7:f5:90:2b:14:95:35:c9:86:70:85:3d: d3:32:45:10:b9:53:6f:a7:22:81:d3:7b:53:af:70: 5d:b1:ff:38:12:0e:1d:e4:00:27:1e:7c:19:a2:5c: 33:ba:67:af:83:cc:f8:ac:00:28:7f:74:87:01:37: be:94:1c:7f:14:f9:37:25:ae:c1:11:45:4d:34:2b: 9b:05:e0:57:98:90:65:31:ea:01:63:ea:65:90:6d: 1a:e9:df:75:39:4e:5b:1c:65:b5:7b:95:c6:cd:24: 0b:bb:20:1c:13:a6:3e:56:11:09:c6:39:cb:53:b7: 9b:71:68:49:72:dd:b8:be:6b:6d:8b:70:a2:91:74: 7e:6c:5e:20:3a:82:44:d8:22:63:0c:65:5e:ff:66: 0a:fd:f2:b4:d4:2c:d4:a8:95:29:d4:37:10:b3:47: c1:c6:98:c3:fb:e6:43:1b:e8:34:af:30:de:bc:b0: de:b7:a9:d8:1a:6d:9f:27:96:54:0d:69:7d:02:7e: b8:5d:e0:1d:f0:2e:1a:39:ef:cf:ce:e2:47:58:59: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:47:0F:CC:2C:D3:5A:E2:4B:7B:2D:55:83:66:9A:F6:E3:4F:71:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/c96c282b-8c51-3548-83bc-00ad7dc2bb40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:97:11:3d:b3:dc:db:94:1f:b7:6e:0a:41:61:d8:63:e2:61: 43:a8:5c:24:c7:3e:0c:1a:2d:03:eb:aa:e2:99:36:b5:08:99: cd:3a:43:5c:be:af:f2:41:38:29:28:06:0c:73:8a:b6:d5:b3: be:ea:03:18:cf:fd:99:47:cd:40:d1:03:75:11:7c:ff:91:76: 55:76:a6:4a:e4:0c:e0:5c:35:8c:ec:b1:e5:42:0c:81:05:c2: 0f:07:d0:68:6f:bc:fe:73:7b:d6:f5:f3:a5:e3:94:03:d2:72: c0:ee:d6:9c:4a:5e:63:01:ab:a7:f7:77:b1:ed:20:0e:75:fd: ca:96:41:64:8f:37:2a:08:5a:b4:d3:09:0f:b8:0a:2b:1b:f2: 2d:79:5d:6b:0f:16:1e:d7:47:05:22:cf:2a:cd:31:1f:c1:01: fb:bb:15:70:92:59:21:62:91:e8:1e:f1:4f:5a:90:a3:b1:97: ee:bd:e1:96:80:91:33:2a:c9:8a:21:e2:f9:36:72:ac:5b:26: b9:a1:29:35:ec:e0:b3:8b:81:bf:41:87:46:b9:43:ed:6a:2b: 02:21:80:9d:8a:5f:be:6b:64:07:01:47:e0:61:1f:6f:ba:0f: 26:21:0f:53:11:28:2f:d9:e3:d3:3f:88:c9:1e:c7:98:e9:83: 5e:cb:52:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWF9JnN4mMY9wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk ZjU4MzczN2EtOWM4Yy00NDM0LThkODQtNzFmNDUxODRjNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEVsY/DLkXkWAyGnDNjOjcNQIaEahaaCxxmq 3/BzXrdZnzd5vYXfyYJJ/h2RWDn39ZArFJU1yYZwhT3TMkUQuVNvpyKB03tTr3Bd sf84Eg4d5AAnHnwZolwzumevg8z4rAAof3SHATe+lBx/FPk3Ja7BEUVNNCubBeBX mJBlMeoBY+plkG0a6d91OU5bHGW1e5XGzSQLuyAcE6Y+VhEJxjnLU7ebcWhJct24 vmtti3CikXR+bF4gOoJE2CJjDGVe/2YK/fK01CzUqJUp1DcQs0fBxpjD++ZDG+g0 rzDevLDet6nYGm2fJ5ZUDWl9An64XeAd8C4aOe/PzuJHWFkfJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdHD8ws01riS3stVYNmmvbjT3E7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYzk2YzI4MmItOGM1MS0z NTQ4LTgzYmMtMDBhZDdkYzJiYjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSXET2z3NuUH7duCkFh2GPiYUOoXCTHPgwaLQPrquKZNrUImc06Q1y+ r/JBOCkoBgxzirbVs77qAxjP/ZlHzUDRA3URfP+RdlV2pkrkDOBcNYzsseVCDIEF wg8H0GhvvP5ze9b186XjlAPScsDu1pxKXmMBq6f3d7HtIA51/cqWQWSPNyoIWrTT CQ+4Cisb8i15XWsPFh7XRwUizyrNMR/BAfu7FXCSWSFikege8U9akKOxl+694ZaA kTMqyYoh4vk2cqxbJrmhKTXs4LOLgb9Bh0a5Q+1qKwIhgJ2KX75rZAcBR+BhH2+6 DyYhD1MRKC/Z49M/iMkex5jpg17LUvw= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:22 2025 by rpki-client