$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/a112e6f1-5989-3baf-baab-bc4c1df7dd87.roa File: a112e6f1-5989-3baf-baab-bc4c1df7dd87.roa (raw, json) Hash identifier: pbWjCZnlcftH1w+ie/pCv2GWnHyvL3ctozE3btnSs+o= Subject key identifier: 86:40:64:04:86:7F:B2:F1:24:90:7A:82:52:BD:1A:2A:DF:1B:94:94 Certificate issuer: /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418 Certificate serial: 010D0C9F43285848DC9AD998BDB1DD418242C640 Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/a112e6f1-5989-3baf-baab-bc4c1df7dd87.roa Signing time: Wed 12 Feb 2025 20:36:44 +0000 ROA not before: Wed 12 Feb 2025 20:36:44 +0000 ROA not after: Tue 13 May 2025 19:36:44 +0000 asID: 16509 IP address blocks: 205.233.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dc:9a:d9:98:bd:b1:dd:41:82:42:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418 Validity Not Before: Feb 12 20:36:44 2025 GMT Not After : May 13 19:36:44 2025 GMT Subject: CN=279a3d06-23ca-49e2-b9b6-d7871d2944f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a8:13:b8:57:74:c1:57:7e:fa:7a:ad:04:02: 09:8b:0d:74:98:4e:f5:6d:4d:a1:72:03:9d:87:ea: 67:d5:e0:62:b6:3a:94:2f:52:13:0f:79:a5:49:bd: c4:57:8c:1a:ed:83:53:97:09:cd:6d:f7:cc:f1:65: cd:2a:b4:62:d4:47:ad:01:47:81:bc:e4:4d:8c:0b: 70:18:2d:1d:6c:b3:d6:35:84:5d:80:bb:72:95:6c: 4c:c8:6b:e9:1e:51:1d:0b:b9:21:ff:96:53:bd:e8: 01:e1:43:14:92:ae:d7:77:41:6a:e5:d5:e8:59:8b: fd:19:85:27:73:a8:cd:82:73:8a:e7:a2:59:6e:14: 4d:57:9f:39:87:fd:e2:c4:29:2a:cf:2f:3b:21:50: 55:75:d0:b5:89:cf:3c:24:35:cd:6b:75:a1:84:ae: 2f:93:41:d7:fb:c6:96:88:4e:fd:ae:21:06:89:b9: 88:de:14:22:bf:6c:62:1e:c5:90:19:61:64:49:b0: bb:5f:70:af:62:aa:5b:ed:61:f8:84:3e:56:42:3d: 9f:12:21:0b:f4:5e:6d:49:25:a9:71:80:6e:00:88: 60:14:b6:0b:b3:36:95:43:ab:d0:27:5d:10:ba:2c: 22:a2:9c:63:12:97:46:77:21:d2:db:78:95:28:84: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:40:64:04:86:7F:B2:F1:24:90:7A:82:52:BD:1A:2A:DF:1B:94:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/a112e6f1-5989-3baf-baab-bc4c1df7dd87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl X509v3 Authority Key Identifier: keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer sbgp-ipAddrBlock: critical IPv4: 205.233.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:b2:e2:ff:f1:cf:f8:13:01:52:79:02:08:24:d4:92:48:a1: 94:42:d5:08:e6:45:9c:f5:2f:d0:79:25:b0:9e:dc:a8:89:4c: 49:13:8d:67:ff:c1:54:9f:7c:a1:a8:0a:42:f5:97:8c:48:52: 23:c6:c2:a7:e6:36:0b:af:2a:7b:68:50:50:e6:12:74:f4:ee: 9e:49:f9:48:32:19:3a:34:aa:37:b1:88:81:fb:13:82:2d:b8: 32:a6:90:0f:12:65:22:93:63:19:79:ac:82:2b:7c:f2:dc:6d: df:15:ef:35:7a:42:cb:fa:61:9a:b2:73:a2:a0:5e:24:1d:84: 5a:07:ce:c3:39:49:58:c8:04:9a:e0:5a:f7:d1:25:69:03:02: 12:57:a3:92:ea:fc:b1:24:ee:54:3f:d8:a7:23:17:c6:f7:20: 06:9f:54:85:ec:10:1b:ea:69:bd:53:29:12:8e:dd:45:f2:66: b5:53:d2:97:c4:46:c7:a6:d8:27:b8:e2:3a:fe:63:77:24:db: 8c:71:48:20:64:67:42:8d:d5:b0:2f:fd:c4:2d:79:ae:a4:88: 5e:c5:47:ab:81:7b:54:a4:20:81:15:e8:d7:10:3a:e7:09:46: 2d:28:63:70:ac:fa:70:31:74:84:a6:83:b1:46:3c:a1:28:6e: 17:48:1d:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjcmtmYvbHdQYJCxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzNTVhYTMtY2YyOC00YTUzLTk2YzUtZGRmM2JiODAw NDE4MB4XDTI1MDIxMjIwMzY0NFoXDTI1MDUxMzE5MzY0NFowLzEtMCsGA1UEAxMk Mjc5YTNkMDYtMjNjYS00OWUyLWI5YjYtZDc4NzFkMjk0NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6gTuFd0wVd++nqtBAIJiw10mE71bU2hcgOd h+pn1eBitjqUL1ITD3mlSb3EV4wa7YNTlwnNbffM8WXNKrRi1EetAUeBvORNjAtw GC0dbLPWNYRdgLtylWxMyGvpHlEdC7kh/5ZTvegB4UMUkq7Xd0Fq5dXoWYv9GYUn c6jNgnOK56JZbhRNV585h/3ixCkqzy87IVBVddC1ic88JDXNa3WhhK4vk0HX+8aW iE79riEGibmI3hQiv2xiHsWQGWFkSbC7X3CvYqpb7WH4hD5WQj2fEiEL9F5tSSWp cYBuAIhgFLYLszaVQ6vQJ10QuiwiopxjEpdGdyHS23iVKITNWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZAZASGf7LxJJB6glK9GirfG5SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YjM1 NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYzYmI4MDA0MTgvYTExMmU2ZjEtNTk4OS0z YmFmLWJhYWItYmM0YzFkZjdkZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGIzNTVhYTMtY2YyOC00YTUzLTk2 YzUtZGRmM2JiODAwNDE4LzhiMzU1YWEzLWNmMjgtNGE1My05NmM1LWRkZjNiYjgw MDQxOC5jcmwwHwYDVR0jBBgwFoAUy1Kokcx0j44ypXPtDxqDz0H1JHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YjM1NWFhMy1jZjI4LTRhNTMtOTZjNS1kZGYz YmI4MDA0MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzekAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqy4v/xz/gTAVJ5Aggk1JJIoZRC1QjmRZz1L9B5JbCe3KiJTEkTjWf/ wVSffKGoCkL1l4xIUiPGwqfmNguvKntoUFDmEnT07p5J+UgyGTo0qjexiIH7E4It uDKmkA8SZSKTYxl5rIIrfPLcbd8V7zV6Qsv6YZqyc6KgXiQdhFoHzsM5SVjIBJrg WvfRJWkDAhJXo5Lq/LEk7lQ/2KcjF8b3IAafVIXsEBvqab1TKRKO3UXyZrVT0pfE Rsem2Ce44jr+Y3ck24xxSCBkZ0KN1bAv/cQtea6kiF7FR6uBe1SkIIEV6NcQOucJ Ri0oY3Cs+nAxdISmg7FGPKEobhdIHZE= -----END CERTIFICATE-----Generated at Fri Apr 4 19:05:48 2025 by rpki-client