$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21573aa3-a118-3ab3-9f35-a9a123a2761d.roa File: 21573aa3-a118-3ab3-9f35-a9a123a2761d.roa (raw, json) Hash identifier: H8ixRdwVKWfgrXwQZan8HKxXcA0F5YwCxeTN0iByG0k= Subject key identifier: A3:84:42:78:4E:1B:FD:CE:FC:1E:40:19:42:56:11:58:D6:28:FC:04 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848FDBE41FB2D391AAC2F39EB00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21573aa3-a118-3ab3-9f35-a9a123a2761d.roa Signing time: Mon 24 Feb 2025 17:29:45 +0000 ROA not before: Mon 24 Feb 2025 17:29:45 +0000 ROA not after: Sun 25 May 2025 16:29:45 +0000 asID: 401152 IP address blocks: 205.186.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:be:41:fb:2d:39:1a:ac:2f:39:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 24 17:29:45 2025 GMT Not After : May 25 16:29:45 2025 GMT Subject: CN=52cf8ef6-da86-4e9c-80e7-5c4315a079e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:c2:41:cc:fa:bf:04:f9:39:af:8c:ef:b1: 3d:ab:1b:fd:5e:ed:8c:70:45:96:b6:6d:f4:80:b0: 7d:fa:df:65:ae:59:af:74:08:be:aa:83:6f:0a:24: a9:fd:75:1a:0e:96:67:89:48:f0:17:6f:b8:bf:10: d1:68:b1:f0:73:d6:b3:e4:f8:67:fb:6b:eb:66:74: 0a:07:f2:a5:6d:e9:27:57:40:d3:ab:49:59:b3:9b: 2b:e0:08:93:d0:5c:21:6f:af:a0:0d:68:35:ff:2f: dc:90:05:aa:57:a9:d5:52:9e:bd:ce:e7:6a:27:50: 97:83:26:cc:a1:b2:25:64:e1:99:cd:5f:56:b8:0b: 59:d6:c3:fd:bf:70:6e:53:c8:28:b2:a2:5f:0c:86: 85:53:ac:71:92:7e:99:35:9c:99:02:0a:7a:3e:a2: 2e:12:4e:f0:e3:90:df:f4:84:41:5a:d7:03:3a:0d: f8:f1:d2:73:1a:11:e3:1a:2a:c4:aa:a3:a3:18:e1: 45:56:8e:7e:2a:50:49:a1:90:15:58:16:0c:ad:ab: bc:06:78:6b:0a:28:cf:1f:2e:91:66:93:ab:0e:cb: 6b:1a:16:e3:98:74:af:ac:72:f0:20:d3:ed:e2:61: 7e:29:61:13:20:88:a7:31:a3:ce:d9:56:b5:8a:a8: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:84:42:78:4E:1B:FD:CE:FC:1E:40:19:42:56:11:58:D6:28:FC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21573aa3-a118-3ab3-9f35-a9a123a2761d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 205.186.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:62:69:c8:3f:87:06:d8:be:73:ae:eb:c4:d1:b7:65:f2:63: 74:07:53:e2:98:62:36:0a:52:7e:e4:73:c6:32:76:d7:31:be: 5f:18:c1:6c:a0:49:c2:1b:0e:33:80:5e:f0:c5:a8:ae:13:65: b5:cc:ef:1a:62:88:ab:5a:f8:3a:ac:64:ce:eb:bc:6c:bc:16: 05:07:77:c6:3d:42:4e:3c:51:9a:50:25:49:84:37:6d:be:a6: 86:5f:75:bc:06:04:e8:ee:87:31:3b:fa:ca:5f:82:a9:dc:49: 64:e1:fc:8e:13:3f:50:0c:98:0a:8c:10:70:f2:39:9d:25:f7: b0:06:d9:43:83:12:fb:51:e4:b2:0b:0a:f8:12:4c:90:bd:17: 14:37:cc:b0:97:14:ed:3c:36:4e:4a:04:44:5c:3b:1a:8f:0a: 19:e3:9f:81:b4:e7:1d:ee:8c:8a:61:b2:42:f1:c7:12:95:cb: e3:f9:51:f2:16:97:61:15:5a:49:47:05:45:57:76:94:d1:71: 88:35:93:9d:b4:d6:26:cb:4b:b5:94:ee:20:18:d2:d6:07:5f: aa:93:4a:9e:44:4d:44:96:43:be:c3:ba:99:72:b2:97:15:42: bd:c9:4f:45:8c:30:0b:75:25:87:52:76:b0:53:53:2b:5f:26: dd:35:34:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9vkH7LTkarC856wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyNDE3Mjk0NVoXDTI1MDUyNTE2Mjk0NVowLzEtMCsGA1UEAxMk NTJjZjhlZjYtZGE4Ni00ZTljLTgwZTctNWM0MzE1YTA3OWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1LCQcz6vwT5Oa+M77E9qxv9Xu2McEWWtm30 gLB9+t9lrlmvdAi+qoNvCiSp/XUaDpZniUjwF2+4vxDRaLHwc9az5Phn+2vrZnQK B/KlbeknV0DTq0lZs5sr4AiT0Fwhb6+gDWg1/y/ckAWqV6nVUp69zudqJ1CXgybM obIlZOGZzV9WuAtZ1sP9v3BuU8gosqJfDIaFU6xxkn6ZNZyZAgp6PqIuEk7w45Df 9IRBWtcDOg348dJzGhHjGirEqqOjGOFFVo5+KlBJoZAVWBYMrau8BnhrCijPHy6R ZpOrDstrGhbjmHSvrHLwINPt4mF+KWETIIinMaPO2Va1iqi8oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOEQnhOG/3O/B5AGUJWEVjWKPwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjE1NzNhYTMtYTExOC0z YWIzLTlmMzUtYTlhMTIzYTI3NjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzbpEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtiacg/hwbYvnOu68TRt2XyY3QHU+KYYjYKUn7kc8Yydtcxvl8YwWyg ScIbDjOAXvDFqK4TZbXM7xpiiKta+DqsZM7rvGy8FgUHd8Y9Qk48UZpQJUmEN22+ poZfdbwGBOjuhzE7+spfgqncSWTh/I4TP1AMmAqMEHDyOZ0l97AG2UODEvtR5LIL CvgSTJC9FxQ3zLCXFO08Nk5KBERcOxqPChnjn4G05x3ujIphskLxxxKVy+P5UfIW l2EVWklHBUVXdpTRcYg1k5201ibLS7WU7iAY0tYHX6qTSp5ETUSWQ77DuplyspcV Qr3JT0WMMAt1JYdSdrBTUytfJt01NDE= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:11 2025 by rpki-client