$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea7aa056-9a65-3193-8b86-4976ae945936.roa File: ea7aa056-9a65-3193-8b86-4976ae945936.roa (raw, json) Hash identifier: Xt6ulaN0ipzwVeaB5WqbZ5QxiBJZsU4wpO5nrnvDdWA= Subject key identifier: 66:EB:51:F5:47:7A:13:A3:C6:98:82:64:3C:D4:94:34:E8:11:C5:07 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848FDE95AC6A49EAD52E69B5340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea7aa056-9a65-3193-8b86-4976ae945936.roa Signing time: Mon 24 Feb 2025 18:56:35 +0000 ROA not before: Mon 24 Feb 2025 18:56:35 +0000 ROA not after: Sun 25 May 2025 17:56:35 +0000 asID: 401152 IP address blocks: 205.186.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:e9:5a:c6:a4:9e:ad:52:e6:9b:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 24 18:56:35 2025 GMT Not After : May 25 17:56:35 2025 GMT Subject: CN=bf1567aa-d8ad-4177-8d89-667ed8e4a4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bc:fe:52:4e:ea:db:3f:14:f0:b8:90:2e:54: 3e:41:ed:a1:29:3e:2f:82:b7:a2:7f:68:c1:41:35: 4c:0e:f5:f3:57:b2:b9:9b:81:6a:b8:ec:bd:40:c7: ae:8e:58:e6:58:26:82:22:3e:ee:3c:02:27:33:50: 45:57:25:c8:82:b5:c3:25:aa:41:75:37:62:17:cf: a0:3d:87:00:56:fc:fa:96:f4:cc:fc:43:38:9e:23: fe:60:75:c6:46:42:7c:92:11:55:a6:46:52:64:22: 29:3c:14:a8:0f:5f:b7:4f:f0:cf:3c:a9:45:5a:9a: 36:c2:fd:19:da:e7:96:63:8e:b4:f9:f8:f0:0b:53: 96:07:68:d1:00:85:17:b5:c8:fc:df:54:9f:ec:42: 9d:aa:33:ad:2f:a6:42:ef:9b:ae:ed:3a:b6:3e:d5: ef:2b:d2:e9:71:c0:51:d2:48:f3:8b:dc:02:bf:18: af:ee:61:aa:4e:55:74:1e:ad:ed:18:0e:7b:94:58: 69:ec:b8:bd:eb:6c:b8:4e:4a:54:33:4c:93:85:fe: ec:6c:0f:d2:a0:90:4b:98:9c:89:b5:7f:e6:bd:16: 3b:db:a7:af:76:b9:86:b1:ed:32:08:32:20:e4:bd: 01:43:83:5f:ed:4c:12:e0:21:ab:de:12:4d:16:bb: 75:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EB:51:F5:47:7A:13:A3:C6:98:82:64:3C:D4:94:34:E8:11:C5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ea7aa056-9a65-3193-8b86-4976ae945936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 205.186.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:77:ac:eb:1a:ea:a8:cb:6f:94:44:11:21:16:8c:6b:89:3d: 60:57:05:2e:96:3d:e6:a4:6f:29:c1:1b:8a:e1:6e:09:a2:42: ba:5b:93:ee:9b:d4:62:c7:35:8a:40:10:9c:93:1a:99:83:71: 09:54:f1:ae:bd:91:af:cc:5a:2a:38:e0:95:0a:b2:ad:b0:2f: 06:9d:99:79:7b:9c:78:8b:71:95:50:b8:c5:b2:ae:3b:b2:e6: d2:99:e7:78:97:de:53:57:f0:d5:8b:0b:3b:a4:ff:99:92:de: 19:b0:a6:df:4e:57:f4:5a:82:d3:9c:f4:f5:aa:54:cb:3c:4c: 32:13:6e:f2:ba:6d:0f:2a:65:c7:28:10:00:7e:34:94:05:36: 96:5f:48:a1:1e:29:09:f8:05:1c:ae:43:ab:c8:06:a0:9d:ca: 48:1d:2a:f3:07:84:aa:93:e4:a9:0c:f8:fe:e3:30:54:fb:d7: 5d:3a:01:cb:ef:96:0f:f8:59:90:8a:fc:d6:58:b0:99:8a:b3: e1:4e:81:0b:0e:c7:ec:cb:45:fe:4c:3a:6b:80:5e:85:f6:8b: bb:8c:cf:48:39:46:ed:d5:b2:e3:ed:de:46:73:9b:e9:7f:a8: 9a:16:b3:30:41:1a:ad:19:59:18:1c:8c:1f:a5:bf:9a:29:ff: 3f:30:cc:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj96VrGpJ6tUuabU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyNDE4NTYzNVoXDTI1MDUyNTE3NTYzNVowLzEtMCsGA1UEAxMk YmYxNTY3YWEtZDhhZC00MTc3LThkODktNjY3ZWQ4ZTRhNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrz+Uk7q2z8U8LiQLlQ+Qe2hKT4vgreif2jB QTVMDvXzV7K5m4FquOy9QMeujljmWCaCIj7uPAInM1BFVyXIgrXDJapBdTdiF8+g PYcAVvz6lvTM/EM4niP+YHXGRkJ8khFVpkZSZCIpPBSoD1+3T/DPPKlFWpo2wv0Z 2ueWY460+fjwC1OWB2jRAIUXtcj831Sf7EKdqjOtL6ZC75uu7Tq2PtXvK9LpccBR 0kjzi9wCvxiv7mGqTlV0Hq3tGA57lFhp7Li962y4TkpUM0yThf7sbA/SoJBLmJyJ tX/mvRY726evdrmGse0yCDIg5L0BQ4Nf7UwS4CGr3hJNFrt1wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbrUfVHehOjxpiCZDzUlDToEcUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWE3YWEwNTYtOWE2NS0z MTkzLThiODYtNDk3NmFlOTQ1OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzbpMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJt3rOsa6qjLb5REESEWjGuJPWBXBS6WPeakbynBG4rhbgmiQrpbk+6b 1GLHNYpAEJyTGpmDcQlU8a69ka/MWio44JUKsq2wLwadmXl7nHiLcZVQuMWyrjuy 5tKZ53iX3lNX8NWLCzuk/5mS3hmwpt9OV/RagtOc9PWqVMs8TDITbvK6bQ8qZcco EAB+NJQFNpZfSKEeKQn4BRyuQ6vIBqCdykgdKvMHhKqT5KkM+P7jMFT71106Acvv lg/4WZCK/NZYsJmKs+FOgQsOx+zLRf5MOmuAXoX2i7uMz0g5Ru3VsuPt3kZzm+l/ qJoWszBBGq0ZWRgcjB+lv5op/z8wzCU= -----END CERTIFICATE-----Generated at Fri Apr 4 16:44:38 2025 by rpki-client