$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/8cc7d26a-793d-3064-848e-1c2d02982b8b.roa File: 8cc7d26a-793d-3064-848e-1c2d02982b8b.roa (raw, json) Hash identifier: XpOY7cphdWxDkVIqVEXBBjuUtKPAidUm9fCypLPkW7o= Subject key identifier: F6:B7:36:21:26:7C:CC:48:04:AC:53:A1:D9:51:F9:5C:02:AB:A7:BC Certificate issuer: /CN=d51877be-b85b-4cf7-ae49-18c7da88238f Certificate serial: 010D0C9F432858487B85B2C50BE9709952567CC0 Authority key identifier: 76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/8cc7d26a-793d-3064-848e-1c2d02982b8b.roa Signing time: Thu 09 Jan 2025 02:00:40 +0000 ROA not before: Thu 09 Jan 2025 02:00:40 +0000 ROA not after: Wed 09 Apr 2025 01:00:40 +0000 asID: 8360 IP address blocks: 205.167.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Mar 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7b:85:b2:c5:0b:e9:70:99:52:56:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d51877be-b85b-4cf7-ae49-18c7da88238f Validity Not Before: Jan 9 02:00:40 2025 GMT Not After : Apr 9 01:00:40 2025 GMT Subject: CN=af265fad-0e50-48a2-a290-65e38cd3e8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:c1:d9:95:af:ca:64:51:2c:43:3d:67:67: 98:39:84:6a:cb:ad:98:d6:94:07:37:64:27:1a:eb: 12:a6:ed:aa:50:ba:1f:6a:8d:d1:28:42:78:cc:cf: e3:e1:a0:04:17:c3:61:ed:76:63:6e:59:67:a9:45: e2:7f:bd:e3:f1:a7:d9:2f:92:75:19:74:59:98:68: 20:3d:eb:e1:0d:cf:c5:55:8e:1e:33:31:9a:96:38: 37:52:e1:b1:ff:ff:ec:44:b5:e5:53:e5:fd:69:e1: b1:59:1d:0b:7f:0a:5f:cc:df:28:ca:9c:02:1e:9c: d8:50:ee:da:b1:7c:3c:3f:e5:ff:a6:26:e3:7f:ad: 11:35:7f:38:15:4a:d8:27:82:fd:fb:5f:49:65:c9: 01:7a:d1:ce:f8:fc:a9:63:11:48:ba:3c:60:66:e8: 33:1d:6f:3b:35:e4:bc:6c:18:b9:d7:f7:36:1a:53: f5:a0:55:91:92:dc:b7:3f:9f:5c:bc:53:ed:c1:4b: 1b:58:9d:6a:74:84:aa:90:cd:17:19:c3:74:d6:5c: 90:16:eb:6f:a7:a5:70:9e:89:0e:80:3b:0e:b1:1c: 1c:0e:7d:d7:39:44:77:11:4a:2c:9c:aa:06:88:d4: 8d:24:11:d3:07:ee:fc:49:c6:41:c3:31:ef:2c:4a: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B7:36:21:26:7C:CC:48:04:AC:53:A1:D9:51:F9:5C:02:AB:A7:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/8cc7d26a-793d-3064-848e-1c2d02982b8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.crl X509v3 Authority Key Identifier: keyid:76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer sbgp-ipAddrBlock: critical IPv4: 205.167.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:07:a9:b7:98:40:7d:1a:8b:ac:36:03:1d:04:c6:f2:9e:1c: b3:a2:37:d1:3b:9b:52:b3:2d:5a:4b:8d:2a:41:8f:a1:96:e9: d4:40:e5:01:6a:5d:51:d1:c7:40:5d:93:f7:24:45:43:8b:ea: 70:09:1f:6a:5f:57:99:4e:92:75:a6:c9:bd:8c:c0:92:4a:b4: df:3e:83:0b:f5:d6:a8:97:f0:9b:4e:42:e4:a5:37:cc:40:0d: 8e:ef:89:a4:4f:c1:30:7d:26:5e:c0:2e:9f:9d:95:83:11:0b: ef:4f:32:06:f9:c5:ca:b2:ea:04:aa:f0:1a:a5:62:8e:61:5f: b3:2c:d2:40:62:ff:8e:10:d2:73:e9:d9:42:fd:77:ac:0a:73: 3b:0d:17:86:26:3a:d7:a5:50:3b:96:12:8f:a1:c3:92:be:10: e4:c1:e3:a0:82:e6:c8:28:e5:53:d6:5b:1b:84:72:30:dc:04: 31:24:ee:63:e7:77:69:8e:13:82:4a:a1:70:44:7c:c8:cc:b1: e5:70:aa:43:7c:cf:04:93:2b:6a:80:c7:73:df:e1:8a:24:43: 59:ab:a1:45:c2:72:1b:dc:e8:e3:c8:4a:a2:4b:d3:d3:8d:8e: 72:bf:6e:ce:32:eb:80:ec:ea:89:ad:ef:44:03:58:b4:3e:a1: 3f:a0:8d:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh7hbLFC+lwmVJWfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDUxODc3YmUtYjg1Yi00Y2Y3LWFlNDktMThjN2RhODgy MzhmMB4XDTI1MDEwOTAyMDA0MFoXDTI1MDQwOTAxMDA0MFowLzEtMCsGA1UEAxMk YWYyNjVmYWQtMGU1MC00OGEyLWEyOTAtNjVlMzhjZDNlOGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFTB2ZWvymRRLEM9Z2eYOYRqy62Y1pQHN2Qn GusSpu2qULofao3RKEJ4zM/j4aAEF8Nh7XZjbllnqUXif73j8afZL5J1GXRZmGgg PevhDc/FVY4eMzGaljg3UuGx///sRLXlU+X9aeGxWR0LfwpfzN8oypwCHpzYUO7a sXw8P+X/pibjf60RNX84FUrYJ4L9+19JZckBetHO+PypYxFIujxgZugzHW87NeS8 bBi51/c2GlP1oFWRkty3P59cvFPtwUsbWJ1qdISqkM0XGcN01lyQFutvp6VwnokO gDsOsRwcDn3XOUR3EUosnKoGiNSNJBHTB+78ScZBwzHvLEpjhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa3NiEmfMxIBKxTodlR+VwCq6e8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNTE4 NzdiZS1iODViLTRjZjctYWU0OS0xOGM3ZGE4ODIzOGYvOGNjN2QyNmEtNzkzZC0z MDY0LTg0OGUtMWMyZDAyOTgyYjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDUxODc3YmUtYjg1Yi00Y2Y3LWFl NDktMThjN2RhODgyMzhmL2Q1MTg3N2JlLWI4NWItNGNmNy1hZTQ5LTE4YzdkYTg4 MjM4Zi5jcmwwHwYDVR0jBBgwFoAUdvYfPPeVIfUqbCZ/OMEyPdR+PJcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kNTE4NzdiZS1iODViLTRjZjctYWU0OS0xOGM3 ZGE4ODIzOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzadHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYHqbeYQH0ai6w2Ax0ExvKeHLOiN9E7m1KzLVpLjSpBj6GW6dRA5QFq XVHRx0Bdk/ckRUOL6nAJH2pfV5lOknWmyb2MwJJKtN8+gwv11qiX8JtOQuSlN8xA DY7viaRPwTB9Jl7ALp+dlYMRC+9PMgb5xcqy6gSq8BqlYo5hX7Ms0kBi/44Q0nPp 2UL9d6wKczsNF4YmOtelUDuWEo+hw5K+EOTB46CC5sgo5VPWWxuEcjDcBDEk7mPn d2mOE4JKoXBEfMjMseVwqkN8zwSTK2qAx3Pf4YokQ1mroUXCchvc6OPISqJL09ON jnK/bs4y64Ds6omt70QDWLQ+oT+gjVc= -----END CERTIFICATE-----Generated at Wed Mar 26 21:59:44 2025 by rpki-client