$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/af52f7c8-d301-3e10-ac13-22863d68b38e.roa File: af52f7c8-d301-3e10-ac13-22863d68b38e.roa (raw, json) Hash identifier: c3rMnpI6vC128WxgtbVhANp2IZkY8IfW9jAOPLA/31M= Subject key identifier: BD:F8:F4:3E:B9:E6:8F:C9:C4:48:D6:DC:16:90:7E:F3:75:F4:32:0A Certificate issuer: /CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Certificate serial: 010D0C9F4328584973DEDCC33B30C671E9959AE0 Authority key identifier: 23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/af52f7c8-d301-3e10-ac13-22863d68b38e.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 401612 IP address blocks: 205.189.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:dc:c3:3b:30:c6:71:e9:95:9a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bfb29d-57a4-49c6-aa85-4892c1f69c48 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=99971fc8-7294-4dfb-8401-394ac466a43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:c9:dc:00:fa:03:28:13:72:b9:56:42:e3: d8:58:86:77:e6:28:b9:16:a7:18:8f:af:e7:37:ac: 87:36:05:b2:27:02:89:58:ed:2e:7a:0e:f7:37:df: 24:c2:07:9d:74:f0:0d:c6:17:fb:fd:2b:2b:76:28: f2:a4:20:bc:45:0c:54:2a:49:36:c5:88:b9:d1:b9: 3f:dd:14:f3:26:6c:29:b1:fe:9c:94:a3:fe:6c:9b: 43:ad:e2:14:02:6d:b4:2c:e2:21:c8:25:f5:1b:65: 9a:2f:8e:e3:31:36:61:13:df:62:32:27:a3:5c:fb: 3a:c0:bc:af:b0:cd:e3:db:60:95:f4:f8:2f:69:38: 65:f5:8d:a6:0e:58:28:fc:3a:1a:f0:db:3b:fb:e2: e8:d6:20:08:0d:d7:e5:48:a4:30:91:86:23:99:d7: b5:10:cd:6d:5c:54:9a:57:71:f3:d2:79:de:3d:73: 52:2c:dd:d9:f2:35:8c:ab:11:7b:b5:be:a9:6f:e0: f3:66:ee:02:a2:a2:81:b4:96:ae:eb:c4:6b:c4:04: 8c:fd:79:62:75:0c:68:9d:a9:7d:44:91:fa:9e:87: bd:3b:a7:35:a0:84:95:8a:39:63:8e:27:a4:b9:ca: 56:66:ce:94:6c:cf:11:fa:70:04:24:bd:fc:73:30: ee:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F8:F4:3E:B9:E6:8F:C9:C4:48:D6:DC:16:90:7E:F3:75:F4:32:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/af52f7c8-d301-3e10-ac13-22863d68b38e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48/03bfb29d-57a4-49c6-aa85-4892c1f69c48.crl X509v3 Authority Key Identifier: keyid:23:6E:01:BF:B2:7A:54:FB:0E:89:DC:5F:28:3B:E1:D5:F6:57:11:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03bfb29d-57a4-49c6-aa85-4892c1f69c48.cer sbgp-ipAddrBlock: critical IPv4: 205.189.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e1:1c:91:3f:d8:97:75:a6:fc:cc:eb:61:c1:b5:75:54:f7: 83:81:73:c1:07:3b:e7:e4:11:fa:3c:ad:6c:40:6a:47:4c:6b: 92:5f:1c:b1:32:02:6e:51:ad:cd:e0:a1:f3:0c:06:3a:20:c5: b6:11:16:ff:41:e2:b2:8e:52:e2:bc:73:09:7e:93:05:ff:04: f7:e6:79:30:9c:a4:1e:1c:80:f7:e4:f7:6d:25:af:99:22:8b: 41:de:82:c4:19:ac:ed:3f:70:e3:1c:84:89:0e:0a:97:70:80: 08:60:7c:a6:a8:e5:d6:02:c8:bd:e7:4c:30:3e:db:ba:dc:d5: 8b:74:f8:04:5b:f3:18:26:3c:f8:37:f2:ad:53:49:2d:07:d9: 7b:76:15:9b:44:c9:0d:5b:53:07:c4:cb:80:11:8b:c8:bc:7b: f9:d3:e0:5a:3d:14:6c:5c:2e:2d:8e:0d:59:02:f7:e4:79:bb: 35:f4:32:37:c4:6f:98:3e:38:1f:a2:2d:30:69:20:76:64:a5: e2:5c:1f:7c:52:87:a4:57:e4:1c:ee:c8:4c:eb:bb:83:ea:66: 44:65:f1:d6:d1:53:e7:3b:37:7a:db:50:b4:fc:9d:1f:7e:54: 58:c0:75:ba:8d:55:7a:53:1e:14:b9:0f:f0:17:29:8b:03:5f: 0e:aa:41:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3tzDOzDGcemVmuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZmIyOWQtNTdhNC00OWM2LWFhODUtNDg5MmMxZjY5 YzQ4MB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk OTk5NzFmYzgtNzI5NC00ZGZiLTg0MDEtMzk0YWM0NjZhNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojbJ3AD6AygTcrlWQuPYWIZ35ii5FqcYj6/n N6yHNgWyJwKJWO0ueg73N98kwgeddPANxhf7/SsrdijypCC8RQxUKkk2xYi50bk/ 3RTzJmwpsf6clKP+bJtDreIUAm20LOIhyCX1G2WaL47jMTZhE99iMiejXPs6wLyv sM3j22CV9PgvaThl9Y2mDlgo/Doa8Ns7++Lo1iAIDdflSKQwkYYjmde1EM1tXFSa V3Hz0nnePXNSLN3Z8jWMqxF7tb6pb+DzZu4CoqKBtJau68RrxASM/XlidQxonal9 RJH6noe9O6c1oISVijljjiekucpWZs6UbM8R+nAEJL38czDubwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL349D655o/JxEjW3BaQfvN19DIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wM2Jm YjI5ZC01N2E0LTQ5YzYtYWE4NS00ODkyYzFmNjljNDgvYWY1MmY3YzgtZDMwMS0z ZTEwLWFjMTMtMjI4NjNkNjhiMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDNiZmIyOWQtNTdhNC00OWM2LWFh ODUtNDg5MmMxZjY5YzQ4LzAzYmZiMjlkLTU3YTQtNDljNi1hYTg1LTQ4OTJjMWY2 OWM0OC5jcmwwHwYDVR0jBBgwFoAUI24Bv7J6VPsOidxfKDvh1fZXEYkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wM2JmYjI5ZC01N2E0LTQ5YzYtYWE4NS00ODky YzFmNjljNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzb3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDhHJE/2Jd1pvzM62HBtXVU94OBc8EHO+fkEfo8rWxAakdMa5JfHLEy Am5Rrc3gofMMBjogxbYRFv9B4rKOUuK8cwl+kwX/BPfmeTCcpB4cgPfk920lr5ki i0HegsQZrO0/cOMchIkOCpdwgAhgfKao5dYCyL3nTDA+27rc1Yt0+ARb8xgmPPg3 8q1TSS0H2Xt2FZtEyQ1bUwfEy4ARi8i8e/nT4Fo9FGxcLi2ODVkC9+R5uzX0MjfE b5g+OB+iLTBpIHZkpeJcH3xSh6RX5BzuyEzru4PqZkRl8dbRU+c7N3rbULT8nR9+ VFjAdbqNVXpTHhS5D/AXKYsDXw6qQeQ= -----END CERTIFICATE-----Generated at Fri Apr 11 23:49:49 2025 by rpki-client