$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3c7c2961-8a03-3720-9395-0ed37fe9f383.roa File: 3c7c2961-8a03-3720-9395-0ed37fe9f383.roa (raw, json) Hash identifier: jdK6FadQizsOtInTu9HYKnzC+w47yI7XrbKVpncnLwc= Subject key identifier: 2A:3B:27:72:10:D9:A5:DE:80:80:38:00:3C:3A:82:76:2A:74:14:4A Certificate issuer: /CN=17c62883-899d-4b86-8800-e9715d10a482 Certificate serial: 010D0C9F432858490E16BB0CC66EE526468A8780 Authority key identifier: DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3c7c2961-8a03-3720-9395-0ed37fe9f383.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 26630 IP address blocks: 74.113.192.0/21 maxlen: 24 204.86.64.0/19 maxlen: 24 206.201.64.0/20 maxlen: 24 208.93.241.0/24 maxlen: 24 208.93.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:bb:0c:c6:6e:e5:26:46:8a:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c62883-899d-4b86-8800-e9715d10a482 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=02f219ec-0070-4ef1-afc8-38de5a558c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ae:63:5c:29:5b:d9:24:2c:91:1c:0d:3d:5c: c5:16:2e:44:6c:a8:26:0a:eb:16:1f:00:ff:2a:0f: 9b:45:f2:2d:68:aa:54:94:fd:18:f3:1a:38:cf:80: 7b:a3:24:c5:0f:19:ab:dc:55:ad:bb:80:f7:8c:e5: ed:66:52:50:e7:da:19:57:5d:d4:67:57:2e:4d:45: 34:59:df:81:58:f6:0d:77:b0:92:7f:67:c8:b1:0e: a9:0c:ad:b0:de:e4:1e:71:cc:91:71:42:62:93:0d: 4e:36:09:75:66:94:eb:53:49:c9:61:e2:8c:f7:b0: 93:9c:50:d7:d3:b6:c5:3c:1c:21:46:d8:55:67:f2: 8c:90:4e:4a:0e:7a:d0:51:84:68:de:cc:5f:01:07: 49:f1:e4:2f:1a:36:c6:2a:95:ff:b5:b2:3d:81:32: 0e:83:7d:89:fc:65:83:69:be:9d:bf:c7:bc:99:88: bc:e0:cf:36:bc:f8:69:be:06:d5:b9:be:fb:e0:68: 25:db:bc:ee:f1:de:13:b8:54:c8:f7:62:b1:1a:9d: c3:e6:69:eb:e7:bb:11:c8:7a:c6:30:e1:5d:61:2f: 4d:32:15:63:3a:76:94:b0:d0:69:d2:37:d5:ee:1b: 78:e2:7a:f8:f5:08:00:c8:03:16:87:3c:41:0a:62: b1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:27:72:10:D9:A5:DE:80:80:38:00:3C:3A:82:76:2A:74:14:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/3c7c2961-8a03-3720-9395-0ed37fe9f383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482/17c62883-899d-4b86-8800-e9715d10a482.crl X509v3 Authority Key Identifier: keyid:DD:14:89:9C:02:BD:D8:49:D4:24:A5:7B:68:88:74:B7:61:DD:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/17c62883-899d-4b86-8800-e9715d10a482.cer sbgp-ipAddrBlock: critical IPv4: 74.113.192.0/21 204.86.64.0/19 206.201.64.0/20 208.93.241.0-208.93.243.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d1:2f:1c:81:a7:6c:a0:01:7d:f9:16:7d:b8:a9:32:b2:13: 7b:d9:99:7f:bc:ea:cd:bb:37:e0:b6:b6:6f:26:d0:d7:e0:eb: e3:6c:c4:a4:42:94:c7:c1:0f:39:a6:10:51:39:c3:a5:0d:26: 96:bb:ee:3f:94:98:b9:21:14:3f:36:9c:ad:03:df:68:aa:66: 6b:bf:b8:f9:b7:77:a0:ae:15:f0:38:b8:14:46:72:d9:f4:d8: 60:fb:f0:f5:eb:85:1f:64:ef:c0:a5:63:0d:3e:62:09:f9:2e: cd:75:95:91:11:9c:5e:4b:b2:fe:35:41:0f:7e:81:4f:13:24: af:9d:21:b4:b0:34:94:1b:50:7b:5c:ca:d1:d1:ab:33:2c:3b: 60:dd:64:2f:04:e4:53:05:44:d4:08:4f:bb:26:40:c5:42:18: b6:a8:5c:7c:bd:4f:16:07:3e:d7:f5:c5:3a:f2:fc:11:e0:a4: c2:a1:a4:d6:ed:24:64:bd:b1:44:ef:ce:70:8a:ed:56:9f:93: 6a:85:32:83:5d:cc:88:48:40:28:91:2d:d9:ef:c0:49:33:9c: f1:a8:8c:16:ab:fe:a2:94:1a:41:b6:5d:f3:05:17:ae:fd:a9: 66:fa:ae:2d:74:22:a4:ab:f4:9b:8d:23:33:ca:57:e0:3e:2e: 47:81:af:dd -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEkOFrsMxm7lJkaKh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjNjI4ODMtODk5ZC00Yjg2LTg4MDAtZTk3MTVkMTBh NDgyMB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk MDJmMjE5ZWMtMDA3MC00ZWYxLWFmYzgtMzhkZTVhNTU4YzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh65jXClb2SQskRwNPVzFFi5EbKgmCusWHwD/ Kg+bRfItaKpUlP0Y8xo4z4B7oyTFDxmr3FWtu4D3jOXtZlJQ59oZV13UZ1cuTUU0 Wd+BWPYNd7CSf2fIsQ6pDK2w3uQeccyRcUJikw1ONgl1ZpTrU0nJYeKM97CTnFDX 07bFPBwhRthVZ/KMkE5KDnrQUYRo3sxfAQdJ8eQvGjbGKpX/tbI9gTIOg32J/GWD ab6dv8e8mYi84M82vPhpvgbVub774Ggl27zu8d4TuFTI92KxGp3D5mnr57sRyHrG MOFdYS9NMhVjOnaUsNBp0jfV7ht44nr49QgAyAMWhzxBCmKxKwIDAQABo4IDbzCC A2swHQYDVR0OBBYEFCo7J3IQ2aXegIA4ADw6gnYqdBRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2 Mjg4My04OTlkLTRiODYtODgwMC1lOTcxNWQxMGE0ODIvM2M3YzI5NjEtOGEwMy0z NzIwLTkzOTUtMGVkMzdmZTlmMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTdjNjI4ODMtODk5ZC00Yjg2LTg4 MDAtZTk3MTVkMTBhNDgyLzE3YzYyODgzLTg5OWQtNGI4Ni04ODAwLWU5NzE1ZDEw YTQ4Mi5jcmwwHwYDVR0jBBgwFoAU3RSJnAK92EnUJKV7aIh0t2HdE4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xN2M2Mjg4My04OTlkLTRiODYtODgwMC1lOTcx NWQxMGE0ODIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDSnHAAwQF zFZAAwQEzslAMAwDBADQXfEDBALQXfAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACdEvHIGnbKABffkWfbip MrITe9mZf7zqzbs34La2bybQ1+Dr42zEpEKUx8EPOaYQUTnDpQ0mlrvuP5SYuSEU PzacrQPfaKpma7+4+bd3oK4V8Di4FEZy2fTYYPvw9euFH2TvwKVjDT5iCfkuzXWV kRGcXkuy/jVBD36BTxMkr50htLA0lBtQe1zK0dGrMyw7YN1kLwTkUwVE1AhPuyZA xUIYtqhcfL1PFgc+1/XFOvL8EeCkwqGk1u0kZL2xRO/OcIrtVp+TaoUyg13MiEhA KJEt2e/ASTOc8aiMFqv+opQaQbZd8wUXrv2pZvquLXQipKv0m40jM8pX4D4uR4Gv 3Q== -----END CERTIFICATE-----Generated at Fri Apr 11 21:53:30 2025 by rpki-client