$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa File: cec05261-0f78-3265-830a-98a87b1c4a62.roa (raw, json) Hash identifier: +mt8K1um9+lgzka3frEiC+6YPXH83w3tZR+MDafR0q4= Subject key identifier: 92:DF:E1:8F:0E:35:26:8B:62:09:42:B0:57:6C:2B:A7:E0:72:F6:93 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F432858496CE455E0B1BCA97F352C0480 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 27602 IP address blocks: 204.48.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:55:e0:b1:bc:a9:7f:35:2c:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=51b9eab0-3014-4b9e-aaec-9c080def8b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:f0:e1:6f:43:60:ad:8a:59:3c:11:35:ee: 79:93:ae:1d:e9:60:40:1d:66:cc:fd:6d:85:91:80: 12:b8:c2:d5:13:37:03:f0:92:eb:ab:b6:84:bd:48: 70:be:7d:83:8b:3d:dd:23:3b:37:82:eb:cb:77:08: 4e:3c:eb:ac:e0:a6:9e:8f:dd:83:2a:13:57:83:c7: ce:b1:66:1b:1b:99:64:c3:e2:62:93:80:5b:8b:bc: 65:18:20:4c:36:c0:3f:e8:99:5a:bf:ee:1c:28:24: c0:b1:33:4a:3e:63:5a:f4:19:65:5a:d8:c6:24:ce: f4:93:0b:fe:4c:47:5c:02:95:0b:86:ab:af:a8:f2: ba:66:1d:ad:5a:b2:b5:97:f6:79:82:c7:00:a8:92: 22:e6:97:7a:e9:3c:22:82:4d:72:cf:83:2d:ad:a0: a0:78:a3:65:71:50:d3:07:75:8d:01:20:33:f0:45: 03:d9:a1:24:e6:a7:51:2d:c4:79:bb:6f:3d:f4:99: f9:f0:a3:8b:02:e1:e2:c4:ca:16:99:93:14:f6:ee: e2:ac:2c:ae:ac:da:2c:0c:3c:00:5a:15:06:9e:b0: 09:df:f8:dd:98:e2:ee:0f:b0:2b:ce:d4:d5:1f:a7: 43:53:7a:a0:d7:93:1a:5f:23:47:ba:71:4b:9e:fc: bd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DF:E1:8F:0E:35:26:8B:62:09:42:B0:57:6C:2B:A7:E0:72:F6:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cec05261-0f78-3265-830a-98a87b1c4a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 204.48.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4b:14:87:ea:4d:84:0b:26:ab:8e:a6:b3:88:c1:e6:cb:17: ef:17:9b:dc:57:86:de:02:21:0e:39:db:bc:32:f2:40:fc:36: ba:61:36:b7:aa:7d:21:e0:d3:dd:eb:f1:fd:5a:69:09:2f:d0: ec:c6:bd:c4:e2:b8:b7:f2:fe:51:7f:74:f4:16:2d:33:fb:ba: 0c:34:96:de:e0:70:c1:4f:17:34:76:fc:73:1b:82:f8:b9:69: 5f:ef:dd:5d:bb:52:a4:ea:7b:26:e6:50:4d:36:7c:3f:b9:c5: 0d:15:3f:34:2d:2f:04:71:98:59:3c:22:9d:0f:8a:c5:59:19: 18:ab:63:5f:e3:99:ba:3a:92:88:22:62:6d:3d:84:76:66:9d: ea:a9:19:4a:aa:ed:81:d9:70:c1:07:22:d2:a7:94:d0:40:7f: 3f:80:a6:76:2f:55:31:d7:00:63:b3:87:23:0e:c8:ed:76:af: 9c:24:7e:5e:6e:f4:29:4e:d5:ec:14:28:6d:36:b3:26:70:a6: dc:f7:2a:51:dc:d7:93:59:71:ad:4e:f3:9e:44:91:96:08:4a: 48:ae:55:a1:02:b9:71:b2:61:9c:c8:bd:09:5c:c2:31:12:55: f7:e1:06:7d:28:70:85:52:46:eb:66:7c:a6:3e:8a:e3:4b:29: 2a:b9:13:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FXgsbypfzUsBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk NTFiOWVhYjAtMzAxNC00YjllLWFhZWMtOWMwODBkZWY4YjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwzw4W9DYK2KWTwRNe55k64d6WBAHWbM/W2F kYASuMLVEzcD8JLrq7aEvUhwvn2Diz3dIzs3guvLdwhOPOus4Kaej92DKhNXg8fO sWYbG5lkw+Jik4Bbi7xlGCBMNsA/6Jlav+4cKCTAsTNKPmNa9BllWtjGJM70kwv+ TEdcApULhquvqPK6Zh2tWrK1l/Z5gscAqJIi5pd66Twigk1yz4MtraCgeKNlcVDT B3WNASAz8EUD2aEk5qdRLcR5u2899Jn58KOLAuHixMoWmZMU9u7irCyurNosDDwA WhUGnrAJ3/jdmOLuD7ArztTVH6dDU3qg15MaXyNHunFLnvy9cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLf4Y8ONSaLYglCsFdsK6fgcvaTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VjMDUyNjEtMGY3OC0z MjY1LTgzMGEtOThhODdiMWM0YTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzDAjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElLFIfqTYQLJquOprOIwebLF+8Xm9xXht4CIQ4527wy8kD8NrphNreq fSHg093r8f1aaQkv0OzGvcTiuLfy/lF/dPQWLTP7ugw0lt7gcMFPFzR2/HMbgvi5 aV/v3V27UqTqeybmUE02fD+5xQ0VPzQtLwRxmFk8Ip0PisVZGRirY1/jmbo6kogi Ym09hHZmneqpGUqq7YHZcMEHItKnlNBAfz+ApnYvVTHXAGOzhyMOyO12r5wkfl5u 9ClO1ewUKG02syZwptz3KlHc15NZca1O855EkZYISkiuVaECuXGyYZzIvQlcwjES VffhBn0ocIVSRutmfKY+iuNLKSq5E2s= -----END CERTIFICATE-----Generated at Mon Apr 7 12:06:29 2025 by rpki-client