$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa File: 8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa (raw, json) Hash identifier: peLkHC7wb0FavzAjdzl/MjB93J8mtqO6sJq+DqHrFtU= Subject key identifier: CE:59:DD:7E:67:D7:64:AC:6C:D7:C3:00:EE:24:3F:3E:7B:C7:3B:59 Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F432858495ABEBEFF0C48DA8F42651B80 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 32098 IP address blocks: 204.199.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:be:ff:0c:48:da:8f:42:65:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=5d855afe-1409-4676-9a9d-e6afd24a5d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:66:25:5d:0a:a5:9e:38:f2:7b:d3:7c:a0: 0b:be:ce:19:db:95:06:fc:c6:df:d5:30:1e:9b:37: 86:d7:2f:5d:f6:16:e8:1c:31:34:67:20:86:45:07: a9:9c:32:48:89:46:f6:25:7b:e2:60:8b:cc:91:de: 26:e9:32:f8:6b:0f:e3:7d:f6:d4:1c:fa:76:09:fb: 0f:f3:7f:ff:68:25:76:58:68:c6:f9:24:ae:1b:59: cd:fc:60:60:30:72:81:4d:10:d9:ed:33:13:5f:69: d2:02:81:7f:6c:85:2f:33:62:4b:78:85:69:69:52: e1:a2:c1:1d:11:e4:19:b7:a6:6b:5f:fb:0f:c5:b7: c7:7e:10:32:93:79:32:54:7a:90:84:02:4d:8f:8b: 4c:87:68:a2:12:67:12:03:8d:fc:65:04:13:c1:92: 07:3b:cb:f7:e7:82:2a:61:4e:b7:0e:9a:0d:3b:20: a3:fa:e9:da:4c:9a:53:01:eb:0c:eb:f7:38:be:95: 93:27:87:4e:4a:e3:00:77:27:76:a7:e4:06:44:47: 5d:ba:60:03:8a:3b:29:d0:95:b2:52:65:c5:70:ca: a2:e2:ad:2c:08:30:4a:97:da:94:59:51:3d:56:01: f7:e4:85:c1:fd:63:75:f8:29:c1:cb:8e:fe:47:f3: 69:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:59:DD:7E:67:D7:64:AC:6C:D7:C3:00:EE:24:3F:3E:7B:C7:3B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/8e05f5b3-6798-30cc-9a8c-a46833e7f0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 204.199.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7b:5a:48:97:23:23:af:75:49:a5:28:0a:8e:82:62:5e:74: 3a:cf:eb:21:0b:98:07:20:13:53:91:6f:4f:65:13:7a:bf:d7: 82:55:de:64:18:22:f4:df:82:71:35:af:5d:3f:b8:3e:ed:b6: 82:81:a3:8d:08:96:a5:07:93:e8:04:1e:12:54:e0:f0:1b:18: 1c:08:4f:e5:c9:62:04:8e:f6:cf:5d:e2:24:46:74:38:c6:0e: 46:18:b5:f3:10:4a:3f:9a:da:4f:4d:64:b4:ee:f3:f9:10:7b: 3c:a4:5b:d7:a7:7f:02:3f:6a:d7:d8:67:b9:67:7a:77:7e:d0: 89:ed:18:a9:f4:a0:7d:ee:91:7b:e9:c2:0e:ff:18:c3:8d:4a: 5f:48:eb:35:3a:f8:6d:c3:29:85:12:68:18:28:19:2e:02:27: 89:a3:fe:f2:94:08:79:7e:f1:2e:01:e7:a6:31:9d:a6:a3:ae: b7:52:f3:bc:4a:ab:b6:bd:39:23:6d:02:9b:1a:6b:d0:a6:59: 04:0a:d1:91:b3:bd:19:54:66:e5:23:02:52:90:4c:10:68:4d: 37:61:63:5f:da:2d:4e:29:c3:15:b1:e8:86:be:d8:e9:54:bc: c4:b8:3d:95:27:9e:56:a8:75:e1:25:6b:8b:30:2b:b9:7c:f5: c2:77:2e:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavr7/DEjaj0JlG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk NWQ4NTVhZmUtMTQwOS00Njc2LTlhOWQtZTZhZmQyNGE1ZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscJmJV0KpZ448nvTfKALvs4Z25UG/Mbf1TAe mzeG1y9d9hboHDE0ZyCGRQepnDJIiUb2JXviYIvMkd4m6TL4aw/jffbUHPp2CfsP 83//aCV2WGjG+SSuG1nN/GBgMHKBTRDZ7TMTX2nSAoF/bIUvM2JLeIVpaVLhosEd EeQZt6ZrX/sPxbfHfhAyk3kyVHqQhAJNj4tMh2iiEmcSA438ZQQTwZIHO8v354Iq YU63DpoNOyCj+unaTJpTAesM6/c4vpWTJ4dOSuMAdyd2p+QGREddumADijsp0JWy UmXFcMqi4q0sCDBKl9qUWVE9VgH35IXB/WN1+CnBy47+R/NpHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5Z3X5n12SsbNfDAO4kPz57xztZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvOGUwNWY1YjMtNjc5OC0z MGNjLTlhOGMtYTQ2ODMzZTdmMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA57WkiXIyOvdUmlKAqOgmJedDrP6yELmAcgE1ORb09lE3q/14JV3mQY IvTfgnE1r10/uD7ttoKBo40IlqUHk+gEHhJU4PAbGBwIT+XJYgSO9s9d4iRGdDjG DkYYtfMQSj+a2k9NZLTu8/kQezykW9enfwI/atfYZ7lnend+0IntGKn0oH3ukXvp wg7/GMONSl9I6zU6+G3DKYUSaBgoGS4CJ4mj/vKUCHl+8S4B56YxnaajrrdS87xK q7a9OSNtApsaa9CmWQQK0ZGzvRlUZuUjAlKQTBBoTTdhY1/aLU4pwxWx6Ia+2OlU vMS4PZUnnlaodeEla4swK7l89cJ3LkA= -----END CERTIFICATE-----Generated at Thu Apr 17 12:45:55 2025 by rpki-client