$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/de98df6b-6564-3a5b-810b-1d3750e05855.roa File: de98df6b-6564-3a5b-810b-1d3750e05855.roa (raw, json) Hash identifier: y7RZJdEZLtmsWI3ZhPMNnulXaiEvHtutEmUFwkUvEyE= Subject key identifier: C5:7E:42:FE:51:B6:8D:68:3F:A8:33:C6:9D:D7:8E:11:6F:71:42:2E Certificate issuer: /CN=c6830b98-b6ce-461c-8849-244186a13d62 Certificate serial: 010D0C9F432858492CAE91DAC6EED837D4C01240 Authority key identifier: F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/de98df6b-6564-3a5b-810b-1d3750e05855.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 7018 IP address blocks: 208.73.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:ae:91:da:c6:ee:d8:37:d4:c0:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6830b98-b6ce-461c-8849-244186a13d62 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=f365764b-a569-449c-87b0-c095753d2987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:79:7d:ef:9d:ee:fa:c5:22:a5:09:0f:c9:ad: 05:d4:7f:11:d5:82:62:37:9f:ad:9c:14:47:5d:36: 71:28:95:fe:bf:86:06:a4:69:98:ce:b9:d9:55:65: ca:0d:3d:ec:8a:a9:5d:eb:d5:be:72:94:94:c6:8b: ff:f3:78:76:43:e7:ff:f7:39:1a:7f:5c:c4:f4:07: c6:cd:74:37:e1:b7:4e:b5:0c:a6:4f:45:98:98:2d: 4b:0d:c5:b7:15:88:1c:bc:02:4b:7c:04:9a:47:ae: 28:2c:ba:2a:c1:a4:65:55:76:88:b8:56:fb:0d:c1: f3:f5:fc:42:cb:03:a0:18:d8:c6:ec:19:38:a4:c1: 69:89:e1:9b:51:b1:7f:ad:e3:b5:86:4a:e9:87:61: 7a:43:c1:d7:0c:7e:14:91:87:54:65:e5:5a:0b:4a: 82:d9:d7:3d:b1:8c:82:f1:58:ce:9f:9b:81:2c:3b: 72:6d:b1:46:1d:c4:75:0d:03:9e:01:0a:b2:e9:4d: ba:c1:d1:b8:ba:b1:64:b9:2b:6d:80:c6:e1:59:f2: a0:fa:39:b0:ad:ba:65:91:6a:dd:cb:7d:0a:4b:73: e4:f9:9d:b8:18:a7:5a:92:e6:ee:c3:58:e5:f1:b7: 2e:a2:69:fc:f0:18:2b:f4:d6:c7:79:bf:52:fe:a5: c1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:7E:42:FE:51:B6:8D:68:3F:A8:33:C6:9D:D7:8E:11:6F:71:42:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/de98df6b-6564-3a5b-810b-1d3750e05855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl X509v3 Authority Key Identifier: keyid:F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer sbgp-ipAddrBlock: critical IPv4: 208.73.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f3:d6:0d:3b:82:2f:85:15:57:16:68:fc:48:40:b5:8b:98: 23:8f:86:5a:3b:7c:bb:59:77:3d:9f:03:c1:56:fa:79:f1:66: 86:d7:56:8a:18:b6:5a:72:d8:fa:7b:cb:81:61:1f:b6:02:bd: f9:ec:85:2b:37:81:1b:31:e1:bf:7e:28:22:c9:c7:c2:f7:fa: 29:3a:6a:11:db:7a:65:3c:a6:b3:25:4e:36:ad:a9:9e:3b:d6: 67:8c:08:6e:53:72:34:11:fd:30:47:96:d1:92:5c:ac:0d:3f: be:9a:38:3e:f5:21:e2:52:4e:93:be:e7:a7:ee:9c:49:01:f3: 52:60:00:b1:8b:05:b8:cd:58:db:32:39:82:20:9c:60:fd:cf: 75:ef:06:5c:d9:cc:af:cb:a7:3e:86:2f:26:17:da:22:4a:5f: c5:0f:59:f5:da:c4:b9:f0:e9:7e:6f:7c:a4:cc:02:28:cc:02: f0:ad:1f:6b:e0:eb:48:41:07:b8:00:23:94:e6:3f:29:e0:e4: 09:ec:fa:6f:d9:19:c9:7a:0a:aa:3b:24:db:c7:2d:f9:4f:14: bc:93:13:b2:50:dd:48:ae:e8:97:b0:7f:5c:e8:95:f4:61:91: 06:f3:16:4a:54:73:e3:61:34:92:bc:4f:4a:82:55:c5:30:63: ce:ce:e2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrpHaxu7YN9TAEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4MzBiOTgtYjZjZS00NjFjLTg4NDktMjQ0MTg2YTEz ZDYyMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZjM2NTc2NGItYTU2OS00NDljLTg3YjAtYzA5NTc1M2QyOTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXl9753u+sUipQkPya0F1H8R1YJiN5+tnBRH XTZxKJX+v4YGpGmYzrnZVWXKDT3siqld69W+cpSUxov/83h2Q+f/9zkaf1zE9AfG zXQ34bdOtQymT0WYmC1LDcW3FYgcvAJLfASaR64oLLoqwaRlVXaIuFb7DcHz9fxC ywOgGNjG7Bk4pMFpieGbUbF/reO1hkrph2F6Q8HXDH4UkYdUZeVaC0qC2dc9sYyC 8VjOn5uBLDtybbFGHcR1DQOeAQqy6U26wdG4urFkuSttgMbhWfKg+jmwrbplkWrd y30KS3Pk+Z24GKdakubuw1jl8bcuomn88Bgr9NbHeb9S/qXBEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV+Qv5Rto1oP6gzxp3XjhFvcUIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjgz MGI5OC1iNmNlLTQ2MWMtODg0OS0yNDQxODZhMTNkNjIvZGU5OGRmNmItNjU2NC0z YTViLTgxMGItMWQzNzUwZTA1ODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY4MzBiOTgtYjZjZS00NjFjLTg4 NDktMjQ0MTg2YTEzZDYyL2M2ODMwYjk4LWI2Y2UtNDYxYy04ODQ5LTI0NDE4NmEx M2Q2Mi5jcmwwHwYDVR0jBBgwFoAU8p8AtuS/dgVqAAUuhXTk+e6bacwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjgzMGI5OC1iNmNlLTQ2MWMtODg0OS0yNDQx ODZhMTNkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbz1g07gi+FFVcWaPxIQLWLmCOPhlo7fLtZdz2fA8FW+nnxZobXVooY tlpy2Pp7y4FhH7YCvfnshSs3gRsx4b9+KCLJx8L3+ik6ahHbemU8prMlTjatqZ47 1meMCG5TcjQR/TBHltGSXKwNP76aOD71IeJSTpO+56funEkB81JgALGLBbjNWNsy OYIgnGD9z3XvBlzZzK/Lpz6GLyYX2iJKX8UPWfXaxLnw6X5vfKTMAijMAvCtH2vg 60hBB7gAI5TmPyng5Ans+m/ZGcl6Cqo7JNvHLflPFLyTE7JQ3Uiu6Jewf1zolfRh kQbzFkpUc+NhNJK8T0qCVcUwY87O4ss= -----END CERTIFICATE-----Generated at Fri Mar 14 11:28:49 2025 by rpki-client