$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/be1d82ad-92ed-344f-a01e-a8a8a392094f.roa File: be1d82ad-92ed-344f-a01e-a8a8a392094f.roa (raw, json) Hash identifier: VD1x2DuSgunfYRBNs0aBhTMoxfg1eh4W5vct6hcGW4c= Subject key identifier: 7C:F7:B3:5D:0F:33:D5:02:8C:B1:10:B1:DD:F8:98:55:C0:5E:CF:90 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F432858492E13BD7D78EBD15D208BD200 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/be1d82ad-92ed-344f-a01e-a8a8a392094f.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 7810 IP address blocks: 204.214.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:bd:7d:78:eb:d1:5d:20:8b:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=bd4515f1-c0d6-4d72-a071-192a5d66ef04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:73:39:c2:73:32:05:4e:f2:6f:a1:78:79: 2f:6c:e4:aa:97:39:64:48:89:d6:cc:e7:9b:5c:c3: 16:44:19:05:66:92:b2:70:6f:19:38:c4:35:0a:ce: 72:19:c5:71:c7:fb:8c:c9:be:26:6f:49:4e:66:91: b2:f7:35:20:27:63:b0:95:9b:3c:63:42:f1:36:34: 39:b8:1b:f2:01:bb:6e:c9:4c:58:9a:d0:f8:23:e4: 2b:34:f1:a0:f5:77:0f:c2:41:6e:fa:7d:62:e4:65: 06:b3:58:23:28:4d:cd:98:45:05:4a:fa:c6:f0:7e: 09:57:62:d2:86:22:36:5c:71:25:52:c5:0d:54:b6: 4d:c0:91:89:5f:b9:ab:43:ba:e0:e7:d8:ff:94:59: 6d:9e:2b:ba:8c:8a:f5:a8:95:54:0f:6d:f4:94:96: 14:cc:30:33:a8:65:8b:11:87:21:7c:02:ae:3c:9e: 3e:97:d9:14:9c:7f:b1:1a:9f:b4:a4:a9:e5:c0:70: 31:06:c2:63:5d:83:9b:82:43:79:3e:b7:49:78:02: 4c:ba:f4:5b:80:02:cd:4a:6e:14:c5:63:b6:4f:86: 0b:1a:ec:67:ba:d2:81:31:9b:01:90:2f:57:00:0b: cb:43:ce:9a:2d:78:d8:7d:4d:f5:60:b7:01:7c:28: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F7:B3:5D:0F:33:D5:02:8C:B1:10:B1:DD:F8:98:55:C0:5E:CF:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/be1d82ad-92ed-344f-a01e-a8a8a392094f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.214.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:5f:63:1d:bc:47:85:23:d2:1f:87:b1:cc:e3:1f:f1:93:8f: b4:60:95:f0:a6:97:40:74:e5:4c:39:67:c3:ed:5f:2b:e4:0c: 90:ba:cd:65:8d:c0:3c:04:95:55:b5:7f:88:7f:fc:58:48:d4: f2:b0:6c:dc:73:71:da:fb:09:99:95:e5:83:38:8e:c0:01:f5: ff:8f:a6:ba:31:69:27:70:88:a4:cd:2b:24:74:dd:33:ae:61: 27:3b:4c:de:17:f1:4c:c7:6e:e7:2c:a0:6b:b1:c4:a2:16:f2: 4b:dc:3f:f3:48:25:97:0c:8d:b8:c4:8e:5e:8d:10:3a:19:26: 66:19:85:93:6d:e0:0e:3a:98:6b:3c:e7:b7:2d:a3:a2:e9:7e: eb:f8:92:f9:34:cb:c2:b5:76:bf:4f:17:7a:19:eb:1c:20:3e: ab:b5:e2:5d:78:87:a6:7f:38:80:6a:81:49:fd:ce:64:91:ae: de:9e:82:08:ef:78:dd:2e:69:66:0c:7f:98:7e:0d:ee:58:19: 10:41:2b:3d:ac:5d:be:1e:e1:35:b7:3a:bf:0d:c4:1c:79:7a: 6c:ea:bf:1a:a4:b4:dc:a2:c4:6c:e9:56:44:3d:31:9f:75:68: 48:a3:5f:ba:9a:77:07:9d:5b:a0:c7:a2:24:7b:57:26:cf:54: 50:5c:82:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE719eOvRXSCL0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk YmQ0NTE1ZjEtYzBkNi00ZDcyLWEwNzEtMTkyYTVkNjZlZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstpzOcJzMgVO8m+heHkvbOSqlzlkSInWzOeb XMMWRBkFZpKycG8ZOMQ1Cs5yGcVxx/uMyb4mb0lOZpGy9zUgJ2OwlZs8Y0LxNjQ5 uBvyAbtuyUxYmtD4I+QrNPGg9XcPwkFu+n1i5GUGs1gjKE3NmEUFSvrG8H4JV2LS hiI2XHElUsUNVLZNwJGJX7mrQ7rg59j/lFltniu6jIr1qJVUD230lJYUzDAzqGWL EYchfAKuPJ4+l9kUnH+xGp+0pKnlwHAxBsJjXYObgkN5PrdJeAJMuvRbgALNSm4U xWO2T4YLGuxnutKBMZsBkC9XAAvLQ86aLXjYfU31YLcBfCgw1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHz3s10PM9UCjLEQsd34mFXAXs+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYmUxZDgyYWQtOTJlZC0z NDRmLWEwMWUtYThhOGEzOTIwOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzNaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJfYx28R4Uj0h+HsczjH/GTj7RglfCml0B05Uw5Z8PtXyvkDJC6zWWN wDwElVW1f4h//FhI1PKwbNxzcdr7CZmV5YM4jsAB9f+PproxaSdwiKTNKyR03TOu YSc7TN4X8UzHbucsoGuxxKIW8kvcP/NIJZcMjbjEjl6NEDoZJmYZhZNt4A46mGs8 57cto6Lpfuv4kvk0y8K1dr9PF3oZ6xwgPqu14l14h6Z/OIBqgUn9zmSRrt6eggjv eN0uaWYMf5h+De5YGRBBKz2sXb4e4TW3Or8NxBx5emzqvxqktNyixGzpVkQ9MZ91 aEijX7qadwedW6DHoiR7VybPVFBcgkw= -----END CERTIFICATE-----Generated at Sun Apr 6 05:50:34 2025 by rpki-client