$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa File: a5fe454b-deb7-37cf-bd66-6552718aa14d.roa (raw, json) Hash identifier: +wfDtJm/zeETlZTnyAsFNMrpydUxYRdephseVEXIvWo= Subject key identifier: 67:7E:43:D5:D6:15:14:8B:0C:29:B7:8E:41:8F:08:A0:13:78:BA:44 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F43285848F2F1D853E5C3CFBB1853CB80 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa Signing time: Thu 20 Feb 2025 20:39:48 +0000 ROA not before: Thu 20 Feb 2025 20:39:48 +0000 ROA not after: Wed 21 May 2025 19:39:48 +0000 asID: 399244 IP address blocks: 208.92.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:f1:d8:53:e5:c3:cf:bb:18:53:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Feb 20 20:39:48 2025 GMT Not After : May 21 19:39:48 2025 GMT Subject: CN=e03a9e01-5e0d-4100-b0e3-9edf2da1d23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c9:bd:14:85:b5:1b:98:e7:60:8c:d3:e5:58: 1b:1b:e4:bd:46:67:7e:4c:cf:27:e1:99:e4:2e:be: 00:a6:55:13:98:d2:52:92:a6:dc:e0:ac:6e:ed:61: 50:f4:17:13:94:81:79:a6:a6:7a:99:51:bf:a1:df: 6f:b2:5e:27:c2:9d:8d:50:ca:5e:2f:f8:bd:5c:15: a6:46:a0:e7:57:38:1d:3f:3e:5a:21:46:4f:8b:6a: 96:b7:5a:a6:3c:b0:38:db:eb:51:a4:5d:5d:d1:ae: 97:c4:b5:5f:1c:ee:77:57:a3:21:a9:0f:a4:72:b4: 9f:c8:07:20:30:cd:e8:82:22:ac:a8:76:3c:92:b3: 29:a4:9d:64:92:f4:c4:e2:68:70:6f:f8:4d:76:3e: 90:9a:27:bb:a5:38:65:e6:89:14:ad:84:42:71:da: bc:16:8c:9e:8b:5f:d8:e9:d7:2c:06:f5:a1:f9:80: 07:ef:02:62:fb:4a:d4:a9:b4:b2:0f:c8:af:ac:51: a3:bc:0d:af:54:5d:87:88:ae:cd:3f:9f:e0:23:e6: 22:0c:dd:53:1b:3d:46:44:cd:d5:04:ce:7c:cf:90: 39:b0:40:e0:23:ac:6c:be:19:ba:3c:45:f7:db:50: 3b:d3:c2:40:4a:25:d3:a5:38:04:4f:7f:7f:9f:c3: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7E:43:D5:D6:15:14:8B:0C:29:B7:8E:41:8F:08:A0:13:78:BA:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 208.92.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f9:f4:65:9e:07:e8:5a:ba:ed:e0:6b:0f:69:06:3e:db:15: e5:d3:22:4b:0b:a3:88:bf:dc:51:4f:cf:62:87:32:30:1f:b5: 48:54:24:71:9e:72:a6:68:d2:06:88:7c:31:c2:5a:a2:ac:1b: ea:b8:85:1b:18:4a:cf:ea:b8:31:d8:7b:ed:fb:db:7d:4c:79: 31:f8:85:ac:ed:2f:e3:a5:54:e9:2e:12:9e:ef:28:2d:00:de: f8:99:51:d9:4a:e8:a5:db:85:dc:e8:9b:2a:34:2c:b1:7d:4b: f0:70:17:b6:77:25:98:90:05:d1:73:ed:4b:1c:a8:db:96:4b: 76:a5:85:40:12:93:fb:f3:b6:7d:39:ce:c6:f1:a0:47:00:6d: ec:5d:6b:b8:43:96:9d:22:15:30:ae:31:31:b1:a8:f5:d4:e6: ae:95:91:2a:21:7f:b7:82:b4:62:ef:a1:b8:0d:8f:25:93:89: cc:18:0e:d3:7e:d2:4a:e4:38:78:30:60:21:70:dc:6a:b0:b3: bf:43:7d:63:aa:00:72:18:ab:77:9d:8e:08:fa:91:93:d8:4e: a5:11:87:9b:81:da:25:c6:be:60:99:11:ce:6e:b2:5e:81:b6: 42:16:61:07:d0:9c:dc:15:a5:e1:29:ea:0a:d7:24:a1:0c:0e: d5:12:a3:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjy8dhT5cPPuxhTy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MDIyMDIwMzk0OFoXDTI1MDUyMTE5Mzk0OFowLzEtMCsGA1UEAxMk ZTAzYTllMDEtNWUwZC00MTAwLWIwZTMtOWVkZjJkYTFkMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8m9FIW1G5jnYIzT5VgbG+S9Rmd+TM8n4Znk Lr4AplUTmNJSkqbc4Kxu7WFQ9BcTlIF5pqZ6mVG/od9vsl4nwp2NUMpeL/i9XBWm RqDnVzgdPz5aIUZPi2qWt1qmPLA42+tRpF1d0a6XxLVfHO53V6MhqQ+kcrSfyAcg MM3ogiKsqHY8krMppJ1kkvTE4mhwb/hNdj6Qmie7pThl5okUrYRCcdq8Foyei1/Y 6dcsBvWh+YAH7wJi+0rUqbSyD8ivrFGjvA2vVF2HiK7NP5/gI+YiDN1TGz1GRM3V BM58z5A5sEDgI6xsvhm6PEX321A708JASiXTpTgET39/n8Pg7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd+Q9XWFRSLDCm3jkGPCKATeLpEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYTVmZTQ1NGItZGViNy0z N2NmLWJkNjYtNjU1MjcxOGFhMTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr59GWeB+hauu3gaw9pBj7bFeXTIksLo4i/3FFPz2KHMjAftUhUJHGe cqZo0gaIfDHCWqKsG+q4hRsYSs/quDHYe+37231MeTH4haztL+OlVOkuEp7vKC0A 3viZUdlK6KXbhdzomyo0LLF9S/BwF7Z3JZiQBdFz7UscqNuWS3alhUASk/vztn05 zsbxoEcAbexda7hDlp0iFTCuMTGxqPXU5q6VkSohf7eCtGLvobgNjyWTicwYDtN+ 0krkOHgwYCFw3Gqws79DfWOqAHIYq3edjgj6kZPYTqURh5uB2iXGvmCZEc5usl6B tkIWYQfQnNwVpeEp6grXJKEMDtUSo6M= -----END CERTIFICATE-----Generated at Sun Apr 6 11:47:26 2025 by rpki-client