$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa File: 8a599c8a-6f69-352a-9eff-d9583500ded1.roa (raw, json) Hash identifier: H+yXZVbwlqJvVjYo8XX0EQ2KZu8WKgYaFD27duWmobE= Subject key identifier: 4A:EC:58:6B:8B:96:6D:F4:BB:CA:2E:C4:A1:E9:18:40:C4:96:4D:3B Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F43285848CB1659C2E72B4B11A1756AB0 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 33322 IP address blocks: 204.10.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:59:c2:e7:2b:4b:11:a1:75:6a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=1431b36d-f6cb-49d6-a978-eca06f47f3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:01:45:55:b3:1c:b2:87:a1:3a:3d:fc:98: 17:b9:cc:20:9e:3c:6c:bc:f7:82:e9:ac:37:bd:67: 43:aa:11:3f:fe:26:b3:cc:79:e5:aa:f9:43:36:e3: af:89:8a:88:b0:55:25:16:da:a1:6e:f1:ae:67:89: 4f:b7:39:7c:d0:63:ef:e2:83:6b:e3:46:86:87:09: 81:8a:e4:13:a4:3f:3f:c0:36:20:e4:2b:b2:6c:25: 5a:c3:73:f9:05:8b:b5:48:4b:ca:f0:7e:7f:4f:26: e0:80:73:9a:5f:19:c2:2a:85:f8:99:19:33:a1:1e: 23:39:dc:93:16:01:e3:31:6e:7c:9f:ef:29:cc:c6: b2:0c:e5:32:e0:3f:c9:54:9d:bb:ac:6b:d1:96:c1: f0:c4:a1:73:b3:d0:04:58:e5:0e:b4:b3:20:7e:1d: 80:d1:2a:6d:cb:cd:4f:fd:8b:3e:1f:25:20:7e:ac: 88:72:46:dd:04:9c:ef:15:29:00:a8:47:d6:46:27: 21:52:74:75:bd:7a:a9:9d:6f:9d:0a:ea:b7:a2:1b: 92:32:02:ea:77:a7:a8:db:c6:49:42:74:87:43:57: 99:2f:e9:34:b6:7d:d8:0f:25:f0:29:66:23:74:c3: 86:da:60:19:ae:23:69:20:c9:2c:33:a5:68:15:b6: 39:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EC:58:6B:8B:96:6D:F4:BB:CA:2E:C4:A1:E9:18:40:C4:96:4D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.10.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4a:b7:9a:9d:90:8b:d9:f0:48:c9:ea:0e:9f:b3:41:34:ed: 66:6e:97:a7:c9:12:89:80:49:44:5b:7c:9b:65:58:b6:2d:41: 80:19:43:09:d1:86:d5:30:1d:5c:fa:6b:68:f4:9a:8e:c5:42: 43:cd:35:e4:d0:15:a2:de:bb:b8:81:1d:f0:cc:9a:f3:42:f4: c6:41:78:a2:d6:41:4c:3d:2b:ab:87:9a:72:53:9f:8c:df:6a: 4d:c2:29:ed:70:e7:cd:31:fb:fb:23:6b:f5:24:18:b5:56:55: c8:40:aa:31:a5:0b:48:23:41:60:bf:c4:a7:47:00:e8:51:f2: 80:ab:91:e4:e2:6b:9b:45:36:5f:3b:4d:35:c4:91:e9:98:f5: 19:74:70:42:3f:17:00:46:5c:9d:e0:30:ce:74:34:4e:92:0f: dd:09:53:fb:79:b5:a9:df:65:8b:3f:42:cf:42:16:5f:0f:7c: 13:b0:3a:aa:ae:12:2d:ca:36:a1:6d:16:b4:f2:f1:50:d6:33: 85:ad:6f:1b:ea:db:08:12:f6:e0:2f:07:ff:d3:ce:0b:fa:45: 82:80:b6:33:51:e6:8c:47:05:f6:c1:74:c2:3e:84:04:d4:66: 29:2c:5d:0a:53:13:ed:94:05:4b:f3:4d:ca:8f:12:03:57:6b: bc:78:c0:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFlnC5ytLEaF1arAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk MTQzMWIzNmQtZjZjYi00OWQ2LWE5NzgtZWNhMDZmNDdmM2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAEBRVWzHLKHoTo9/JgXucwgnjxsvPeC6aw3 vWdDqhE//iazzHnlqvlDNuOviYqIsFUlFtqhbvGuZ4lPtzl80GPv4oNr40aGhwmB iuQTpD8/wDYg5CuybCVaw3P5BYu1SEvK8H5/TybggHOaXxnCKoX4mRkzoR4jOdyT FgHjMW58n+8pzMayDOUy4D/JVJ27rGvRlsHwxKFzs9AEWOUOtLMgfh2A0Spty81P /Ys+HyUgfqyIckbdBJzvFSkAqEfWRichUnR1vXqpnW+dCuq3ohuSMgLqd6eo28ZJ QnSHQ1eZL+k0tn3YDyXwKWYjdMOG2mAZriNpIMksM6VoFbY5lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErsWGuLlm30u8ouxKHpGEDElk07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOGE1OTljOGEtNmY2OS0z NTJhLTllZmYtZDk1ODM1MDBkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFKt5qdkIvZ8EjJ6g6fs0E07WZul6fJEomASURbfJtlWLYtQYAZQwnR htUwHVz6a2j0mo7FQkPNNeTQFaLeu7iBHfDMmvNC9MZBeKLWQUw9K6uHmnJTn4zf ak3CKe1w580x+/sja/UkGLVWVchAqjGlC0gjQWC/xKdHAOhR8oCrkeTia5tFNl87 TTXEkemY9Rl0cEI/FwBGXJ3gMM50NE6SD90JU/t5tanfZYs/Qs9CFl8PfBOwOqqu Ei3KNqFtFrTy8VDWM4Wtbxvq2wgS9uAvB//Tzgv6RYKAtjNR5oxHBfbBdMI+hATU ZiksXQpTE+2UBUvzTcqPEgNXa7x4wDg= -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:32 2025 by rpki-client