$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/0f23b3b1-954d-3567-bd9a-85457745ed41.roa File: 0f23b3b1-954d-3567-bd9a-85457745ed41.roa (raw, json) Hash identifier: 4OK/6q/mLpJWiDC5J5riy/+X0m4RDkqqy5T4mZSxwPc= Subject key identifier: 12:69:DB:19:1C:41:6D:C2:26:B8:17:84:42:63:95:C4:46:36:0D:8D Certificate issuer: /CN=74a9f5cd-6394-4062-8085-0e1da1f04511 Certificate serial: 010D0C9F43285848CC7B94B8C826880C56166480 Authority key identifier: CD:CD:C7:35:30:B0:1A:4A:43:FD:5E:84:8F:A0:E3:69:14:F8:6F:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/0f23b3b1-954d-3567-bd9a-85457745ed41.roa Signing time: Fri 07 Feb 2025 02:00:39 +0000 ROA not before: Fri 07 Feb 2025 02:00:39 +0000 ROA not after: Thu 08 May 2025 01:00:39 +0000 asID: 398663 IP address blocks: 204.108.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cc:7b:94:b8:c8:26:88:0c:56:16:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a9f5cd-6394-4062-8085-0e1da1f04511 Validity Not Before: Feb 7 02:00:39 2025 GMT Not After : May 8 01:00:39 2025 GMT Subject: CN=a811bce7-d34e-46ab-9e14-ce20572582c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:47:ab:5d:bf:ed:ce:55:56:28:d2:30:72:1d: e7:36:02:d4:fb:86:bc:1e:78:be:84:f8:2f:a0:3f: 1b:6b:03:12:b2:cb:75:73:8f:29:eb:5d:c7:8b:07: eb:6b:4b:b0:8a:6b:cd:17:ce:8c:9f:71:2c:10:e1: fa:c4:9b:c7:19:95:47:06:89:61:7e:0f:6c:c8:9b: 20:f8:aa:a5:c8:03:d3:4d:f4:73:f3:66:76:8c:b6: 91:ca:ad:82:c0:e8:e8:3e:62:b0:1e:fa:75:76:2c: f6:59:54:fb:3d:7c:42:f3:21:e1:3f:f8:88:d8:b4: 28:9f:9d:6a:44:a3:87:fb:64:21:8e:4a:e6:50:a0: 79:21:87:d4:c8:53:63:de:f2:6e:ca:b8:80:13:eb: 83:7b:46:b5:fc:e6:1d:ba:03:00:01:6c:1d:c0:96: 46:01:d2:08:8e:05:8e:42:04:c5:82:3c:d5:75:37: 23:0d:31:a2:9c:8d:60:b4:a1:81:22:03:f2:87:f8: 1d:cd:0c:84:11:b7:41:5b:49:ca:1a:a2:7d:e2:ef: 45:7b:72:2b:a2:1f:37:98:b7:64:2f:2a:bf:a2:da: 7a:88:78:40:47:a9:bb:0e:70:73:c8:d0:fa:4b:59: 49:57:ae:ab:79:81:d8:45:4e:40:27:2a:af:9a:e1: 44:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:69:DB:19:1C:41:6D:C2:26:B8:17:84:42:63:95:C4:46:36:0D:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/0f23b3b1-954d-3567-bd9a-85457745ed41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511/74a9f5cd-6394-4062-8085-0e1da1f04511.crl X509v3 Authority Key Identifier: keyid:CD:CD:C7:35:30:B0:1A:4A:43:FD:5E:84:8F:A0:E3:69:14:F8:6F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/74a9f5cd-6394-4062-8085-0e1da1f04511.cer sbgp-ipAddrBlock: critical IPv4: 204.108.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:cd:7b:61:e9:55:45:01:05:dd:32:2a:a7:2a:59:fb:95:38: 22:c6:fe:41:e8:d1:bd:0e:71:07:ed:c8:3a:a0:03:bc:ca:bc: 32:b9:79:c3:d8:ff:1d:36:8a:8d:6a:3f:8c:fa:42:45:59:2c: ab:c8:4d:85:75:d7:b2:09:69:9d:d2:90:f6:9f:2c:e0:77:10: 44:02:90:12:3a:1e:02:4d:52:e9:0a:cb:bd:1c:5e:d8:95:b9: 42:61:0a:47:52:cd:fa:57:c2:af:bc:7a:bd:b8:32:20:5e:65: ea:76:bd:61:93:27:e9:2e:d0:97:76:f5:12:db:9d:af:db:f7: c4:16:ce:5b:92:79:fa:5d:0e:66:45:a1:d3:55:d0:ec:69:4f: 2b:0b:fe:48:81:db:cc:0a:15:b5:ea:7b:47:59:af:ea:a8:a6: b5:26:55:c4:05:83:bd:60:3c:96:3f:91:4e:ac:66:e5:78:09: 83:be:dc:68:30:4e:1a:c2:81:d7:cf:80:f3:13:06:33:f9:ae: 69:a9:51:86:97:72:c8:7d:76:de:48:ce:f5:fe:f7:cd:ce:cd: 90:e2:31:52:cf:33:59:f7:d6:58:d8:be:05:f2:b6:a2:c8:3d: 43:24:28:af:50:ad:0c:39:6c:be:40:e2:a9:a6:56:49:4d:a1: 1c:7a:1d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5S4yCaIDFYWZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRhOWY1Y2QtNjM5NC00MDYyLTgwODUtMGUxZGExZjA0 NTExMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk YTgxMWJjZTctZDM0ZS00NmFiLTllMTQtY2UyMDU3MjU4MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkerXb/tzlVWKNIwch3nNgLU+4a8Hni+hPgv oD8bawMSsst1c48p613Hiwfra0uwimvNF86Mn3EsEOH6xJvHGZVHBolhfg9syJsg +KqlyAPTTfRz82Z2jLaRyq2CwOjoPmKwHvp1diz2WVT7PXxC8yHhP/iI2LQon51q RKOH+2QhjkrmUKB5IYfUyFNj3vJuyriAE+uDe0a1/OYdugMAAWwdwJZGAdIIjgWO QgTFgjzVdTcjDTGinI1gtKGBIgPyh/gdzQyEEbdBW0nKGqJ94u9Fe3Iroh83mLdk Lyq/otp6iHhAR6m7DnBzyND6S1lJV66reYHYRU5AJyqvmuFEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJp2xkcQW3CJrgXhEJjlcRGNg2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83NGE5 ZjVjZC02Mzk0LTQwNjItODA4NS0wZTFkYTFmMDQ1MTEvMGYyM2IzYjEtOTU0ZC0z NTY3LWJkOWEtODU0NTc3NDVlZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzRhOWY1Y2QtNjM5NC00MDYyLTgw ODUtMGUxZGExZjA0NTExLzc0YTlmNWNkLTYzOTQtNDA2Mi04MDg1LTBlMWRhMWYw NDUxMS5jcmwwHwYDVR0jBBgwFoAUzc3HNTCwGkpD/V6Ej6DjaRT4b1IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi83NGE5ZjVjZC02Mzk0LTQwNjItODA4NS0wZTFk YTFmMDQ1MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzGysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjNe2HpVUUBBd0yKqcqWfuVOCLG/kHo0b0OcQftyDqgA7zKvDK5ecPY /x02io1qP4z6QkVZLKvITYV117IJaZ3SkPafLOB3EEQCkBI6HgJNUukKy70cXtiV uUJhCkdSzfpXwq+8er24MiBeZep2vWGTJ+ku0Jd29RLbna/b98QWzluSefpdDmZF odNV0OxpTysL/kiB28wKFbXqe0dZr+qoprUmVcQFg71gPJY/kU6sZuV4CYO+3Ggw ThrCgdfPgPMTBjP5rmmpUYaXcsh9dt5IzvX+983OzZDiMVLPM1n31ljYvgXytqLI PUMkKK9QrQw5bL5A4qmmVklNoRx6HbQ= -----END CERTIFICATE-----Generated at Sun Apr 6 09:41:21 2025 by rpki-client