$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa File: 87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa (raw, json) Hash identifier: DkqEgMiLYGGeeAMYaH64p78Z8R5ISBfSOfmjROz28gg= Subject key identifier: 48:8F:26:BC:12:07:82:A9:DF:14:96:78:90:55:62:99:40:5B:4A:6D Certificate issuer: /CN=a854a4c3-e5e0-49a9-a110-947d91107e15 Certificate serial: 010D0C9F43285848B8F0D06F394A5EEA8E160540 Authority key identifier: 71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 54885 IP address blocks: 204.144.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d0:6f:39:4a:5e:ea:8e:16:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a854a4c3-e5e0-49a9-a110-947d91107e15 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=74db2e0e-fdd8-4649-b4b4-a945fcc928c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:14:d7:c1:57:f8:31:a6:e4:a7:87:02:2e:31: 7f:28:a1:f1:38:49:a1:64:90:dd:15:55:96:ec:23: 33:e9:23:47:cb:b5:dd:b8:e5:93:09:3c:ec:14:42: a4:cb:b1:5e:09:70:ce:c4:e1:79:24:58:c2:42:db: a5:c9:3c:90:61:03:40:8c:99:74:2f:aa:f9:44:bf: d7:4e:1c:3a:cc:8b:67:39:5c:ab:14:d8:68:9f:59: 63:f9:7f:5c:a5:00:2f:a5:d9:05:48:50:06:a9:ac: 9c:bf:72:26:41:0a:25:6a:fb:36:42:ba:83:67:24: aa:a8:f1:ad:36:07:ae:3c:25:62:51:93:93:5d:99: 1c:9b:82:cb:63:cf:6e:cb:7f:98:cd:5f:fc:47:a1: 0e:e8:32:fb:73:21:64:88:a5:d8:a4:f5:45:db:fa: 4c:08:49:b9:90:f4:79:ea:9f:68:93:19:6d:b4:1d: 6a:b9:d2:cd:8a:cc:8e:16:0a:83:2f:20:c5:01:10: 8e:19:60:a0:51:5c:f7:b4:79:5a:4a:88:c4:a3:e7: 28:11:b6:ca:57:2c:35:fd:6f:ad:f5:b1:73:59:ec: 01:39:bb:51:1d:fd:a2:dd:69:73:ec:72:73:fd:69: 0c:d1:6b:a8:87:60:99:07:51:bb:99:a6:b9:2e:15: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8F:26:BC:12:07:82:A9:DF:14:96:78:90:55:62:99:40:5B:4A:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl X509v3 Authority Key Identifier: keyid:71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer sbgp-ipAddrBlock: critical IPv4: 204.144.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f7:4f:24:7d:79:43:3a:4c:06:3f:e2:68:39:92:7e:eb:8c: 89:82:92:e4:c9:9d:2c:68:a4:44:b7:17:48:20:56:98:f1:c8: cf:f4:34:9d:d0:73:b0:23:13:bd:ad:ba:d7:d4:4d:f0:77:c6: e5:96:7f:31:ed:8a:b0:88:d2:e2:03:0d:a4:71:e0:1e:4e:4f: 97:d7:e8:c1:4b:a7:e5:a5:7f:ea:bc:ac:f8:9f:af:2f:11:76: 55:2b:13:e2:3a:f9:38:11:3e:91:64:53:17:52:9e:ea:cb:f0: 57:2a:02:b8:81:0e:23:52:9f:32:c4:d8:ec:ee:e0:a4:5b:0e: 49:c7:dc:f9:24:c3:b1:89:6b:e7:ad:30:d8:91:02:eb:e7:63: 32:81:b5:9a:72:b6:85:10:5c:e6:2c:7c:07:23:f1:dc:c0:5e: 3f:0d:46:a7:be:24:5f:24:50:46:c6:6f:f1:ef:78:eb:2f:d7: c7:e8:49:3e:ae:54:e3:2c:ee:70:95:65:dd:ef:4c:64:6e:6b: 1e:56:b1:ad:4f:cf:21:3d:12:e3:37:d1:38:03:32:ed:9c:6d: e3:63:62:d4:2c:68:a9:40:61:e2:65:2a:b1:2c:ee:cf:22:fc: 4d:ac:b8:59:16:ee:99:a5:40:b2:f5:70:5b:d5:ea:aa:49:91: 4b:86:b0:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NBvOUpe6o4WBUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NGE0YzMtZTVlMC00OWE5LWExMTAtOTQ3ZDkxMTA3 ZTE1MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk NzRkYjJlMGUtZmRkOC00NjQ5LWI0YjQtYTk0NWZjYzkyOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRTXwVf4Mabkp4cCLjF/KKHxOEmhZJDdFVWW 7CMz6SNHy7XduOWTCTzsFEKky7FeCXDOxOF5JFjCQtulyTyQYQNAjJl0L6r5RL/X Thw6zItnOVyrFNhon1lj+X9cpQAvpdkFSFAGqaycv3ImQQolavs2QrqDZySqqPGt NgeuPCViUZOTXZkcm4LLY89uy3+YzV/8R6EO6DL7cyFkiKXYpPVF2/pMCEm5kPR5 6p9okxlttB1qudLNisyOFgqDLyDFARCOGWCgUVz3tHlaSojEo+coEbbKVyw1/W+t 9bFzWewBObtRHf2i3Wlz7HJz/WkM0Wuoh2CZB1G7maa5LhVWkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiPJrwSB4Kp3xSWeJBVYplAW0ptMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0 YTRjMy1lNWUwLTQ5YTktYTExMC05NDdkOTExMDdlMTUvODdlNjI1MmUtYzM2YS0z ZDgxLTlkN2MtZDk0MzViMTg5YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTg1NGE0YzMtZTVlMC00OWE5LWEx MTAtOTQ3ZDkxMTA3ZTE1L2E4NTRhNGMzLWU1ZTAtNDlhOS1hMTEwLTk0N2Q5MTEw N2UxNS5jcmwwHwYDVR0jBBgwFoAUcan10a1vSExftH0+L57JtwDdpxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0YTRjMy1lNWUwLTQ5YTktYTExMC05NDdk OTExMDdlMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC73TyR9eUM6TAY/4mg5kn7rjImCkuTJnSxopES3F0ggVpjxyM/0NJ3Q c7AjE72tutfUTfB3xuWWfzHtirCI0uIDDaRx4B5OT5fX6MFLp+Wlf+q8rPifry8R dlUrE+I6+TgRPpFkUxdSnurL8FcqAriBDiNSnzLE2Ozu4KRbDknH3Pkkw7GJa+et MNiRAuvnYzKBtZpytoUQXOYsfAcj8dzAXj8NRqe+JF8kUEbGb/HveOsv18foST6u VOMs7nCVZd3vTGRuax5Wsa1PzyE9EuM30TgDMu2cbeNjYtQsaKlAYeJlKrEs7s8i /E2suFkW7pmlQLL1cFvV6qpJkUuGsE8= -----END CERTIFICATE-----Generated at Sun Apr 6 00:02:35 2025 by rpki-client