$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa File: 43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa (raw, json) Hash identifier: fhX2fJHwSA5pOrCSFWRlL9N9RpxOOzBWmDoLxn+sDAU= Subject key identifier: F8:76:52:DB:6E:24:9A:6E:10:75:00:4E:04:F2:5D:04:C7:A2:61:8B Certificate issuer: /CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Certificate serial: 010D0C9F432858495ABECA95F661174688D26A00 Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 40628 IP address blocks: 204.62.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:ca:95:f6:61:17:46:88:d2:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=d3ae3ee0-a126-43e3-9b5a-0d73b6a84c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cf:05:44:6d:f5:a0:05:66:56:b8:90:a9:05: ad:46:93:0c:63:fa:99:1a:9f:d8:cd:5b:55:87:40: a1:c6:34:5b:84:34:6f:a2:3e:d5:41:86:44:c5:37: b7:99:8e:fd:fc:de:2d:d8:bb:8c:3a:ac:a6:62:76: dd:1f:79:6c:6a:0e:2e:de:7a:f3:84:01:16:a0:e9: bb:f3:9b:c0:02:f7:2e:c8:b2:d3:9f:9c:10:0b:d3: fe:f4:12:a0:cc:14:39:4d:56:5b:40:da:72:a9:2f: 24:2a:66:1d:87:d3:e2:21:11:c4:23:85:f3:99:e1: 90:6f:47:3a:6b:4d:c8:a1:f8:d7:8b:10:0d:13:73: 96:c4:3d:ec:03:aa:ae:2d:8e:c2:61:f3:80:ef:b8: 82:a0:f8:87:b1:73:5c:ac:7e:ea:96:b5:1c:56:dd: b9:a3:46:58:bf:74:c8:4e:8c:43:ef:ce:95:e9:ca: bf:3a:9d:a0:1c:fb:88:d7:2a:c7:a8:f6:c3:c0:fc: ba:22:15:b8:5d:99:12:6c:19:57:4b:03:86:72:d6: 3e:1a:22:ed:ac:6f:58:73:46:5b:84:1b:61:18:96: 7f:89:81:31:7e:cd:e3:57:2c:26:93:17:1a:4e:b4: 9e:f4:52:aa:15:17:b6:a0:d0:68:01:70:95:a2:a9: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:76:52:DB:6E:24:9A:6E:10:75:00:4E:04:F2:5D:04:C7:A2:61:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/43940dcc-2ddc-396e-b9ea-1341dcfcd709.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl X509v3 Authority Key Identifier: keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer sbgp-ipAddrBlock: critical IPv4: 204.62.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d8:d8:36:0b:5e:04:4e:1e:89:75:85:0a:ff:4f:22:b7:e2: a9:e0:45:a0:f6:bc:26:9d:00:00:2d:40:2b:14:ca:b4:3d:19: b7:22:30:e7:da:f1:2f:57:63:b6:b5:db:62:29:2a:5a:9a:8b: 87:35:f8:53:ce:ad:40:63:9c:47:f5:f4:bd:6c:f5:37:77:bc: d9:bd:4b:9a:6b:7b:9c:51:0d:1a:0e:7a:5a:32:d8:dd:25:75: 7f:e0:a9:f1:ba:b9:03:13:99:8a:9f:c3:57:76:ee:a9:16:6a: 88:33:76:fa:b1:9b:40:55:60:fb:59:22:6b:e9:b9:1e:d6:78: 3e:2a:58:a5:ba:38:4b:e7:04:ee:ba:22:b1:94:e8:c1:b3:ed: c7:64:3f:d4:1a:5c:d9:3c:7e:b4:e5:db:ae:cb:73:63:d0:1b: fa:a5:a4:f2:fd:8e:ca:ce:e4:69:a9:bd:23:3b:85:24:40:df: a1:09:fa:f7:e6:96:17:5f:10:52:7b:90:df:ad:ba:16:72:58: 2b:ab:81:c4:c6:ae:47:68:b1:24:cf:1f:21:2b:0f:05:8a:28: 3c:29:90:01:ae:4b:89:91:3e:b3:44:9d:db:2a:9c:a7:67:aa: bb:34:ff:31:99:c8:22:5a:96:9e:6a:c2:53:b0:b7:23:e4:a5: b7:0a:78:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsqV9mEXRojSagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4 YTU3MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk ZDNhZTNlZTAtYTEyNi00M2UzLTliNWEtMGQ3M2I2YTg0YzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc8FRG31oAVmVriQqQWtRpMMY/qZGp/YzVtV h0ChxjRbhDRvoj7VQYZExTe3mY79/N4t2LuMOqymYnbdH3lsag4u3nrzhAEWoOm7 85vAAvcuyLLTn5wQC9P+9BKgzBQ5TVZbQNpyqS8kKmYdh9PiIRHEI4XzmeGQb0c6 a03IofjXixANE3OWxD3sA6quLY7CYfOA77iCoPiHsXNcrH7qlrUcVt25o0ZYv3TI ToxD786V6cq/Op2gHPuI1yrHqPbDwPy6IhW4XZkSbBlXSwOGctY+GiLtrG9Yc0Zb hBthGJZ/iYExfs3jVywmkxcaTrSe9FKqFRe2oNBoAXCVoqnu2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh2UttuJJpuEHUATgTyXQTHomGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFm ODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvNDM5NDBkY2MtMmRkYy0z OTZlLWI5ZWEtMTM0MWRjZmNkNzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTkxZjgxZmYtNTMxNy00MGY0LWE1 NDQtNWRmMmUzMzU4YTU3L2E5MWY4MWZmLTUzMTctNDBmNC1hNTQ0LTVkZjJlMzM1 OGE1Ny5jcmwwHwYDVR0jBBgwFoAUNAcTZw8RHbNMsi51vbBuS9RfIl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYy ZTMzNThhNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzD4YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvY2DYLXgROHol1hQr/TyK34qngRaD2vCadAAAtQCsUyrQ9GbciMOfa 8S9XY7a122IpKlqai4c1+FPOrUBjnEf19L1s9Td3vNm9S5pre5xRDRoOeloy2N0l dX/gqfG6uQMTmYqfw1d27qkWaogzdvqxm0BVYPtZImvpuR7WeD4qWKW6OEvnBO66 IrGU6MGz7cdkP9QaXNk8frTl267Lc2PQG/qlpPL9jsrO5GmpvSM7hSRA36EJ+vfm lhdfEFJ7kN+tuhZyWCurgcTGrkdosSTPHyErDwWKKDwpkAGuS4mRPrNEndsqnKdn qrs0/zGZyCJalp5qwlOwtyPkpbcKeK0= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:53 2025 by rpki-client