$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3ff6dd83-a273-3fce-8108-e542d6d6aeee.roa File: 3ff6dd83-a273-3fce-8108-e542d6d6aeee.roa (raw, json) Hash identifier: bDJHHLvHcaJWncgZ0Ffhld1bDDv2sXPGafMlwR0zM00= Subject key identifier: B6:FE:31:49:93:F8:7A:B9:66:A6:21:D4:4D:90:B5:42:D3:9E:95:BF Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F432858491246C5B3A60F7236F792A200 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3ff6dd83-a273-3fce-8108-e542d6d6aeee.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 22835 IP address blocks: 205.201.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c5:b3:a6:0f:72:36:f7:92:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=397fa43c-a86c-4216-8af6-da5d5dd94ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:14:03:26:31:dd:b4:1c:8f:cd:7a:28:53: 2b:f0:4f:fe:d4:e7:44:85:4d:a9:38:53:52:ac:b0: 0d:42:e1:31:96:8c:ba:a1:50:9c:e8:57:01:ce:3f: 17:f7:60:e3:1a:43:ad:4f:aa:ca:b4:fe:57:0b:51: fa:bf:19:e3:5c:a4:1c:86:84:d8:c4:85:a4:0c:98: 5b:52:2f:1f:0f:9d:fd:71:33:6f:0a:5b:b3:d7:f1: 07:c4:75:97:22:f1:73:21:a2:c9:56:18:31:8e:c1: ad:96:e6:45:2c:1d:5c:88:6e:d1:0e:f2:ea:94:35: da:ea:56:f1:c4:54:80:4c:79:44:5a:cc:ea:25:8d: 15:11:44:4d:c2:0f:fb:b0:46:e2:e0:37:48:74:51: 38:c7:d4:f7:22:e0:a9:5b:6d:99:c1:eb:35:24:e0: 1a:1d:06:6b:72:d0:ef:50:30:d2:4e:3c:87:eb:d5: 4f:a3:8b:b2:97:84:53:5a:81:41:94:d0:35:21:49: 07:f0:42:42:6c:42:23:33:cd:d3:ec:69:42:2f:23: 85:4a:a2:0d:91:d4:15:3a:eb:c3:23:75:d0:47:f5: 77:06:ac:9b:77:6c:50:f3:1b:16:fb:3a:55:0a:9c: c4:15:bb:90:b8:1d:7f:db:d0:76:69:f4:46:35:0e: 0b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FE:31:49:93:F8:7A:B9:66:A6:21:D4:4D:90:B5:42:D3:9E:95:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3ff6dd83-a273-3fce-8108-e542d6d6aeee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 205.201.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:7c:5e:86:3b:6c:66:6a:ce:6e:1f:f8:d6:1b:99:fd:7b:a2: aa:8e:5e:09:34:97:5f:58:8b:05:dd:50:13:c0:21:68:60:68: 5d:67:86:43:87:16:de:fd:1a:1a:9d:66:3e:15:6f:82:39:99: 47:4f:bb:f4:52:7b:11:0b:07:42:4a:df:07:ad:da:21:6d:37: ab:cf:47:d0:a1:ee:7b:b8:90:b0:ab:2e:7a:e6:a4:85:39:19: ed:96:54:f4:ab:65:37:66:a1:1b:85:e2:f9:bb:e4:d4:24:bd: 9a:44:d6:88:9e:17:8c:78:3f:ef:d9:b3:35:6a:c4:8e:ef:7f: ab:6e:2a:e3:50:60:b4:bf:0f:aa:45:53:07:ef:93:6f:96:77: 45:1d:c4:99:2c:02:d9:60:66:9a:50:23:dc:4f:85:d8:b7:59: 2e:ca:ef:05:7c:29:b2:d4:db:e1:77:d4:57:96:95:c4:4e:0f: 20:86:c1:3f:c3:1f:31:f2:fc:bb:0e:04:69:68:d3:21:1c:11: 2e:74:ae:5c:71:f7:e3:7e:de:f5:00:32:bf:4f:33:1d:a0:33: cd:72:c9:6d:76:42:fe:86:b2:3f:22:4c:63:b6:54:0a:1b:94: 2c:2c:38:d4:86:fd:7c:1a:f2:f2:0b:29:1a:ec:13:e9:97:0c: 1b:cf:d4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsWzpg9yNveSogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk Mzk3ZmE0M2MtYTg2Yy00MjE2LThhZjYtZGE1ZDVkZDk0YWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8kUAyYx3bQcj816KFMr8E/+1OdEhU2pOFNS rLANQuExloy6oVCc6FcBzj8X92DjGkOtT6rKtP5XC1H6vxnjXKQchoTYxIWkDJhb Ui8fD539cTNvCluz1/EHxHWXIvFzIaLJVhgxjsGtluZFLB1ciG7RDvLqlDXa6lbx xFSATHlEWszqJY0VEURNwg/7sEbi4DdIdFE4x9T3IuCpW22Zwes1JOAaHQZrctDv UDDSTjyH69VPo4uyl4RTWoFBlNA1IUkH8EJCbEIjM83T7GlCLyOFSqINkdQVOuvD I3XQR/V3Bqybd2xQ8xsW+zpVCpzEFbuQuB1/29B2afRGNQ4LowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb+MUmT+Hq5ZqYh1E2QtULTnpW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvM2ZmNmRkODMtYTI3My0z ZmNlLTgxMDgtZTU0MmQ2ZDZhZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzcn6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx8XoY7bGZqzm4f+NYbmf17oqqOXgk0l19YiwXdUBPAIWhgaF1nhkOH Ft79GhqdZj4Vb4I5mUdPu/RSexELB0JK3wet2iFtN6vPR9Ch7nu4kLCrLnrmpIU5 Ge2WVPSrZTdmoRuF4vm75NQkvZpE1oieF4x4P+/ZszVqxI7vf6tuKuNQYLS/D6pF Uwfvk2+Wd0UdxJksAtlgZppQI9xPhdi3WS7K7wV8KbLU2+F31FeWlcRODyCGwT/D HzHy/LsOBGlo0yEcES50rlxx9+N+3vUAMr9PMx2gM81yyW12Qv6Gsj8iTGO2VAob lCwsONSG/Xwa8vILKRrsE+mXDBvP1Lc= -----END CERTIFICATE-----Generated at Wed Apr 9 12:56:06 2025 by rpki-client