$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/d9ed5857-01ca-3449-a400-25ab44cbe450.roa File: d9ed5857-01ca-3449-a400-25ab44cbe450.roa (raw, json) Hash identifier: UuI/zkNhva01lrL8+sYn18vp1mMdH9Ud7VTOHSCViL0= Subject key identifier: 80:D2:D7:9E:17:7E:CB:E3:3E:DF:65:38:EE:5D:E7:1C:D3:77:1D:D1 Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b Certificate serial: 010D0C9F432858491246C5C015D88A128F722040 Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/d9ed5857-01ca-3449-a400-25ab44cbe450.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 22925 IP address blocks: 205.201.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c5:c0:15:d8:8a:12:8f:72:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bdc21c04-f28e-4dbd-a43d-fc9ccd2b38ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:ef:aa:c1:06:08:b4:9a:08:ba:c1:73:da: f5:d1:02:f9:c8:a9:08:52:17:f0:aa:92:32:24:1c: a4:5e:e9:6b:e2:c2:ca:ab:e3:1d:29:27:6d:ea:8c: 4a:5a:e1:de:94:81:97:0a:f6:99:3c:23:27:7f:e7: e1:46:74:07:77:3d:73:ea:7e:a6:1a:80:3c:de:25: 38:29:bb:28:4e:a2:c2:1e:ea:52:9d:b8:2f:a9:f1: 59:c6:96:e7:ac:1f:1a:29:de:29:4b:3a:56:85:1f: 26:fe:12:6f:a0:ac:d1:3c:12:de:4f:6a:db:26:7a: 75:ff:ee:24:fb:db:1e:52:c9:a5:c8:88:b5:2b:f1: 92:81:d2:36:4d:f4:ca:fa:a9:9b:cd:05:5b:57:d7: 5e:e1:84:f9:55:d5:4d:1d:29:20:b9:95:60:e0:97: b3:b1:a3:ca:1e:11:2c:75:56:c8:6a:19:bd:ba:b2: ae:48:a4:68:76:2d:82:e6:71:df:48:a2:0b:0e:46: 56:9a:88:7f:99:57:b9:ae:f6:f3:ef:93:c6:2f:d1: 04:ac:09:6e:4b:3c:b6:90:a6:cd:54:4b:77:1c:e9: 04:93:6a:40:d7:1b:e7:49:e9:02:8e:38:45:3b:a4: f0:0d:ac:75:1f:0a:b5:f1:77:68:55:48:df:20:64: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D2:D7:9E:17:7E:CB:E3:3E:DF:65:38:EE:5D:E7:1C:D3:77:1D:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/d9ed5857-01ca-3449-a400-25ab44cbe450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl X509v3 Authority Key Identifier: keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer sbgp-ipAddrBlock: critical IPv4: 205.201.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f9:99:4f:7e:9b:ff:ac:95:d8:0e:cf:c7:a5:7d:98:30:b5: fa:9c:e9:27:42:67:30:af:1e:0b:f4:a7:a2:6b:1f:e8:39:11: 78:2a:41:ce:a3:b9:a2:51:04:5b:0e:51:7c:0a:47:3b:f6:e5: 9e:1e:f6:03:20:a7:05:84:96:12:cd:20:3b:3d:0c:35:5c:b9: ad:f3:02:f9:42:12:d1:79:35:29:e1:8a:7a:ac:cf:9d:94:b2: 07:1d:88:71:b8:fe:0f:5f:56:32:74:75:54:f6:44:d4:9b:40: 5f:69:9f:2f:1f:60:c3:10:39:33:98:73:30:88:68:f5:54:1a: 00:c4:95:31:15:3e:9b:ac:d3:2e:2c:1c:31:4a:80:b0:77:84: a4:14:ba:ab:a7:2f:c7:00:83:d2:e0:8e:87:e4:28:f0:00:16: 6d:1f:ae:be:c6:15:e0:94:4b:18:cd:6a:39:ef:96:fb:5e:2e: b2:67:bb:c5:b0:57:2d:f3:1e:83:e4:dd:0e:79:a8:98:ed:ab: 05:d6:37:70:ab:50:b8:ab:15:64:15:c3:5c:ce:b2:d2:fa:3c: 0b:cd:53:93:f5:f2:b1:31:69:27:c2:21:65:12:3e:d8:e7:35: c2:3a:c4:c4:dc:01:7a:52:9d:53:d3:db:e2:4b:6f:23:f4:96: 29:9b:23:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsXAFdiKEo9yIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjc4YTIzNGYtOTU1My00NDZhLTk2NWQtMGJmZmZhNDAy ZjFiMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmRjMjFjMDQtZjI4ZS00ZGJkLWE0M2QtZmM5Y2NkMmIzOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5nvqsEGCLSaCLrBc9r10QL5yKkIUhfwqpIy JBykXulr4sLKq+MdKSdt6oxKWuHelIGXCvaZPCMnf+fhRnQHdz1z6n6mGoA83iU4 KbsoTqLCHupSnbgvqfFZxpbnrB8aKd4pSzpWhR8m/hJvoKzRPBLeT2rbJnp1/+4k +9seUsmlyIi1K/GSgdI2TfTK+qmbzQVbV9de4YT5VdVNHSkguZVg4JezsaPKHhEs dVbIahm9urKuSKRodi2C5nHfSKILDkZWmoh/mVe5rvbz75PGL9EErAluSzy2kKbN VEt3HOkEk2pA1xvnSekCjjhFO6TwDax1Hwq18XdoVUjfIGT5pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDS154XfsvjPt9lOO5d5xzTdx3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhh MjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZmZmE0MDJmMWIvZDllZDU4NTctMDFjYS0z NDQ5LWE0MDAtMjVhYjQ0Y2JlNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjc4YTIzNGYtOTU1My00NDZhLTk2 NWQtMGJmZmZhNDAyZjFiL2Y3OGEyMzRmLTk1NTMtNDQ2YS05NjVkLTBiZmZmYTQw MmYxYi5jcmwwHwYDVR0jBBgwFoAUySL1rL077bzOZt54JOhaPckKjtYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNzhhMjM0Zi05NTUzLTQ0NmEtOTY1ZC0wYmZm ZmE0MDJmMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzcnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGT5mU9+m/+sldgOz8elfZgwtfqc6SdCZzCvHgv0p6JrH+g5EXgqQc6j uaJRBFsOUXwKRzv25Z4e9gMgpwWElhLNIDs9DDVcua3zAvlCEtF5NSnhinqsz52U sgcdiHG4/g9fVjJ0dVT2RNSbQF9pny8fYMMQOTOYczCIaPVUGgDElTEVPpus0y4s HDFKgLB3hKQUuqunL8cAg9LgjofkKPAAFm0frr7GFeCUSxjNajnvlvteLrJnu8Ww Vy3zHoPk3Q55qJjtqwXWN3CrULirFWQVw1zOstL6PAvNU5P18rExaSfCIWUSPtjn NcI6xMTcAXpSnVPT2+JLbyP0limbI2E= -----END CERTIFICATE-----Generated at Wed Apr 9 12:58:37 2025 by rpki-client