$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/bafcf037-55c7-39cb-90a0-e05d57fb8fb9.roa File: bafcf037-55c7-39cb-90a0-e05d57fb8fb9.roa (raw, json) Hash identifier: 8DIShllWDHA6YRoPbegFBq6t3/dKKCz/k7t65OXL2TI= Subject key identifier: 6E:54:02:14:BF:26:81:8F:20:46:F2:82:97:D8:52:81:20:22:F1:85 Certificate issuer: /CN=01fc1815-34ef-424d-8258-506f8b486e35 Certificate serial: 010D0C9F432858493C09405E57222F427E6A1E20 Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/bafcf037-55c7-39cb-90a0-e05d57fb8fb9.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 46193 IP address blocks: 208.38.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:40:5e:57:22:2f:42:7e:6a:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=42a14701-d9af-44ae-b761-8ad8ef8e2840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:5c:1a:ad:9c:4c:84:65:3b:9e:dd:29:d4: 41:41:3f:10:70:fe:35:f3:87:ca:6a:53:db:cf:e4: ea:4f:4a:81:7f:da:f3:91:85:0d:f1:81:30:21:d7: 03:10:a6:ba:ff:a8:97:8a:5a:ac:b1:ae:fc:f9:52: 97:a0:cb:f7:d7:b3:0b:ee:43:db:22:99:ef:f9:76: 40:bc:e9:04:10:23:98:36:de:f4:84:31:c6:c0:3a: 6f:4c:36:88:9d:ad:44:29:ad:39:d0:99:99:db:8f: f8:f9:e7:36:6b:da:16:88:8b:da:08:25:1c:11:f9: 18:12:f3:98:89:6b:b5:9d:e1:89:be:bd:ff:ab:37: e5:40:a0:e0:b4:78:c3:bc:cb:f4:3f:ac:11:87:e3: 52:0a:31:6f:bc:23:df:9c:8e:45:e6:87:0f:b4:6a: c9:b4:37:0a:6a:3f:b3:ca:6f:a6:53:87:49:07:41: 44:a5:15:13:0e:f3:fb:c2:40:ce:17:8c:3a:ff:64: f8:41:31:9d:4f:4b:c1:ec:78:d0:d2:1a:82:68:07: 5d:85:2f:66:36:6f:99:35:ac:9f:e8:18:94:39:cc: 67:a1:ad:15:c5:c8:0d:bb:5e:66:53:37:f2:86:00: 94:4a:1f:a2:40:50:de:95:fc:4a:6d:97:b6:ff:2b: 08:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:54:02:14:BF:26:81:8F:20:46:F2:82:97:D8:52:81:20:22:F1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/bafcf037-55c7-39cb-90a0-e05d57fb8fb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl X509v3 Authority Key Identifier: keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer sbgp-ipAddrBlock: critical IPv4: 208.38.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:96:f7:f8:88:16:5b:33:9f:d4:45:b1:95:a3:9d:4b:91:73: 27:02:1b:0e:10:d2:02:e5:1f:a2:8d:44:fc:80:77:e6:d2:88: 7f:8d:cb:95:a1:4c:dd:57:f2:92:b0:66:57:e4:18:c9:64:5d: 89:94:85:73:7e:13:ce:e2:de:f8:80:89:3b:5f:38:ff:56:cb: 7b:7b:4e:07:cf:43:0c:b7:34:d8:fd:01:ac:66:81:1b:28:49: 52:0e:84:22:df:a0:60:1c:b8:3d:d5:f2:f8:32:c8:83:9f:75: 03:82:ce:5a:f8:87:24:61:7f:e5:ff:76:a9:85:1b:79:48:e2: c3:2b:61:0f:b1:82:e6:89:4b:e8:8d:bd:b1:ed:24:01:5f:05: ea:b5:e9:c5:dd:75:2d:d5:e8:6d:49:8e:0e:44:26:d5:9e:bb: 4a:a7:c6:8a:64:aa:b8:c5:d5:5f:ec:82:e3:a6:f1:24:ac:a4: e3:8f:d9:5a:e5:39:b1:15:8d:4f:6d:e2:a4:7b:f6:73:b6:05: 40:1c:cd:9f:e2:56:f1:bb:bd:84:66:88:f7:17:75:31:d7:7e: 0a:6e:e6:e3:91:46:bc:45:54:bf:7c:6f:dd:82:14:7a:d9:e0: e9:d4:40:61:ef:90:eb:64:0c:f4:7d:20:a3:a4:4c:64:a1:cc: 47:3f:7b:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CUBeVyIvQn5qHiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFmYzE4MTUtMzRlZi00MjRkLTgyNTgtNTA2ZjhiNDg2 ZTM1MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk NDJhMTQ3MDEtZDlhZi00NGFlLWI3NjEtOGFkOGVmOGUyODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lBcGq2cTIRlO57dKdRBQT8QcP4184fKalPb z+TqT0qBf9rzkYUN8YEwIdcDEKa6/6iXilqssa78+VKXoMv317ML7kPbIpnv+XZA vOkEECOYNt70hDHGwDpvTDaIna1EKa050JmZ24/4+ec2a9oWiIvaCCUcEfkYEvOY iWu1neGJvr3/qzflQKDgtHjDvMv0P6wRh+NSCjFvvCPfnI5F5ocPtGrJtDcKaj+z ym+mU4dJB0FEpRUTDvP7wkDOF4w6/2T4QTGdT0vB7HjQ0hqCaAddhS9mNm+ZNayf 6BiUOcxnoa0VxcgNu15mUzfyhgCUSh+iQFDelfxKbZe2/ysI/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5UAhS/JoGPIEbygpfYUoEgIvGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMWZj MTgxNS0zNGVmLTQyNGQtODI1OC01MDZmOGI0ODZlMzUvYmFmY2YwMzctNTVjNy0z OWNiLTkwYTAtZTA1ZDU3ZmI4ZmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDFmYzE4MTUtMzRlZi00MjRkLTgy NTgtNTA2ZjhiNDg2ZTM1LzAxZmMxODE1LTM0ZWYtNDI0ZC04MjU4LTUwNmY4YjQ4 NmUzNS5jcmwwHwYDVR0jBBgwFoAUUaJ7qddOmwRfZds/wwhmgYTMQJUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wMWZjMTgxNS0zNGVmLTQyNGQtODI1OC01MDZm OGI0ODZlMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0CbLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGW9/iIFlszn9RFsZWjnUuRcycCGw4Q0gLlH6KNRPyAd+bSiH+Ny5Wh TN1X8pKwZlfkGMlkXYmUhXN+E87i3viAiTtfOP9Wy3t7TgfPQwy3NNj9AaxmgRso SVIOhCLfoGAcuD3V8vgyyIOfdQOCzlr4hyRhf+X/dqmFG3lI4sMrYQ+xguaJS+iN vbHtJAFfBeq16cXddS3V6G1Jjg5EJtWeu0qnxopkqrjF1V/sguOm8SSspOOP2Vrl ObEVjU9t4qR79nO2BUAczZ/iVvG7vYRmiPcXdTHXfgpu5uORRrxFVL98b92CFHrZ 4OnUQGHvkOtkDPR9IKOkTGShzEc/e0E= -----END CERTIFICATE-----Generated at Mon Apr 7 15:37:24 2025 by rpki-client