$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c91b45cf-ba14-3108-8d6b-b778a6fb095c.roa File: c91b45cf-ba14-3108-8d6b-b778a6fb095c.roa (raw, json) Hash identifier: zQKtOXwkv8yoOTem/7hYZBp6Bu7HHZ5IzQNmoVY8ONA= Subject key identifier: 66:F2:A7:AD:01:36:AD:64:67:2D:2B:60:80:9F:A8:2D:E3:02:C6:03 Certificate issuer: /CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1 Certificate serial: 010D0C9F432858495ABEE27D36FC514E8895FC80 Authority key identifier: 80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c91b45cf-ba14-3108-8d6b-b778a6fb095c.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 7029 IP address blocks: 205.236.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e2:7d:36:fc:51:4e:88:95:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d022e4d-a2ec-4d14-9342-a503ec63cac1 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=111ccc66-b2c0-40f5-a4ae-6d7883572cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2d:97:fa:01:ef:4a:b4:4a:40:34:54:92:86: bf:9d:2f:fb:45:0f:c8:f7:2f:35:27:aa:c7:3f:97: c8:77:3b:47:2f:13:84:68:85:3e:af:d6:64:57:37: 33:bb:a2:67:eb:83:2a:3c:72:f4:83:4f:aa:29:a7: 8d:90:e6:23:07:42:91:21:35:47:6d:70:0b:5e:94: 9c:00:c6:86:58:60:0e:33:7c:7d:25:d7:94:7b:9b: 9d:19:ee:ec:67:30:c6:d3:b0:7f:00:b2:74:b7:2c: e9:c0:ee:3e:20:0e:65:3e:6e:c0:1f:7f:6b:47:b1: db:da:7c:89:c0:df:3e:01:62:4c:70:e6:0b:d5:26: d6:de:87:b3:63:87:3a:e2:4f:8c:28:88:0a:02:e4: 9f:d9:17:53:db:b3:57:3a:fd:cb:a4:fe:af:21:2d: 96:8a:b2:92:4d:ab:fb:a1:c1:15:04:9f:51:4f:b4: 56:c8:cf:d5:4d:aa:6e:b5:f3:ed:33:d0:38:f1:ea: 7e:25:ca:63:d0:0c:b8:45:39:16:6e:20:2a:cf:62: 7c:8c:9a:68:17:33:a4:e1:6f:7f:46:b7:5b:90:ed: 6b:3e:01:db:fd:59:df:5d:3c:d2:e8:34:37:24:c4: c4:07:3a:c0:eb:5b:17:b9:75:68:17:bb:1f:8d:d8: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F2:A7:AD:01:36:AD:64:67:2D:2B:60:80:9F:A8:2D:E3:02:C6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/c91b45cf-ba14-3108-8d6b-b778a6fb095c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1/3d022e4d-a2ec-4d14-9342-a503ec63cac1.crl X509v3 Authority Key Identifier: keyid:80:79:BD:B1:F1:56:2E:6D:24:3C:ED:7E:8C:17:10:2F:A6:30:2B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3d022e4d-a2ec-4d14-9342-a503ec63cac1.cer sbgp-ipAddrBlock: critical IPv4: 205.236.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fd:4d:1c:e4:c9:29:9d:5d:f8:f4:36:d2:b2:e4:18:85:90: 63:1f:17:2b:20:d3:42:b5:1f:10:79:06:ff:50:05:41:c5:e0: 34:3f:13:d9:71:a8:0d:a1:10:b4:00:04:d5:03:2b:71:08:87: 0f:71:02:cb:68:f4:21:54:45:5d:7c:1b:59:a7:9a:f1:55:df: a7:f1:18:ee:49:83:d2:f9:bb:60:66:c0:df:44:81:57:8f:77: 98:5c:7d:3a:70:06:1c:a9:3a:93:77:7c:22:87:69:03:6b:00: 2e:f6:5e:ef:2b:e7:d0:67:6f:37:43:35:79:9d:93:05:66:42: 63:2a:cd:13:37:80:3b:a1:85:d3:f6:83:cd:b5:42:2c:92:80: da:cd:ec:9d:b2:47:8b:e4:8c:9a:65:7c:9d:43:36:13:9f:15: 99:01:d3:7e:8d:18:fd:24:a2:f6:86:79:be:18:0d:3f:bf:25: e1:90:42:18:47:0e:ec:4b:e0:25:82:51:f2:8c:2d:04:8a:23: b0:fb:8a:84:26:dd:76:b3:d0:3e:f3:07:a2:dc:0b:b8:d2:8c: a0:f9:e3:60:c0:19:9b:1b:98:73:6a:b8:35:34:53:ae:e9:de: 32:1c:fe:8d:cc:a7:3c:7f:76:45:c3:e5:c6:73:53:27:1e:d3: 96:a1:bf:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuJ9NvxRToiV/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QwMjJlNGQtYTJlYy00ZDE0LTkzNDItYTUwM2VjNjNj YWMxMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MTExY2NjNjYtYjJjMC00MGY1LWE0YWUtNmQ3ODgzNTcyY2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC2X+gHvSrRKQDRUkoa/nS/7RQ/I9y81J6rH P5fIdztHLxOEaIU+r9ZkVzczu6Jn64MqPHL0g0+qKaeNkOYjB0KRITVHbXALXpSc AMaGWGAOM3x9JdeUe5udGe7sZzDG07B/ALJ0tyzpwO4+IA5lPm7AH39rR7Hb2nyJ wN8+AWJMcOYL1SbW3oezY4c64k+MKIgKAuSf2RdT27NXOv3LpP6vIS2WirKSTav7 ocEVBJ9RT7RWyM/VTaputfPtM9A48ep+Jcpj0Ay4RTkWbiAqz2J8jJpoFzOk4W9/ RrdbkO1rPgHb/VnfXTzS6DQ3JMTEBzrA61sXuXVoF7sfjdjrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbyp60BNq1kZy0rYICfqC3jAsYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZDAy MmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAzZWM2M2NhYzEvYzkxYjQ1Y2YtYmExNC0z MTA4LThkNmItYjc3OGE2ZmIwOTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2QwMjJlNGQtYTJlYy00ZDE0LTkz NDItYTUwM2VjNjNjYWMxLzNkMDIyZTRkLWEyZWMtNGQxNC05MzQyLWE1MDNlYzYz Y2FjMS5jcmwwHwYDVR0jBBgwFoAUgHm9sfFWLm0kPO1+jBcQL6YwK8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zZDAyMmU0ZC1hMmVjLTRkMTQtOTM0Mi1hNTAz ZWM2M2NhYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzez1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX9TRzkySmdXfj0NtKy5BiFkGMfFysg00K1HxB5Bv9QBUHF4DQ/E9lx qA2hELQABNUDK3EIhw9xAsto9CFURV18G1mnmvFV36fxGO5Jg9L5u2BmwN9EgVeP d5hcfTpwBhypOpN3fCKHaQNrAC72Xu8r59BnbzdDNXmdkwVmQmMqzRM3gDuhhdP2 g821QiySgNrN7J2yR4vkjJplfJ1DNhOfFZkB036NGP0kovaGeb4YDT+/JeGQQhhH DuxL4CWCUfKMLQSKI7D7ioQm3Xaz0D7zB6LcC7jSjKD542DAGZsbmHNquDU0U67p 3jIc/o3Mpzx/dkXD5cZzUyce05ahv0U= -----END CERTIFICATE-----Generated at Sun Apr 6 02:00:45 2025 by rpki-client