$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa File: 04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa (raw, json) Hash identifier: LhmItS2g+AvB5sJ66No/5RcgFKlHX5excU6G0vO1bA8= Subject key identifier: 7F:8E:CF:74:AC:DB:88:0A:CC:5B:13:C4:C2:DF:73:04:7B:76:42:52 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F432858495529565AE2249365FA2F3440 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 204.8.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:56:5a:e2:24:93:65:fa:2f:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=05627153-8f55-4098-bbc8-60dd27a876ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ac:10:04:56:ad:77:bb:19:a8:76:35:5f:3e: 7b:9c:7d:7c:74:9b:c2:02:49:6b:a9:a4:d2:31:d0: 8c:6a:f3:71:a5:55:94:d7:17:9f:0e:a0:b6:df:50: 09:91:e9:fe:c1:20:b7:b8:b8:5d:ec:36:dd:38:4a: eb:00:22:98:88:92:96:f4:d5:e0:0f:fd:f9:ef:be: 2b:ee:cb:2b:7f:ef:d5:b9:40:02:47:23:4d:15:3f: 5b:18:53:a5:81:4d:ac:dd:c8:ac:1f:32:63:55:2d: 08:a1:f7:06:6d:7b:4d:54:4f:70:d3:3e:2c:27:59: 69:d3:82:3d:cd:b8:61:bd:9a:a2:29:15:12:9a:e1: c7:eb:8c:bf:80:b7:da:23:14:9e:8b:5d:0e:42:5a: b7:af:6e:8b:48:49:d8:a9:11:94:87:cb:a0:c7:75: bd:50:2a:76:0b:6b:70:84:32:e3:8e:fc:ed:6d:cd: 48:d9:c7:10:22:89:83:b7:2a:f7:df:c1:fb:69:4d: ab:ea:bd:2e:ab:1a:62:1f:6f:2e:11:15:5d:ef:4b: 6c:6d:c9:64:8e:6c:7c:f2:ed:4b:ea:e8:75:51:68: dd:12:8f:d6:3b:73:35:2b:17:3f:a8:6c:27:b1:2c: b3:68:e4:74:de:24:88:3d:98:f7:31:3b:dc:1d:77: cd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8E:CF:74:AC:DB:88:0A:CC:5B:13:C4:C2:DF:73:04:7B:76:42:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/04e7e50d-763f-326a-ab05-ccfc9ffa530b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 204.8.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:67:f3:f4:d6:17:85:e3:b8:55:e0:89:c1:5d:24:97:82:0b: d7:51:e6:cb:3a:90:2a:71:02:52:59:f6:77:4e:c6:ad:ef:a0: 49:81:63:03:41:e1:4e:c7:35:50:aa:f9:11:73:f3:0b:59:5b: 06:b4:5c:da:9f:b0:ae:09:09:73:8f:e7:cb:85:b9:b2:d0:18: 65:31:3c:f7:9d:12:6b:61:0a:22:ce:05:87:76:8f:d5:ea:61: 36:95:dd:b0:e9:2a:97:85:b4:79:46:24:79:ff:25:27:6d:80: 6b:cd:78:f2:84:61:b9:f0:53:b8:93:8a:22:65:01:6c:3b:4a: 4d:c9:64:57:8d:c7:75:fb:1e:1a:a6:04:27:9e:9f:65:89:6b: dc:e5:a9:6e:49:fc:a6:f4:12:74:1c:4d:da:12:18:a7:ab:e6: ec:af:a3:18:f3:2f:59:e6:f2:34:74:10:88:6e:f0:9a:e6:7b: 97:c0:b5:55:30:03:3c:3e:f5:3a:bf:89:9c:2e:56:22:b5:bb: 9a:95:47:ce:d8:f6:2e:4e:bd:cc:a6:b6:ad:e5:ae:db:15:c4: b6:55:f2:8c:20:6c:19:c6:fd:04:40:2a:f3:34:ad:25:f5:3b: 56:d4:ce:8b:bc:a4:e4:44:f1:07:20:c6:fa:62:f2:47:fc:8e: 77:4e:ba:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVZa4iSTZfovNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk MDU2MjcxNTMtOGY1NS00MDk4LWJiYzgtNjBkZDI3YTg3NmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6wQBFatd7sZqHY1Xz57nH18dJvCAklrqaTS MdCMavNxpVWU1xefDqC231AJken+wSC3uLhd7DbdOErrACKYiJKW9NXgD/35774r 7ssrf+/VuUACRyNNFT9bGFOlgU2s3cisHzJjVS0IofcGbXtNVE9w0z4sJ1lp04I9 zbhhvZqiKRUSmuHH64y/gLfaIxSei10OQlq3r26LSEnYqRGUh8ugx3W9UCp2C2tw hDLjjvztbc1I2ccQIomDtyr338H7aU2r6r0uqxpiH28uERVd70tsbclkjmx88u1L 6uh1UWjdEo/WO3M1Kxc/qGwnsSyzaOR03iSIPZj3MTvcHXfNaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+Oz3Ss24gKzFsTxMLfcwR7dkJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMDRlN2U1MGQtNzYzZi0z MjZhLWFiMDUtY2NmYzlmZmE1MzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBn8/TWF4XjuFXgicFdJJeCC9dR5ss6kCpxAlJZ9ndOxq3voEmBYwNB 4U7HNVCq+RFz8wtZWwa0XNqfsK4JCXOP58uFubLQGGUxPPedEmthCiLOBYd2j9Xq YTaV3bDpKpeFtHlGJHn/JSdtgGvNePKEYbnwU7iTiiJlAWw7Sk3JZFeNx3X7Hhqm BCeen2WJa9zlqW5J/Kb0EnQcTdoSGKer5uyvoxjzL1nm8jR0EIhu8Jrme5fAtVUw Azw+9Tq/iZwuViK1u5qVR87Y9i5Ovcymtq3lrtsVxLZV8owgbBnG/QRAKvM0rSX1 O1bUzou8pORE8Qcgxvpi8kf8jndOuiY= -----END CERTIFICATE-----Generated at Fri Apr 11 21:10:19 2025 by rpki-client