$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa File: 3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa (raw, json) Hash identifier: SNFxr8VPEP7uvI9hij4eVHEquaXkrTPOSE91H+TzLNc= Subject key identifier: C3:79:5A:49:56:28:C9:9D:F0:B4:74:E3:F2:61:77:DF:CC:E1:3A:DF Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285848F65BCC84D05874A7FBC52B00 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16904 IP address blocks: 207.191.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:cc:84:d0:58:74:a7:fb:c5:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=aeeacd60-ed3e-4347-b435-56a176cfc7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:48:db:5a:de:8e:17:cf:69:62:95:f6:21:b0: 86:0c:98:dd:b7:ad:26:5d:ad:c4:73:c3:62:10:29: 24:04:d0:e2:57:7a:28:a8:62:96:5d:9a:20:44:cd: ee:99:3f:28:51:0a:65:22:7d:f3:42:b4:fa:ad:a0: de:28:83:73:7f:f5:a3:f3:da:66:a4:03:6c:a1:30: 9f:d7:d1:a7:ae:1e:af:2b:06:55:75:08:0b:6f:f0: a0:bb:47:99:20:79:b1:b6:e8:83:f3:0e:0c:c4:86: 26:6a:92:de:91:2d:f2:9e:5d:fb:c5:93:02:11:6d: 68:5a:58:d9:36:31:10:66:8d:ec:4e:45:b0:ac:8b: 6e:c8:5c:3f:2a:96:b1:5c:40:22:a0:6a:09:76:6f: ad:4b:6f:cf:0d:3a:ba:e1:44:f8:8c:57:35:bd:a6: 4f:d3:b2:b1:8d:60:20:bf:04:6d:18:0b:bc:6a:4f: 51:43:ff:b7:c5:50:e9:61:2f:36:78:41:40:61:7d: 7c:3b:78:c8:5b:d1:7c:69:fb:3a:5f:ec:cf:c0:6d: 85:21:77:93:e7:08:48:f4:f4:11:01:9c:73:23:d5: 5c:7c:a2:a8:56:8c:4e:c8:a9:07:30:27:0c:c6:b2: 2e:53:8d:a4:c5:e8:8c:ac:f6:98:85:69:a9:94:46: 4f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:79:5A:49:56:28:C9:9D:F0:B4:74:E3:F2:61:77:DF:CC:E1:3A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/3628c9dd-8ee3-33f0-80f2-e0b97984323f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 207.191.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:a5:ad:18:60:f4:50:c9:fe:fc:cc:7c:58:8c:aa:55:ff:9e: 45:d8:23:75:ac:93:b1:4c:02:0a:e2:78:fb:68:a3:9f:6f:5b: 64:f9:a1:d3:65:ba:51:cf:fb:37:2e:3c:fd:61:36:d7:04:43: 1f:db:d1:fd:ba:cd:e9:c3:64:66:e3:71:9a:4e:90:80:17:1d: bf:22:0b:74:d7:a4:c8:2b:94:04:2d:1d:d0:38:fa:50:fe:98: e8:df:8b:d7:e4:ac:fc:8b:52:9a:86:c3:58:d4:a2:ca:97:ea: 52:a7:2d:e5:1b:8b:ee:1a:e2:8b:2d:78:a6:22:40:b6:4e:4c: 96:42:47:c4:6f:3f:1b:94:3c:e9:37:86:3f:a8:77:89:2f:2a: 5f:c8:f0:28:89:09:5c:e4:ab:0f:c5:67:df:e0:f7:68:88:0a: df:07:49:2a:56:cc:bc:6f:b0:4d:cf:14:b2:3d:62:7d:9b:c3: ce:9f:ab:4a:5c:5d:21:8b:6d:28:cc:f6:61:ca:89:14:49:72: f4:78:a0:a8:72:51:3c:a7:c1:bb:2f:25:8b:7f:70:cb:14:81: ec:ec:87:0d:3d:86:3e:a2:ac:df:2f:f6:8c:85:ac:34:85:e8: 2e:f5:97:29:08:de:ec:9c:d9:46:6b:0d:17:e9:4a:07:b5:4d: 53:27:dc:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W8yE0Fh0p/vFKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk YWVlYWNkNjAtZWQzZS00MzQ3LWI0MzUtNTZhMTc2Y2ZjN2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkjbWt6OF89pYpX2IbCGDJjdt60mXa3Ec8Ni ECkkBNDiV3ooqGKWXZogRM3umT8oUQplIn3zQrT6raDeKINzf/Wj89pmpANsoTCf 19Gnrh6vKwZVdQgLb/Cgu0eZIHmxtuiD8w4MxIYmapLekS3ynl37xZMCEW1oWljZ NjEQZo3sTkWwrItuyFw/KpaxXEAioGoJdm+tS2/PDTq64UT4jFc1vaZP07KxjWAg vwRtGAu8ak9RQ/+3xVDpYS82eEFAYX18O3jIW9F8afs6X+zPwG2FIXeT5whI9PQR AZxzI9VcfKKoVoxOyKkHMCcMxrIuU42kxeiMrPaYhWmplEZPzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMN5WklWKMmd8LR04/Jhd9/M4TrfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvMzYyOGM5ZGQtOGVlMy0z M2YwLTgwZjItZTBiOTc5ODQzMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz7+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6lrRhg9FDJ/vzMfFiMqlX/nkXYI3Wsk7FMAgriePtoo59vW2T5odNl ulHP+zcuPP1hNtcEQx/b0f26zenDZGbjcZpOkIAXHb8iC3TXpMgrlAQtHdA4+lD+ mOjfi9fkrPyLUpqGw1jUosqX6lKnLeUbi+4a4osteKYiQLZOTJZCR8RvPxuUPOk3 hj+od4kvKl/I8CiJCVzkqw/FZ9/g92iICt8HSSpWzLxvsE3PFLI9Yn2bw86fq0pc XSGLbSjM9mHKiRRJcvR4oKhyUTynwbsvJYt/cMsUgezshw09hj6irN8v9oyFrDSF 6C71lykI3uyc2UZrDRfpSge1TVMn3LY= -----END CERTIFICATE-----Generated at Sat Apr 12 12:55:59 2025 by rpki-client