$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f62c2f1b-407e-3a41-afc3-cfc03a3c7801.roa File: f62c2f1b-407e-3a41-afc3-cfc03a3c7801.roa (raw, json) Hash identifier: 4BmzHUbVfWx7SDvAicLr0o0H7T8sTq5fhUF9hqUYEWs= Subject key identifier: CD:33:5C:B2:5F:D9:D2:65:69:0B:9A:99:C5:EA:3F:4E:18:AB:68:D1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F43285848ADC60FE10F7AEDA14B860E00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f62c2f1b-407e-3a41-afc3-cfc03a3c7801.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 19905 IP address blocks: 208.181.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:0f:e1:0f:7a:ed:a1:4b:86:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=d09c57f5-9cf3-4148-b09e-81c29aca5f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bf:db:63:0e:13:d0:23:8e:30:08:c6:66:5c: 57:4d:2d:a5:ba:aa:a2:e8:da:32:1c:5e:44:c0:f2: da:51:91:58:57:c7:06:60:39:35:a6:a5:62:32:38: 2a:4d:4b:aa:07:8d:e3:9f:94:1a:dc:5a:35:34:5e: cd:f0:ba:34:39:59:6a:b7:61:fb:f6:c1:2d:e3:b7: 82:f4:4c:51:87:32:09:e8:04:66:25:08:ab:46:96: e4:87:5d:57:04:47:7d:af:e6:23:d3:5e:76:0e:cf: d8:c3:3f:7c:ae:66:2d:c2:35:4a:91:a2:f7:b0:db: 86:b1:46:39:96:86:0a:a3:52:57:39:8b:27:0c:b9: 51:80:09:06:d9:7e:c8:ff:01:b0:a9:20:c1:06:30: 39:07:31:8e:1a:d5:b8:5c:71:d1:d6:86:b9:82:5a: 15:eb:2d:48:a5:02:6b:84:a9:5c:61:61:21:5b:4c: e8:41:a5:3f:a4:83:fb:94:fe:99:21:c9:90:d9:39: 53:35:69:d9:85:99:1e:e7:cf:e4:3e:da:74:72:ef: 0a:d9:63:40:9b:35:20:8b:a6:61:dd:6a:fb:2e:06: 9c:06:e4:89:01:be:38:51:b7:aa:35:69:2b:3d:db: 86:f3:15:87:b6:c2:11:4e:f6:b2:e5:fc:8c:a0:51: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:33:5C:B2:5F:D9:D2:65:69:0B:9A:99:C5:EA:3F:4E:18:AB:68:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f62c2f1b-407e-3a41-afc3-cfc03a3c7801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.181.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e0:93:b9:ad:64:d2:b3:f7:b3:af:4e:52:d7:20:45:76:5e:5b: 96:4b:a3:83:b1:4e:ce:59:39:c6:0c:07:32:0d:9e:6f:c0:dd: 11:a3:c0:84:72:3b:9e:0a:e9:a5:9e:d7:82:e9:cf:96:4b:35: 49:09:fd:22:49:ff:ce:2b:e1:0d:c4:07:0f:d0:52:9a:e9:31: 0a:00:4d:ec:68:e1:75:99:cc:d2:e2:61:72:04:6c:16:ed:71: dd:55:40:f0:5f:6c:07:91:bf:fa:df:b7:52:2a:7d:a5:9a:10: 09:88:96:5b:d2:36:d6:d8:18:59:2c:b4:f2:cd:3f:d6:79:85: a5:60:3a:50:45:e8:f6:7d:97:26:5a:1b:24:a7:6e:17:49:64: 0b:0e:c0:46:7e:93:f0:32:22:1c:15:d9:83:5d:dc:b0:e7:bf: d5:7d:4a:5c:58:b1:a5:24:72:0c:d3:25:91:82:ba:ae:46:2f: 42:79:b5:f1:b1:3c:4d:cb:83:73:1b:c9:36:01:5a:41:ff:94: d6:24:8d:18:e1:5d:47:99:49:ea:bf:d1:04:a1:24:ea:a4:b2: d5:2b:28:b8:4a:3c:fd:fb:00:b2:b2:1b:53:38:37:e2:c9:9d: e5:e9:d4:e9:8a:b0:0b:d6:ba:86:84:fe:c2:e0:6c:1e:2c:81: ae:e8:00:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxg/hD3rtoUuGDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZDA5YzU3ZjUtOWNmMy00MTQ4LWIwOWUtODFjMjlhY2E1Zjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb/bYw4T0COOMAjGZlxXTS2luqqi6NoyHF5E wPLaUZFYV8cGYDk1pqViMjgqTUuqB43jn5Qa3Fo1NF7N8Lo0OVlqt2H79sEt47eC 9ExRhzIJ6ARmJQirRpbkh11XBEd9r+Yj0152Ds/Ywz98rmYtwjVKkaL3sNuGsUY5 loYKo1JXOYsnDLlRgAkG2X7I/wGwqSDBBjA5BzGOGtW4XHHR1oa5gloV6y1IpQJr hKlcYWEhW0zoQaU/pIP7lP6ZIcmQ2TlTNWnZhZke58/kPtp0cu8K2WNAmzUgi6Zh 3Wr7LgacBuSJAb44UbeqNWkrPduG8xWHtsIRTvay5fyMoFGcWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0zXLJf2dJlaQuamcXqP04Yq2jRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjYyYzJmMWItNDA3ZS0z YTQxLWFmYzMtY2ZjMDNhM2M3ODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0LXEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOCTua1k0rP3s69OUtcgRXZeW5ZLo4OxTs5ZOcYMBzINnm/A3RGjwIRy O54K6aWe14Lpz5ZLNUkJ/SJJ/84r4Q3EBw/QUprpMQoATexo4XWZzNLiYXIEbBbt cd1VQPBfbAeRv/rft1IqfaWaEAmIllvSNtbYGFkstPLNP9Z5haVgOlBF6PZ9lyZa GySnbhdJZAsOwEZ+k/AyIhwV2YNd3LDnv9V9SlxYsaUkcgzTJZGCuq5GL0J5tfGx PE3Lg3MbyTYBWkH/lNYkjRjhXUeZSeq/0QShJOqkstUrKLhKPP37ALKyG1M4N+LJ neXp1OmKsAvWuoaE/sLgbB4sga7oAE8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:23 2025 by rpki-client