$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2cca03e9-39e8-3895-9aa1-920d570a3317.roa File: 2cca03e9-39e8-3895-9aa1-920d570a3317.roa (raw, json) Hash identifier: kKZDaoVkrPrYlzlWoud5cyxX4uVM/3fwN012UP2dDFg= Subject key identifier: C1:28:FB:44:0C:0E:6A:17:30:78:9B:8C:9D:76:6C:A1:F0:A0:DE:11 Certificate issuer: /CN=798d5ad9-145d-4a5d-bd4c-6042dc72b63b Certificate serial: 010D0C9F43285848A830A7B6DC6FC6D432D63540 Authority key identifier: 5E:30:92:20:35:C0:B6:CF:20:D9:0B:98:92:C3:73:9F:1A:DE:2D:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2cca03e9-39e8-3895-9aa1-920d570a3317.roa Signing time: Sat 25 Jan 2025 02:00:39 +0000 ROA not before: Sat 25 Jan 2025 02:00:39 +0000 ROA not after: Fri 25 Apr 2025 01:00:39 +0000 asID: 8075 IP address blocks: 205.135.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a8:30:a7:b6:dc:6f:c6:d4:32:d6:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798d5ad9-145d-4a5d-bd4c-6042dc72b63b Validity Not Before: Jan 25 02:00:39 2025 GMT Not After : Apr 25 01:00:39 2025 GMT Subject: CN=f448427e-b36a-4007-94ee-7a308d5ce421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:60:25:77:7f:80:c8:81:77:cf:ab:c0:ed:bd: 25:46:8a:32:b5:12:e5:9f:04:dc:f4:b9:74:25:3c: b5:98:c1:a4:18:42:07:84:36:e4:61:78:c7:83:f8: f6:44:c1:47:5b:04:eb:3c:9a:ba:e6:e2:43:bb:01: 56:1c:e9:c4:64:be:33:c2:93:57:57:ce:8a:d6:a7: 09:ff:0a:11:dd:f4:d5:4d:55:98:c5:ba:d8:7f:d4: df:1a:f7:6e:ff:95:e0:fb:24:ac:ef:2c:a1:86:85: f5:1d:5d:11:50:69:60:23:c4:66:2f:4f:66:bd:4a: 5a:da:53:18:70:a8:4c:df:42:72:32:27:a2:1d:b5: 24:65:c7:39:69:93:9e:7a:97:47:c7:dd:81:ee:5b: 7a:93:e2:e2:73:8d:2b:c4:f6:87:af:1c:58:24:da: c6:42:17:05:52:30:df:a4:60:ac:66:3d:81:9c:6f: cc:ff:25:95:25:1c:49:50:41:4c:a9:67:a3:85:75: 82:f8:0c:21:5e:2c:55:fe:72:6b:79:95:59:65:1b: de:4e:48:ff:06:8b:e0:4b:35:07:74:64:55:78:4d: 5c:32:f1:87:cb:3b:04:92:16:64:08:1d:f2:2c:1e: b1:ba:ef:49:d8:74:f0:24:db:92:27:ff:a2:95:c5: 16:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:28:FB:44:0C:0E:6A:17:30:78:9B:8C:9D:76:6C:A1:F0:A0:DE:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/2cca03e9-39e8-3895-9aa1-920d570a3317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.crl X509v3 Authority Key Identifier: keyid:5E:30:92:20:35:C0:B6:CF:20:D9:0B:98:92:C3:73:9F:1A:DE:2D:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/798d5ad9-145d-4a5d-bd4c-6042dc72b63b.cer sbgp-ipAddrBlock: critical IPv4: 205.135.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:46:a7:4d:7c:ad:bb:e4:9e:75:d1:9d:e7:69:d0:0e:e3:d6: 8a:c1:e6:6c:e1:fc:25:8d:9f:f5:f4:ee:bd:a9:c7:5a:1a:b9: a6:68:88:ef:42:34:b7:70:ef:dc:de:e8:0c:51:9b:33:2e:f9: 5b:1c:1f:18:b4:4b:4e:1e:c9:28:87:e8:c1:dc:c9:d3:ff:b8: b9:54:03:3e:dc:d1:50:b1:e5:6a:b4:03:53:df:1d:ef:b1:87: e9:ed:4b:2d:d0:e1:86:f0:0c:db:76:d7:4b:1c:ec:83:51:18: 4c:97:a2:88:70:01:51:b7:fd:8e:88:ca:25:9c:7b:a6:bf:57: 3c:5c:2d:55:20:39:a7:d9:53:a0:05:12:af:01:2c:a2:aa:27: 0d:c4:10:a1:7f:ce:ae:68:13:36:bf:35:be:ed:7b:5a:a3:7a: c6:c3:ed:02:a9:fc:d4:f3:63:46:34:6f:71:8b:d4:e2:dc:2e: f1:06:99:8c:5b:aa:96:a1:b5:9b:f9:a2:54:89:eb:9e:5a:f6: 68:ed:9b:8c:25:f5:48:af:24:ff:9b:b8:35:2b:70:b3:87:c8: 97:2f:3d:3e:5e:41:da:d6:03:f7:af:7e:22:28:dc:1a:61:a9: c3:79:68:28:ef:3b:fc:64:39:1f:0c:c4:66:55:21:d2:d8:28: 93:ad:bc:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKe23G/G1DLWNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzk4ZDVhZDktMTQ1ZC00YTVkLWJkNGMtNjA0MmRjNzJi NjNiMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk ZjQ0ODQyN2UtYjM2YS00MDA3LTk0ZWUtN2EzMDhkNWNlNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GAld3+AyIF3z6vA7b0lRooytRLlnwTc9Ll0 JTy1mMGkGEIHhDbkYXjHg/j2RMFHWwTrPJq65uJDuwFWHOnEZL4zwpNXV86K1qcJ /woR3fTVTVWYxbrYf9TfGvdu/5Xg+ySs7yyhhoX1HV0RUGlgI8RmL09mvUpa2lMY cKhM30JyMieiHbUkZcc5aZOeepdHx92B7lt6k+Lic40rxPaHrxxYJNrGQhcFUjDf pGCsZj2BnG/M/yWVJRxJUEFMqWejhXWC+AwhXixV/nJreZVZZRveTkj/BovgSzUH dGRVeE1cMvGHyzsEkhZkCB3yLB6xuu9J2HTwJNuSJ/+ilcUWOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEo+0QMDmoXMHibjJ12bKHwoN4RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83OThk NWFkOS0xNDVkLTRhNWQtYmQ0Yy02MDQyZGM3MmI2M2IvMmNjYTAzZTktMzllOC0z ODk1LTlhYTEtOTIwZDU3MGEzMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzk4ZDVhZDktMTQ1ZC00YTVkLWJk NGMtNjA0MmRjNzJiNjNiLzc5OGQ1YWQ5LTE0NWQtNGE1ZC1iZDRjLTYwNDJkYzcy YjYzYi5jcmwwHwYDVR0jBBgwFoAUXjCSIDXAts8g2QuYksNznxreLfQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83OThkNWFkOS0xNDVkLTRhNWQtYmQ0Yy02MDQy ZGM3MmI2M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFGp018rbvknnXRnedp0A7j1orB5mzh/CWNn/X07r2px1oauaZoiO9C NLdw79ze6AxRmzMu+VscHxi0S04eySiH6MHcydP/uLlUAz7c0VCx5Wq0A1PfHe+x h+ntSy3Q4YbwDNt210sc7INRGEyXoohwAVG3/Y6IyiWce6a/VzxcLVUgOafZU6AF Eq8BLKKqJw3EEKF/zq5oEza/Nb7te1qjesbD7QKp/NTzY0Y0b3GL1OLcLvEGmYxb qpahtZv5olSJ655a9mjtm4wl9UivJP+buDUrcLOHyJcvPT5eQdrWA/evfiIo3Bph qcN5aCjvO/xkOR8MxGZVIdLYKJOtvFs= -----END CERTIFICATE-----Generated at Fri Apr 4 20:17:12 2025 by rpki-client