$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa File: 437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa (raw, json) Hash identifier: tkr6Ubeoc7oRQGGZSih1fsQlyA9zmD8H0snMEBedzyM= Subject key identifier: 1A:EB:5F:9E:57:1A:02:29:37:0D:90:23:39:4D:EA:C8:71:C5:23:66 Certificate issuer: /CN=ca91b8b1-a975-4a43-947f-794da888c198 Certificate serial: 010D0C9F4328584961B986E38FD2405EEA183400 Authority key identifier: 12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 396982 IP address blocks: 204.138.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:86:e3:8f:d2:40:5e:ea:18:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca91b8b1-a975-4a43-947f-794da888c198 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=9d35dee0-bbd2-47a7-bbaa-26e020af0ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e3:48:1e:d8:8d:d3:d9:0d:fe:58:08:1f:08: 85:c3:68:d8:98:ca:fa:9b:21:63:f5:90:78:6c:c8: 11:09:90:8c:10:e5:c4:21:be:fe:57:b6:5e:42:6e: 17:58:22:4b:27:d2:ba:74:da:5f:57:97:75:55:37: c9:3a:e2:a1:21:07:84:80:fb:93:e9:df:c6:f9:65: 3f:50:76:cb:48:50:2f:c7:b1:a7:cf:c1:91:a7:c9: c3:98:87:dc:65:bc:67:2c:65:71:34:33:d3:78:e9: 71:e0:00:dc:cf:72:19:7d:ae:89:4c:15:66:06:8c: eb:52:4d:c1:94:c7:f9:e4:cb:82:fd:f7:1a:8f:30: ea:b6:8c:aa:b2:93:8d:db:10:81:5c:d6:f7:77:61: 7d:46:55:4d:c0:ea:8b:c1:78:e1:1a:e8:f8:e9:84: 43:30:6c:8d:79:89:3d:eb:d4:c2:94:dc:40:0f:6a: 8c:4d:d9:12:c8:dc:ca:ed:a3:5a:02:82:29:31:c1: 63:1e:ac:43:62:49:10:43:c8:ac:bb:64:9d:fd:42: 06:12:5f:02:12:73:5d:cc:3f:28:6d:53:67:73:4e: 9f:0c:82:46:6f:32:4f:47:97:b8:96:cc:aa:a5:49: a5:4b:c8:3a:d9:f6:c0:c9:70:98:29:17:86:2b:49: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EB:5F:9E:57:1A:02:29:37:0D:90:23:39:4D:EA:C8:71:C5:23:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl X509v3 Authority Key Identifier: keyid:12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer sbgp-ipAddrBlock: critical IPv4: 204.138.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:41:f1:d4:c2:7e:67:00:9f:d6:b1:08:52:a1:66:d6:3b:73: ff:81:9a:8d:8c:65:e7:fd:78:4a:1a:3d:31:7b:40:74:ec:2d: f9:c1:f6:2a:a6:e5:d9:97:0b:8a:3c:bd:0f:46:b7:74:20:e8: 09:c9:ac:22:30:53:57:6e:a2:27:5a:cb:eb:bd:e9:29:03:4f: 9a:04:37:7f:b8:f2:54:d1:ba:2f:d4:d2:7e:0c:34:51:f7:c0: c5:2b:93:e8:c6:80:a8:dd:fe:ff:ff:de:ac:95:b1:09:82:ee: e0:05:ea:f6:e2:0f:72:05:60:88:3c:b4:91:7d:c4:80:15:25: 84:0d:12:eb:21:6a:ff:4a:b4:f3:f0:e8:87:dc:df:66:d9:c5: 48:6a:34:c3:9e:1d:5c:59:56:c6:5a:91:60:32:32:ca:89:84: 3f:66:82:0f:fa:a0:7e:36:42:b6:fe:e3:48:f8:15:8f:00:e0: 4b:fb:53:c8:04:8f:56:eb:d0:ab:e7:6d:90:3c:39:0a:04:20: f0:6c:9c:b7:43:b8:c7:be:84:82:d6:47:6d:c2:c1:b9:e8:6b: 1a:b8:00:11:63:1f:47:eb:97:6c:e4:f4:e6:3c:74:00:14:fc: 1d:23:12:92:8f:46:c3:88:fd:14:9c:0c:9b:5e:86:f0:e3:55: e6:47:23:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuYbjj9JAXuoYNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E5MWI4YjEtYTk3NS00YTQzLTk0N2YtNzk0ZGE4ODhj MTk4MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk OWQzNWRlZTAtYmJkMi00N2E3LWJiYWEtMjZlMDIwYWYwYmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeNIHtiN09kN/lgIHwiFw2jYmMr6myFj9ZB4 bMgRCZCMEOXEIb7+V7ZeQm4XWCJLJ9K6dNpfV5d1VTfJOuKhIQeEgPuT6d/G+WU/ UHbLSFAvx7Gnz8GRp8nDmIfcZbxnLGVxNDPTeOlx4ADcz3IZfa6JTBVmBozrUk3B lMf55MuC/fcajzDqtoyqspON2xCBXNb3d2F9RlVNwOqLwXjhGuj46YRDMGyNeYk9 69TClNxAD2qMTdkSyNzK7aNaAoIpMcFjHqxDYkkQQ8isu2Sd/UIGEl8CEnNdzD8o bVNnc06fDIJGbzJPR5e4lsyqpUmlS8g62fbAyXCYKReGK0m/kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrrX55XGgIpNw2QIzlN6shxxSNmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jYTkx YjhiMS1hOTc1LTRhNDMtOTQ3Zi03OTRkYTg4OGMxOTgvNDM3ZDBlNmMtYTgxNS0z MTRkLThjYjAtZDRiNGVlMjQ2ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2E5MWI4YjEtYTk3NS00YTQzLTk0 N2YtNzk0ZGE4ODhjMTk4L2NhOTFiOGIxLWE5NzUtNGE0My05NDdmLTc5NGRhODg4 YzE5OC5jcmwwHwYDVR0jBBgwFoAUEpCo+yXzGPB41MR8iU/D1J6lieMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jYTkxYjhiMS1hOTc1LTRhNDMtOTQ3Zi03OTRk YTg4OGMxOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIpjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRB8dTCfmcAn9axCFKhZtY7c/+Bmo2MZef9eEoaPTF7QHTsLfnB9iqm 5dmXC4o8vQ9Gt3Qg6AnJrCIwU1duoiday+u96SkDT5oEN3+48lTRui/U0n4MNFH3 wMUrk+jGgKjd/v//3qyVsQmC7uAF6vbiD3IFYIg8tJF9xIAVJYQNEushav9KtPPw 6Ifc32bZxUhqNMOeHVxZVsZakWAyMsqJhD9mgg/6oH42Qrb+40j4FY8A4Ev7U8gE j1br0KvnbZA8OQoEIPBsnLdDuMe+hILWR23Cwbnoaxq4ABFjH0frl2zk9OY8dAAU /B0jEpKPRsOI/RScDJtehvDjVeZHI0k= -----END CERTIFICATE-----Generated at Sun Apr 13 19:33:20 2025 by rpki-client