$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa File: 8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa (raw, json) Hash identifier: /Dv8b8BlmFpioPAOh8/PoMeXEPPOEEVDUma5TWAOmGQ= Subject key identifier: D5:43:64:41:66:DD:12:AC:C6:AE:31:D3:AF:20:50:88:4E:BE:0A:E0 Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Certificate serial: 010D0C9F43285848F92697DE7CBDC91182B4BD00 Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 1280 IP address blocks: 204.152.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:97:de:7c:bd:c9:11:82:b4:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=c5bb247f-4389-4257-8bc7-9e9ec5fcec0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:b7:d9:ac:0f:28:15:22:25:08:c1:df:de: d5:d4:d8:81:af:ff:9e:14:76:a2:b9:16:aa:cd:64: ac:0d:52:b1:89:b9:a6:16:57:91:d4:69:93:8d:ef: 2b:72:80:01:c4:3c:21:f9:09:27:36:03:c9:2a:d0: 71:50:89:9c:97:5c:ed:97:07:a3:b2:42:fc:3c:e4: b7:29:0d:14:ab:68:00:f5:e2:78:a7:28:1d:86:a3: dd:e2:57:c2:e4:2c:ab:1d:9b:01:ca:c0:a3:0b:e7: 3f:35:29:42:de:f2:35:a6:62:d6:97:c2:77:66:c3: 4a:a1:3e:e2:3f:05:7d:94:1b:b5:d4:ab:eb:3d:6d: 15:a1:83:4e:fc:dd:29:05:f1:4a:a9:19:62:6f:9b: f6:82:d5:81:6b:cc:87:27:6d:70:9c:2c:78:14:a3: cc:c0:45:c6:88:7f:25:35:4c:34:e2:5a:74:6f:94: f6:9b:b1:ba:a8:93:fd:d1:08:25:e4:b1:2d:7b:84: 39:01:9b:54:01:ec:c4:62:02:c5:70:1d:ba:49:07: ba:92:19:d4:11:a9:59:89:9d:62:a5:e4:c1:f2:32: 6a:75:cc:0f:88:22:eb:04:5e:cd:49:64:d8:73:17: 7c:51:20:73:2e:0e:ad:25:f0:60:77:e8:87:3b:6a: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:64:41:66:DD:12:AC:C6:AE:31:D3:AF:20:50:88:4E:BE:0A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl X509v3 Authority Key Identifier: keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer sbgp-ipAddrBlock: critical IPv4: 204.152.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:f2:0d:6b:8d:d1:ed:48:86:21:42:ed:06:e5:8e:d1:6a:e1: 35:7c:ec:4b:3c:ab:29:ee:e8:7b:6b:d7:7b:1b:85:a7:b2:09: 97:bb:a1:2f:09:1d:9b:97:bb:70:9a:7c:8c:5f:26:65:d4:cf: 09:9b:ed:e5:89:e5:e4:6b:16:24:92:dd:56:64:09:d4:f6:e0: bd:96:52:c4:d8:77:bd:0d:68:c2:b2:72:04:27:dc:25:d7:c2: cb:53:bb:c0:ed:6a:43:d2:ac:cb:65:19:78:d1:f4:24:1e:73: 84:cd:9e:47:d0:16:ef:16:3c:90:dc:e8:18:44:5a:4d:cf:d4: e4:50:26:de:29:9a:92:52:d7:fa:e6:77:ff:6b:6d:a0:6f:23: 5f:33:11:2a:ba:ca:47:2f:13:07:63:2c:d7:ef:a4:88:91:2d: c7:68:78:ca:84:bf:b3:61:32:6d:59:93:bd:4d:62:73:38:c7: 32:b1:72:13:b1:98:0e:ad:dd:ee:54:d0:72:a4:2f:bb:b9:0c: 91:9c:ed:12:c5:81:5a:f4:38:c7:bc:ed:fb:ba:06:d6:5c:08: 92:f4:5c:3e:5c:b8:dd:34:dd:e0:f1:5e:fc:50:cb:8e:74:12: 12:28:e5:e3:1d:0d:34:e2:a5:39:7a:b1:17:90:31:81:67:be: de:35:3f:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpfefL3JEYK0vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4 NTEwMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk YzViYjI0N2YtNDM4OS00MjU3LThiYzctOWU5ZWM1ZmNlYzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKK32awPKBUiJQjB397V1NiBr/+eFHaiuRaq zWSsDVKxibmmFleR1GmTje8rcoABxDwh+QknNgPJKtBxUImcl1ztlwejskL8POS3 KQ0Uq2gA9eJ4pygdhqPd4lfC5CyrHZsBysCjC+c/NSlC3vI1pmLWl8J3ZsNKoT7i PwV9lBu11KvrPW0VoYNO/N0pBfFKqRlib5v2gtWBa8yHJ21wnCx4FKPMwEXGiH8l NUw04lp0b5T2m7G6qJP90Qgl5LEte4Q5AZtUAezEYgLFcB26SQe6khnUEalZiZ1i peTB8jJqdcwPiCLrBF7NSWTYcxd8USBzLg6tJfBgd+iHO2ov7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVDZEFm3RKsxq4x068gUIhOvgrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOGYzODBiNWEtZDgyMS0z Y2QwLTlkM2ItYzNjMzYwYjM4NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7yDWuN0e1IhiFC7QbljtFq4TV87Es8qynu6Htr13sbhaeyCZe7oS8J HZuXu3CafIxfJmXUzwmb7eWJ5eRrFiSS3VZkCdT24L2WUsTYd70NaMKycgQn3CXX wstTu8DtakPSrMtlGXjR9CQec4TNnkfQFu8WPJDc6BhEWk3P1ORQJt4pmpJS1/rm d/9rbaBvI18zESq6ykcvEwdjLNfvpIiRLcdoeMqEv7NhMm1Zk71NYnM4xzKxchOx mA6t3e5U0HKkL7u5DJGc7RLFgVr0OMe87fu6BtZcCJL0XD5cuN003eDxXvxQy450 EhIo5eMdDTTipTl6sReQMYFnvt41P2U= -----END CERTIFICATE-----Generated at Sun Apr 6 04:40:28 2025 by rpki-client