$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c5680fed-e77b-3daf-9898-cc08dcde86cc.roa File: c5680fed-e77b-3daf-9898-cc08dcde86cc.roa (raw, json) Hash identifier: 2KKvwedmjtZEY3xuda2oyjsfl6TkUaqbnDuDuMOx7e8= Subject key identifier: 41:4E:CE:A5:4C:1A:5F:94:EE:19:17:D2:C6:97:E4:A2:62:47:96:C0 Certificate issuer: /CN=0c75fe19-a93c-4656-bf2d-b205565f9d07 Certificate serial: 010D0C9F4328584908816A2ECEFDA2DA9F63A080 Authority key identifier: 6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c5680fed-e77b-3daf-9898-cc08dcde86cc.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 6327 IP address blocks: 204.209.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6a:2e:ce:fd:a2:da:9f:63:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c75fe19-a93c-4656-bf2d-b205565f9d07 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=339ec282-43e7-4bf4-8561-ea47e9809ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:66:c2:0b:26:48:5e:9d:dd:3a:84:54:2e:d9: 1a:b6:17:b0:e9:0d:d7:34:11:53:eb:39:af:52:dd: d5:54:c3:76:a6:6f:17:4f:83:a0:fa:ef:f1:e5:e3: a3:1e:a6:c9:a6:f1:46:8a:43:b0:37:c8:7e:d1:f8: 94:2c:5a:dc:ae:c0:d8:5c:1b:91:a3:2f:36:0d:5a: 93:5c:55:02:b7:d7:24:c2:ad:ef:2b:5a:da:8b:ae: 85:7f:e9:a0:3c:81:f3:b5:1b:dd:9a:f7:45:68:bb: d0:94:a7:35:c4:17:1a:50:e8:57:a5:e3:58:9b:a1: 19:97:07:9b:f6:50:0a:14:0d:c0:1d:56:dc:bb:5d: 6e:63:95:9d:b4:8f:ee:68:b8:07:49:d2:45:8a:f2: 8a:6d:5f:81:34:41:89:e3:2e:6f:c6:d5:ab:16:ae: cb:e7:a8:0c:48:4d:cc:de:9f:42:b3:e7:31:b7:8d: cb:1b:6a:a0:e0:82:63:00:fc:49:40:c2:e8:94:81: fc:03:ff:8b:f6:58:b4:c7:5f:09:bc:24:01:de:27: 8f:b5:dc:37:7f:21:d0:66:39:b3:1d:d6:00:4d:ca: b7:14:bf:65:af:85:9e:92:27:bb:66:23:2b:7b:e0: 1e:17:67:ae:20:e5:fa:e7:11:71:0b:8f:26:68:de: b2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4E:CE:A5:4C:1A:5F:94:EE:19:17:D2:C6:97:E4:A2:62:47:96:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/c5680fed-e77b-3daf-9898-cc08dcde86cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07/0c75fe19-a93c-4656-bf2d-b205565f9d07.crl X509v3 Authority Key Identifier: keyid:6D:14:45:B4:DD:37:4A:3C:63:2C:A6:D0:69:3E:98:46:CF:B4:7C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c75fe19-a93c-4656-bf2d-b205565f9d07.cer sbgp-ipAddrBlock: critical IPv4: 204.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:62:9b:2a:6c:07:f5:b7:38:af:7f:21:81:4f:11:b4:15:a2: b4:21:52:d4:78:ac:64:1e:d2:a8:ba:9c:8d:f8:b5:33:38:01: ca:c7:75:04:64:93:3f:e8:59:0b:d7:86:c4:aa:69:47:f1:37: ad:76:d7:bc:41:5b:73:be:91:9f:a8:fe:6d:be:77:0e:0c:71: 8d:fc:c6:11:c7:ec:23:43:66:3c:78:d0:b0:41:88:97:d2:a1: ff:f0:40:af:7a:1e:2d:b0:f4:db:fb:ec:9a:16:bc:e8:2c:d6: ba:0f:79:64:fb:70:40:38:22:4d:0f:c8:ac:52:e8:80:90:09: 7b:5b:54:53:2b:79:b9:0d:cd:e8:19:bd:ff:ad:45:d4:97:77: 60:b1:ee:f6:47:28:ab:16:29:f4:a7:69:a0:6f:17:4c:b8:d9: ed:9b:53:22:d7:1f:a6:05:b0:8e:4f:08:d7:5e:b0:b8:1c:17: 3a:9d:af:00:c6:45:1a:fb:6d:a7:fa:92:6d:ea:60:3c:bd:d2: 0d:15:6e:9b:78:c1:34:a4:88:97:fb:2a:98:53:4c:38:14:04: 4f:e9:39:9e:00:42:c2:50:1c:59:2b:6e:97:6f:2c:7f:62:c2: 04:8b:6a:bd:f1:d4:39:5f:91:9c:60:ea:7f:31:65:10:68:dd: ef:66:98:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgWouzv2i2p9joIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3NWZlMTktYTkzYy00NjU2LWJmMmQtYjIwNTU2NWY5 ZDA3MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MzM5ZWMyODItNDNlNy00YmY0LTg1NjEtZWE0N2U5ODA5ZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2bCCyZIXp3dOoRULtkathew6Q3XNBFT6zmv Ut3VVMN2pm8XT4Og+u/x5eOjHqbJpvFGikOwN8h+0fiULFrcrsDYXBuRoy82DVqT XFUCt9ckwq3vK1rai66Ff+mgPIHztRvdmvdFaLvQlKc1xBcaUOhXpeNYm6EZlweb 9lAKFA3AHVbcu11uY5WdtI/uaLgHSdJFivKKbV+BNEGJ4y5vxtWrFq7L56gMSE3M 3p9Cs+cxt43LG2qg4IJjAPxJQMLolIH8A/+L9li0x18JvCQB3iePtdw3fyHQZjmz HdYATcq3FL9lr4Wekie7ZiMre+AeF2euIOX65xFxC48maN6ykQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFOzqVMGl+U7hkX0saX5KJiR5bAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzc1 ZmUxOS1hOTNjLTQ2NTYtYmYyZC1iMjA1NTY1ZjlkMDcvYzU2ODBmZWQtZTc3Yi0z ZGFmLTk4OTgtY2MwOGRjZGU4NmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3NWZlMTktYTkzYy00NjU2LWJm MmQtYjIwNTU2NWY5ZDA3LzBjNzVmZTE5LWE5M2MtNDY1Ni1iZjJkLWIyMDU1NjVm OWQwNy5jcmwwHwYDVR0jBBgwFoAUbRRFtN03SjxjLKbQaT6YRs+0fGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzc1ZmUxOS1hOTNjLTQ2NTYtYmYyZC1iMjA1 NTY1ZjlkMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVimypsB/W3OK9/IYFPEbQVorQhUtR4rGQe0qi6nI34tTM4AcrHdQRk kz/oWQvXhsSqaUfxN61217xBW3O+kZ+o/m2+dw4McY38xhHH7CNDZjx40LBBiJfS of/wQK96Hi2w9Nv77JoWvOgs1roPeWT7cEA4Ik0PyKxS6ICQCXtbVFMrebkNzegZ vf+tRdSXd2Cx7vZHKKsWKfSnaaBvF0y42e2bUyLXH6YFsI5PCNdesLgcFzqdrwDG RRr7baf6km3qYDy90g0Vbpt4wTSkiJf7KphTTDgUBE/pOZ4AQsJQHFkrbpdvLH9i wgSLar3x1DlfkZxg6n8xZRBo3e9mmLk= -----END CERTIFICATE-----Generated at Sat Apr 12 11:11:24 2025 by rpki-client