$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa File: 942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa (raw, json) Hash identifier: nevlmlm+BFm0lNPwoZqAemFimpERW2J5hs62HSv7uC0= Subject key identifier: 28:F7:72:5F:89:53:17:87:F7:BF:1D:E7:B1:66:AE:B2:89:E3:B5:26 Certificate issuer: /CN=0d51e326-4804-4f59-a629-20153f71b7fe Certificate serial: 010D0C9F432858494CC93D29EB41EE6FD7466840 Authority key identifier: 4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 204.239.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:3d:29:eb:41:ee:6f:d7:46:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d51e326-4804-4f59-a629-20153f71b7fe Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=c6fad321-9fb6-43d6-96d0-88109d4d6ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:bb:c4:29:90:72:ec:49:ef:42:69:89:ff: 6f:aa:f6:76:de:a5:5f:f3:ec:28:68:09:b7:01:ce: 71:68:41:89:8d:8b:91:cb:b7:9a:76:78:39:7a:ef: ca:33:ab:89:58:a8:52:c2:11:3f:1e:5f:2b:9d:99: bd:64:56:71:35:9f:9c:c0:6c:5a:7c:da:95:9f:ad: 85:a5:0e:dc:5f:56:71:12:a9:69:bd:fc:e2:ad:c3: b0:eb:45:f5:c9:6f:43:5a:07:4b:3a:61:4d:28:0c: e5:79:a8:a3:36:06:0e:0a:a7:61:66:8f:47:61:34: 9c:38:44:89:ee:22:40:96:08:d1:2e:36:b7:80:e9: 1c:1a:38:6c:cd:47:91:e2:27:3f:ff:fd:83:54:6a: 6a:f9:c3:2d:e0:eb:f6:99:bc:d6:20:04:ee:ed:c9: 55:3f:f3:90:e3:e3:bc:c3:6e:04:89:38:fe:7d:94: e0:da:2b:bc:3d:a4:88:4c:02:5a:22:f8:77:48:08: 52:5f:9f:29:6f:70:6f:36:f3:46:03:2e:7a:74:40: 48:f4:92:f9:44:10:56:25:55:a3:cd:1e:4a:ae:17: 4b:7d:02:a0:65:9b:94:64:82:0c:b1:a0:5b:93:6a: 88:c0:bd:42:94:2f:51:9e:6c:e9:74:66:b8:30:b0: 13:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F7:72:5F:89:53:17:87:F7:BF:1D:E7:B1:66:AE:B2:89:E3:B5:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/942b68f9-477e-3db3-bd4c-c8e7374bb7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe/0d51e326-4804-4f59-a629-20153f71b7fe.crl X509v3 Authority Key Identifier: keyid:4F:61:30:98:54:87:15:71:83:5C:5E:4A:A6:08:88:25:64:23:38:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0d51e326-4804-4f59-a629-20153f71b7fe.cer sbgp-ipAddrBlock: critical IPv4: 204.239.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:eb:35:b5:3d:b1:66:e4:77:75:dc:72:a9:05:65:c9:14:a9: fe:e9:03:17:43:57:7e:6b:90:cc:1c:39:f8:e8:40:ad:54:4b: 4b:4b:fb:be:17:65:14:b5:92:46:ca:af:90:50:16:09:a9:35: 73:56:92:61:a7:8e:df:b6:81:7f:13:8b:9e:d7:21:a3:33:f7: 25:3d:80:f2:b1:8c:9d:6e:99:55:14:f5:6a:e0:a0:9d:7c:77: b7:13:3f:a9:6b:6b:24:13:82:62:be:e8:1c:ae:2a:e5:1c:92: 7b:67:ef:66:95:9e:15:8a:06:e1:e3:9c:28:9f:a0:13:3c:6f: 8a:8f:71:93:bb:f3:aa:16:b4:62:5d:a6:b3:21:2e:7f:13:a2: 11:34:31:65:36:87:f7:57:63:e3:a8:4d:85:63:cc:e6:35:8e: a7:b2:0d:65:27:fe:ef:1c:45:d8:5c:b1:bc:0b:5e:d4:80:e7: d6:4f:27:d8:fe:63:f4:20:01:45:73:e1:8b:50:c0:0a:37:fc: 5f:52:4d:4b:18:ed:33:4a:54:5b:d1:af:83:d2:d8:22:ee:98: db:63:0a:f2:42:68:75:48:61:48:14:04:58:8f:b3:95:8e:4b: 0e:f0:58:61:b8:42:c4:6d:d1:7f:57:4d:9f:f0:9f:fc:04:0e: 5a:48:64:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyT0p60Hub9dGaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ1MWUzMjYtNDgwNC00ZjU5LWE2MjktMjAxNTNmNzFi N2ZlMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YzZmYWQzMjEtOWZiNi00M2Q2LTk2ZDAtODgxMDlkNGQ2ZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYO7xCmQcuxJ70Jpif9vqvZ23qVf8+woaAm3 Ac5xaEGJjYuRy7eadng5eu/KM6uJWKhSwhE/Hl8rnZm9ZFZxNZ+cwGxafNqVn62F pQ7cX1ZxEqlpvfzircOw60X1yW9DWgdLOmFNKAzleaijNgYOCqdhZo9HYTScOESJ 7iJAlgjRLja3gOkcGjhszUeR4ic///2DVGpq+cMt4Ov2mbzWIATu7clVP/OQ4+O8 w24EiTj+fZTg2iu8PaSITAJaIvh3SAhSX58pb3BvNvNGAy56dEBI9JL5RBBWJVWj zR5KrhdLfQKgZZuUZIIMsaBbk2qIwL1ClC9RnmzpdGa4MLATiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj3cl+JUxeH978d57FmrrKJ47UmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUx ZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1M2Y3MWI3ZmUvOTQyYjY4ZjktNDc3ZS0z ZGIzLWJkNGMtYzhlNzM3NGJiN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGQ1MWUzMjYtNDgwNC00ZjU5LWE2 MjktMjAxNTNmNzFiN2ZlLzBkNTFlMzI2LTQ4MDQtNGY1OS1hNjI5LTIwMTUzZjcx YjdmZS5jcmwwHwYDVR0jBBgwFoAUT2EwmFSHFXGDXF5KpgiIJWQjOKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wZDUxZTMyNi00ODA0LTRmNTktYTYyOS0yMDE1 M2Y3MWI3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzrNbU9sWbkd3XccqkFZckUqf7pAxdDV35rkMwcOfjoQK1US0tL+74X ZRS1kkbKr5BQFgmpNXNWkmGnjt+2gX8Ti57XIaMz9yU9gPKxjJ1umVUU9WrgoJ18 d7cTP6lrayQTgmK+6ByuKuUckntn72aVnhWKBuHjnCifoBM8b4qPcZO786oWtGJd prMhLn8TohE0MWU2h/dXY+OoTYVjzOY1jqeyDWUn/u8cRdhcsbwLXtSA59ZPJ9j+ Y/QgAUVz4YtQwAo3/F9STUsY7TNKVFvRr4PS2CLumNtjCvJCaHVIYUgUBFiPs5WO Sw7wWGG4QsRt0X9XTZ/wn/wEDlpIZJE= -----END CERTIFICATE-----Generated at Fri Apr 4 23:29:14 2025 by rpki-client