$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa File: 79809976-9df9-3d91-b7e8-6a3afaeac18d.roa (raw, json) Hash identifier: WTJbgqfnZTtNelAiSe5MJo9Ixw2inUB0CtJ6JuUiv0E= Subject key identifier: 09:8E:EA:6C:7B:11:23:34:10:87:1B:B5:B1:8F:93:3B:DE:D6:82:34 Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769 Certificate serial: 010D0C9F43285849194178146896A59DCEF81700 Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 13649 IP address blocks: 168.245.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:78:14:68:96:a5:9d:ce:f8:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=ba59d31d-3324-4d7b-af2d-c57e7cd3d8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:9b:4f:4b:57:0b:41:11:4d:f9:78:5d:f0: 90:74:61:5c:29:72:01:88:cf:e1:92:d8:5b:a9:f9: c2:24:65:8c:70:ea:f4:d5:d7:7d:51:29:e1:34:23: a3:07:da:8d:92:a1:02:f6:73:ad:42:b2:2f:db:93: d9:3a:6d:a4:03:fc:36:f2:13:31:91:39:a9:57:95: 9d:bd:fa:e7:25:66:51:48:21:90:ec:c5:9a:d4:b6: 74:9d:1e:99:7c:33:39:43:45:41:b5:5d:31:43:cf: ed:5c:7c:ed:c9:7f:51:d6:0c:2b:52:58:8a:97:68: 50:81:26:72:0b:81:10:e5:e8:d5:b2:c1:d0:67:98: e8:3d:ad:49:68:e8:c7:14:4b:6d:9a:1e:2a:49:11: a8:73:f1:3c:a3:1d:af:f1:1d:0a:10:75:e0:ad:1a: b2:53:3e:08:a2:93:fa:59:0d:04:bf:78:39:c3:2d: 42:31:d4:25:35:a0:4a:a0:ad:da:8a:36:41:66:3c: 27:b6:d3:a7:d6:79:65:1e:eb:f5:81:dc:f9:41:15: b2:36:e6:97:27:73:04:4f:25:a3:72:94:e9:9d:5b: 15:59:bc:a2:a7:f8:ff:79:87:91:9d:b6:3c:3a:5a: 61:76:86:65:42:58:bc:5f:d2:24:44:3d:80:29:b9: 7e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8E:EA:6C:7B:11:23:34:10:87:1B:B5:B1:8F:93:3B:DE:D6:82:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/79809976-9df9-3d91-b7e8-6a3afaeac18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl X509v3 Authority Key Identifier: keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer sbgp-ipAddrBlock: critical IPv4: 168.245.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:95:7b:a2:a3:28:6e:ba:c9:12:34:96:eb:d6:68:e9:75:67: 0f:be:a4:b2:38:2c:df:f3:7b:24:92:94:57:ef:d4:c3:40:0d: c0:74:1a:64:45:dc:7c:65:91:82:69:40:09:6d:00:1d:15:44: 99:d3:76:af:09:1d:9e:cf:76:87:6d:06:44:b0:9f:a9:4b:e6: b6:3d:db:00:5b:1b:18:de:35:ca:c6:6e:56:df:d3:e4:1c:31: d9:3a:7c:56:81:12:25:41:42:fd:05:3f:61:67:17:e4:84:d2: 16:73:24:6c:68:8a:ac:d7:b3:18:cc:0d:c7:56:89:b6:67:f3: 1e:55:bb:53:19:b3:d4:38:9d:2e:0e:ce:bf:54:8a:38:ae:de: 4d:eb:e7:cd:af:bc:4e:3e:09:24:69:2f:67:d8:7e:88:2f:67: af:50:bf:49:7c:8a:86:69:40:55:e2:af:c3:3d:ef:fb:a8:8e: d7:85:ea:f2:0e:a6:91:de:0b:7e:85:ee:10:c7:a2:30:f7:76: 50:07:41:85:17:d8:b4:ad:0b:b9:ed:8c:09:7e:5c:24:b0:da: ad:e4:94:bf:03:8f:25:b1:ea:1a:a8:0a:72:5b:dd:5a:5a:7f: 2c:d0:78:06:1d:37:e7:be:64:77:5b:ce:1c:0c:1a:68:c8:ed: 09:32:22:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXgUaJalnc74FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg4YTc4ZmEtMmQ5NC00NzhlLTkwMGEtYTFmZWM2NjFi NzY5MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk YmE1OWQzMWQtMzMyNC00ZDdiLWFmMmQtYzU3ZTdjZDNkOGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB+bT0tXC0ERTfl4XfCQdGFcKXIBiM/hkthb qfnCJGWMcOr01dd9USnhNCOjB9qNkqEC9nOtQrIv25PZOm2kA/w28hMxkTmpV5Wd vfrnJWZRSCGQ7MWa1LZ0nR6ZfDM5Q0VBtV0xQ8/tXHztyX9R1gwrUliKl2hQgSZy C4EQ5ejVssHQZ5joPa1JaOjHFEttmh4qSRGoc/E8ox2v8R0KEHXgrRqyUz4IopP6 WQ0Ev3g5wy1CMdQlNaBKoK3aijZBZjwnttOn1nllHuv1gdz5QRWyNuaXJ3METyWj cpTpnVsVWbyip/j/eYeRnbY8OlphdoZlQli8X9IkRD2AKbl+jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmO6mx7ESM0EIcbtbGPkzve1oI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhh NzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZlYzY2MWI3NjkvNzk4MDk5NzYtOWRmOS0z ZDkxLWI3ZTgtNmEzYWZhZWFjMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg4YTc4ZmEtMmQ5NC00NzhlLTkw MGEtYTFmZWM2NjFiNzY5LzY4OGE3OGZhLTJkOTQtNDc4ZS05MDBhLWExZmVjNjYx Yjc2OS5jcmwwHwYDVR0jBBgwFoAUkFvoLBBymwQG9cpaFkwist9khrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ODhhNzhmYS0yZDk0LTQ3OGUtOTAwYS1hMWZl YzY2MWI3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqPXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqVe6KjKG66yRI0luvWaOl1Zw++pLI4LN/zeySSlFfv1MNADcB0GmRF 3HxlkYJpQAltAB0VRJnTdq8JHZ7PdodtBkSwn6lL5rY92wBbGxjeNcrGblbf0+Qc Mdk6fFaBEiVBQv0FP2FnF+SE0hZzJGxoiqzXsxjMDcdWibZn8x5Vu1MZs9Q4nS4O zr9Uijiu3k3r582vvE4+CSRpL2fYfogvZ69Qv0l8ioZpQFXir8M97/uojteF6vIO ppHeC36F7hDHojD3dlAHQYUX2LStC7ntjAl+XCSw2q3klL8DjyWx6hqoCnJb3Vpa fyzQeAYdN+e+ZHdbzhwMGmjI7QkyInk= -----END CERTIFICATE-----Generated at Fri Apr 11 22:37:50 2025 by rpki-client