$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/afb1a59c-6f6d-340d-89bc-0de7c857a08c.roa File: afb1a59c-6f6d-340d-89bc-0de7c857a08c.roa (raw, json) Hash identifier: 6VuNVpokp9F/1ez6jZohe8dfVcsXJK1gVm5RFlnSM4U= Subject key identifier: F0:57:A6:4F:0F:2D:45:36:C7:43:D5:09:8D:AD:17:FA:DB:4D:0F:59 Certificate issuer: /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Certificate serial: 010D0C9F4328584902EC2A3761151B8BE492B580 Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/afb1a59c-6f6d-340d-89bc-0de7c857a08c.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 10929 IP address blocks: 205.204.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:2a:37:61:15:1b:8b:e4:92:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=89653a42-2967-4c72-9f9d-9c87758c1d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:e9:1e:82:50:0d:9d:c2:66:0d:74:fc:81: 91:ca:19:c5:e1:c5:a6:72:be:50:8d:e0:9b:bb:73: 1e:6f:b1:ff:3b:70:cf:80:d6:42:56:33:88:4a:b9: d9:82:83:c4:79:b9:94:f6:c6:a7:15:f9:27:bd:7d: c0:c3:4e:63:8e:64:4e:89:ea:95:64:22:92:00:d3: e3:91:f3:71:24:d4:17:fd:94:d7:57:9e:84:32:67: 68:ed:e6:fc:92:f5:44:93:1b:21:3a:19:be:bb:de: 7a:cb:34:42:8e:9b:12:09:1d:57:af:2d:97:9e:b0: 70:5a:2e:62:43:0e:16:cd:10:af:54:b9:70:c2:93: 66:f0:6b:6a:e4:61:37:53:01:7a:23:6e:f4:70:77: 43:7c:1e:07:b6:63:7d:1d:98:00:f9:11:94:e0:88: ff:da:7d:c2:f7:73:75:6b:b7:77:0e:6e:33:20:b2: b6:e6:ce:72:bb:7f:e2:6f:fd:6d:61:39:a7:1e:61: 8c:fd:f5:9f:7c:ff:da:70:98:f0:69:39:8c:14:e0: 29:af:44:e1:31:3c:0d:4d:5c:90:ba:89:5c:df:6a: b0:ad:69:6c:f1:9d:62:92:62:32:d1:4a:c5:ce:d7: 4a:2e:a8:8e:2c:e2:a7:15:55:65:32:2a:b3:81:ed: a6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:57:A6:4F:0F:2D:45:36:C7:43:D5:09:8D:AD:17:FA:DB:4D:0F:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/afb1a59c-6f6d-340d-89bc-0de7c857a08c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl X509v3 Authority Key Identifier: keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer sbgp-ipAddrBlock: critical IPv4: 205.204.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e9:63:17:f3:94:60:fe:6b:50:cf:6b:11:99:f8:bb:77:a3: ae:49:94:9c:82:f9:d6:d9:75:bf:56:94:2f:62:3f:1d:d8:1f: 3d:4b:56:13:93:20:07:28:ae:32:69:f9:9a:35:36:28:08:fb: 2b:cb:19:5d:6e:d5:43:a8:88:40:7a:0e:34:8f:a6:eb:b1:66: aa:ce:87:8d:1a:98:d6:0a:01:45:28:ad:0f:6e:ea:81:ec:33: 84:c6:71:13:0d:fe:79:56:4b:a2:57:e7:3e:9c:ba:71:80:2b: ad:b9:91:67:3b:11:2f:f2:36:30:28:9f:17:e6:97:5c:24:ef: cc:35:97:bd:0c:92:e5:5f:64:9a:46:b4:2e:f0:6c:c5:d5:c1: 95:23:3f:f4:d6:74:b2:be:8c:5c:ee:f7:c6:9a:76:03:92:94: cb:98:ca:bb:79:81:2f:24:53:ae:70:46:67:33:05:c1:0d:10: ea:9a:9e:d9:32:b1:7d:06:d2:95:4a:da:74:16:e7:7f:b8:ce: 82:70:36:2a:6c:93:ea:ea:e7:bf:de:32:e7:3b:74:3d:03:e3: a4:6c:92:3d:b1:5a:fd:c5:d6:3f:21:ad:b7:54:0f:3b:a7:f0: e4:fa:29:eb:f2:37:13:66:f8:f3:29:c6:fb:f2:88:12:ac:41: 81:af:32:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Co3YRUbi+SStYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI2N2Q4MzItY2IwNS00YzY4LWE1Y2UtYmE0NjQ1ZGIz NWUwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ODk2NTNhNDItMjk2Ny00YzcyLTlmOWQtOWM4Nzc1OGMxZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDXpHoJQDZ3CZg10/IGRyhnF4cWmcr5QjeCb u3Meb7H/O3DPgNZCVjOISrnZgoPEebmU9sanFfknvX3Aw05jjmROieqVZCKSANPj kfNxJNQX/ZTXV56EMmdo7eb8kvVEkxshOhm+u956yzRCjpsSCR1Xry2XnrBwWi5i Qw4WzRCvVLlwwpNm8Gtq5GE3UwF6I270cHdDfB4HtmN9HZgA+RGU4Ij/2n3C93N1 a7d3Dm4zILK25s5yu3/ib/1tYTmnHmGM/fWffP/acJjwaTmMFOApr0ThMTwNTVyQ uolc32qwrWls8Z1ikmIy0UrFztdKLqiOLOKnFVVlMiqzge2muQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBXpk8PLUU2x0PVCY2tF/rbTQ9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3 ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2NDVkYjM1ZTAvYWZiMWE1OWMtNmY2ZC0z NDBkLTg5YmMtMGRlN2M4NTdhMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjI2N2Q4MzItY2IwNS00YzY4LWE1 Y2UtYmE0NjQ1ZGIzNWUwL2IyNjdkODMyLWNiMDUtNGM2OC1hNWNlLWJhNDY0NWRi MzVlMC5jcmwwHwYDVR0jBBgwFoAU2rliA1hIhy/TMsdQmyxxCC9eqCYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMjY3ZDgzMi1jYjA1LTRjNjgtYTVjZS1iYTQ2 NDVkYjM1ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzcxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLpYxfzlGD+a1DPaxGZ+Lt3o65JlJyC+dbZdb9WlC9iPx3YHz1LVhOT IAcorjJp+Zo1NigI+yvLGV1u1UOoiEB6DjSPpuuxZqrOh40amNYKAUUorQ9u6oHs M4TGcRMN/nlWS6JX5z6cunGAK625kWc7ES/yNjAonxfml1wk78w1l70MkuVfZJpG tC7wbMXVwZUjP/TWdLK+jFzu98aadgOSlMuYyrt5gS8kU65wRmczBcENEOqantky sX0G0pVK2nQW53+4zoJwNipsk+rq57/eMuc7dD0D46Rskj2xWv3F1j8hrbdUDzun 8OT6KevyNxNm+PMpxvvyiBKsQYGvMjM= -----END CERTIFICATE-----Generated at Sat Apr 5 12:17:52 2025 by rpki-client