$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/18a6f617-32ad-394b-8862-9f9f59ec5672.roa File: 18a6f617-32ad-394b-8862-9f9f59ec5672.roa (raw, json) Hash identifier: yzIYW8Sxj7vnz3CZ51w+3hEfrFfM9whlDxRNxfpMAq8= Subject key identifier: 49:97:D5:0E:45:D3:FD:2E:51:60:20:46:47:FF:31:29:3C:42:EC:7D Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B6422DD75A2D38412220780 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/18a6f617-32ad-394b-8862-9f9f59ec5672.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 11404 IP address blocks: 204.14.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:22:dd:75:a2:d3:84:12:22:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=03006111-be8b-49cd-8a90-60ebb17fa8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0b:8c:c5:dc:61:07:bc:7e:58:36:f0:78:11: e4:4f:50:a4:21:fa:8f:4f:1b:33:8e:24:80:cf:b9: 11:ea:95:ec:26:aa:49:cc:ad:33:93:7c:21:c2:2c: c5:cf:ee:aa:41:ce:95:bc:db:86:06:be:21:76:01: d9:79:6e:88:fe:58:f7:5e:ad:3c:de:73:7f:ed:a9: f4:fd:0e:1d:48:2c:b4:0e:5d:8f:54:da:5e:e2:42: bd:c1:5b:a9:6b:de:1c:c0:bc:f9:81:ca:f4:e5:45: 02:19:3a:2b:f8:ed:51:23:7c:4d:f4:45:3a:d1:e3: eb:88:20:51:09:ad:a7:03:f4:57:e2:da:0f:be:29: aa:2c:a1:c3:3c:c5:33:e7:05:06:82:40:d6:6b:29: 8c:3f:2b:22:7f:4b:a8:54:7c:2f:c8:e6:54:f5:73: c8:0a:03:af:d4:95:0b:68:1a:e0:26:49:94:c5:5b: c0:2b:a4:2a:09:30:fd:79:6a:98:f1:93:a7:7d:32: ca:6c:98:b8:3c:f3:c4:79:c3:b8:75:b8:79:db:05: ed:dd:25:31:4a:14:3d:75:e4:91:21:85:89:a8:e0: 23:a8:dd:54:32:b2:1c:82:71:29:2a:bb:ec:2a:aa: 04:c5:ce:d2:3d:24:32:4c:99:bd:8e:8a:47:ba:c8: 20:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:97:D5:0E:45:D3:FD:2E:51:60:20:46:47:FF:31:29:3C:42:EC:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/18a6f617-32ad-394b-8862-9f9f59ec5672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.14.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:45:31:2b:c2:d2:53:58:9e:04:08:1e:ee:8e:6e:99:0e:7f: a0:11:6a:49:3b:49:03:0f:56:8b:fe:84:9c:8a:42:a5:15:12: ff:6b:fc:7d:dd:34:b0:e0:9e:cc:db:5c:e1:5a:c7:48:b9:f5: 8e:a2:cd:1f:86:80:fc:51:6b:a7:34:5b:3e:19:63:58:ca:73: 6b:10:e0:e3:3b:f3:bf:30:2f:bc:b1:fe:a1:44:f8:33:c2:2c: e8:4c:49:1c:35:d2:49:66:08:50:45:43:da:67:85:86:48:ae: f1:b7:e6:01:e9:71:be:f2:34:fe:cb:8e:b1:6c:aa:42:13:d9: de:96:2d:91:f4:7d:aa:c3:fe:66:52:cb:57:be:49:9a:66:39: ff:87:8c:44:83:a4:30:44:4a:42:41:f4:16:fa:09:f5:83:93: 32:22:30:15:9c:e8:fc:cc:ed:c3:f5:cc:0f:60:63:89:e2:f2: 7d:ec:0d:a4:be:ee:09:3c:05:ae:79:64:27:c0:64:83:32:ae: c1:e1:f3:d6:39:50:84:c6:56:35:7b:a4:09:1f:db:0a:08:2b: d2:5f:a3:54:a0:40:3d:ea:68:0e:42:78:05:c5:12:48:04:be: e8:8f:9b:b6:e1:98:25:cc:59:f6:b4:4b:04:15:3e:3b:af:f9: 7d:38:4f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCLddaLThBIiB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MDMwMDYxMTEtYmU4Yi00OWNkLThhOTAtNjBlYmIxN2ZhOGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgguMxdxhB7x+WDbweBHkT1CkIfqPTxszjiSA z7kR6pXsJqpJzK0zk3whwizFz+6qQc6VvNuGBr4hdgHZeW6I/lj3Xq083nN/7an0 /Q4dSCy0Dl2PVNpe4kK9wVupa94cwLz5gcr05UUCGTor+O1RI3xN9EU60ePriCBR Ca2nA/RX4toPvimqLKHDPMUz5wUGgkDWaymMPysif0uoVHwvyOZU9XPICgOv1JUL aBrgJkmUxVvAK6QqCTD9eWqY8ZOnfTLKbJi4PPPEecO4dbh52wXt3SUxShQ9deSR IYWJqOAjqN1UMrIcgnEpKrvsKqoExc7SPSQyTJm9jopHusggcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmX1Q5F0/0uUWAgRkf/MSk8Qux9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMThhNmY2MTctMzJhZC0z OTRiLTg4NjItOWY5ZjU5ZWM1NjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZFMSvC0lNYngQIHu6ObpkOf6ARakk7SQMPVov+hJyKQqUVEv9r/H3d NLDgnszbXOFax0i59Y6izR+GgPxRa6c0Wz4ZY1jKc2sQ4OM7878wL7yx/qFE+DPC LOhMSRw10klmCFBFQ9pnhYZIrvG35gHpcb7yNP7LjrFsqkIT2d6WLZH0farD/mZS y1e+SZpmOf+HjESDpDBESkJB9Bb6CfWDkzIiMBWc6PzM7cP1zA9gY4ni8n3sDaS+ 7gk8Ba55ZCfAZIMyrsHh89Y5UITGVjV7pAkf2woIK9Jfo1SgQD3qaA5CeAXFEkgE vuiPm7bhmCXMWfa0SwQVPjuv+X04T0g= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:24 2025 by rpki-client