$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cd78d3a0-ea22-32ae-bb00-5392c5a53573.roa File: cd78d3a0-ea22-32ae-bb00-5392c5a53573.roa (raw, json) Hash identifier: cQa1AQOJwog2bEYXhajrPOBhNnMa5FMiuFLiM3vFUa0= Subject key identifier: A3:0D:F2:AA:5F:12:D5:64:9E:2C:18:82:6C:D1:51:AF:1D:6E:ED:90 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F432858494B64313D32F059E917F15B70 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cd78d3a0-ea22-32ae-bb00-5392c5a53573.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 54858 IP address blocks: 204.14.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:31:3d:32:f0:59:e9:17:f1:5b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=4742b637-71c9-4136-975d-84a8b0d1e989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:44:4c:89:07:5d:e3:c6:1b:69:41:4e:3a:bf: f2:88:6b:81:65:7a:48:e3:bf:13:52:58:f4:61:1a: 25:69:40:f7:08:df:68:5b:04:5c:f1:59:52:05:e3: b0:0a:e3:c4:96:fe:26:f8:c8:d0:fe:a9:e0:c1:31: 5e:ca:5f:c3:66:bc:77:02:4d:a6:25:27:23:c6:d2: 57:8f:dd:cc:4c:aa:8d:4f:4c:b6:21:00:06:d6:f8: ce:93:8d:92:18:df:13:a1:c6:95:54:21:cf:a3:b0: 57:1a:d0:17:78:c4:7e:8d:1c:07:fa:22:34:e5:25: 7d:5f:d9:a0:8b:f6:32:00:aa:73:80:db:71:33:93: 66:33:32:9b:3c:ed:36:67:6e:aa:b4:26:3b:04:c2: 0c:e4:7b:c7:a2:b9:37:e3:96:47:3f:1f:80:77:0c: 97:92:e2:fb:75:ce:e2:1a:bd:f1:67:5a:ae:37:8d: ba:37:95:58:97:c2:05:63:a4:dd:8f:2e:7b:17:f6: 37:7f:ee:5b:5f:ba:fc:9a:8c:60:0e:03:ea:0f:08: b7:6c:9a:d8:57:7a:f2:08:f3:33:c7:60:11:ff:06: 2f:cc:19:9f:c8:1d:06:cf:84:91:ee:f3:6e:1c:a3: 10:42:73:79:5d:e2:3d:5d:2f:92:58:22:8c:8d:ae: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0D:F2:AA:5F:12:D5:64:9E:2C:18:82:6C:D1:51:AF:1D:6E:ED:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cd78d3a0-ea22-32ae-bb00-5392c5a53573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.14.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e2:d5:74:6a:c4:3a:3f:0f:de:f7:c6:58:41:a7:74:d3:30: 74:e6:08:17:47:6b:7a:3f:35:a7:ca:bb:8d:06:49:7d:08:ed: f8:f8:4d:ed:d0:50:6d:48:b0:90:43:8b:e1:af:88:5b:0e:a7: 67:1a:35:d1:4b:cf:6d:69:28:6d:2a:18:ec:32:7c:44:b8:2c: 89:cc:a5:48:35:dd:3e:64:a6:93:e2:75:8a:f0:23:62:d4:87: 89:4e:b0:f6:2b:7e:37:ba:58:c3:6a:69:80:cf:01:4a:f6:f2: 5f:d0:00:10:dd:41:81:f3:b0:41:02:50:b2:11:2f:3b:ac:f5: 43:46:b9:5f:fb:23:64:ea:a3:1e:0c:e9:9a:4e:5d:88:7d:73: 97:e8:bb:9f:3a:2d:e1:40:1a:02:70:be:19:2d:68:56:0a:de: 77:76:b5:61:1f:a6:82:52:b4:15:e6:a6:39:b4:85:a7:d0:e8: e5:26:13:46:68:0e:96:78:99:01:e9:8a:58:f1:a1:e7:98:5e: ec:69:ff:a4:65:ca:b7:83:94:18:b6:31:be:93:61:0a:6e:35: 21:7e:30:8b:2a:91:39:58:ea:ae:34:93:62:01:24:e4:e3:63: 4f:83:92:af:3c:88:23:1f:b4:34:79:5c:a1:da:42:5a:bf:05: 96:73:24:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZDE9MvBZ6RfxW3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk NDc0MmI2MzctNzFjOS00MTM2LTk3NWQtODRhOGIwZDFlOTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20RMiQdd48YbaUFOOr/yiGuBZXpI478TUlj0 YRolaUD3CN9oWwRc8VlSBeOwCuPElv4m+MjQ/qngwTFeyl/DZrx3Ak2mJScjxtJX j93MTKqNT0y2IQAG1vjOk42SGN8TocaVVCHPo7BXGtAXeMR+jRwH+iI05SV9X9mg i/YyAKpzgNtxM5NmMzKbPO02Z26qtCY7BMIM5HvHork345ZHPx+AdwyXkuL7dc7i Gr3xZ1quN426N5VYl8IFY6Tdjy57F/Y3f+5bX7r8moxgDgPqDwi3bJrYV3ryCPMz x2AR/wYvzBmfyB0Gz4SR7vNuHKMQQnN5XeI9XS+SWCKMja4xfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMN8qpfEtVkniwYgmzRUa8dbu2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2Q3OGQzYTAtZWEyMi0z MmFlLWJiMDAtNTM5MmM1YTUzNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvi1XRqxDo/D973xlhBp3TTMHTmCBdHa3o/NafKu40GSX0I7fj4Te3Q UG1IsJBDi+GviFsOp2caNdFLz21pKG0qGOwyfES4LInMpUg13T5kppPidYrwI2LU h4lOsPYrfje6WMNqaYDPAUr28l/QABDdQYHzsEECULIRLzus9UNGuV/7I2Tqox4M 6ZpOXYh9c5fou586LeFAGgJwvhktaFYK3nd2tWEfpoJStBXmpjm0hafQ6OUmE0Zo DpZ4mQHpiljxoeeYXuxp/6RlyreDlBi2Mb6TYQpuNSF+MIsqkTlY6q40k2IBJOTj Y0+Dkq88iCMftDR5XKHaQlq/BZZzJBQ= -----END CERTIFICATE-----Generated at Sun Apr 13 03:02:37 2025 by rpki-client