$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa File: 3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa (raw, json) Hash identifier: 0brCcEM4QKPfQLnjwsgwQxjBJ4oZYSgAZ8LJECnGoFs= Subject key identifier: 5F:AC:7B:AE:9E:50:82:A1:E7:EE:2E:0D:39:D3:71:D6:8C:12:9B:21 Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F43285848EF6142C3284D95895AE680C0 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 11260 IP address blocks: 216.104.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:42:c3:28:4d:95:89:5a:e6:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=6b1b94e0-a7a2-477f-8dce-c2c07f18c3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:05:3e:8c:46:17:f0:dd:11:92:f1:c3:cb: 27:5f:64:18:a9:91:87:3c:57:6b:7f:bc:70:73:7c: 8a:de:62:3f:fa:43:35:19:04:e6:4b:db:2b:7b:9c: ac:ef:23:62:a5:22:fb:39:a5:f8:dc:1d:3c:0d:ed: c0:b5:76:9d:e9:5a:2a:54:f7:72:bc:b0:21:0e:ce: 38:71:d3:e0:82:6a:c0:13:0b:40:c3:70:cf:3c:39: b1:f1:ff:33:69:f1:42:8c:d7:3d:f6:3d:0e:94:20: 36:a4:5d:64:10:57:67:94:11:e0:07:b3:b1:92:9d: a9:c2:3c:67:f9:e1:88:f2:3a:0d:25:3f:ed:46:ea: 6e:9e:a5:a9:1d:3e:57:2e:d2:1b:9e:fd:d9:fa:19: dc:99:bd:d7:ca:ab:10:4f:fe:13:ce:2a:b9:27:14: 28:f0:0f:ee:61:08:33:e6:38:a7:5f:07:10:a9:a5: f6:64:fa:92:ea:81:37:62:1b:e3:82:6c:b9:f4:b2: 5a:55:1c:08:b1:80:b1:f2:f0:37:47:8a:ad:c6:3a: 58:bd:ca:b2:e5:76:eb:8b:f8:14:52:26:cc:ae:fc: a8:d0:ee:46:71:e0:c0:a2:ac:cc:65:9c:12:ff:78: 01:c3:42:5f:b9:83:ba:d4:eb:bd:56:79:e6:0a:95: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AC:7B:AE:9E:50:82:A1:E7:EE:2E:0D:39:D3:71:D6:8C:12:9B:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/3452aa2f-4b9b-31d3-b07c-c2ea3c22d739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 216.104.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:32:af:98:e8:e1:1a:fe:1d:a0:04:71:8a:d7:6d:cc:fd:49: b5:71:66:69:28:23:40:7f:cb:f8:54:aa:fb:73:09:6b:bd:3d: 5a:c9:24:82:04:92:75:cf:84:31:ec:24:52:7c:b7:1b:8e:d5: bf:c7:34:f3:f9:be:09:d9:94:f0:21:6a:24:05:3e:b2:e7:22: 9e:20:49:6b:f0:68:44:f6:ee:fb:dc:69:b3:62:f2:fe:c1:9b: cf:58:8a:4d:14:c0:39:fc:8e:7f:4d:dd:b4:23:91:e8:43:18: ca:69:30:a4:18:e0:ef:bc:68:6e:5e:0d:00:18:97:98:12:95: 83:dd:e6:79:a1:44:01:16:29:9e:e4:5b:a0:c0:60:3a:3e:68: 4c:7c:56:b9:cd:19:f8:f8:eb:8c:4e:5d:57:e7:fc:af:c5:13: c9:ba:91:80:c4:b6:c3:51:1d:64:e7:5f:be:d9:a2:62:c9:7a: 72:2b:75:12:39:49:84:85:8a:52:34:26:1b:b7:15:07:3e:29: 78:89:36:03:62:f8:f8:d8:e7:34:ef:5e:14:32:88:64:fe:13: 35:80:0a:dc:2e:94:08:57:80:f5:2d:48:2e:39:be:84:75:d1: d3:3a:bd:32:56:04:03:db:b2:38:3f:57:7e:e2:3e:54:c5:0e: 42:8d:33:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYULDKE2ViVrmgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NmIxYjk0ZTAtYTdhMi00NzdmLThkY2UtYzJjMDdmMThjM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9wFPoxGF/DdEZLxw8snX2QYqZGHPFdrf7xw c3yK3mI/+kM1GQTmS9sre5ys7yNipSL7OaX43B08De3AtXad6VoqVPdyvLAhDs44 cdPggmrAEwtAw3DPPDmx8f8zafFCjNc99j0OlCA2pF1kEFdnlBHgB7Oxkp2pwjxn +eGI8joNJT/tRupunqWpHT5XLtIbnv3Z+hncmb3XyqsQT/4Tziq5JxQo8A/uYQgz 5jinXwcQqaX2ZPqS6oE3Yhvjgmy59LJaVRwIsYCx8vA3R4qtxjpYvcqy5Xbri/gU UibMrvyo0O5GceDAoqzMZZwS/3gBw0JfuYO61Ou9VnnmCpXIcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+se66eUIKh5+4uDTnTcdaMEpshMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvMzQ1MmFhMmYtNGI5Yi0z MWQzLWIwN2MtYzJlYTNjMjJkNzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2GhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMyr5jo4Rr+HaAEcYrXbcz9SbVxZmkoI0B/y/hUqvtzCWu9PVrJJIIE knXPhDHsJFJ8txuO1b/HNPP5vgnZlPAhaiQFPrLnIp4gSWvwaET27vvcabNi8v7B m89Yik0UwDn8jn9N3bQjkehDGMppMKQY4O+8aG5eDQAYl5gSlYPd5nmhRAEWKZ7k W6DAYDo+aEx8VrnNGfj464xOXVfn/K/FE8m6kYDEtsNRHWTnX77ZomLJenIrdRI5 SYSFilI0Jhu3FQc+KXiJNgNi+PjY5zTvXhQyiGT+EzWACtwulAhXgPUtSC45voR1 0dM6vTJWBAPbsjg/V37iPlTFDkKNM0o= -----END CERTIFICATE-----Generated at Fri Apr 4 18:59:37 2025 by rpki-client