$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ef3392a6-ef96-3774-8bd4-9944157036c5.roa File: ef3392a6-ef96-3774-8bd4-9944157036c5.roa (raw, json) Hash identifier: vzBz9vXPG/xNLSu844zqahCOhQb4pOvQL2NlnBiGG5I= Subject key identifier: 20:D1:62:93:C9:E7:15:B4:82:0C:3F:80:98:38:85:AE:21:87:1A:2A Certificate issuer: /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Certificate serial: 010D0C9F4328584949FE934B67385569ABBC9E80 Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ef3392a6-ef96-3774-8bd4-9944157036c5.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 7029 IP address blocks: 204.114.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:93:4b:67:38:55:69:ab:bc:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=d5db25a2-3027-4e74-ba8e-678ee476ce50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0e:bb:d9:74:01:69:8f:93:41:60:95:bd:09: 97:40:89:59:dc:a8:f7:a5:9e:78:43:ad:e9:ef:84: 3e:72:f7:b4:0e:50:73:75:54:60:5f:bc:97:00:36: e7:f4:af:70:db:46:c5:1f:e6:8b:9d:a7:d7:c2:b8: b4:8e:7d:d0:6f:29:31:b0:3d:28:13:1c:93:01:4f: 60:91:2c:ba:19:8f:df:8f:e0:8a:11:01:f6:32:3b: b2:49:1d:b1:57:0e:86:29:27:e9:b9:f1:93:c9:42: 2d:31:35:7a:6f:bb:40:ab:0d:33:93:eb:86:b3:af: 52:78:52:0f:43:90:f5:a0:21:28:4c:e7:d7:3b:29: 2a:bf:74:b4:d2:d9:62:c3:79:30:16:4a:4f:ab:3b: ef:d4:6f:34:39:0f:48:81:f5:ea:bd:0a:34:c9:ac: 3f:fb:69:bc:47:1d:d8:4a:cf:25:29:1c:b7:96:74: 74:ae:f7:35:97:e5:78:f2:e2:ea:8c:dd:1a:98:1e: e8:33:27:06:0e:61:08:3e:02:0c:6d:46:39:4c:e8: a2:a2:89:62:69:ff:84:87:c4:d4:bd:2b:5d:01:d0: 60:77:ac:69:f3:22:88:2c:63:31:f2:c7:b2:5c:b6: 02:4d:2f:23:8c:54:ce:40:89:cb:07:ce:df:11:1c: f1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D1:62:93:C9:E7:15:B4:82:0C:3F:80:98:38:85:AE:21:87:1A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/ef3392a6-ef96-3774-8bd4-9944157036c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl X509v3 Authority Key Identifier: keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer sbgp-ipAddrBlock: critical IPv4: 204.114.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:76:4b:b8:88:3a:87:df:17:c2:7f:e4:09:2f:54:1f:a1:4f: c1:0e:fd:16:3d:89:9c:24:0e:eb:ae:5d:15:e8:00:a7:5c:81: 11:09:b9:3e:91:55:e8:65:9f:89:fb:2c:b0:d8:af:5b:4c:6a: 00:e1:5b:3a:4f:1b:48:d7:d2:2d:61:40:f8:c2:bc:60:dc:9f: c4:8c:44:c6:13:92:80:e3:91:23:d6:e4:89:f9:2f:f6:b8:9b: 81:ae:19:dc:cc:5f:77:3b:54:cf:39:98:07:31:ab:af:0d:56: 64:6a:95:fc:fa:45:5a:b9:f7:9c:22:93:55:a0:24:d4:a8:b0: 40:eb:bd:77:d8:41:8b:2b:fc:5b:02:7a:ed:fb:f8:14:ae:f2: f4:de:a0:14:ee:53:e7:41:fa:b9:35:55:a8:39:71:d4:f1:24: 24:b7:f5:0c:14:3a:de:9b:9d:b9:75:fb:cd:d0:0a:a7:b7:11: 66:ef:25:ba:3c:24:5c:2a:5a:7a:e2:2b:eb:b8:05:9c:1b:f9: 4c:32:cb:00:c4:5d:54:2d:19:e4:68:92:86:75:da:a1:43:85: b2:7a:c1:61:89:5b:19:4b:d6:ff:43:5b:54:a2:0d:70:a5:59: 02:6c:8e:a6:d8:f6:7d:75:51:7e:72:16:aa:aa:97:36:80:05: 59:29:43:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/pNLZzhVaau8noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEwOTNlM2YtMWQ5Yi00ZTY4LTkzMTctMWRlNzdkYWY5 Njk4MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZDVkYjI1YTItMzAyNy00ZTc0LWJhOGUtNjc4ZWU0NzZjZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig672XQBaY+TQWCVvQmXQIlZ3Kj3pZ54Q63p 74Q+cve0DlBzdVRgX7yXADbn9K9w20bFH+aLnafXwri0jn3QbykxsD0oExyTAU9g kSy6GY/fj+CKEQH2MjuySR2xVw6GKSfpufGTyUItMTV6b7tAqw0zk+uGs69SeFIP Q5D1oCEoTOfXOykqv3S00tliw3kwFkpPqzvv1G80OQ9IgfXqvQo0yaw/+2m8Rx3Y Ss8lKRy3lnR0rvc1l+V48uLqjN0amB7oMycGDmEIPgIMbUY5TOiiooliaf+Eh8TU vStdAdBgd6xp8yKILGMx8seyXLYCTS8jjFTOQInLB87fERzxjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDRYpPJ5xW0ggw/gJg4ha4hhxoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5 M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3N2RhZjk2OTgvZWYzMzkyYTYtZWY5Ni0z Nzc0LThiZDQtOTk0NDE1NzAzNmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmEwOTNlM2YtMWQ5Yi00ZTY4LTkz MTctMWRlNzdkYWY5Njk4LzJhMDkzZTNmLTFkOWItNGU2OC05MzE3LTFkZTc3ZGFm OTY5OC5jcmwwHwYDVR0jBBgwFoAUxw25EFn1EfxVkVJscoLB6kVFp3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3 N2RhZjk2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzHJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE52S7iIOoffF8J/5AkvVB+hT8EO/RY9iZwkDuuuXRXoAKdcgREJuT6R Vehln4n7LLDYr1tMagDhWzpPG0jX0i1hQPjCvGDcn8SMRMYTkoDjkSPW5In5L/a4 m4GuGdzMX3c7VM85mAcxq68NVmRqlfz6RVq595wik1WgJNSosEDrvXfYQYsr/FsC eu37+BSu8vTeoBTuU+dB+rk1Vag5cdTxJCS39QwUOt6bnbl1+83QCqe3EWbvJbo8 JFwqWnriK+u4BZwb+UwyywDEXVQtGeRokoZ12qFDhbJ6wWGJWxlL1v9DW1SiDXCl WQJsjqbY9n11UX5yFqqqlzaABVkpQ88= -----END CERTIFICATE-----Generated at Fri Apr 4 16:17:36 2025 by rpki-client