$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa File: a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa (raw, json) Hash identifier: OGQ9w8JxMy01cXhCIy6m/DHEOdkLMhjAyuW3bZmTdKI= Subject key identifier: 36:F9:2A:15:25:6D:D3:BC:F3:71:53:65:CC:55:F1:B3:FE:9A:63:05 Certificate issuer: /CN=34b715b9-211f-4bf7-ace9-03b3446775ab Certificate serial: 010D0C9F4328584867FAE930CA6D0DFED78B1EC0 Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa Signing time: Thu 02 Jan 2025 02:00:39 +0000 ROA not before: Thu 02 Jan 2025 02:00:39 +0000 ROA not after: Wed 02 Apr 2025 01:00:39 +0000 asID: 16509 IP address blocks: 204.155.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:fa:e9:30:ca:6d:0d:fe:d7:8b:1e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab Validity Not Before: Jan 2 02:00:39 2025 GMT Not After : Apr 2 01:00:39 2025 GMT Subject: CN=5842eb4a-3369-44be-9678-bc6aec5c7347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:95:9f:00:28:0c:af:9d:68:98:b6:4c:89: 10:9c:a3:68:ae:4d:85:68:d6:fb:ee:2f:cb:9e:bc: f9:7b:f9:b1:3f:fa:93:8e:c3:3b:c9:d5:83:f8:4f: 9d:dd:43:f2:ca:11:51:64:a9:1f:bb:1e:64:c2:28: 9a:ee:ca:b4:46:af:5e:24:ca:23:dd:33:68:37:05: 4a:19:37:ca:ba:fb:cf:65:4c:fc:b0:6c:52:ff:d0: a8:5f:fe:2f:b5:c6:f8:ad:49:09:4f:cf:69:e5:d9: 1b:45:01:ae:02:33:08:9a:1f:93:e2:78:73:2c:95: 24:ae:ad:cf:5d:41:dc:f3:e5:82:1d:76:ca:fc:a8: db:02:f7:4f:88:61:29:bc:ba:13:05:b9:5f:2e:b6: bc:1c:25:98:4f:a3:a3:a4:68:59:7d:32:03:e3:4e: 69:5e:51:7a:b3:28:3f:44:e0:a7:98:54:9c:14:bc: 6c:53:db:65:5a:03:49:c3:74:72:ec:dc:0c:a1:36: 8e:00:f2:98:52:c2:e5:d7:76:52:be:fc:e6:52:28: e7:50:16:7c:81:6e:74:b6:61:c5:5a:79:b4:b9:77: 0d:4f:ac:50:bc:66:23:4b:a1:6e:e7:bb:14:10:b7: a8:35:31:8e:56:ea:41:3d:8f:0a:19:1d:bf:c1:ef: e0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F9:2A:15:25:6D:D3:BC:F3:71:53:65:CC:55:F1:B3:FE:9A:63:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/a3dab3a9-1c33-37ac-9b37-1a214389e6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl X509v3 Authority Key Identifier: keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer sbgp-ipAddrBlock: critical IPv4: 204.155.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:50:fb:9f:e6:97:ed:0e:11:e2:3a:ec:38:45:42:da:64:ed: 23:e1:ce:03:3b:59:33:7e:28:8c:25:45:59:55:26:37:2b:73: 82:92:0d:34:36:76:32:26:75:d3:2f:d4:51:5e:05:26:78:30: 55:e3:f2:09:31:38:74:f5:27:3b:ea:b3:e8:2e:08:ef:cf:a3: 67:a4:d6:04:f9:95:33:28:fe:ae:f0:dc:ad:1e:7e:52:03:fe: 97:36:59:36:54:09:13:52:af:6b:3d:a6:dd:58:23:c9:ce:ab: fb:25:5a:6b:81:55:8e:72:65:bd:be:01:b7:b4:3e:2f:b0:cf: 20:4d:55:f7:88:f1:7c:91:00:be:56:ce:cc:13:67:48:6f:c3: 49:d1:1c:db:65:13:c2:d1:38:d0:8f:9d:3a:f8:7f:15:fd:f0: 19:e2:df:60:d5:a1:6c:74:96:ee:2e:fe:68:7e:97:4e:6f:2a: 63:77:7a:5b:d0:06:0b:e8:00:38:7f:9a:20:f8:b9:5d:4d:7c: a3:9c:eb:29:e5:7b:d6:2c:c0:fe:77:45:44:a6:88:7e:f1:dc: 4e:66:97:23:20:5c:6f:90:0f:86:e9:ab:c4:09:1d:8d:d8:fb: 4c:a6:7f:ba:0a:36:62:48:2a:ed:a3:40:b7:d4:3f:0f:14:79: 5c:dc:b7:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+ukwym0N/teLHsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3 NWFiMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk NTg0MmViNGEtMzM2OS00NGJlLTk2NzgtYmM2YWVjNWM3MzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fuVnwAoDK+daJi2TIkQnKNork2FaNb77i/L nrz5e/mxP/qTjsM7ydWD+E+d3UPyyhFRZKkfux5kwiia7sq0Rq9eJMoj3TNoNwVK GTfKuvvPZUz8sGxS/9CoX/4vtcb4rUkJT89p5dkbRQGuAjMImh+T4nhzLJUkrq3P XUHc8+WCHXbK/KjbAvdPiGEpvLoTBblfLra8HCWYT6OjpGhZfTID405pXlF6syg/ ROCnmFScFLxsU9tlWgNJw3Ry7NwMoTaOAPKYUsLl13ZSvvzmUijnUBZ8gW50tmHF Wnm0uXcNT6xQvGYjS6Fu57sUELeoNTGOVupBPY8KGR2/we/gxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb5KhUlbdO883FTZcxV8bP+mmMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3 MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvYTNkYWIzYTktMWMzMy0z N2FjLTliMzctMWEyMTQzODllNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3 NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9Q+5/ml+0OEeI67DhFQtpk7SPhzgM7WTN+KIwlRVlVJjcrc4KSDTQ2 djImddMv1FFeBSZ4MFXj8gkxOHT1Jzvqs+guCO/Po2ek1gT5lTMo/q7w3K0eflID /pc2WTZUCRNSr2s9pt1YI8nOq/slWmuBVY5yZb2+Abe0Pi+wzyBNVfeI8XyRAL5W zswTZ0hvw0nRHNtlE8LRONCPnTr4fxX98Bni32DVoWx0lu4u/mh+l05vKmN3elvQ BgvoADh/miD4uV1NfKOc6ynle9YswP53RUSmiH7x3E5mlyMgXG+QD4bpq8QJHY3Y +0ymf7oKNmJIKu2jQLfUPw8UeVzct2c= -----END CERTIFICATE-----Generated at Fri Mar 14 10:19:43 2025 by rpki-client