$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa File: c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa (raw, json) Hash identifier: LDmcumIndctc1DDaT8LJKNOQZrPa6dTVp/YwYbrc6tM= Subject key identifier: EE:17:63:AA:81:95:78:CC:FE:DC:AE:39:DA:4A:AC:5D:0E:97:39:0C Certificate issuer: /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Certificate serial: 010D0C9F43285849393E7BD52C5C51B6B3091900 Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 30722 IP address blocks: 47.53.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:7b:d5:2c:5c:51:b6:b3:09:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1 Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=f8dfdcc0-3623-49f0-b73c-844acfc5ee81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:4f:bb:cb:25:3e:95:b8:ae:be:f7:15:77: 68:a0:5e:45:f7:ee:4a:9e:f3:b8:99:ad:6f:46:de: 3e:18:b0:8d:ff:8a:97:3c:bb:d0:ef:45:99:49:a7: 3c:2b:70:8e:e8:bb:de:7b:26:e2:7c:b6:1a:01:1e: aa:ac:b4:3b:9e:90:d8:61:8a:d8:e7:ec:51:ac:b4: ec:20:56:8d:62:ca:04:82:23:db:8e:77:a8:ba:5d: ad:49:ae:50:f1:78:b5:5d:89:d9:b0:ce:45:e8:82: 8c:96:31:57:62:af:a1:99:2b:f7:b6:fc:59:91:04: 2b:5a:9d:c4:23:14:75:c8:34:56:f2:4c:4b:68:bb: 83:05:59:ac:84:d3:cb:4e:ab:0c:ef:6b:f9:3c:7c: 89:d6:92:5e:60:7a:ba:79:c4:34:bf:91:70:53:84: e6:53:a5:e8:4a:54:38:ff:b3:63:97:63:47:24:1d: 0b:16:eb:6a:c7:b8:75:b6:b8:c5:ec:75:bc:c4:0a: ec:7f:be:cc:11:3a:da:95:e5:9b:7b:f5:d7:0b:33: 5a:5a:bc:c5:3b:78:8d:ee:8a:a6:f6:17:7c:cf:16: ef:dc:43:b1:f7:37:be:92:91:69:70:84:eb:fa:ec: e8:f7:05:e8:32:b3:e3:d3:b6:9f:f7:8a:2e:9f:4b: 6e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:17:63:AA:81:95:78:CC:FE:DC:AE:39:DA:4A:AC:5D:0E:97:39:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/c11d7fad-5b25-36bc-8497-45c86e9beb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl X509v3 Authority Key Identifier: keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer sbgp-ipAddrBlock: critical IPv4: 47.53.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:6f:9a:c7:4f:64:02:dc:97:52:5e:28:7a:c8:e3:85:d0:13: 54:81:61:6f:bf:35:8a:40:9e:0c:ca:cd:61:9e:69:10:93:9d: 08:b1:42:34:19:a9:81:b1:a3:dd:6e:50:b1:6e:e4:a6:29:a2: 3c:36:85:d2:da:d7:29:f2:f0:97:f7:69:11:06:07:19:e3:c7: ad:cd:64:ff:e0:58:06:75:22:53:9e:86:bd:2a:5c:1a:98:5a: 6b:f5:ae:27:88:bd:be:e6:c8:71:19:f5:54:1e:e0:e6:53:56: fc:c3:45:89:51:34:5b:1b:c6:fd:71:07:dd:ad:e0:b8:09:db: 3a:98:1a:f4:c0:2e:33:14:ff:7d:11:ef:7a:d2:b8:0b:7b:16: 45:0f:8e:81:0f:47:b5:8b:18:17:38:dd:7e:fe:3f:ee:e8:8c: 30:ca:13:f4:d9:47:c1:28:fc:a2:5d:0e:69:5b:54:41:38:ef: 65:80:91:8a:30:87:1c:a2:a7:06:af:74:00:c9:fb:18:04:ca: b0:92:4c:a2:32:11:87:c2:92:58:84:cf:10:9e:bf:81:4f:dc: c0:7d:ff:87:8b:3c:3a:94:17:bd:0b:95:9f:64:d5:e8:21:38: 7a:cc:e4:18:a3:ff:35:1a:94:a1:37:84:08:64:85:49:13:1e: 38:c3:d0:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnvVLFxRtrMJGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWYxNjAtOWNlOC00ODhjLThhZjUtZTI5MmI3YTU0 NWMxMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk ZjhkZmRjYzAtMzYyMy00OWYwLWI3M2MtODQ0YWNmYzVlZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHxPu8slPpW4rr73FXdooF5F9+5KnvO4ma1v Rt4+GLCN/4qXPLvQ70WZSac8K3CO6LveeybifLYaAR6qrLQ7npDYYYrY5+xRrLTs IFaNYsoEgiPbjneoul2tSa5Q8Xi1XYnZsM5F6IKMljFXYq+hmSv3tvxZkQQrWp3E IxR1yDRW8kxLaLuDBVmshNPLTqsM72v5PHyJ1pJeYHq6ecQ0v5FwU4TmU6XoSlQ4 /7Njl2NHJB0LFutqx7h1trjF7HW8xArsf77METraleWbe/XXCzNaWrzFO3iN7oqm 9hd8zxbv3EOx9ze+kpFpcITr+uzo9wXoMrPj07af94oun0tu/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4XY6qBlXjM/tyuOdpKrF0OlzkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5 ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjkyYjdhNTQ1YzEvYzExZDdmYWQtNWIyNS0z NmJjLTg0OTctNDVjODZlOWJlYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEzOWYxNjAtOWNlOC00ODhjLThh ZjUtZTI5MmI3YTU0NWMxLzRhMzlmMTYwLTljZTgtNDg4Yy04YWY1LWUyOTJiN2E1 NDVjMS5jcmwwHwYDVR0jBBgwFoAUCUkyGsdJIn+Nd17cR6ZdzOc0054wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTM5ZjE2MC05Y2U4LTQ4OGMtOGFmNS1lMjky YjdhNTQ1YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELzXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9vmsdPZALcl1JeKHrI44XQE1SBYW+/NYpAngzKzWGeaRCTnQixQjQZ qYGxo91uULFu5KYpojw2hdLa1yny8Jf3aREGBxnjx63NZP/gWAZ1IlOehr0qXBqY Wmv1rieIvb7myHEZ9VQe4OZTVvzDRYlRNFsbxv1xB92t4LgJ2zqYGvTALjMU/30R 73rSuAt7FkUPjoEPR7WLGBc43X7+P+7ojDDKE/TZR8Eo/KJdDmlbVEE472WAkYow hxyipwavdADJ+xgEyrCSTKIyEYfCkliEzxCev4FP3MB9/4eLPDqUF70LlZ9k1egh OHrM5Bij/zUalKE3hAhkhUkTHjjD0CA= -----END CERTIFICATE-----Generated at Fri Apr 4 19:31:42 2025 by rpki-client