$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa File: 58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa (raw, json) Hash identifier: 4HW3VDlvvNyVQKMwvpWDneKfM4iZZLL+aouAHXhR6eE= Subject key identifier: 02:2D:05:AA:47:3F:80:A0:15:1D:1A:24:6B:D5:44:76:C0:65:20:5B Certificate issuer: /CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Certificate serial: 010D0C9F43285848A13619250B24B5168A1F0D80 Authority key identifier: 2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 393981 IP address blocks: 204.239.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:19:25:0b:24:b5:16:8a:1f:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=e9bc70b8-a4fd-4972-8a6c-bb094a8a89bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:28:43:51:52:da:62:65:2e:55:33:79:17:9e: 65:4c:1b:d7:f3:a0:3c:ed:51:27:35:a0:2c:ee:28: 4b:18:b1:55:f7:b0:9d:1d:4c:e8:cb:25:c5:ee:e1: d2:fc:1f:62:75:64:6e:d3:69:13:69:47:ad:ca:dd: b8:7e:89:cd:e6:06:68:77:b5:7d:4b:ae:bd:2e:39: ce:c5:ee:4c:55:f6:0f:c9:62:ff:9e:ab:ad:48:d3: 9c:9e:9e:39:7d:11:f8:09:8a:77:31:bc:89:1a:50: be:20:cd:9f:52:1f:a3:08:4a:3f:07:24:b3:76:5b: f7:f6:b8:51:8b:da:9e:d9:01:13:f5:68:a5:e3:39: 02:6f:3b:58:2f:05:1e:aa:67:a3:7a:60:87:cb:69: 40:86:a3:c4:3b:ad:a2:c0:bc:86:d6:ba:4c:3f:3f: d8:1d:8e:31:41:60:b4:c6:5f:fe:56:2a:b4:20:c6: 9b:e3:bb:07:b9:ba:a5:c9:f5:20:f7:d3:0b:15:41: 4c:7e:bc:9d:70:7e:e5:34:37:bc:73:3f:f1:1b:50: fb:74:02:fb:a3:69:86:fc:7f:d5:65:74:53:08:66: 66:d9:2c:6c:41:33:a7:0c:c9:ee:48:1a:2b:a4:f0: 72:9d:40:50:2c:d1:a0:57:c8:8c:2d:cf:1c:9b:11: 03:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2D:05:AA:47:3F:80:A0:15:1D:1A:24:6B:D5:44:76:C0:65:20:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/58d874a8-67b2-352c-b8aa-6b6999e7ca60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.crl X509v3 Authority Key Identifier: keyid:2F:84:5F:43:AC:93:81:6F:FA:54:95:17:2A:F6:B6:A7:43:08:36:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4d10ac67-d8ff-4e2e-92e9-99b8aa2718ef.cer sbgp-ipAddrBlock: critical IPv4: 204.239.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:81:9d:44:59:66:1d:8d:1a:fb:9a:55:81:bf:dc:85:21:c9: 47:97:c2:9f:99:75:1f:f5:14:a1:9f:4a:fc:cd:f7:50:8d:89: 16:c6:f0:ed:f4:7c:5b:31:61:45:05:b9:11:83:6e:80:8b:56: 40:24:e0:54:33:52:87:ac:f9:7c:18:32:7b:f3:13:47:48:9a: 09:35:6b:0d:30:ff:fb:10:af:45:70:0f:68:1a:0a:b4:73:29: 1f:32:4a:39:a4:1c:59:61:40:9d:b1:79:c2:6a:10:c4:d1:6d: f4:98:46:e9:c8:2b:53:7e:36:a3:1c:68:99:f8:c2:4f:c0:2a: 7b:5c:0d:c2:fc:a3:0e:52:a7:61:df:34:37:c5:51:c4:a1:76: 3e:42:da:1c:9c:93:d1:98:ce:17:27:4c:e1:c8:9b:5a:38:37: b6:9b:8f:bf:22:9d:52:df:dd:92:ef:39:4a:fd:6b:21:c9:86: 34:96:da:ee:61:56:b1:d1:46:af:7a:ef:a3:09:98:f7:5c:3d: 5b:11:70:1d:78:98:df:64:bb:7c:ae:05:32:73:71:9a:57:64: 81:cb:da:0d:b9:08:8b:0e:99:3e:9d:d1:18:58:4f:a7:ef:91: 02:bc:bd:4e:ce:c6:38:eb:43:50:bf:75:73:05:cf:4c:0b:61: c5:b7:c6:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEihNhklCyS1FoofDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQxMGFjNjctZDhmZi00ZTJlLTkyZTktOTliOGFhMjcx OGVmMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZTliYzcwYjgtYTRmZC00OTcyLThhNmMtYmIwOTRhOGE4OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsChDUVLaYmUuVTN5F55lTBvX86A87VEnNaAs 7ihLGLFV97CdHUzoyyXF7uHS/B9idWRu02kTaUetyt24fonN5gZod7V9S669LjnO xe5MVfYPyWL/nqutSNOcnp45fRH4CYp3MbyJGlC+IM2fUh+jCEo/BySzdlv39rhR i9qe2QET9Wil4zkCbztYLwUeqmejemCHy2lAhqPEO62iwLyG1rpMPz/YHY4xQWC0 xl/+Viq0IMab47sHubqlyfUg99MLFUFMfrydcH7lNDe8cz/xG1D7dAL7o2mG/H/V ZXRTCGZm2SxsQTOnDMnuSBorpPBynUBQLNGgV8iMLc8cmxEDUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAItBapHP4CgFR0aJGvVRHbAZSBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEw YWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4YWEyNzE4ZWYvNThkODc0YTgtNjdiMi0z NTJjLWI4YWEtNmI2OTk5ZTdjYTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGQxMGFjNjctZDhmZi00ZTJlLTky ZTktOTliOGFhMjcxOGVmLzRkMTBhYzY3LWQ4ZmYtNGUyZS05MmU5LTk5YjhhYTI3 MThlZi5jcmwwHwYDVR0jBBgwFoAUL4RfQ6yTgW/6VJUXKva2p0MINvkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ZDEwYWM2Ny1kOGZmLTRlMmUtOTJlOS05OWI4 YWEyNzE4ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO9WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSBnURZZh2NGvuaVYG/3IUhyUeXwp+ZdR/1FKGfSvzN91CNiRbG8O30 fFsxYUUFuRGDboCLVkAk4FQzUoes+XwYMnvzE0dImgk1aw0w//sQr0VwD2gaCrRz KR8ySjmkHFlhQJ2xecJqEMTRbfSYRunIK1N+NqMcaJn4wk/AKntcDcL8ow5Sp2Hf NDfFUcShdj5C2hyck9GYzhcnTOHIm1o4N7abj78inVLf3ZLvOUr9ayHJhjSW2u5h VrHRRq9676MJmPdcPVsRcB14mN9ku3yuBTJzcZpXZIHL2g25CIsOmT6d0RhYT6fv kQK8vU7OxjjrQ1C/dXMFz0wLYcW3xiA= -----END CERTIFICATE-----Generated at Fri Apr 4 19:10:49 2025 by rpki-client