$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/a6232f74-5870-372f-95e3-28c07d23d891.roa File: a6232f74-5870-372f-95e3-28c07d23d891.roa (raw, json) Hash identifier: eCxobAFFZx3GC3NGpRgfeEyW0s38RUeGicnj++aQSIw= Subject key identifier: BD:0A:60:12:D1:1C:FB:57:36:37:3C:F3:57:AF:83:13:31:4A:23:E3 Certificate issuer: /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Certificate serial: 010D0C9F432858494CC94E5E8151812675746D00 Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/a6232f74-5870-372f-95e3-28c07d23d891.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 19740 IP address blocks: 172.84.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:4e:5e:81:51:81:26:75:74:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=de5f2ae0-3360-4075-9a61-5674e8ee74f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:23:78:d1:aa:e2:d3:82:b1:81:9c:19:b8:5d: 74:00:42:f1:c5:d0:f7:68:aa:b9:6c:ea:7f:e3:07: 7c:a7:24:17:04:e2:73:29:d0:bd:70:b5:f0:09:ee: 3a:0f:5a:a7:64:58:47:a9:ab:a3:c2:81:22:ed:ae: 3a:1a:a0:aa:16:a4:9c:27:61:8a:68:75:71:69:cb: a3:4a:6f:14:02:68:ac:3c:b3:49:c8:ad:7d:20:73: e1:01:0f:1f:b5:ce:84:30:b3:db:ad:e0:a9:b5:7a: eb:db:e5:76:46:6e:98:27:92:c6:64:13:f9:53:c4: 43:73:28:de:41:89:aa:cc:2b:23:0e:1c:76:a8:bb: 18:f5:f3:c0:47:8a:51:ca:d6:0b:f3:64:e6:60:fd: 1b:38:50:41:e3:b1:b2:ae:1c:66:f7:bf:99:65:08: 84:14:a7:46:6b:04:49:1a:44:17:6d:58:54:16:17: f3:a0:e3:65:39:ef:23:b2:42:dc:bc:d8:90:2d:f3: d5:80:bc:c2:ba:79:29:4f:c1:10:35:10:8e:ee:52: 95:98:b4:ac:1d:02:9f:4d:22:10:65:23:d2:92:5b: 5f:e8:c9:cd:f8:01:a9:70:6c:11:d4:d5:b9:81:70: b6:e7:6f:fa:51:b2:98:41:c1:94:13:06:1b:2b:c8: 82:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0A:60:12:D1:1C:FB:57:36:37:3C:F3:57:AF:83:13:31:4A:23:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/a6232f74-5870-372f-95e3-28c07d23d891.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl X509v3 Authority Key Identifier: keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer sbgp-ipAddrBlock: critical IPv4: 172.84.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a1:c6:7b:bc:d5:aa:bb:8e:8a:bf:a5:0b:a7:9b:44:b7:6b: 66:62:c6:3e:c7:bd:9b:25:d0:f2:ca:d7:51:3b:3c:86:6e:17: 84:bf:f6:82:fb:88:b0:32:d1:ed:e9:ad:15:c8:b1:e2:27:21: 37:ea:64:b5:15:9d:86:a5:c4:b1:23:49:fe:23:c4:c8:9d:6d: ef:57:05:24:62:b8:fc:83:1a:c7:f4:6c:bf:23:f9:74:8b:ed: d6:20:97:c4:59:01:f2:0f:ef:95:00:c8:62:b1:0a:87:90:ec: 2e:74:c0:d8:25:0a:c9:3e:87:0f:cc:df:1a:cc:67:93:fb:71: 54:e8:8d:78:e0:32:92:c3:a8:a3:6d:0a:9b:ab:dd:c9:a8:b2: a2:1d:a7:04:a0:97:78:17:b9:e9:91:ff:e1:fe:33:54:19:ce: 72:9c:41:9a:a1:cf:9f:16:14:39:ea:ea:a4:a9:d0:78:fa:0e: 52:d6:89:ca:63:90:26:0d:42:ce:6f:43:89:15:3f:87:66:2b: 6b:6b:6b:ba:a7:e9:73:42:8e:f7:82:23:e7:08:5e:60:9b:d0: 66:36:a5:da:46:a6:9a:a1:ab:51:18:dd:ad:43:c6:f1:7c:c4: f2:b0:5b:d8:1d:ff:5e:57:35:9d:6c:f7:5b:f0:12:0f:b0:17: f3:1f:a5:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyU5egVGBJnV0bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz NGQ2MB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZGU1ZjJhZTAtMzM2MC00MDc1LTlhNjEtNTY3NGU4ZWU3NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSN40ari04KxgZwZuF10AELxxdD3aKq5bOp/ 4wd8pyQXBOJzKdC9cLXwCe46D1qnZFhHqaujwoEi7a46GqCqFqScJ2GKaHVxacuj Sm8UAmisPLNJyK19IHPhAQ8ftc6EMLPbreCptXrr2+V2Rm6YJ5LGZBP5U8RDcyje QYmqzCsjDhx2qLsY9fPAR4pRytYL82TmYP0bOFBB47Gyrhxm97+ZZQiEFKdGawRJ GkQXbVhUFhfzoONlOe8jskLcvNiQLfPVgLzCunkpT8EQNRCO7lKVmLSsHQKfTSIQ ZSPSkltf6MnN+AGpcGwR1NW5gXC252/6UbKYQcGUEwYbK8iCeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0KYBLRHPtXNjc881evgxMxSiPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvYTYyMzJmNzQtNTg3MC0z NzJmLTk1ZTMtMjhjMDdkMjNkODkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0 YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1 MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2 MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6hxnu81aq7joq/pQunm0S3a2Zixj7HvZsl0PLK11E7PIZuF4S/9oL7 iLAy0e3prRXIseInITfqZLUVnYalxLEjSf4jxMidbe9XBSRiuPyDGsf0bL8j+XSL 7dYgl8RZAfIP75UAyGKxCoeQ7C50wNglCsk+hw/M3xrMZ5P7cVTojXjgMpLDqKNt Cpur3cmosqIdpwSgl3gXuemR/+H+M1QZznKcQZqhz58WFDnq6qSp0Hj6DlLWicpj kCYNQs5vQ4kVP4dmK2tra7qn6XNCjveCI+cIXmCb0GY2pdpGppqhq1EY3a1DxvF8 xPKwW9gd/15XNZ1s91vwEg+wF/MfpZA= -----END CERTIFICATE-----Generated at Fri Apr 4 16:07:07 2025 by rpki-client