$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa File: dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa (raw, json) Hash identifier: wj13Trfyi2mfLysmVO856R2EIfGgIZC+tfen6x7EdVE= Subject key identifier: 9D:45:4A:3C:36:A6:73:61:96:70:E0:5E:E1:01:9A:41:5A:05:ED:80 Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F43285848F65BE6465CCFEBFE0E67A3C0 Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 134.65.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:e6:46:5c:cf:eb:fe:0e:67:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=23839236-327e-4d7e-a9b8-5a8856250202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b9:b0:d7:82:8b:08:51:ec:e4:3a:38:7e:14: bb:be:c6:7c:be:12:bc:64:1e:2b:ed:15:83:04:74: c0:9d:29:8e:93:bd:83:2f:33:43:9e:84:f2:17:64: 0c:43:c6:e6:46:c9:05:8d:1d:c9:65:f4:09:32:3c: 35:fc:58:6a:f9:ea:34:98:88:65:8d:ae:35:f3:dd: ad:0c:4a:74:3a:17:e0:c9:c9:a8:d9:56:6e:86:01: e8:0f:91:59:a0:88:e5:01:ce:53:b4:cd:c9:51:81: 2d:16:cc:bf:a1:3c:89:0e:49:0e:96:03:8d:4e:c2: bb:5d:2f:6e:d8:fb:f1:f9:09:dd:d4:a3:75:4f:09: a8:55:95:38:fb:35:9d:0b:bc:ea:d2:95:76:5f:a3: 27:12:bf:f9:3e:dd:5b:05:6c:9f:2c:36:2c:32:a9: e7:7f:3b:79:2d:15:e5:53:df:a3:c5:46:f5:0b:48: 28:37:11:8a:cd:af:8d:46:ed:cc:7a:1c:a2:90:27: ff:38:52:aa:bc:05:81:1f:a8:f7:fa:5f:62:40:09: 0d:eb:ff:9f:2c:82:c0:6b:6d:b3:22:2c:35:5b:18: e9:37:a3:e4:d5:cf:14:95:5d:dc:2c:be:96:4b:12: ec:04:6d:00:ce:38:7e:59:93:72:08:98:11:20:2e: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:4A:3C:36:A6:73:61:96:70:E0:5E:E1:01:9A:41:5A:05:ED:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:73:b3:7b:69:22:1d:3e:42:1d:0a:da:80:f5:60:9d:15:ea: b7:b6:e0:c3:01:5a:d2:4c:05:3d:e6:1f:ab:2f:ff:90:3f:5d: 6d:d4:1c:c4:b7:20:c4:5b:89:c0:95:21:d7:3b:8f:0c:5d:d5: ae:a4:05:93:80:d6:6b:d5:10:80:2a:37:af:62:6d:bb:35:28: 5b:7f:7d:13:0d:85:ae:17:c5:0b:39:16:04:b8:08:52:09:28: 7c:b6:0d:94:15:83:52:5d:c2:5f:77:8f:14:e1:e4:68:3f:36: 20:0a:33:56:cb:b9:b8:29:77:af:9a:d9:ff:2f:b4:a1:b4:00: 9f:24:38:39:44:57:d0:da:6a:94:94:cf:5b:e0:71:58:2f:65: a8:a3:ad:bf:7d:11:cd:55:fa:83:52:37:71:b3:0b:6d:84:a3: eb:c6:b2:37:86:3d:41:bb:94:cd:84:c1:f3:f5:33:2f:66:13: 78:35:5c:1e:57:2a:98:fa:33:5a:9a:4e:bf:69:b2:c5:9d:df: 12:2a:45:c2:fe:6d:a8:0f:f8:f3:6b:a6:7a:62:30:56:ac:7d: d1:b3:ca:a6:ca:ec:a0:10:63:f9:2d:8c:74:92:a3:fa:f9:bf: 51:b4:6c:c3:c5:d6:31:45:67:cb:3d:63:0e:fc:97:dc:9d:2b: 31:9e:23:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W+ZGXM/r/g5no8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MjM4MzkyMzYtMzI3ZS00ZDdlLWE5YjgtNWE4ODU2MjUwMjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirmw14KLCFHs5Do4fhS7vsZ8vhK8ZB4r7RWD BHTAnSmOk72DLzNDnoTyF2QMQ8bmRskFjR3JZfQJMjw1/Fhq+eo0mIhlja41892t DEp0Ohfgycmo2VZuhgHoD5FZoIjlAc5TtM3JUYEtFsy/oTyJDkkOlgONTsK7XS9u 2Pvx+Qnd1KN1TwmoVZU4+zWdC7zq0pV2X6MnEr/5Pt1bBWyfLDYsMqnnfzt5LRXl U9+jxUb1C0goNxGKza+NRu3MehyikCf/OFKqvAWBH6j3+l9iQAkN6/+fLILAa22z Iiw1WxjpN6Pk1c8UlV3cLL6WSxLsBG0Azjh+WZNyCJgRIC6DmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1FSjw2pnNhlnDgXuEBmkFaBe2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvZGMyZjg3MjMtMWEyNS0z YmIzLThhYjEtYjI1NjYyYmExYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRzs3tpIh0+Qh0K2oD1YJ0V6re24MMBWtJMBT3mH6sv/5A/XW3UHMS3 IMRbicCVIdc7jwxd1a6kBZOA1mvVEIAqN69ibbs1KFt/fRMNha4XxQs5FgS4CFIJ KHy2DZQVg1Jdwl93jxTh5Gg/NiAKM1bLubgpd6+a2f8vtKG0AJ8kODlEV9DaapSU z1vgcVgvZaijrb99Ec1V+oNSN3GzC22Eo+vGsjeGPUG7lM2EwfP1My9mE3g1XB5X Kpj6M1qaTr9pssWd3xIqRcL+bagP+PNrpnpiMFasfdGzyqbK7KAQY/ktjHSSo/r5 v1G0bMPF1jFFZ8s9Yw78l9ydKzGeI+0= -----END CERTIFICATE-----Generated at Fri Mar 14 13:36:08 2025 by rpki-client