$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa File: 9b2a0da3-5551-3cef-ab65-d40999076b92.roa (raw, json) Hash identifier: hAo29bMAR5+nJG7Qa/aBvRMocDG2GCpfAbGdWWUkyIE= Subject key identifier: F0:2E:2B:D6:F7:F6:4E:6D:6E:CE:F1:E2:77:6A:9A:1F:B1:68:38:21 Certificate issuer: /CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720 Certificate serial: 010D0C9F432858495EEEE9074A85D875B1ADF000 Authority key identifier: 61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa Signing time: Mon 31 Mar 2025 13:00:59 +0000 ROA not before: Mon 31 Mar 2025 13:00:59 +0000 ROA not after: Sun 29 Jun 2025 13:00:59 +0000 asID: 63351 IP address blocks: 207.90.254.0/23 maxlen: 24 2606:3180::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5e:ee:e9:07:4a:85:d8:75:b1:ad:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720 Validity Not Before: Mar 31 13:00:59 2025 GMT Not After : Jun 29 13:00:59 2025 GMT Subject: CN=026608a2-e94c-44b3-a60d-9475e759b6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6f:13:07:f5:23:48:ce:cd:ce:3d:8b:de:94: e5:37:b1:ab:f2:6f:61:9c:98:87:84:70:0b:28:e6: 03:64:41:29:b3:32:7f:60:ad:cc:d8:58:75:d8:3a: 08:ed:28:9c:a8:4a:1b:ad:87:f4:da:b8:47:42:dc: 80:ae:27:cc:f9:57:a3:a6:10:bc:5e:95:b2:f3:49: db:c6:21:86:ed:b3:f9:ee:36:70:21:20:84:0e:a3: 5e:76:6e:42:60:30:bf:23:1d:6a:b6:f6:4c:90:1e: 3b:7f:84:30:4b:a7:20:54:9e:12:05:c0:ae:90:7f: 89:d3:a7:c2:4a:f7:69:75:18:65:3c:0f:81:0e:c3: 82:58:96:68:e4:9f:df:95:89:06:c6:c7:67:c6:5e: b3:85:6e:b1:97:0c:fc:5b:5a:14:88:00:16:3d:5e: 3d:bb:d4:b4:6e:9f:35:ee:39:86:a4:1a:bf:7f:a0: 07:fa:25:c9:57:1c:6b:cb:0f:e4:f0:58:56:c5:f0: be:6f:5d:91:8e:ba:1c:84:d6:5f:99:bc:6d:b6:ce: ee:cd:cc:b1:50:95:5f:02:68:ad:27:dc:94:b8:37: 76:0e:f5:75:2a:ad:6f:23:0b:d3:69:ce:7b:b5:ef: 44:cf:f5:58:6a:8c:1b:48:2e:bd:b1:02:4a:bf:97: bf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2E:2B:D6:F7:F6:4E:6D:6E:CE:F1:E2:77:6A:9A:1F:B1:68:38:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl X509v3 Authority Key Identifier: keyid:61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer sbgp-ipAddrBlock: critical IPv4: 207.90.254.0/23 IPv6: 2606:3180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e2:ea:24:f0:a3:98:9c:55:36:7f:dc:fc:68:3e:50:9f:bf: d0:8d:df:d5:12:0a:18:0b:97:d8:f0:b1:73:20:8b:0e:bc:71: 42:60:b5:0c:05:fb:af:5f:bf:89:4c:d0:26:7b:cb:ad:0e:e6: 32:c1:9d:8d:47:a6:ac:d2:db:22:40:5a:7c:54:0d:45:1c:36: 60:54:80:b8:0d:96:27:a7:7c:04:51:29:fb:64:3a:7f:3b:65: 5f:de:69:93:1f:77:01:76:ad:c3:a3:23:45:9b:04:d9:01:40: a4:9e:c8:53:51:2f:3b:b3:68:72:e9:cd:2c:4f:2b:9e:18:d1: 10:81:52:ad:ce:39:e4:59:37:ff:3b:54:8c:d3:01:1b:36:c2: 88:f0:5f:a6:67:c7:db:b6:ef:44:c7:35:d4:84:33:ae:8e:1b: 82:2c:5b:7a:76:8f:da:74:26:95:ad:88:4e:8f:a2:10:ae:c2: 4d:04:2f:16:21:ae:a7:d1:ab:ce:b4:92:fc:bd:33:ef:f0:a2: 4b:4f:78:50:a2:60:ff:91:fa:2d:b9:c4:d6:71:dc:97:e9:01: 04:75:b6:b8:76:0b:68:f7:a7:60:71:90:62:f6:52:ef:72:20: 9a:16:49:96:46:4c:87:6f:25:03:3c:05:ab:f9:3c:4d:95:23: b4:d8:76:3c -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEle7ukHSoXYdbGt8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZDgzNDYtNWYzMi00OTczLWIwMGYtNmFhOTRjOGNh NzIwMB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk MDI2NjA4YTItZTk0Yy00NGIzLWE2MGQtOTQ3NWU3NTliNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim8TB/UjSM7Nzj2L3pTlN7Gr8m9hnJiHhHAL KOYDZEEpszJ/YK3M2Fh12DoI7SicqEobrYf02rhHQtyArifM+VejphC8XpWy80nb xiGG7bP57jZwISCEDqNedm5CYDC/Ix1qtvZMkB47f4QwS6cgVJ4SBcCukH+J06fC SvdpdRhlPA+BDsOCWJZo5J/flYkGxsdnxl6zhW6xlwz8W1oUiAAWPV49u9S0bp81 7jmGpBq/f6AH+iXJVxxryw/k8FhWxfC+b12RjrochNZfmbxtts7uzcyxUJVfAmit J9yUuDd2DvV1Kq1vIwvTac57te9Ez/VYaowbSC69sQJKv5e/uQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFPAuK9b39k5tbs7x4ndqmh+xaDghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYmZk ODM0Ni01ZjMyLTQ5NzMtYjAwZi02YWE5NGM4Y2E3MjAvOWIyYTBkYTMtNTU1MS0z Y2VmLWFiNjUtZDQwOTk5MDc2YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2JmZDgzNDYtNWYzMi00OTczLWIw MGYtNmFhOTRjOGNhNzIwLzNiZmQ4MzQ2LTVmMzItNDk3My1iMDBmLTZhYTk0Yzhj YTcyMC5jcmwwHwYDVR0jBBgwFoAUYZk5Z3aiCqJqr+bN3xUcOqnk+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYmZkODM0Ni01ZjMyLTQ5NzMtYjAwZi02YWE5 NGM4Y2E3MjAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBz1r+MA0E AgACMAcDBQAmBjGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACLi6iTwo5icVTZ/3PxoPlCfv9CN39USChgL l9jwsXMgiw68cUJgtQwF+69fv4lM0CZ7y60O5jLBnY1HpqzS2yJAWnxUDUUcNmBU gLgNlienfARRKftkOn87ZV/eaZMfdwF2rcOjI0WbBNkBQKSeyFNRLzuzaHLpzSxP K54Y0RCBUq3OOeRZN/87VIzTARs2wojwX6Znx9u270THNdSEM66OG4IsW3p2j9p0 JpWtiE6PohCuwk0ELxYhrqfRq860kvy9M+/woktPeFCiYP+R+i25xNZx3JfpAQR1 trh2C2j3p2BxkGL2Uu9yIJoWSZZGTIdvJQM8Bav5PE2VI7TYdjw= -----END CERTIFICATE-----Generated at Sat Apr 12 14:21:37 2025 by rpki-client