$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d45f5eac-1bd9-334c-8c77-70a141935177.roa File: d45f5eac-1bd9-334c-8c77-70a141935177.roa (raw, json) Hash identifier: 2uEp9yv+iI0Kze5Ybjzx9V+L8GGN19UhBHmnU6NG6wI= Subject key identifier: 3C:1C:E4:F5:1D:DD:5F:41:8F:D4:F2:6B:A1:B3:51:E0:9F:E8:3E:A4 Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1 Certificate serial: 010D0C9F432858494E2EB4E8C548A7D16E0D45A0 Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d45f5eac-1bd9-334c-8c77-70a141935177.roa Signing time: Tue 25 Mar 2025 13:00:51 +0000 ROA not before: Tue 25 Mar 2025 13:00:51 +0000 ROA not after: Mon 23 Jun 2025 13:00:51 +0000 asID: 396356 IP address blocks: 167.100.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4e:2e:b4:e8:c5:48:a7:d1:6e:0d:45:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1 Validity Not Before: Mar 25 13:00:51 2025 GMT Not After : Jun 23 13:00:51 2025 GMT Subject: CN=9ff974a1-5756-473e-8e5b-e42ef2063195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:35:58:61:8a:54:47:41:c7:59:2b:d1:da: ef:e9:2f:8e:7a:18:c4:3d:ed:ed:08:16:77:c3:82: ca:26:a4:fe:27:18:3e:5f:7b:3b:40:d3:7b:8d:f9: 50:a8:97:66:57:13:2b:88:e8:33:e9:00:e8:bf:3a: 7b:72:ef:13:41:de:a1:2d:e1:b5:6b:15:8e:e3:1a: 86:9a:3c:47:1d:20:c4:34:1f:8d:df:d2:e3:7b:94: 02:7d:3b:2c:ad:43:58:aa:2f:c1:63:e9:34:1b:ee: ba:a7:e3:10:6d:c7:2e:f1:03:4c:a0:98:27:22:b8: bd:e2:99:23:09:bb:e4:90:9f:15:b6:78:a9:80:00: bb:86:7c:29:ef:56:59:49:fe:3f:fc:49:76:da:73: 66:d9:12:85:95:46:07:13:a8:60:92:31:b1:be:db: a9:e7:5f:a2:bd:87:03:9f:be:b1:b1:db:34:0c:10: 0e:d1:5a:92:99:31:9f:8c:6b:0e:38:b1:5c:42:90: 53:44:2e:ec:cf:51:1c:5e:26:7f:de:05:3c:aa:e1: 74:92:65:7e:54:d2:cb:55:af:d5:a1:41:34:50:95: 08:0c:22:64:97:f4:9d:98:62:03:21:af:4e:0d:df: b6:5b:91:a5:7d:8b:21:7e:8f:95:9f:c3:d7:2c:7a: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1C:E4:F5:1D:DD:5F:41:8F:D4:F2:6B:A1:B3:51:E0:9F:E8:3E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/d45f5eac-1bd9-334c-8c77-70a141935177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl X509v3 Authority Key Identifier: keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer sbgp-ipAddrBlock: critical IPv4: 167.100.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:3f:fd:cc:dd:4f:f4:50:57:e9:59:75:88:4e:47:3e:91:e3: 42:eb:a9:74:d6:6c:3f:a1:21:d7:2b:68:72:52:5d:66:0a:a8: 9f:ec:b6:85:94:3f:46:57:57:2f:b4:69:ae:c8:92:fd:53:fc: c5:03:b4:48:af:ca:56:0e:a9:73:32:b9:3a:eb:b0:2e:36:11: 77:5e:d8:25:b5:ab:40:f1:9f:75:35:aa:8f:8a:9a:73:c0:21: 01:d6:af:65:c4:3b:a9:35:7e:2e:45:04:22:c3:a2:09:6f:ea: f4:2f:a2:6f:2d:15:d3:2e:d1:7d:66:83:e9:a7:8e:19:3a:e6: 0e:d8:51:c5:36:bc:7b:f4:e3:29:0b:5c:db:08:9b:14:ff:80: 56:46:00:0a:9a:dd:97:86:7c:2c:76:61:4d:42:29:75:84:b6: c3:d9:ba:d5:a6:e8:39:87:17:81:b8:e9:10:65:4a:53:6a:87: e7:f2:3f:20:5b:d8:29:22:48:ca:0d:13:94:54:8d:10:24:38: 2c:81:f1:02:39:ef:c5:08:fc:0e:cb:04:4e:ef:49:69:c5:aa: f0:76:d7:cf:7c:25:9e:20:2d:84:3b:5e:ae:02:84:b2:fe:f3: e0:2e:2c:5d:5c:13:c4:2d:46:1b:96:35:4b:42:b2:73:8e:5c: d6:01:ff:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElOLrToxUin0W4NRaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw MWIxMB4XDTI1MDMyNTEzMDA1MVoXDTI1MDYyMzEzMDA1MVowLzEtMCsGA1UEAxMk OWZmOTc0YTEtNTc1Ni00NzNlLThlNWItZTQyZWYyMDYzMTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZo1WGGKVEdBx1kr0drv6S+OehjEPe3tCBZ3 w4LKJqT+Jxg+X3s7QNN7jflQqJdmVxMriOgz6QDovzp7cu8TQd6hLeG1axWO4xqG mjxHHSDENB+N39Lje5QCfTssrUNYqi/BY+k0G+66p+MQbccu8QNMoJgnIri94pkj CbvkkJ8VtnipgAC7hnwp71ZZSf4//El22nNm2RKFlUYHE6hgkjGxvtup51+ivYcD n76xsds0DBAO0VqSmTGfjGsOOLFcQpBTRC7sz1EcXiZ/3gU8quF0kmV+VNLLVa/V oUE0UJUIDCJkl/SdmGIDIa9ODd+2W5GlfYshfo+Vn8PXLHpHmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwc5PUd3V9Bj9Tya6GzUeCf6D6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvZDQ1ZjVlYWMtMWJkOS0z MzRjLThjNzctNzBhMTQxOTM1MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3 YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp2RoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMM//czdT/RQV+lZdYhORz6R40LrqXTWbD+hIdcraHJSXWYKqJ/stoWU P0ZXVy+0aa7Ikv1T/MUDtEivylYOqXMyuTrrsC42EXde2CW1q0Dxn3U1qo+KmnPA IQHWr2XEO6k1fi5FBCLDoglv6vQvom8tFdMu0X1mg+mnjhk65g7YUcU2vHv04ykL XNsImxT/gFZGAAqa3ZeGfCx2YU1CKXWEtsPZutWm6DmHF4G46RBlSlNqh+fyPyBb 2CkiSMoNE5RUjRAkOCyB8QI578UI/A7LBE7vSWnFqvB21898JZ4gLYQ7Xq4ChLL+ 8+AuLF1cE8QtRhuWNUtCsnOOXNYB/xE= -----END CERTIFICATE-----Generated at Mon Apr 7 06:01:55 2025 by rpki-client