$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa File: 352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa (raw, json) Hash identifier: E13tiGhbBKgr9baibEli6hbbq+aec4zW03Nw2uItPo8= Subject key identifier: 42:E0:D6:20:98:C6:AE:4D:DB:BE:6F:EE:D8:F7:7B:D2:3D:63:F6:44 Certificate issuer: /CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Certificate serial: 010D0C9F43285849393E7A3FAC11C6F9B9EE4100 Authority key identifier: 21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa Signing time: Tue 18 Mar 2025 01:00:38 +0000 ROA not before: Tue 18 Mar 2025 01:00:38 +0000 ROA not after: Mon 16 Jun 2025 01:00:38 +0000 asID: 0 IP address blocks: 206.53.175.0/24 maxlen: 32 2001:504:58::/64 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:39:3e:7a:3f:ac:11:c6:f9:b9:ee:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2d9ab86-95d4-4f26-ade6-52bcaa29d66c Validity Not Before: Mar 18 01:00:38 2025 GMT Not After : Jun 16 01:00:38 2025 GMT Subject: CN=59b14b3e-0c82-43de-a354-9deb40d05eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:c2:70:3d:4d:88:af:fb:3b:08:14:e0:7f: 60:8d:e6:0d:fa:3f:92:1e:73:93:b3:92:90:64:b1: a3:11:92:16:de:9d:fc:59:57:05:5e:6d:8a:66:43: f5:94:25:e5:7f:9a:6f:c6:c9:42:5a:a7:72:7e:f8: d4:ad:c8:3a:7a:d0:43:33:57:40:0d:b6:f6:1c:6a: 4f:fd:7e:58:e5:fa:c9:94:a5:f9:7a:07:e6:c3:a4: 9c:9a:d2:52:d0:c4:71:95:66:09:8b:f5:82:6d:f6: f9:c8:3c:7f:2c:18:03:c5:5f:bf:74:8c:b6:b4:6b: 9d:e0:84:c6:67:f8:db:75:0d:bb:a4:86:50:eb:10: 14:d0:1c:c9:68:39:c3:89:fb:dc:2c:91:19:c8:ef: 07:82:20:2a:40:64:50:d2:03:e1:a9:88:02:65:71: f4:7a:0c:fa:f8:66:61:4d:9c:7f:5f:0f:68:d9:9f: ea:2b:00:76:ad:b4:20:ca:05:ee:d3:f7:b8:17:32: 22:62:62:4c:f6:fe:08:b2:1c:b8:88:28:ad:ae:00: f3:8b:c8:9c:c2:15:79:91:cd:03:a5:aa:54:e8:a6: 2b:7f:74:2c:90:d0:3c:f3:b4:6b:ed:76:40:c6:91: ac:af:4f:72:b9:99:72:f0:a1:45:3f:ba:e4:4f:4e: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E0:D6:20:98:C6:AE:4D:DB:BE:6F:EE:D8:F7:7B:D2:3D:63:F6:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/352e44e0-718b-3fde-88c9-00f3f0bb89f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.crl X509v3 Authority Key Identifier: keyid:21:4B:BB:2C:0C:AC:B4:3E:99:AF:88:4E:C2:F7:74:77:C5:2E:3A:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d2d9ab86-95d4-4f26-ade6-52bcaa29d66c.cer sbgp-ipAddrBlock: critical IPv4: 206.53.175.0/24 IPv6: 2001:504:58::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:64:12:89:de:9e:2e:2d:d2:1f:d0:82:42:a8:a1:6a:b6:e7: e5:b2:1d:34:95:29:3a:60:9e:09:79:f3:06:dc:d6:cb:d4:2e: f7:d5:df:94:7e:cc:95:25:ef:a5:6c:f9:23:d9:9d:ba:39:83: de:02:54:da:1e:b4:4e:c3:61:37:ff:aa:a5:f7:46:ff:95:17: 89:32:b3:2c:48:3d:94:2f:e2:7c:a3:d0:a2:28:6a:70:d6:93: a1:9a:64:83:33:1f:28:91:8c:20:56:b2:24:a0:6b:31:b7:5a: 2e:b5:75:fe:21:ab:aa:45:99:36:4b:ae:6a:89:eb:b8:15:e3: 32:00:63:ba:67:2e:5a:e4:95:98:be:39:58:57:58:4e:84:7e: b6:88:3f:03:98:1b:33:f7:c0:84:08:ff:36:09:57:4c:93:f8: 43:e2:8f:76:03:d7:51:de:73:3f:c7:5a:83:f5:d0:f0:54:bd: 50:4e:6a:d4:e2:63:96:68:4d:a4:e6:e7:1f:37:bf:1c:44:c1: 52:96:c6:b6:38:37:4b:8c:49:8c:42:fa:ee:24:a7:6f:38:e2: a4:b3:70:45:03:e8:eb:ff:73:42:df:98:ae:12:16:dc:37:0f: 9e:71:ed:24:d9:5b:02:6b:cc:5e:ae:e7:4d:df:02:75:78:ca: d3:25:4c:bb -----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgIUAQ0Mn0MoWEk5Pno/rBHG+bnuQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDJkOWFiODYtOTVkNC00ZjI2LWFkZTYtNTJiY2FhMjlk NjZjMB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk NTliMTRiM2UtMGM4Mi00M2RlLWEzNTQtOWRlYjQwZDA1ZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhzCcD1NiK/7OwgU4H9gjeYN+j+SHnOTs5KQ ZLGjEZIW3p38WVcFXm2KZkP1lCXlf5pvxslCWqdyfvjUrcg6etBDM1dADbb2HGpP /X5Y5frJlKX5egfmw6ScmtJS0MRxlWYJi/WCbfb5yDx/LBgDxV+/dIy2tGud4ITG Z/jbdQ27pIZQ6xAU0BzJaDnDifvcLJEZyO8HgiAqQGRQ0gPhqYgCZXH0egz6+GZh TZx/Xw9o2Z/qKwB2rbQgygXu0/e4FzIiYmJM9v4Ishy4iCitrgDzi8icwhV5kc0D papU6KYrf3QskNA887Rr7XZAxpGsr09yuZly8KFFP7rkT07h3QIDAQABo4IDaDCC A2QwHQYDVR0OBBYEFELg1iCYxq5N275v7tj3e9I9Y/ZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5 YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJjYWEyOWQ2NmMvMzUyZTQ0ZTAtNzE4Yi0z ZmRlLTg4YzktMDBmM2YwYmI4OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDJkOWFiODYtOTVkNC00ZjI2LWFk ZTYtNTJiY2FhMjlkNjZjL2QyZDlhYjg2LTk1ZDQtNGYyNi1hZGU2LTUyYmNhYTI5 ZDY2Yy5jcmwwHwYDVR0jBBgwFoAUIUu7LAystD6Zr4hOwvd0d8UuOm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMmQ5YWI4Ni05NWQ0LTRmMjYtYWRlNi01MmJj YWEyOWQ2NmMuY2VyMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQAzjWvMBEE AgACMAsDCQAgAQUEAFgAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyZBKJ3p4uLdIf0IJCqKFqtuflsh00 lSk6YJ4JefMG3NbL1C731d+UfsyVJe+lbPkj2Z26OYPeAlTaHrROw2E3/6ql90b/ lReJMrMsSD2UL+J8o9CiKGpw1pOhmmSDMx8okYwgVrIkoGsxt1outXX+IauqRZk2 S65qieu4FeMyAGO6Zy5a5JWYvjlYV1hOhH62iD8DmBsz98CECP82CVdMk/hD4o92 A9dR3nM/x1qD9dDwVL1QTmrU4mOWaE2k5ucfN78cRMFSlsa2ODdLjEmMQvruJKdv OOKks3BFA+jr/3NC35iuEhbcNw+ece0k2VsCa8xerudN3wJ1eMrTJUy7 -----END CERTIFICATE-----Generated at Tue Apr 8 23:46:24 2025 by rpki-client