$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa File: 843d57d7-14a7-3349-a57b-8157cba92880.roa (raw, json) Hash identifier: IJBdQPDvdcIp4OKEzhvEFdIULRo37ewCgrjVv6Cy3Ho= Subject key identifier: 59:A8:D1:A0:46:7E:3E:EB:6E:42:FD:1B:41:73:B4:6B:FD:BA:08:2D Certificate issuer: /CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Certificate serial: 010D0C9F43285849788F67680D8BE3209AEFE280 Authority key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa Signing time: Wed 09 Apr 2025 17:19:46 +0000 ROA not before: Wed 09 Apr 2025 17:19:46 +0000 ROA not after: Tue 08 Jul 2025 17:19:46 +0000 asID: 10840 IP address blocks: 204.235.48.0/21 maxlen: 21 204.235.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:8f:67:68:0d:8b:e3:20:9a:ef:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317 Validity Not Before: Apr 9 17:19:46 2025 GMT Not After : Jul 8 17:19:46 2025 GMT Subject: CN=656721b4-89bd-4491-9308-cd4e9fadc929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a7:5c:b0:e1:e8:fa:c7:95:d8:8c:95:41:cd: 52:fc:10:ac:a9:81:63:cf:be:d2:84:eb:b4:92:1f: e9:9e:96:fe:b5:3e:ef:63:3f:d9:e8:07:3f:63:7b: 8a:80:a1:46:71:5b:22:7d:a1:f7:3f:08:e5:81:4c: 56:a4:be:d6:a5:af:05:e2:ee:8c:ee:f3:f4:3b:06: d7:c4:2d:75:b4:13:9d:c3:27:f8:1a:65:7d:ec:ba: 80:33:c3:34:18:45:cc:0c:49:86:7f:6d:46:cd:1b: 59:1f:b8:79:8f:98:5e:ff:3f:b4:fa:7f:a3:fd:32: 4d:dd:d2:fd:38:cd:91:64:8a:2d:a0:3f:97:4d:9a: d3:26:e8:f6:a0:bf:86:d3:3b:2a:35:66:39:b7:0b: 2c:57:b0:6d:c1:81:f8:22:98:65:1b:da:56:81:1e: 79:36:70:c2:05:15:81:7e:27:b0:4f:a1:0d:2d:be: 18:54:64:4e:a2:b2:1d:06:80:2d:e9:55:e6:95:cb: 85:c2:c0:c6:44:91:ba:25:14:fc:d8:fd:d6:af:d3: 3a:aa:c2:03:5e:e3:0d:93:ac:13:f0:b7:e9:e0:03: 4e:e7:10:83:24:bb:63:51:bf:e8:1e:a5:c3:9c:2e: e3:40:40:c1:95:0e:e3:d9:b2:5e:b0:c2:5b:08:65: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A8:D1:A0:46:7E:3E:EB:6E:42:FD:1B:41:73:B4:6B:FD:BA:08:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/843d57d7-14a7-3349-a57b-8157cba92880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl X509v3 Authority Key Identifier: keyid:49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer sbgp-ipAddrBlock: critical IPv4: 204.235.48.0-204.235.59.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:57:97:d3:f3:28:9a:bf:31:a2:c6:d7:06:70:3a:52:d0:9d: 86:c1:76:de:02:73:e0:5b:2b:9a:88:f9:36:e0:d6:56:b8:66: 03:e2:eb:70:2b:99:0f:4f:40:45:34:01:60:21:7c:13:e8:45: 62:1b:d7:a0:e1:af:59:c9:a0:d6:b6:1a:29:ac:79:0c:1f:e5: 17:8e:4c:6e:56:87:78:32:30:3a:f5:2d:c8:c0:e4:ca:a3:16: 7e:c3:8c:3f:d4:b3:59:28:ee:83:28:cb:cc:78:8f:42:df:4a: 71:17:7b:ad:2a:05:4e:bc:87:b2:f8:c7:00:5d:04:d9:b8:07: 5e:32:31:fb:4f:b1:a3:19:fc:bb:56:de:52:98:76:96:fa:7b: bf:47:87:96:42:3c:28:f4:88:e4:6f:f9:2e:12:f0:23:b8:25: b3:07:96:f8:3e:9a:37:cf:e2:ef:2c:55:e1:92:c0:e8:be:8f: 8c:92:a6:41:1b:89:d9:00:a3:26:ef:1d:ed:52:6e:86:a2:9a: e8:4f:1f:09:9f:c6:54:f5:18:86:23:ba:6e:b1:17:c5:a0:f8: a4:7f:16:6d:ca:e3:b5:db:6f:a0:c4:ea:59:07:a3:da:51:fd: 88:58:09:e9:99:ad:2e:49:7d:46:00:c1:71:d5:29:21:30:a5: 15:3a:1c:7e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEl4j2doDYvjIJrv4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGZiNDhjZTUtMjFhMy00YjYwLTliY2YtZjFlMGQ2YTQw MzE3MB4XDTI1MDQwOTE3MTk0NloXDTI1MDcwODE3MTk0NlowLzEtMCsGA1UEAxMk NjU2NzIxYjQtODliZC00NDkxLTkzMDgtY2Q0ZTlmYWRjOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgadcsOHo+seV2IyVQc1S/BCsqYFjz77ShOu0 kh/pnpb+tT7vYz/Z6Ac/Y3uKgKFGcVsifaH3PwjlgUxWpL7Wpa8F4u6M7vP0OwbX xC11tBOdwyf4GmV97LqAM8M0GEXMDEmGf21GzRtZH7h5j5he/z+0+n+j/TJN3dL9 OM2RZIotoD+XTZrTJuj2oL+G0zsqNWY5twssV7BtwYH4IphlG9pWgR55NnDCBRWB fiewT6ENLb4YVGROorIdBoAt6VXmlcuFwsDGRJG6JRT82P3Wr9M6qsIDXuMNk6wT 8Lfp4ANO5xCDJLtjUb/oHqXDnC7jQEDBlQ7j2bJesMJbCGW18QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFFmo0aBGfj7rbkL9G0FztGv9uggtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZmI0 OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUwZDZhNDAzMTcvODQzZDU3ZDctMTRhNy0z MzQ5LWE1N2ItODE1N2NiYTkyODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGZiNDhjZTUtMjFhMy00YjYwLTli Y2YtZjFlMGQ2YTQwMzE3LzBmYjQ4Y2U1LTIxYTMtNGI2MC05YmNmLWYxZTBkNmE0 MDMxNy5jcmwwHwYDVR0jBBgwFoAUSeRcJ/V6Cl/cyJrf5ya/olsFDeUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZmI0OGNlNS0yMWEzLTRiNjAtOWJjZi1mMWUw ZDZhNDAzMTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATM6zAD BALM6zgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAL1eX0/Momr8xosbXBnA6UtCdhsF23gJz4Fsrmoj5NuDW VrhmA+LrcCuZD09ARTQBYCF8E+hFYhvXoOGvWcmg1rYaKax5DB/lF45MblaHeDIw OvUtyMDkyqMWfsOMP9SzWSjugyjLzHiPQt9KcRd7rSoFTryHsvjHAF0E2bgHXjIx +0+xoxn8u1beUph2lvp7v0eHlkI8KPSI5G/5LhLwI7glsweW+D6aN8/i7yxV4ZLA 6L6PjJKmQRuJ2QCjJu8d7VJuhqKa6E8fCZ/GVPUYhiO6brEXxaD4pH8Wbcrjtdtv oMTqWQej2lH9iFgJ6ZmtLkl9RgDBcdUpITClFTocfg== -----END CERTIFICATE-----Generated at Sun Apr 20 13:07:23 2025 by rpki-client