$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/f83780ab-f4f3-34eb-853d-e82970c73b20.roa File: f83780ab-f4f3-34eb-853d-e82970c73b20.roa (raw, json) Hash identifier: tjIkDP8WK+AnFjd2gbADvGzShI+fIZh8sy+xEtaZgsQ= Subject key identifier: 2E:9E:45:6E:F0:62:8C:EE:0B:2D:AA:A2:7D:AA:5E:06:15:D6:AC:81 Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F43285848938E127D8006E3C8C2F336E0 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/f83780ab-f4f3-34eb-853d-e82970c73b20.roa Signing time: Fri 17 Jan 2025 16:36:58 +0000 ROA not before: Fri 17 Jan 2025 16:36:58 +0000 ROA not after: Thu 17 Apr 2025 15:36:58 +0000 asID: 40509 IP address blocks: 204.10.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Feb 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:8e:12:7d:80:06:e3:c8:c2:f3:36:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Jan 17 16:36:58 2025 GMT Not After : Apr 17 15:36:58 2025 GMT Subject: CN=d22d705e-7453-4ecf-97c2-e6f56df45037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:2f:1d:72:78:8c:11:b7:45:58:21:5a:5f: cb:4b:00:e9:c8:af:ba:63:68:fa:fd:40:5d:3a:c1: 7f:a3:2d:2a:6e:b5:3c:cd:4f:64:27:7e:e3:8f:b7: 9c:23:4c:be:ab:e5:ec:4b:02:4c:c5:aa:85:ab:fa: be:67:29:5b:65:e9:4a:f5:e9:83:10:b8:01:1f:b2: 15:ff:b9:32:09:77:b5:f3:ec:e2:9a:dc:7b:6a:22: b4:42:4d:58:53:cc:16:3d:22:50:3e:8c:b9:66:92: e6:65:11:bb:3c:29:bd:7a:11:2e:61:85:54:8c:56: 50:f8:1b:e3:03:bc:0e:9c:6a:a9:da:b4:a2:d8:89: d3:27:60:a3:aa:3c:56:67:f8:e6:ef:b9:d9:90:c9: e1:63:2d:ba:07:74:7b:48:59:ee:fb:04:e9:08:f5: 7a:00:4a:1d:b2:6b:ec:c0:a4:95:86:2b:8d:61:85: fb:c6:92:ca:18:e5:00:7d:fe:1a:ee:03:fc:79:ed: 44:1f:c1:e0:2e:e9:d1:64:e4:69:b8:3a:77:e0:0d: f9:ce:28:b0:d9:ff:af:07:31:30:98:de:2a:75:13: 1f:60:b9:7e:c6:a2:b2:1b:58:c3:ff:2e:d1:8e:64: 50:17:1b:be:8a:43:75:b8:7a:2e:69:e9:31:8d:e3: 10:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9E:45:6E:F0:62:8C:EE:0B:2D:AA:A2:7D:AA:5E:06:15:D6:AC:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/f83780ab-f4f3-34eb-853d-e82970c73b20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 204.10.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:33:b5:34:8d:57:d6:2d:98:e2:e3:b2:5a:95:54:fe:9c:be: 7f:4c:0d:8c:22:04:d1:e0:3f:14:57:08:bc:10:f0:62:a1:d8: b3:15:22:ca:a1:23:aa:d5:23:7e:ee:39:5a:b8:c9:ff:18:2d: 29:18:01:37:69:8f:35:25:25:7d:bd:7c:97:e1:f4:01:3e:f5: da:27:65:b4:49:32:5f:3f:0d:3e:f6:2f:63:b6:63:fa:4f:ea: 25:7c:a7:eb:1b:df:6c:3a:ed:0d:b6:f3:e2:76:e9:d6:32:07: c8:43:d6:5e:0d:a5:69:61:c3:ee:1f:32:1c:9f:01:41:77:1b: 10:6c:25:28:d2:68:fa:f8:45:71:5d:9e:13:9a:1a:01:10:a0: 8a:31:4a:b7:0c:6f:fc:b1:d5:ac:f1:a6:47:74:25:ed:24:69: b0:2b:4b:7f:c4:58:9e:b2:3d:20:9b:de:f0:6e:e0:87:1f:72: 47:ae:da:ea:eb:21:32:e0:21:e7:1c:ee:08:f8:13:39:ed:9d: 32:86:56:20:16:dc:b3:04:23:c2:3f:c3:8b:89:56:35:0e:2c: 74:b2:8a:97:e1:ba:4f:51:96:7e:b9:ec:9e:2a:84:4c:ff:7a: 98:f9:0a:a3:9b:71:94:11:de:4a:cb:4f:10:b3:c1:0a:95:3c: 07:0e:8a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTjhJ9gAbjyMLzNuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MDExNzE2MzY1OFoXDTI1MDQxNzE1MzY1OFowLzEtMCsGA1UEAxMk ZDIyZDcwNWUtNzQ1My00ZWNmLTk3YzItZTZmNTZkZjQ1MDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVsvHXJ4jBG3RVghWl/LSwDpyK+6Y2j6/UBd OsF/oy0qbrU8zU9kJ37jj7ecI0y+q+XsSwJMxaqFq/q+ZylbZelK9emDELgBH7IV /7kyCXe18+zimtx7aiK0Qk1YU8wWPSJQPoy5ZpLmZRG7PCm9ehEuYYVUjFZQ+Bvj A7wOnGqp2rSi2InTJ2CjqjxWZ/jm77nZkMnhYy26B3R7SFnu+wTpCPV6AEodsmvs wKSVhiuNYYX7xpLKGOUAff4a7gP8ee1EH8HgLunRZORpuDp34A35ziiw2f+vBzEw mN4qdRMfYLl+xqKyG1jD/y7RjmRQFxu+ikN1uHouaekxjeMQbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6eRW7wYozuCy2qon2qXgYV1qyBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvZjgzNzgwYWItZjRmMy0z NGViLTg1M2QtZTgyOTcwYzczYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzApMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEztTSNV9YtmOLjslqVVP6cvn9MDYwiBNHgPxRXCLwQ8GKh2LMVIsqh I6rVI37uOVq4yf8YLSkYATdpjzUlJX29fJfh9AE+9donZbRJMl8/DT72L2O2Y/pP 6iV8p+sb32w67Q228+J26dYyB8hD1l4NpWlhw+4fMhyfAUF3GxBsJSjSaPr4RXFd nhOaGgEQoIoxSrcMb/yx1azxpkd0Je0kabArS3/EWJ6yPSCb3vBu4Icfckeu2urr ITLgIecc7gj4EzntnTKGViAW3LMEI8I/w4uJVjUOLHSyipfhuk9Rln657J4qhEz/ epj5CqObcZQR3krLTxCzwQqVPAcOisI= -----END CERTIFICATE-----Generated at Sun Feb 2 15:52:47 2025 by rpki-client