$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa File: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (raw, json) Hash identifier: YaCoiXH7CX7309x49mnJIXualq3/Pe7WSFLhQFKTsow= Subject key identifier: 2E:AC:D8:2E:EE:43:1F:B5:05:78:78:6D:1C:35:2E:7B:F3:D7:86:54 Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F43285848F39118586C7B1C2105923100 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa Signing time: Fri 21 Feb 2025 02:00:39 +0000 ROA not before: Fri 21 Feb 2025 02:00:39 +0000 ROA not after: Thu 22 May 2025 01:00:39 +0000 asID: 32391 IP address blocks: 204.57.128.0/18 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f3:91:18:58:6c:7b:1c:21:05:92:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Feb 21 02:00:39 2025 GMT Not After : May 22 01:00:39 2025 GMT Subject: CN=3d98fb2a-0b99-4156-860c-816b6d4aaeca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:d1:02:0c:35:49:6f:1e:23:37:0b:03:58: c8:35:a0:bf:5d:03:83:1b:15:cf:59:dd:63:f8:13: 04:ba:10:13:fb:8f:75:69:2c:94:55:45:31:b3:23: 08:8c:80:2f:35:12:50:95:ca:61:df:e4:48:35:55: 02:14:f1:a6:b8:0b:a4:e8:d8:cd:44:a6:a3:34:79: c8:15:15:ec:ad:53:d9:5c:99:fa:d0:9e:20:63:df: 5d:53:ca:91:c0:a0:15:90:ce:85:01:54:44:28:b1: e1:ad:bf:54:4a:4d:a3:66:c2:a6:45:e7:55:1e:68: 3c:e8:6f:7a:c4:3f:65:e5:ef:32:85:6d:68:ce:35: 20:25:26:39:a8:e2:1c:aa:13:92:45:6d:00:bb:94: 19:a8:88:b0:bb:1e:7a:ca:09:b6:10:a8:17:9a:b9: af:f8:9d:dc:e9:67:73:20:b9:cf:f1:02:af:9c:59: 2f:e1:33:9d:1a:a6:f0:dd:66:34:86:73:96:48:48: 6a:c5:ce:d8:f4:e7:80:20:ae:42:dc:80:a8:68:06: 7e:01:2d:12:11:f3:ff:32:96:11:d2:2a:fc:a9:e4: 13:75:e1:25:34:97:c4:d1:cf:2c:9a:62:2c:a4:b5: 01:33:e4:14:3d:77:29:8a:54:c5:7e:6b:a3:8c:ed: 75:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AC:D8:2E:EE:43:1F:B5:05:78:78:6D:1C:35:2E:7B:F3:D7:86:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: 204.57.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:65:97:26:a7:e5:80:9e:36:98:d4:cf:1e:48:87:70:00:0e: ed:d3:88:e3:52:ef:a8:ce:f0:c4:61:ca:c7:f8:d6:db:fe:d6: 38:c2:d7:a4:5d:67:f8:7c:54:25:65:20:5f:3e:6b:4e:d2:71: 94:10:3c:3a:e9:42:17:e6:a3:a8:c4:99:d9:8f:32:9b:c7:8c: 41:e2:cb:45:31:3a:1f:e6:a4:ba:1d:0a:aa:fe:82:c2:90:24: 8a:82:ca:25:3b:fd:7d:41:14:ef:f2:53:fc:29:48:da:b2:95: 1a:f5:35:b8:d2:d0:9f:9d:94:08:d2:dd:d0:c6:a6:8d:c5:d2: 62:d7:67:2f:28:f7:2f:6a:ec:92:78:f2:87:7a:1d:de:77:54: fb:99:9e:f7:64:7d:16:fb:e1:05:fe:c0:bf:a7:c0:cb:78:c4: 87:1a:ba:8d:9a:ff:94:34:4f:99:12:69:88:83:e0:df:eb:c8: be:25:0a:f6:e5:5c:fa:b1:5f:72:29:b0:ae:c9:d1:e0:49:6e: 5f:62:20:8a:a7:8b:dc:8a:15:8b:27:c3:32:c0:d5:33:fe:75: a0:f5:15:a9:f1:1a:c9:5f:14:3b:32:8e:44:61:d4:13:74:43: 9e:94:75:a0:69:3b:73:5b:82:a5:ae:2b:e8:37:3d:5a:03:a1: d1:87:07:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjzkRhYbHscIQWSMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI1MDIyMTAyMDAzOVoXDTI1MDUyMjAxMDAzOVowLzEtMCsGA1UEAxMk M2Q5OGZiMmEtMGI5OS00MTU2LTg2MGMtODE2YjZkNGFhZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf7RAgw1SW8eIzcLA1jINaC/XQODGxXPWd1j +BMEuhAT+491aSyUVUUxsyMIjIAvNRJQlcph3+RINVUCFPGmuAuk6NjNRKajNHnI FRXsrVPZXJn60J4gY99dU8qRwKAVkM6FAVREKLHhrb9USk2jZsKmRedVHmg86G96 xD9l5e8yhW1ozjUgJSY5qOIcqhOSRW0Au5QZqIiwux56ygm2EKgXmrmv+J3c6Wdz ILnP8QKvnFkv4TOdGqbw3WY0hnOWSEhqxc7Y9OeAIK5C3ICoaAZ+AS0SEfP/MpYR 0ir8qeQTdeElNJfE0c8smmIspLUBM+QUPXcpilTFfmujjO11SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6s2C7uQx+1BXh4bRw1Lnvz14ZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvZDAwMTI5OTgtZTVkMy0z MmE5LWFkM2EtZGNkN2Y0NjE1NTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzDmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJllyan5YCeNpjUzx5Ih3AADu3TiONS76jO8MRhysf41tv+1jjC16Rd Z/h8VCVlIF8+a07ScZQQPDrpQhfmo6jEmdmPMpvHjEHiy0UxOh/mpLodCqr+gsKQ JIqCyiU7/X1BFO/yU/wpSNqylRr1NbjS0J+dlAjS3dDGpo3F0mLXZy8o9y9q7JJ4 8od6Hd53VPuZnvdkfRb74QX+wL+nwMt4xIcauo2a/5Q0T5kSaYiD4N/ryL4lCvbl XPqxX3IpsK7J0eBJbl9iIIqni9yKFYsnwzLA1TP+daD1FanxGslfFDsyjkRh1BN0 Q56UdaBpO3NbgqWuK+g3PVoDodGHB04= -----END CERTIFICATE-----Generated at Sat Apr 12 10:10:40 2025 by rpki-client