$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/87306ae8-1630-3ec2-9f4a-2719c4cdd54a.roa File: 87306ae8-1630-3ec2-9f4a-2719c4cdd54a.roa (raw, json) Hash identifier: p4EIHKipVcJG0kbrpFKDM2zUpNG5YyNMmC+J7whA7/s= Subject key identifier: 57:F3:24:4C:4C:44:F1:E8:41:D0:91:7C:C2:7D:52:AF:9C:81:D0:EA Certificate issuer: /CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Certificate serial: 010D0C9F43285848E512DB52BF82814E4F1B4A80 Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/87306ae8-1630-3ec2-9f4a-2719c4cdd54a.roa Signing time: Sat 15 Feb 2025 21:25:00 +0000 ROA not before: Sat 15 Feb 2025 21:25:00 +0000 ROA not after: Fri 16 May 2025 20:25:00 +0000 asID: 376 IP address blocks: 205.151.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:12:db:52:bf:82:81:4e:4f:1b:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721 Validity Not Before: Feb 15 21:25:00 2025 GMT Not After : May 16 20:25:00 2025 GMT Subject: CN=2296ba7d-d5fa-4514-9b91-d58f3e2486dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3d:10:83:4c:e2:ac:1e:34:6b:34:97:a0:30: 5c:08:42:bd:fa:a0:c9:5b:20:39:a0:54:7c:7d:42: d3:0a:b3:2e:fa:b3:e3:29:4f:28:99:af:30:2e:1a: 70:0a:75:9d:8f:7e:2c:1e:bb:a4:73:94:3e:3f:e8: 45:35:9c:00:0a:dd:03:37:6c:21:f5:ae:f6:1b:d9: c2:22:c1:3f:80:7a:10:67:9e:85:08:4b:8a:21:b1: 30:73:03:2f:95:8d:e5:0b:9f:23:6b:cd:2d:fe:e8: 1f:37:6a:dc:ac:31:31:22:4a:37:b8:d1:71:b5:f4: e8:d5:0e:81:4f:8f:6e:1e:87:fe:5b:e2:9e:ce:e7: e1:ec:ef:75:cc:1a:dc:8f:e7:76:99:55:a5:84:3b: b9:40:89:d2:3c:4c:f8:64:cd:f3:ba:7c:66:2a:69: 17:a8:28:65:c5:59:64:96:1c:25:de:b2:cc:87:2f: 92:90:38:4d:f2:65:15:bf:d8:42:29:00:31:1d:8f: 93:fa:34:cd:bf:63:91:9f:4f:eb:75:37:62:f0:87: a6:67:4e:50:05:3e:3e:c5:98:5d:24:e7:ad:1e:6d: e5:f5:74:ed:d6:d1:7d:81:41:55:b8:85:64:15:94: ea:18:53:4e:f9:fe:7a:29:69:dd:f2:c3:2f:dc:0d: ba:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F3:24:4C:4C:44:F1:E8:41:D0:91:7C:C2:7D:52:AF:9C:81:D0:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/87306ae8-1630-3ec2-9f4a-2719c4cdd54a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl X509v3 Authority Key Identifier: keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer sbgp-ipAddrBlock: critical IPv4: 205.151.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:57:1e:3b:36:73:81:52:34:a7:ca:3b:bf:6c:9c:d8:2e:1c: f1:b4:43:f8:37:81:3e:ea:cf:ff:d6:51:78:f3:59:fd:dc:25: b5:e7:6e:e0:31:2f:7b:34:3d:22:35:98:87:42:6b:f2:e5:6c: 42:f8:69:6e:28:47:42:16:1e:cc:aa:48:29:73:46:00:d6:f2: 1d:71:6a:f3:60:ad:e1:d0:83:c2:31:b4:35:1e:a4:dd:3f:b1: ad:3a:fa:09:86:67:96:30:62:54:e8:5a:c6:d0:c1:59:d6:33: 3b:13:56:f6:86:2c:b6:3d:4e:57:87:eb:ec:52:c4:42:9d:09: dd:c3:d3:9b:67:e2:6a:33:4e:75:6d:5a:d5:bd:7f:9c:9d:c8: 98:c6:da:b1:0e:27:3f:29:0c:06:47:ca:30:27:dd:bf:c3:a1: 91:11:c0:cb:22:da:e6:f2:ae:d5:90:78:17:9c:40:c8:98:fe: da:17:f9:c5:50:76:aa:b8:69:ed:cb:6e:7a:50:7e:a3:a7:ad: 7e:cf:bc:e5:24:71:5d:51:89:f8:c1:29:cc:cc:a0:81:f5:48: fa:72:3c:b3:5d:97:28:a7:42:fa:1b:71:ae:b1:7a:f3:1d:cd: 40:a4:9c:45:03:2e:ce:0e:76:91:3a:3a:40:6b:8f:84:d8:49: 3a:29:ce:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlEttSv4KBTk8bSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUxNTk4MjAtY2Y1Ni00MmViLWI5ZjAtMDE4N2IxMGJi NzIxMB4XDTI1MDIxNTIxMjUwMFoXDTI1MDUxNjIwMjUwMFowLzEtMCsGA1UEAxMk MjI5NmJhN2QtZDVmYS00NTE0LTliOTEtZDU4ZjNlMjQ4NmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij0Qg0zirB40azSXoDBcCEK9+qDJWyA5oFR8 fULTCrMu+rPjKU8oma8wLhpwCnWdj34sHrukc5Q+P+hFNZwACt0DN2wh9a72G9nC IsE/gHoQZ56FCEuKIbEwcwMvlY3lC58ja80t/ugfN2rcrDExIko3uNFxtfTo1Q6B T49uHof+W+Kezufh7O91zBrcj+d2mVWlhDu5QInSPEz4ZM3zunxmKmkXqChlxVlk lhwl3rLMhy+SkDhN8mUVv9hCKQAxHY+T+jTNv2ORn0/rdTdi8IemZ05QBT4+xZhd JOetHm3l9XTt1tF9gUFVuIVkFZTqGFNO+f56KWnd8sMv3A26IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfzJExMRPHoQdCRfMJ9Uq+cgdDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1 OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3YjEwYmI3MjEvODczMDZhZTgtMTYzMC0z ZWMyLTlmNGEtMjcxOWM0Y2RkNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGUxNTk4MjAtY2Y1Ni00MmViLWI5 ZjAtMDE4N2IxMGJiNzIxLzhlMTU5ODIwLWNmNTYtNDJlYi1iOWYwLTAxODdiMTBi YjcyMS5jcmwwHwYDVR0jBBgwFoAUP6asP+ah5UuMrQtDbx2HECUnhEQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTE1OTgyMC1jZjU2LTQyZWItYjlmMC0wMTg3 YjEwYmI3MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdXHjs2c4FSNKfKO79snNguHPG0Q/g3gT7qz//WUXjzWf3cJbXnbuAx L3s0PSI1mIdCa/LlbEL4aW4oR0IWHsyqSClzRgDW8h1xavNgreHQg8IxtDUepN0/ sa06+gmGZ5YwYlToWsbQwVnWMzsTVvaGLLY9TleH6+xSxEKdCd3D05tn4mozTnVt WtW9f5ydyJjG2rEOJz8pDAZHyjAn3b/DoZERwMsi2ubyrtWQeBecQMiY/toX+cVQ dqq4ae3LbnpQfqOnrX7PvOUkcV1RifjBKczMoIH1SPpyPLNdlyinQvobca6xevMd zUCknEUDLs4OdpE6OkBrj4TYSTopzhU= -----END CERTIFICATE-----Generated at Sun Apr 6 14:39:14 2025 by rpki-client