$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa File: 918523ba-c151-3f99-b377-2e0bfbd7897c.roa (raw, json) Hash identifier: CZIIA+MaPH6ydlJ3iQjxp+MD8LHMp8ntRFw4zhq9Dmk= Subject key identifier: 3C:4B:67:BC:EA:4F:7E:05:99:33:11:DE:E8:78:8B:06:9B:50:B0:7A Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F43285848E2D103EFE795D5916E5CD880 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 46687 IP address blocks: 208.93.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:03:ef:e7:95:d5:91:6e:5c:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=f41a6fb9-2d96-4595-aa93-4320fa0ff976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fd:e7:64:5a:0e:88:81:06:1e:97:3b:75:9e: 44:0b:a4:5a:eb:2e:17:95:08:f7:ff:04:a4:f4:b3: 1c:21:4b:8a:c7:a8:43:72:d3:ac:fd:94:fe:c1:8b: 5d:63:b4:3b:5f:f9:a6:26:81:56:e4:55:3f:a2:dc: 65:f9:e3:a9:cf:21:95:01:1a:24:a1:d2:ef:3e:cc: 46:21:9f:4a:3e:49:7d:e2:7f:8f:f5:2d:c6:41:b6: bc:e4:21:e6:6b:d6:41:9e:bb:5c:c5:87:dc:32:6c: d8:be:9b:3f:ca:84:d6:e0:81:f3:0c:f0:a8:dc:44: 43:cc:ce:b4:7d:79:eb:ee:52:b1:d9:a6:9c:0d:a3: 2c:bc:72:e8:a6:c6:68:9c:57:f7:4b:f8:01:5d:ff: b3:58:7d:69:82:df:75:d2:68:9b:68:b2:ea:06:df: f6:53:d5:4e:b4:8f:c7:ce:b4:26:03:2d:3f:c4:93: b5:fe:f0:73:bd:83:a3:45:8d:15:7b:4c:f8:01:54: ab:97:2b:2c:9c:3c:42:37:5f:43:89:53:ea:47:c3: 47:2d:ba:41:5d:17:49:a3:06:dd:2a:88:4d:14:3e: 76:90:a0:ae:17:52:f6:10:65:ca:0a:73:8e:9c:3d: 4f:5b:5c:5d:15:2c:96:d5:af:05:c8:90:53:19:8b: 46:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4B:67:BC:EA:4F:7E:05:99:33:11:DE:E8:78:8B:06:9B:50:B0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/918523ba-c151-3f99-b377-2e0bfbd7897c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 208.93.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:6c:a3:8e:b2:f8:94:82:34:67:45:f0:2b:53:0f:61:eb:3e: b4:31:af:b7:68:ab:e3:0f:48:f1:0a:7d:8e:2b:1a:54:9c:d6: 77:d6:8a:1d:b0:fc:7a:ad:79:40:ef:58:f0:34:76:22:31:20: e1:b5:6b:40:8e:fc:26:f2:eb:af:26:58:c7:57:d2:87:d3:9e: 79:f4:37:45:f9:84:57:0f:de:71:c4:cc:e2:70:f5:4d:cd:c7: 55:3c:dc:d7:85:fc:05:01:a8:6e:69:97:42:b5:f0:9a:14:dc: 59:f4:86:e7:7c:c9:9d:ac:b3:3d:01:fd:75:08:be:59:20:21: c8:af:e5:83:3d:8b:c8:98:86:38:26:c9:01:c3:58:fc:92:8a: f3:6b:93:11:2e:db:dc:d5:f1:5c:3f:5c:fa:f7:f2:03:7c:b6: fc:2a:ec:98:7f:ef:43:38:9d:33:b4:06:28:78:42:05:b1:55: 5d:5e:a0:9c:15:fa:38:b6:00:8c:17:2c:3c:3a:b5:4e:b8:a7: b9:cc:c4:b4:eb:d3:de:73:80:fc:6a:0a:f7:fa:7e:0d:da:1d: 85:4f:f3:68:f4:8f:7e:db:c4:33:f4:e7:40:5c:4e:27:32:95: f3:dd:e7:b6:14:f7:b1:1f:a6:7c:65:e3:ef:64:10:89:53:b1: a7:16:7d:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0QPv55XVkW5c2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk ZjQxYTZmYjktMmQ5Ni00NTk1LWFhOTMtNDMyMGZhMGZmOTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/3nZFoOiIEGHpc7dZ5EC6Ra6y4XlQj3/wSk 9LMcIUuKx6hDctOs/ZT+wYtdY7Q7X/mmJoFW5FU/otxl+eOpzyGVARokodLvPsxG IZ9KPkl94n+P9S3GQba85CHma9ZBnrtcxYfcMmzYvps/yoTW4IHzDPCo3ERDzM60 fXnr7lKx2aacDaMsvHLopsZonFf3S/gBXf+zWH1pgt910mibaLLqBt/2U9VOtI/H zrQmAy0/xJO1/vBzvYOjRY0Ve0z4AVSrlyssnDxCN19DiVPqR8NHLbpBXRdJowbd KohNFD52kKCuF1L2EGXKCnOOnD1PW1xdFSyW1a8FyJBTGYtGCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxLZ7zqT34FmTMR3uh4iwabULB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvOTE4NTIzYmEtYzE1MS0z Zjk5LWIzNzctMmUwYmZiZDc4OTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxso46y+JSCNGdF8CtTD2HrPrQxr7doq+MPSPEKfY4rGlSc1nfWih2w /HqteUDvWPA0diIxIOG1a0CO/Cby668mWMdX0ofTnnn0N0X5hFcP3nHEzOJw9U3N x1U83NeF/AUBqG5pl0K18JoU3Fn0hud8yZ2ssz0B/XUIvlkgIciv5YM9i8iYhjgm yQHDWPySivNrkxEu29zV8Vw/XPr38gN8tvwq7Jh/70M4nTO0Bih4QgWxVV1eoJwV +ji2AIwXLDw6tU64p7nMxLTr095zgPxqCvf6fg3aHYVP82j0j37bxDP050BcTicy lfPd57YU97Efpnxl4+9kEIlTsacWfYg= -----END CERTIFICATE-----Generated at Sat Apr 12 15:20:16 2025 by rpki-client