$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/3497fe7e-5661-34fe-a7a3-ef3ca26f4c9d.roa File: 3497fe7e-5661-34fe-a7a3-ef3ca26f4c9d.roa (raw, json) Hash identifier: h1WrJ9pGfu/XI9YueuyMaVaI61xTwiaOwjmPV3dKRvI= Subject key identifier: 49:D2:BB:95:9D:9B:21:74:C4:60:55:9B:8F:9F:0F:12:5B:0B:45:80 Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F4328584913AC3740D144EE34CF67CD60 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/3497fe7e-5661-34fe-a7a3-ef3ca26f4c9d.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 395213 IP address blocks: 204.10.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:37:40:d1:44:ee:34:cf:67:cd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=56dc50ed-f992-442c-bf2d-b73b01d8c9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a1:15:fa:b8:04:5e:ea:5a:99:25:e9:16:2e: 16:2c:2e:2b:d4:22:31:9a:8e:e1:05:68:1f:f0:a2: df:a3:b4:43:da:f1:a2:e0:06:a7:ee:8d:6e:73:55: 24:5e:89:82:3f:91:01:10:da:d8:64:3a:7a:06:a6: cf:8d:d2:9f:cd:12:c3:0b:5a:e9:4c:04:ee:4f:8f: dc:2b:d9:2e:15:3d:a2:21:f1:77:b7:ed:38:38:de: 61:71:63:1b:a4:b6:37:c6:ec:97:68:38:c8:c2:d8: 5d:04:33:7d:93:9e:60:bb:c3:c0:db:29:21:20:f3: 6b:fc:d4:d5:55:df:e1:e1:1f:ba:74:6e:7f:8b:ce: 5e:40:11:2d:91:06:de:c7:a9:6b:83:bf:f2:dd:8e: 1b:6f:9f:15:18:85:2f:90:e5:94:33:78:aa:eb:60: 7d:ce:e1:82:b1:ed:70:f2:3b:d0:23:71:ed:b3:55: 7f:af:a5:44:d6:31:4f:da:aa:92:95:bf:a4:17:2f: 44:0b:9b:98:35:00:7d:8f:3b:42:f1:af:1a:df:3d: a7:5a:05:2e:0f:6d:43:97:ab:be:94:38:5e:22:ce: 5c:01:22:45:a9:a0:47:36:39:ad:7a:d6:05:fe:4a: 47:5f:e7:ec:d9:2e:d1:43:b0:f5:c4:b0:ef:4f:ed: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:BB:95:9D:9B:21:74:C4:60:55:9B:8F:9F:0F:12:5B:0B:45:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/3497fe7e-5661-34fe-a7a3-ef3ca26f4c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv4: 204.10.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:4b:54:57:b7:e1:31:ab:ad:e6:93:6b:63:36:a6:9a:11:f7: 55:d5:09:ba:2f:84:13:2e:1b:95:fc:eb:94:63:40:e5:07:b4: 43:77:0b:03:6c:d3:7f:3a:0a:f9:a9:bd:4b:0b:c8:83:7d:81: 11:2e:2e:e4:8a:6f:c5:8c:8a:89:25:e0:e4:fc:ea:4f:d5:62: e5:46:bb:22:c4:fb:b0:6c:46:48:08:d3:4a:29:e6:52:3f:40: 9d:fc:10:f2:a0:d7:77:b7:9d:7e:2b:36:8f:2e:f2:4d:82:0e: 85:41:e0:c1:e3:62:75:26:49:24:9f:81:8a:83:65:7a:9c:06: 97:aa:70:6b:85:ef:30:61:20:cc:f3:59:24:26:f1:29:9d:7c: 81:dd:8c:23:f4:b5:4a:f7:c5:bb:f3:4c:a4:36:ed:24:85:25: 7f:48:b8:15:73:29:00:4f:d1:2a:34:f3:e8:5e:4e:87:55:74: 95:c9:c0:d1:07:57:e9:63:40:66:ad:85:58:ee:97:8e:23:b3: 36:3f:74:f3:9a:22:7e:70:26:1e:ad:19:cd:af:53:be:5b:c7: 9e:f3:e9:93:4a:7d:54:1f:6f:b1:62:f6:d3:54:8c:db:d2:10: 3f:b0:cf:ad:84:b0:b5:9c:4b:49:31:f7:15:fc:3e:9a:aa:ae: 9a:4e:17:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrDdA0UTuNM9nzWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NTZkYzUwZWQtZjk5Mi00NDJjLWJmMmQtYjczYjAxZDhjOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKEV+rgEXupamSXpFi4WLC4r1CIxmo7hBWgf 8KLfo7RD2vGi4Aan7o1uc1UkXomCP5EBENrYZDp6BqbPjdKfzRLDC1rpTATuT4/c K9kuFT2iIfF3t+04ON5hcWMbpLY3xuyXaDjIwthdBDN9k55gu8PA2ykhIPNr/NTV Vd/h4R+6dG5/i85eQBEtkQbex6lrg7/y3Y4bb58VGIUvkOWUM3iq62B9zuGCse1w 8jvQI3Hts1V/r6VE1jFP2qqSlb+kFy9EC5uYNQB9jztC8a8a3z2nWgUuD21Dl6u+ lDheIs5cASJFqaBHNjmtetYF/kpHX+fs2S7RQ7D1xLDvT+3hawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnSu5WdmyF0xGBVm4+fDxJbC0WAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMzQ5N2ZlN2UtNTY2MS0z NGZlLWE3YTMtZWYzY2EyNmY0YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAo0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhLVFe34TGrreaTa2M2ppoR91XVCbovhBMuG5X865RjQOUHtEN3CwNs 0386CvmpvUsLyIN9gREuLuSKb8WMiokl4OT86k/VYuVGuyLE+7BsRkgI00op5lI/ QJ38EPKg13e3nX4rNo8u8k2CDoVB4MHjYnUmSSSfgYqDZXqcBpeqcGuF7zBhIMzz WSQm8SmdfIHdjCP0tUr3xbvzTKQ27SSFJX9IuBVzKQBP0So08+heTodVdJXJwNEH V+ljQGathVjul44jszY/dPOaIn5wJh6tGc2vU75bx57z6ZNKfVQfb7Fi9tNUjNvS ED+wz62EsLWcS0kx9xX8PpqqrppOF1g= -----END CERTIFICATE-----Generated at Sat Apr 12 00:51:49 2025 by rpki-client