$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bac3beef-e8a6-39b1-9473-0951235b352a.roa File: bac3beef-e8a6-39b1-9473-0951235b352a.roa (raw, json) Hash identifier: mTDNmLbDQFo0z9bNKax/L+Z7fAUJpRD2KyItN2LIWJA= Subject key identifier: AA:D1:45:C8:69:3A:96:34:D7:41:16:FF:C2:B0:DE:45:45:40:41:92 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584930DE7AF9FD19B3703A3E6060 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bac3beef-e8a6-39b1-9473-0951235b352a.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 396494 IP address blocks: 208.58.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:7a:f9:fd:19:b3:70:3a:3e:60:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=f60a0c49-7ad6-4088-b35a-a1acdc9c4d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:62:72:ed:60:e3:03:ff:17:34:13:cf:1e: ce:cd:e2:08:54:07:72:3f:4a:e2:9d:7f:72:aa:38: 37:7f:a8:17:c7:f6:88:c7:4a:ae:c8:9a:3b:cc:4f: b6:2c:f2:23:64:89:02:15:b1:ce:e6:ba:c6:97:cd: d1:6e:11:d8:c7:22:bc:11:6e:c2:c0:f9:e6:2e:33: a7:b2:48:df:d2:ad:95:c2:5f:56:a9:23:65:22:75: 63:62:16:13:75:96:54:36:55:0b:99:41:58:92:54: 7d:a8:a4:5e:82:ed:32:06:d0:72:51:99:a9:37:cf: 7b:1a:46:c8:b1:48:60:23:ea:b4:a7:1b:65:80:29: 58:2f:eb:ca:de:a9:7e:e3:cd:8c:09:b5:90:4b:65: 8c:a0:04:6d:db:41:1b:32:dd:3d:52:6f:81:b4:07: 3a:9e:1b:2e:6b:e6:46:8d:ac:46:94:76:01:d8:1c: b5:61:1f:81:0c:3b:1f:72:32:94:ad:55:a4:b7:f8: f3:f6:c2:3e:0f:27:a6:7c:69:02:2d:05:32:2d:0d: ce:21:0f:78:4d:23:ea:ac:75:39:5d:b5:7e:78:bc: 7b:b0:c4:fd:f9:54:c0:d0:8a:c9:ac:79:ca:62:ff: f4:db:bf:9a:34:4f:ea:e0:de:09:ce:00:82:e7:df: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D1:45:C8:69:3A:96:34:D7:41:16:FF:C2:B0:DE:45:45:40:41:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bac3beef-e8a6-39b1-9473-0951235b352a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:27:a4:98:9c:a5:e2:82:79:aa:b0:29:3a:05:f8:92:c7:7e: b7:1e:bf:b3:00:d4:e3:75:fb:db:3c:aa:bd:09:71:d2:69:a3: 17:fc:36:78:e9:d5:2f:6c:f7:c4:c4:ce:57:c4:b1:07:e2:35: 5a:4e:e0:22:23:a6:99:e8:d4:47:1b:4a:96:64:b8:f7:2f:55: b7:ff:47:87:39:e4:88:9d:9b:03:62:f7:87:f9:8b:29:29:45: f5:a8:3b:05:f3:d1:31:f6:a6:a8:cf:dc:14:94:90:20:5b:72: 0b:6c:ff:de:b2:45:a4:cd:12:18:9c:13:e4:1c:8f:33:b2:33: 2f:15:9e:e2:89:0d:59:1d:f1:de:f4:39:f9:56:2a:eb:b9:d7: 87:fa:8b:20:45:f3:d5:d0:b8:27:f7:06:9b:c4:ad:9b:87:bd: 5e:a7:10:4b:ce:f9:b2:25:9e:2d:9f:2a:d1:ed:c3:3b:c1:5d: c0:19:3f:ca:82:35:21:d7:42:ce:c4:07:0a:9d:77:8e:39:6b: 13:4e:2c:60:d7:f1:8f:35:63:b3:ca:95:83:fc:8c:9b:e7:93: be:a3:e9:ab:e8:84:cb:71:95:fb:a1:98:99:30:26:3a:23:67: fd:3d:e5:24:4e:9c:4a:5c:cf:30:f7:ff:f0:54:52:6e:3f:00: 0f:56:ad:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nr5/RmzcDo+YGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZjYwYTBjNDktN2FkNi00MDg4LWIzNWEtYTFhY2RjOWM0ZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00Bicu1g4wP/FzQTzx7OzeIIVAdyP0rinX9y qjg3f6gXx/aIx0quyJo7zE+2LPIjZIkCFbHO5rrGl83RbhHYxyK8EW7CwPnmLjOn skjf0q2Vwl9WqSNlInVjYhYTdZZUNlULmUFYklR9qKRegu0yBtByUZmpN897GkbI sUhgI+q0pxtlgClYL+vK3ql+482MCbWQS2WMoARt20EbMt09Um+BtAc6nhsua+ZG jaxGlHYB2By1YR+BDDsfcjKUrVWkt/jz9sI+DyemfGkCLQUyLQ3OIQ94TSPqrHU5 XbV+eLx7sMT9+VTA0IrJrHnKYv/027+aNE/q4N4JzgCC59/FNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrRRchpOpY010EW/8Kw3kVFQEGSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYmFjM2JlZWYtZThhNi0z OWIxLTk0NzMtMDk1MTIzNWIzNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DpOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8npJicpeKCeaqwKToF+JLHfrcev7MA1ON1+9s8qr0JcdJpoxf8Nnjp 1S9s98TEzlfEsQfiNVpO4CIjppno1EcbSpZkuPcvVbf/R4c55IidmwNi94f5iykp RfWoOwXz0TH2pqjP3BSUkCBbcgts/96yRaTNEhicE+QcjzOyMy8VnuKJDVkd8d70 OflWKuu514f6iyBF89XQuCf3BpvErZuHvV6nEEvO+bIlni2fKtHtwzvBXcAZP8qC NSHXQs7EBwqdd445axNOLGDX8Y81Y7PKlYP8jJvnk76j6avohMtxlfuhmJkwJjoj Z/095SROnEpczzD3//BUUm4/AA9WrWo= -----END CERTIFICATE-----Generated at Sat Apr 19 16:35:27 2025 by rpki-client