$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa File: f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa (raw, json) Hash identifier: 3F9fNg8aaLzlK1qAVflSUzv+rIgIxzlYDF6fwZFHy7U= Subject key identifier: E2:DA:B1:3E:0F:CF:C3:C7:96:AA:9A:CB:7D:33:06:95:35:20:C4:B8 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F43285848EF61319C215DA1B95ED2F140 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7782 IP address blocks: 107.152.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:31:9c:21:5d:a1:b9:5e:d2:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=348d32e6-9c56-4182-ab39-6f9cbb1f17cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:70:6e:c9:6c:86:1d:bc:17:a8:27:ea:c5: 8d:32:8d:3d:78:37:61:bc:b0:17:aa:cc:8c:f9:d0: 89:d0:17:95:f4:0b:1d:2f:73:e2:18:1f:c8:51:e8: 14:e3:ba:88:83:3d:03:d8:a3:a9:1b:1b:2c:88:42: a5:06:ce:a6:31:7f:2e:19:6a:53:66:87:74:fd:26: fb:cd:28:19:5a:a7:c5:9e:84:ca:d5:8d:c1:65:e0: ee:60:cb:0a:a8:9a:cb:77:6e:b7:35:ef:f4:0f:c5: 84:02:88:01:18:8e:ec:d1:e0:2a:63:c7:64:05:69: 49:72:c5:4d:d7:59:15:27:52:16:29:2b:d2:18:42: ad:17:cd:6e:fc:ea:41:f6:b0:58:d3:f4:89:1b:ec: 9e:9d:bd:f4:e9:51:11:88:fa:73:04:09:df:22:87: a9:53:af:92:8a:83:2d:af:b0:0a:4e:67:2b:5c:00: 48:75:20:4b:12:41:c9:e2:3a:d4:ae:ff:51:c7:7e: 22:4f:84:d5:c2:8b:f1:f2:a8:59:6e:ac:a7:4d:a3: b2:0a:97:8f:56:4e:4b:a3:39:43:9e:be:46:8b:7a: 4b:d6:5e:aa:c8:05:fb:39:5e:9f:30:47:ce:a5:76: 2f:e7:a6:16:0f:fd:28:1c:56:cc:ec:19:bc:9b:05: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DA:B1:3E:0F:CF:C3:C7:96:AA:9A:CB:7D:33:06:95:35:20:C4:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f820e75f-4e7f-352a-a67a-a71ff8ba5559.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 107.152.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2a:d2:d7:d7:ae:06:78:82:81:d3:a9:60:78:b8:bb:61:81: f6:8f:8f:4f:3d:c5:8a:7e:5b:c9:81:cc:db:ce:6e:be:a7:e2: b0:ed:8e:76:25:5e:55:4b:d4:2d:e4:d3:c2:e0:85:24:6f:eb: eb:62:78:64:fa:50:d0:4c:12:c4:2b:af:70:ab:60:e5:ca:c0: 7f:d1:eb:7d:4b:4a:19:ed:d8:65:54:d7:54:25:1f:31:6c:fc: 5d:57:ee:cc:dd:a8:a3:ab:84:52:d6:9d:78:d4:ba:d4:8f:6d: 79:47:8c:01:9d:d5:00:f8:d1:0c:6c:18:be:ef:df:cb:2f:0d: 2c:d9:f4:07:5e:b5:f8:5a:47:52:1e:5f:d1:d2:13:8d:97:87: 2c:14:f1:8c:5f:5f:61:ca:51:0d:ef:1d:4a:43:94:63:78:2a: 12:a7:45:4f:92:5a:58:07:d5:77:67:e0:02:f3:06:1f:6d:0f: 18:e6:02:07:7f:1d:c8:e7:90:0a:3c:dc:58:49:28:ee:de:f8: c2:22:b0:3f:47:88:81:a4:a4:90:c0:59:4d:4f:eb:ad:31:75: 8d:af:73:6c:44:59:7d:20:72:5f:40:4f:9e:a8:74:5f:97:d2: f0:d3:93:43:33:9a:b7:de:d8:ba:9f:fd:34:de:a0:8c:d2:b6: c8:90:41:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTGcIV2huV7S8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MzQ4ZDMyZTYtOWM1Ni00MTgyLWFiMzktNmY5Y2JiMWYxN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQRwbslshh28F6gn6sWNMo09eDdhvLAXqsyM +dCJ0BeV9AsdL3PiGB/IUegU47qIgz0D2KOpGxssiEKlBs6mMX8uGWpTZod0/Sb7 zSgZWqfFnoTK1Y3BZeDuYMsKqJrLd263Ne/0D8WEAogBGI7s0eAqY8dkBWlJcsVN 11kVJ1IWKSvSGEKtF81u/OpB9rBY0/SJG+yenb306VERiPpzBAnfIoepU6+SioMt r7AKTmcrXABIdSBLEkHJ4jrUrv9Rx34iT4TVwovx8qhZbqynTaOyCpePVk5LozlD nr5Gi3pL1l6qyAX7OV6fMEfOpXYv56YWD/0oHFbM7Bm8mwW5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLasT4Pz8PHlqqay30zBpU1IMS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvZjgyMGU3NWYtNGU3Zi0z NTJhLWE2N2EtYTcxZmY4YmE1NTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5hwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoq0tfXrgZ4goHTqWB4uLthgfaPj089xYp+W8mBzNvObr6n4rDtjnYl XlVL1C3k08LghSRv6+tieGT6UNBMEsQrr3CrYOXKwH/R631LShnt2GVU11QlHzFs /F1X7szdqKOrhFLWnXjUutSPbXlHjAGd1QD40QxsGL7v38svDSzZ9AdetfhaR1Ie X9HSE42XhywU8YxfX2HKUQ3vHUpDlGN4KhKnRU+SWlgH1Xdn4ALzBh9tDxjmAgd/ HcjnkAo83FhJKO7e+MIisD9HiIGkpJDAWU1P660xdY2vc2xEWX0gcl9AT56odF+X 0vDTk0Mzmrfe2Lqf/TTeoIzStsiQQU0= -----END CERTIFICATE-----Generated at Sat Apr 19 16:03:21 2025 by rpki-client