$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa File: afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa (raw, json) Hash identifier: PDDidJe9L201qhAKDBza51mn2Sm500O2HqUZVk/288g= Subject key identifier: E6:DD:F8:C5:43:D8:1C:65:3C:6D:DB:72:75:83:C8:4B:EF:07:43:14 Certificate issuer: /CN=3cd40041-6571-4f30-b76a-4746a4c2d957 Certificate serial: 010D0C9F43285848E59BC7427C5302F9A338CF80 Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa Signing time: Sun 16 Feb 2025 02:00:40 +0000 ROA not before: Sun 16 Feb 2025 02:00:40 +0000 ROA not after: Sat 17 May 2025 01:00:40 +0000 asID: 11051 IP address blocks: 205.207.255.0/24 maxlen: 24 2620:13e:500a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e5:9b:c7:42:7c:53:02:f9:a3:38:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957 Validity Not Before: Feb 16 02:00:40 2025 GMT Not After : May 17 01:00:40 2025 GMT Subject: CN=5bf86901-435b-4baf-ab6f-c6e26b8060f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2f:fe:9d:b0:02:5c:c0:39:1e:a1:78:92:70: d3:95:71:8b:3b:85:0c:4f:b3:5c:81:3b:47:67:a7: bc:0c:1e:90:d5:2e:4a:0e:1e:99:d7:21:97:53:f0: cd:67:cb:04:bd:2c:0a:b3:17:98:b5:4e:75:2d:57: bf:6b:9d:56:78:04:a0:52:de:cc:32:4f:fd:c5:05: 1a:fd:c4:b8:3f:e5:18:a3:ce:6d:1e:78:41:91:85: c2:20:94:2e:83:3f:85:3f:4e:7c:e9:8e:93:fc:62: d3:cd:73:22:8c:33:40:c1:5c:8a:8f:de:a0:71:e2: 3c:cd:93:06:94:a8:12:01:00:24:2b:aa:19:b4:cb: 31:9a:a2:f4:a3:52:04:1b:d6:7f:71:91:fc:a0:43: fe:d0:e4:93:38:da:45:01:b1:bc:ae:54:e9:d0:ea: b5:0d:bd:4a:0b:0d:72:f6:1e:62:87:38:08:88:86: 22:25:31:b8:51:81:35:64:ce:74:85:4c:a1:62:bb: b4:e7:d3:a8:b5:5c:e8:e9:43:f9:cd:d7:76:96:dc: db:1d:96:19:a5:0b:aa:79:ab:ec:03:b0:2f:60:8c: 5b:0b:d7:9f:02:c0:15:f1:5a:8a:a3:84:c7:80:63: b6:ff:f8:a8:b2:48:9e:d0:52:bd:f1:c4:3a:4a:db: 31:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DD:F8:C5:43:D8:1C:65:3C:6D:DB:72:75:83:C8:4B:EF:07:43:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl X509v3 Authority Key Identifier: keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer sbgp-ipAddrBlock: critical IPv4: 205.207.255.0/24 IPv6: 2620:13e:500a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:74:08:9d:4e:ed:e7:fb:86:a3:0a:52:ee:d3:41:9c:09:3f: 71:bb:ab:88:55:4f:ea:0c:f1:87:cb:19:d8:c2:e3:13:1e:bd: 47:a7:2c:a7:eb:0f:ec:6d:ce:92:4f:53:5d:50:b4:3b:47:bd: 98:29:bc:2a:43:a3:af:f2:11:b2:47:62:8a:a6:57:51:de:0c: 22:7a:20:8d:2f:60:52:56:e7:5f:f7:2a:97:14:37:88:ad:a6: d9:c1:dc:82:54:e5:21:54:9e:02:0b:2e:13:6c:47:5e:c0:e6: a8:70:1c:be:3f:fc:85:ee:c6:46:5c:9c:e9:dc:cc:97:9f:46: 02:13:a1:1d:c9:f0:cf:86:f6:29:ff:42:71:0f:28:ca:6b:0d: 46:4c:c8:85:40:00:e0:13:f1:19:df:39:51:35:1a:17:60:8b: b2:55:b0:32:79:88:7b:53:3c:03:db:bb:4e:76:d1:c0:15:da: b6:a4:1d:db:e9:20:89:ca:45:e9:ab:a6:4d:99:d1:91:8f:18: 5c:d6:0a:e2:d2:a2:b0:17:29:f4:c6:00:ee:02:46:25:a0:8a: c9:45:6d:e5:d8:77:75:c4:07:db:c6:d2:d1:24:10:9f:28:7c: 60:4b:f8:aa:6c:06:ff:de:60:ca:d8:81:de:89:ef:8b:54:f1: 2d:2a:73:78 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjlm8dCfFMC+aM4z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NkNDAwNDEtNjU3MS00ZjMwLWI3NmEtNDc0NmE0YzJk OTU3MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk NWJmODY5MDEtNDM1Yi00YmFmLWFiNmYtYzZlMjZiODA2MGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli/+nbACXMA5HqF4knDTlXGLO4UMT7NcgTtH Z6e8DB6Q1S5KDh6Z1yGXU/DNZ8sEvSwKsxeYtU51LVe/a51WeASgUt7MMk/9xQUa /cS4P+UYo85tHnhBkYXCIJQugz+FP0586Y6T/GLTzXMijDNAwVyKj96gceI8zZMG lKgSAQAkK6oZtMsxmqL0o1IEG9Z/cZH8oEP+0OSTONpFAbG8rlTp0Oq1Db1KCw1y 9h5ihzgIiIYiJTG4UYE1ZM50hUyhYru059OotVzo6UP5zdd2ltzbHZYZpQuqeavs A7AvYIxbC9efAsAV8VqKo4THgGO2//ioskie0FK98cQ6StsxNQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFObd+MVD2BxlPG3bcnWDyEvvB0MUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0 MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2YTRjMmQ5NTcvYWZkOTVhM2EtYzhjZC0z ZWU0LTlmZWItYmMzMzZlYTQ5ZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2NkNDAwNDEtNjU3MS00ZjMwLWI3 NmEtNDc0NmE0YzJkOTU3LzNjZDQwMDQxLTY1NzEtNGYzMC1iNzZhLTQ3NDZhNGMy ZDk1Ny5jcmwwHwYDVR0jBBgwFoAUC3dIwZueWstRL5acM8C2yILbDiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2 YTRjMmQ5NTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzc//MA8E AgACMAkDBwAmIAE+UAowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgXQInU7t5/uGowpS7tNBnAk/cburiFVP 6gzxh8sZ2MLjEx69R6csp+sP7G3Okk9TXVC0O0e9mCm8KkOjr/IRskdiiqZXUd4M InogjS9gUlbnX/cqlxQ3iK2m2cHcglTlIVSeAgsuE2xHXsDmqHAcvj/8he7GRlyc 6dzMl59GAhOhHcnwz4b2Kf9CcQ8oymsNRkzIhUAA4BPxGd85UTUaF2CLslWwMnmI e1M8A9u7TnbRwBXatqQd2+kgicpF6aumTZnRkY8YXNYK4tKisBcp9MYA7gJGJaCK yUVt5dh3dcQH28bS0SQQnyh8YEv4qmwG/95gytiB3onvi1TxLSpzeA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:55 2025 by rpki-client