$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b4898485-e794-3951-b83b-47ebbd001141.roa File: b4898485-e794-3951-b83b-47ebbd001141.roa (raw, json) Hash identifier: DpwPs/ZCDYz/EB08jx01oqc0e0guR6dNOwLZhBVFQO0= Subject key identifier: CB:F6:46:D5:28:79:42:61:68:0B:37:75:8C:C0:C2:A5:FA:4B:33:BC Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F43285849244E89D0413576C02C0A3594 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b4898485-e794-3951-b83b-47ebbd001141.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 13576 IP address blocks: 208.53.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:89:d0:41:35:76:c0:2c:0a:35:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=c9f8c762-5a86-4d9f-839a-58498d71f5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d0:ed:7b:ca:51:6a:04:fb:dc:a2:5f:57:1e: de:7e:b5:a7:51:79:90:6b:54:ad:1a:89:f7:39:22: 7b:dd:4f:12:73:c6:df:6d:bb:f3:4f:31:75:b6:79: 44:f4:1a:e3:c7:84:1e:ee:b8:b6:44:08:d5:90:ea: 80:9d:58:ca:36:b2:cc:50:27:e8:da:46:c9:8e:39: ef:bb:d0:c2:01:8d:1f:97:3d:39:10:03:ba:7f:88: 95:4a:09:c5:c1:de:18:f5:86:e7:ae:77:b9:91:c8: 6e:20:76:23:11:79:ad:04:29:ee:8e:39:7d:fe:24: 76:3a:98:df:dc:35:58:7a:a4:5e:42:e3:a9:3a:31: 55:64:72:99:c0:b6:8e:a3:07:df:06:dd:60:5d:42: ff:ba:08:d4:3a:24:7e:85:88:b4:0f:7a:85:d1:58: b0:67:18:aa:19:f4:a7:15:eb:99:a7:d3:89:69:92: 5d:4d:39:71:54:f6:2b:85:7e:dd:9a:5a:ff:57:34: a1:a1:be:47:20:f4:3b:85:ef:03:c7:4e:ca:bb:b4: 0d:87:0e:fa:cb:3a:eb:5d:93:9b:63:44:a1:ef:04: de:7f:e9:42:1f:e5:73:16:65:96:1a:af:08:cd:d3: 62:60:f9:3c:07:50:90:d4:eb:e6:ea:5f:0d:93:b8: 8f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F6:46:D5:28:79:42:61:68:0B:37:75:8C:C0:C2:A5:FA:4B:33:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/b4898485-e794-3951-b83b-47ebbd001141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:57:15:82:8d:7c:5a:be:77:8a:0c:95:1b:8f:59:bb:ae:02: c2:cd:f9:97:7c:e8:82:12:c7:f8:f9:71:a8:35:36:a1:25:d7: 1e:ee:79:05:7e:13:f0:42:8b:91:17:47:95:72:5a:b4:f6:4c: 84:0e:8b:d6:83:dd:3f:54:ae:8b:4b:14:0e:35:9b:af:bd:ee: 56:b2:fe:6b:17:c4:41:7e:30:b1:78:dc:fa:bf:43:07:02:ba: 51:b7:e1:bc:ec:ea:f7:50:5e:ac:6f:20:ad:b7:02:0b:03:80: 7b:16:bb:68:2a:3e:33:7c:93:7e:b5:3e:84:ce:4a:b7:23:a1: c9:fd:29:83:d6:e1:9d:67:31:b0:87:98:22:33:f3:c0:94:12: da:88:db:91:df:c6:db:6e:70:8c:49:c2:df:22:b0:59:4f:85: 14:ef:80:28:b6:a7:95:78:d4:49:cf:4f:69:c4:3f:12:d1:97: c5:58:d9:5d:f8:89:d6:41:ea:d2:1a:ba:b8:10:e2:c8:fb:d2: 61:63:bc:8c:d1:73:53:cb:55:7b:ee:a6:c9:7b:ee:70:c2:c0: b7:53:bd:20:3c:19:a3:d7:b3:47:e5:90:80:1c:0e:ba:9f:23: 8e:05:70:fb:26:ee:f9:ba:7d:8c:c4:db:da:30:96:24:d4:df: 84:92:7b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTonQQTV2wCwKNZQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk YzlmOGM3NjItNWE4Ni00ZDlmLTgzOWEtNTg0OThkNzFmNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNDte8pRagT73KJfVx7efrWnUXmQa1StGon3 OSJ73U8Sc8bfbbvzTzF1tnlE9Brjx4Qe7ri2RAjVkOqAnVjKNrLMUCfo2kbJjjnv u9DCAY0flz05EAO6f4iVSgnFwd4Y9Ybnrne5kchuIHYjEXmtBCnujjl9/iR2Opjf 3DVYeqReQuOpOjFVZHKZwLaOowffBt1gXUL/ugjUOiR+hYi0D3qF0ViwZxiqGfSn FeuZp9OJaZJdTTlxVPYrhX7dmlr/VzShob5HIPQ7he8Dx07Ku7QNhw76yzrrXZOb Y0Sh7wTef+lCH+VzFmWWGq8IzdNiYPk8B1CQ1Ovm6l8Nk7iPywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMv2RtUoeUJhaAs3dYzAwqX6SzO8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYjQ4OTg0ODUtZTc5NC0z OTUxLWI4M2ItNDdlYmJkMDAxMTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpXFYKNfFq+d4oMlRuPWbuuAsLN+Zd86IISx/j5cag1NqEl1x7ueQV+ E/BCi5EXR5VyWrT2TIQOi9aD3T9UrotLFA41m6+97lay/msXxEF+MLF43Pq/QwcC ulG34bzs6vdQXqxvIK23AgsDgHsWu2gqPjN8k361PoTOSrcjocn9KYPW4Z1nMbCH mCIz88CUEtqI25HfxttucIxJwt8isFlPhRTvgCi2p5V41EnPT2nEPxLRl8VY2V34 idZB6tIaurgQ4sj70mFjvIzRc1PLVXvupsl77nDCwLdTvSA8GaPXs0flkIAcDrqf I44FcPsm7vm6fYzE29owliTU34SSe9A= -----END CERTIFICATE-----Generated at Sun Apr 6 17:45:42 2025 by rpki-client