$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa File: 333c4625-2011-380b-81cd-9ac18b847081.roa (raw, json) Hash identifier: 8x/F0JR9gpV1e+CgqLODsC6s9VgCKaSUoXhVYbqxkyo= Subject key identifier: 02:47:40:DB:42:46:72:2E:27:C7:A0:B2:6C:86:2D:17:05:02:84:CE Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F43285848F926A4CC875C759AF6F641E0 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 62720 IP address blocks: 204.186.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:a4:cc:87:5c:75:9a:f6:f6:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=f536326f-e09b-491f-8567-e74324dadda2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b5:72:f9:e1:96:5e:1e:c9:34:f5:d4:27:78: f9:a8:46:05:d3:65:38:68:cf:67:d5:01:0d:29:f0: a4:77:79:11:1a:34:65:6c:0c:39:e7:3b:fd:6c:da: ba:60:ee:88:61:8e:88:a6:32:29:6c:80:c5:6f:5c: a9:4e:97:97:72:ed:c2:bb:92:a3:6f:9c:db:6b:da: 62:5d:2e:ef:ad:e9:ba:ef:51:bb:2b:32:f2:fb:05: e1:f1:23:1b:4f:e4:46:79:56:c4:15:2c:00:da:32: d3:18:8c:8b:14:8c:34:95:79:0b:80:bd:df:9f:d0: f8:97:77:47:e0:dc:f8:1f:33:ff:f1:08:71:2a:ce: ce:1a:e2:20:1b:ce:d8:40:15:cc:db:08:07:00:ed: 9a:01:49:3a:c1:eb:d2:7e:41:f9:f4:6c:4e:b1:2d: f8:84:8c:c4:64:7f:65:f0:9c:14:63:9c:40:7c:6b: 4a:79:d7:37:78:c3:b8:52:b4:46:08:79:46:a9:7e: cb:04:72:43:4f:ea:ef:ab:a9:91:2c:b9:8f:cc:dd: 26:8a:0a:44:fc:c2:0c:63:94:b1:44:14:4e:1c:54: 0a:b1:7b:c8:fe:3c:32:55:1b:27:40:d6:84:f7:a5: 9d:bf:bf:37:25:a9:6d:a0:d2:80:dc:26:1c:d4:c5: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:47:40:DB:42:46:72:2E:27:C7:A0:B2:6C:86:2D:17:05:02:84:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/333c4625-2011-380b-81cd-9ac18b847081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 204.186.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0d:6a:fb:d9:7a:c3:34:ce:d7:75:c0:9e:40:81:32:56:5e: cf:e0:d3:e9:41:42:f6:0d:f7:ec:27:5f:9e:9b:62:74:5d:80: 13:4a:10:f9:28:86:0a:91:17:2d:c9:95:5f:f9:18:74:64:88: ec:c1:a0:70:fa:2c:ed:95:aa:db:e6:20:77:75:b3:c7:c9:cb: 55:b0:f3:78:76:d6:ed:ec:e7:35:b7:69:b5:cf:31:3c:9e:dd: 3e:de:f8:1e:a6:18:29:6b:ec:e9:53:4d:c2:11:2e:3f:09:62: e6:fd:05:90:7f:78:af:ca:18:43:4b:6a:80:cf:2c:29:28:6d: 0f:f8:9f:84:02:0f:8e:b2:0d:11:e9:f5:c6:05:49:93:ba:7d: 5b:b3:06:d6:4c:13:18:c3:90:f8:ab:1f:f3:e1:ac:81:b0:b9: 49:64:35:84:9c:6e:29:a6:c7:27:2e:9c:dc:23:8b:2c:32:58: 95:dc:de:8d:fc:08:26:b0:3e:c1:24:4b:55:36:84:a4:14:9c: e0:47:5e:92:23:b6:23:2e:1d:c5:9b:fd:60:49:df:6c:b5:4a: 95:68:2a:f9:b0:ce:39:6f:67:d3:92:97:e9:93:8a:68:83:0e: 00:46:1b:41:16:d9:9d:31:c6:82:20:97:b9:ce:56:0a:d1:64: 2b:f1:e3:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqTMh1x1mvb2QeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk ZjUzNjMyNmYtZTA5Yi00OTFmLTg1NjctZTc0MzI0ZGFkZGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbVy+eGWXh7JNPXUJ3j5qEYF02U4aM9n1QEN KfCkd3kRGjRlbAw55zv9bNq6YO6IYY6IpjIpbIDFb1ypTpeXcu3Cu5Kjb5zba9pi XS7vrem671G7KzLy+wXh8SMbT+RGeVbEFSwA2jLTGIyLFIw0lXkLgL3fn9D4l3dH 4Nz4HzP/8QhxKs7OGuIgG87YQBXM2wgHAO2aAUk6wevSfkH59GxOsS34hIzEZH9l 8JwUY5xAfGtKedc3eMO4UrRGCHlGqX7LBHJDT+rvq6mRLLmPzN0migpE/MIMY5Sx RBROHFQKsXvI/jwyVRsnQNaE96Wdv783JaltoNKA3CYc1MWXBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJHQNtCRnIuJ8egsmyGLRcFAoTOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMzMzYzQ2MjUtMjAxMS0z ODBiLTgxY2QtOWFjMThiODQ3MDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLoUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIANavvZesM0ztd1wJ5AgTJWXs/g0+lBQvYN9+wnX56bYnRdgBNKEPko hgqRFy3JlV/5GHRkiOzBoHD6LO2VqtvmIHd1s8fJy1Ww83h21u3s5zW3abXPMTye 3T7e+B6mGClr7OlTTcIRLj8JYub9BZB/eK/KGENLaoDPLCkobQ/4n4QCD46yDRHp 9cYFSZO6fVuzBtZMExjDkPirH/PhrIGwuUlkNYScbimmxycunNwjiywyWJXc3o38 CCawPsEkS1U2hKQUnOBHXpIjtiMuHcWb/WBJ32y1SpVoKvmwzjlvZ9OSl+mTimiD DgBGG0EW2Z0xxoIgl7nOVgrRZCvx46k= -----END CERTIFICATE-----Generated at Fri Mar 14 09:07:38 2025 by rpki-client