$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c3ed72c1-2c67-3373-bfe9-b3821e1d6443.roa File: c3ed72c1-2c67-3373-bfe9-b3821e1d6443.roa (raw, json) Hash identifier: 3zlfnDQg0uJr0X4boTJQklrig9AOOGXsC8OVIUqp9yc= Subject key identifier: 24:9B:65:C6:41:6F:DB:69:9F:6A:82:33:20:34:58:14:F6:24:ED:EE Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584940397F88C34EB774C11758C0 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c3ed72c1-2c67-3373-bfe9-b3821e1d6443.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 2152 IP address blocks: 204.102.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:7f:88:c3:4e:b7:74:c1:17:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=4ad643a0-d623-4af7-89d8-7ba4b7740a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:c7:45:00:fd:cb:b8:dc:5e:50:c7:ea:cc: e8:40:08:1f:d4:58:f0:c0:58:5e:f1:15:3d:78:b7: 6e:0f:aa:f0:44:5c:35:30:3a:cf:e3:61:3a:dd:1d: 8b:bc:07:62:45:65:84:2d:7d:2a:d5:ce:a9:11:60: 8c:bc:ff:ea:3c:5c:bb:e8:47:15:aa:33:a6:ed:a2: 3b:63:76:09:d7:2c:16:ca:de:64:c5:eb:4c:32:06: b2:2a:ec:88:1e:3a:f9:c2:fe:0f:3a:4a:5b:4d:45: d8:04:37:9c:14:cf:b7:b9:b4:87:5f:39:13:17:80: fd:f5:6b:4e:ab:95:ab:c3:73:4c:1d:d6:57:40:88: 62:2c:5f:83:de:82:14:92:13:1c:a1:e4:ac:73:96: ad:30:57:bc:20:0d:ca:3a:63:f3:89:02:46:04:82: 7d:12:25:cc:18:b0:ed:5c:19:a7:33:98:ae:06:f1: 1f:92:8c:d1:51:54:65:f1:04:8d:ed:93:e3:9b:6d: df:df:4d:9f:3d:03:2d:b3:c5:43:b4:42:41:71:00: 29:7a:c5:6c:50:01:12:e5:03:4c:72:9b:29:b4:50: 4a:a6:14:d8:52:57:3d:24:41:cc:06:42:25:50:c2: fd:1c:2b:32:c6:d9:65:9d:91:5a:3a:11:65:3b:33: 9c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9B:65:C6:41:6F:DB:69:9F:6A:82:33:20:34:58:14:F6:24:ED:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/c3ed72c1-2c67-3373-bfe9-b3821e1d6443.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 204.102.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:68:ed:9b:6f:94:25:8b:da:62:10:76:b2:30:1c:1c:ac:b5: 64:8a:33:84:41:58:ef:64:1c:b3:be:42:e8:69:82:07:90:eb: 86:7e:f0:39:e8:51:b6:63:44:59:c8:99:ac:d1:76:a4:59:24: 83:8d:ad:2a:a7:7c:36:c5:87:60:45:5d:88:01:61:f2:a4:1b: 38:07:d7:49:1d:a5:ca:4e:18:24:74:8d:b7:86:88:59:af:41: 92:79:50:2d:7e:a7:a1:d8:b6:eb:12:d3:35:1a:69:fe:7f:41: c7:a5:9d:5a:f3:7e:4d:bf:d9:4f:2f:a4:12:bb:0f:f3:2a:25: 2a:12:14:c4:df:5e:a5:c7:1e:1b:a3:99:ee:3d:0c:24:0f:21: fb:35:04:81:f0:13:e2:3f:1b:15:f4:4d:20:46:75:14:50:97: 29:7e:e9:7b:df:b9:09:c8:20:fd:7c:fa:2a:0c:89:cf:c5:f5: c3:01:98:c3:17:66:d9:32:d8:8a:79:19:9b:f5:20:4d:22:9b: e6:5e:08:4d:de:fb:2c:89:b3:8e:cc:fc:0e:81:0a:0c:32:4a: 23:d1:08:a9:46:ac:3d:29:b3:ef:9f:5e:7c:25:db:8b:4f:e1: e9:99:9b:b6:63:1f:c1:ec:8a:4a:c4:60:a1:df:13:5c:74:73: 95:ab:c7:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOX+Iw063dMEXWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NGFkNjQzYTAtZDYyMy00YWY3LTg5ZDgtN2JhNGI3NzQwYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptXHRQD9y7jcXlDH6szoQAgf1FjwwFhe8RU9 eLduD6rwRFw1MDrP42E63R2LvAdiRWWELX0q1c6pEWCMvP/qPFy76EcVqjOm7aI7 Y3YJ1ywWyt5kxetMMgayKuyIHjr5wv4POkpbTUXYBDecFM+3ubSHXzkTF4D99WtO q5Wrw3NMHdZXQIhiLF+D3oIUkhMcoeSsc5atMFe8IA3KOmPziQJGBIJ9EiXMGLDt XBmnM5iuBvEfkozRUVRl8QSN7ZPjm23f302fPQMts8VDtEJBcQApesVsUAES5QNM cpsptFBKphTYUlc9JEHMBkIlUML9HCsyxtllnZFaOhFlOzOcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSbZcZBb9tpn2qCMyA0WBT2JO3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvYzNlZDcyYzEtMmM2Ny0z MzczLWJmZTktYjM4MjFlMWQ2NDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExo7ZtvlCWL2mIQdrIwHBystWSKM4RBWO9kHLO+QuhpggeQ64Z+8Dno UbZjRFnImazRdqRZJIONrSqnfDbFh2BFXYgBYfKkGzgH10kdpcpOGCR0jbeGiFmv QZJ5UC1+p6HYtusS0zUaaf5/QcelnVrzfk2/2U8vpBK7D/MqJSoSFMTfXqXHHhuj me49DCQPIfs1BIHwE+I/GxX0TSBGdRRQlyl+6XvfuQnIIP18+ioMic/F9cMBmMMX Ztky2Ip5GZv1IE0im+ZeCE3e+yyJs47M/A6BCgwySiPRCKlGrD0ps++fXnwl24tP 4emZm7ZjH8HsikrEYKHfE1x0c5Wrx5o= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:41 2025 by rpki-client