$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa File: 78644dd4-2392-31eb-800f-158c88e9ce1b.roa (raw, json) Hash identifier: 0hYCPoGGN5fPlyhTkCBC05/BX+EO77oZG35lal5Zdng= Subject key identifier: C3:19:25:A3:E0:21:C1:89:85:A0:69:5A:6D:88:A8:EA:A5:B3:67:E2 Certificate issuer: /CN=8d48d798-bdf8-4082-8394-a16fca0f83af Certificate serial: 010D0C9F432858488DAB49426A13A78951CCA580 Authority key identifier: 7A:C8:84:6B:36:4D:A8:05:71:69:43:FD:45:25:3B:D4:5B:F0:3C:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa Signing time: Wed 15 Jan 2025 14:00:51 +0000 ROA not before: Wed 15 Jan 2025 14:00:51 +0000 ROA not after: Tue 15 Apr 2025 13:00:51 +0000 asID: 16409 IP address blocks: 204.9.92.0/22 maxlen: 24 2604:5e40::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Mar 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8d:ab:49:42:6a:13:a7:89:51:cc:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d48d798-bdf8-4082-8394-a16fca0f83af Validity Not Before: Jan 15 14:00:51 2025 GMT Not After : Apr 15 13:00:51 2025 GMT Subject: CN=191c6317-b1f8-49b1-b0e0-07417df99680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:1f:ce:1d:8c:2c:cf:20:78:c4:a3:fb:37: 16:9e:7c:e2:b2:aa:b7:ae:1c:bf:08:0a:ec:9b:60: 2f:2e:cf:87:eb:c3:8a:10:78:ce:8d:dc:4e:61:f7: 3b:47:da:09:c8:f1:61:cb:9b:82:58:e0:b8:4b:fa: 8e:77:82:93:22:b7:d6:19:74:21:44:9b:f7:94:1c: 3b:c2:01:0e:b1:1f:c4:f5:6e:1f:28:52:ef:c7:1d: 7c:0a:35:bb:a7:46:e5:7c:bc:9c:ec:6d:d9:f2:d9: 02:fe:56:d3:12:22:bd:2f:35:05:04:ef:b1:b0:39: 06:34:c3:ac:5c:95:b3:b3:6d:b1:b2:a6:19:13:43: e0:9d:cb:25:57:93:50:11:cf:5e:0f:9b:86:15:b4: 9c:0b:c0:e8:e6:5a:89:33:2c:6a:3c:cb:d0:29:38: 4e:b6:e4:40:16:57:43:35:b3:0d:f5:13:ef:40:45: 49:a6:f2:84:59:e0:20:e4:17:c9:92:14:f4:78:4c: 17:3d:ac:1d:0b:61:8d:a9:6c:ee:3f:d8:11:8d:d5: d4:3a:27:d9:4d:f1:6c:f9:a1:d4:04:1e:aa:65:e1: 26:b5:84:8a:7f:5a:8b:ea:b0:54:9f:9e:4f:58:0d: 84:b8:56:55:a4:28:8b:5f:b1:53:e9:78:f8:e3:63: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:19:25:A3:E0:21:C1:89:85:A0:69:5A:6D:88:A8:EA:A5:B3:67:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.crl X509v3 Authority Key Identifier: keyid:7A:C8:84:6B:36:4D:A8:05:71:69:43:FD:45:25:3B:D4:5B:F0:3C:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer sbgp-ipAddrBlock: critical IPv4: 204.9.92.0/22 IPv6: 2604:5e40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:10:61:51:04:ec:05:0d:c9:60:10:58:45:d3:ef:3a:19:36: f9:a2:4e:83:d2:ee:54:70:65:8e:e9:dd:70:6f:5b:37:6f:0b: d2:6c:2f:53:43:e9:0c:65:6e:be:f6:0b:44:51:c4:24:18:bc: 3c:9b:b5:ec:37:44:de:57:29:cd:8c:e8:f5:16:db:95:ee:53: d5:57:7f:89:f5:7a:04:5f:80:1f:c8:a7:3e:bd:7e:d9:b5:25: 8f:24:35:13:98:c2:2e:b2:0c:96:07:63:ad:66:47:94:3f:3e: b1:15:26:0b:ca:05:cb:ff:28:7e:3b:03:13:62:58:7e:13:39: 9d:0f:5b:43:20:50:c1:02:48:40:0e:f3:fe:8f:ab:26:10:49: d0:5d:09:05:53:93:3f:cb:e4:02:44:81:67:22:b5:99:40:a7: e9:04:61:bd:c3:24:b9:9f:05:14:c4:ed:cb:f8:4e:67:99:db: 04:24:40:e8:3a:66:66:d0:ef:19:eb:80:59:65:47:92:11:d4: c5:3b:e9:fb:7f:93:06:c4:a9:e7:9d:ab:be:8a:ae:d9:60:a7: f0:5f:66:ad:0c:f9:13:42:62:e7:3c:0e:18:63:34:53:39:65: 26:4b:9a:df:a2:d2:24:55:ea:32:7d:8a:6d:a4:2c:be:35:1f: 42:8f:29:ae -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEiNq0lCahOniVHMpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OGQ3OTgtYmRmOC00MDgyLTgzOTQtYTE2ZmNhMGY4 M2FmMB4XDTI1MDExNTE0MDA1MVoXDTI1MDQxNTEzMDA1MVowLzEtMCsGA1UEAxMk MTkxYzYzMTctYjFmOC00OWIxLWIwZTAtMDc0MTdkZjk5NjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoecfzh2MLM8geMSj+zcWnnzisqq3rhy/CArs m2AvLs+H68OKEHjOjdxOYfc7R9oJyPFhy5uCWOC4S/qOd4KTIrfWGXQhRJv3lBw7 wgEOsR/E9W4fKFLvxx18CjW7p0blfLyc7G3Z8tkC/lbTEiK9LzUFBO+xsDkGNMOs XJWzs22xsqYZE0PgncslV5NQEc9eD5uGFbScC8Do5lqJMyxqPMvQKThOtuRAFldD NbMN9RPvQEVJpvKEWeAg5BfJkhT0eEwXPawdC2GNqWzuP9gRjdXUOifZTfFs+aHU BB6qZeEmtYSKf1qL6rBUn55PWA2EuFZVpCiLX7FT6Xj442NCmwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMMZJaPgIcGJhaBpWm2IqOqls2fiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZDQ4 ZDc5OC1iZGY4LTQwODItODM5NC1hMTZmY2EwZjgzYWYvNzg2NDRkZDQtMjM5Mi0z MWViLTgwMGYtMTU4Yzg4ZTljZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGQ0OGQ3OTgtYmRmOC00MDgyLTgz OTQtYTE2ZmNhMGY4M2FmLzhkNDhkNzk4LWJkZjgtNDA4Mi04Mzk0LWExNmZjYTBm ODNhZi5jcmwwHwYDVR0jBBgwFoAUesiEazZNqAVxaUP9RSU71FvwPPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZDQ4ZDc5OC1iZGY4LTQwODItODM5NC1hMTZm Y2EwZjgzYWYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzAlcMA0E AgACMAcDBQAmBF5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHoQYVEE7AUNyWAQWEXT7zoZNvmiToPS7lRw ZY7p3XBvWzdvC9JsL1ND6Qxlbr72C0RRxCQYvDybtew3RN5XKc2M6PUW25XuU9VX f4n1egRfgB/Ipz69ftm1JY8kNROYwi6yDJYHY61mR5Q/PrEVJgvKBcv/KH47AxNi WH4TOZ0PW0MgUMECSEAO8/6PqyYQSdBdCQVTkz/L5AJEgWcitZlAp+kEYb3DJLmf BRTE7cv4TmeZ2wQkQOg6ZmbQ7xnrgFllR5IR1MU76ft/kwbEqeedq76Krtlgp/Bf Zq0M+RNCYuc8DhhjNFM5ZSZLmt+i0iRV6jJ9im2kLL41H0KPKa4= -----END CERTIFICATE-----Generated at Tue Mar 18 20:40:49 2025 by rpki-client