$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa File: 78644dd4-2392-31eb-800f-158c88e9ce1b.roa (raw, json) Hash identifier: hn1ltgV3h79UX5CgxWnH2KysiIH/MVqtn7QBRlpCrcY= Subject key identifier: C2:52:37:BA:85:94:4A:26:F6:27:81:BF:FF:35:EE:43:AF:87:13:16 Certificate issuer: /CN=8d48d798-bdf8-4082-8394-a16fca0f83af Certificate serial: 010D0C9F432858496CE4526C853F0C8E9B7035C0 Authority key identifier: 7A:C8:84:6B:36:4D:A8:05:71:69:43:FD:45:25:3B:D4:5B:F0:3C:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa Signing time: Sat 05 Apr 2025 13:01:01 +0000 ROA not before: Sat 05 Apr 2025 13:01:01 +0000 ROA not after: Fri 04 Jul 2025 13:01:01 +0000 asID: 16409 IP address blocks: 204.9.92.0/22 maxlen: 24 2604:5e40::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6c:e4:52:6c:85:3f:0c:8e:9b:70:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d48d798-bdf8-4082-8394-a16fca0f83af Validity Not Before: Apr 5 13:01:01 2025 GMT Not After : Jul 4 13:01:01 2025 GMT Subject: CN=2e15e266-030b-4bda-b877-87071ff6d54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6f:d2:92:29:33:ba:49:ba:09:6e:42:57:37: d8:1c:2f:e9:00:8c:03:05:ce:a3:d9:18:ae:95:e5: ef:3f:9c:47:1a:98:d5:1d:80:ba:86:b1:a5:b3:7d: cc:fc:e8:15:d2:6a:3c:a9:37:02:2e:6f:33:d7:a8: ba:84:d6:35:eb:d6:d7:a1:64:7f:7b:56:cf:68:9e: 27:b0:cf:1b:02:7b:9e:fb:25:e1:1f:6e:33:18:29: e4:89:ef:dc:37:50:3d:02:6f:b8:f6:68:7a:13:f0: d2:8a:7d:d5:7a:41:83:50:1c:b2:67:ce:28:74:55: ff:6d:f4:6a:1b:94:89:20:9f:4d:b5:a9:75:81:a9: 87:4d:6b:51:ce:1c:94:03:00:5d:2c:3e:15:87:e7: 11:c5:c3:cd:46:35:73:b3:51:96:1b:da:29:64:ff: 69:23:47:1f:27:d2:93:e2:6c:00:90:9c:02:12:e2: 0a:9e:53:c4:d8:16:a4:cf:d7:36:81:8b:89:ba:1c: 5f:d5:a2:6c:81:4d:e4:df:4f:99:f2:d9:f2:bd:56: 31:f4:98:c2:51:79:7d:79:07:84:77:ce:41:0f:db: 62:f2:85:3b:d3:87:9f:69:f0:07:5b:c8:28:cc:e1: e8:a3:78:e1:d9:5b:54:a5:4e:03:ad:bf:8a:59:f3: 4b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:52:37:BA:85:94:4A:26:F6:27:81:BF:FF:35:EE:43:AF:87:13:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/78644dd4-2392-31eb-800f-158c88e9ce1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af/8d48d798-bdf8-4082-8394-a16fca0f83af.crl X509v3 Authority Key Identifier: keyid:7A:C8:84:6B:36:4D:A8:05:71:69:43:FD:45:25:3B:D4:5B:F0:3C:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8d48d798-bdf8-4082-8394-a16fca0f83af.cer sbgp-ipAddrBlock: critical IPv4: 204.9.92.0/22 IPv6: 2604:5e40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:1c:fd:c5:80:b6:55:13:a5:55:8f:01:e0:eb:8a:ec:4d:c0: da:64:80:f8:9d:77:c6:8c:0d:24:63:76:7a:a1:9a:8e:35:ab: ce:b4:77:fd:14:91:29:0f:27:08:59:a3:53:08:24:92:4f:1a: c9:67:5f:e2:fa:49:96:89:e0:ad:11:88:e0:5e:4e:5b:7c:b7: 7f:0e:b8:df:02:a7:4e:38:92:33:4b:d6:59:05:83:73:4f:1f: 39:e0:f4:e9:bf:a1:7b:ee:ed:37:5d:26:87:98:c2:6a:d5:00: 8e:ff:cf:11:cb:03:08:a2:99:cf:d8:10:95:c3:cd:e7:60:b7: 8f:91:f6:8b:4e:4d:60:fc:94:87:b3:7f:a8:39:c6:89:db:2a: 3d:c5:5c:b9:f9:15:9b:1d:11:4d:f8:7f:2f:ce:ef:ec:d9:e8: 8c:9a:fd:59:ed:e9:e7:6e:56:d5:f3:f7:bc:28:2a:ba:be:1f: 51:10:b1:89:02:2c:cc:d8:45:d3:d0:78:07:95:b3:db:d9:a9: d9:68:64:c1:c7:6f:b3:50:70:b2:1a:5f:4b:7f:92:3f:10:39: 31:7e:4b:6c:db:7f:f9:22:7c:fc:b5:17:23:69:b0:0a:46:2c: cd:0a:94:6d:05:99:48:e2:29:d7:f2:59:49:82:0a:01:6b:f5: 9e:09:a1:25 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEls5FJshT8MjptwNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OGQ3OTgtYmRmOC00MDgyLTgzOTQtYTE2ZmNhMGY4 M2FmMB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk MmUxNWUyNjYtMDMwYi00YmRhLWI4NzctODcwNzFmZjZkNTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2/Skikzukm6CW5CVzfYHC/pAIwDBc6j2Riu leXvP5xHGpjVHYC6hrGls33M/OgV0mo8qTcCLm8z16i6hNY169bXoWR/e1bPaJ4n sM8bAnue+yXhH24zGCnkie/cN1A9Am+49mh6E/DSin3VekGDUByyZ84odFX/bfRq G5SJIJ9Ntal1gamHTWtRzhyUAwBdLD4Vh+cRxcPNRjVzs1GWG9opZP9pI0cfJ9KT 4mwAkJwCEuIKnlPE2Bakz9c2gYuJuhxf1aJsgU3k30+Z8tnyvVYx9JjCUXl9eQeE d85BD9ti8oU704efafAHW8gozOHoo3jh2VtUpU4Drb+KWfNL2wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMJSN7qFlEom9ieBv/817kOvhxMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZDQ4 ZDc5OC1iZGY4LTQwODItODM5NC1hMTZmY2EwZjgzYWYvNzg2NDRkZDQtMjM5Mi0z MWViLTgwMGYtMTU4Yzg4ZTljZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGQ0OGQ3OTgtYmRmOC00MDgyLTgz OTQtYTE2ZmNhMGY4M2FmLzhkNDhkNzk4LWJkZjgtNDA4Mi04Mzk0LWExNmZjYTBm ODNhZi5jcmwwHwYDVR0jBBgwFoAUesiEazZNqAVxaUP9RSU71FvwPPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZDQ4ZDc5OC1iZGY4LTQwODItODM5NC1hMTZm Y2EwZjgzYWYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzAlcMA0E AgACMAcDBQAmBF5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAHYc/cWAtlUTpVWPAeDriuxNwNpkgPidd8aM DSRjdnqhmo41q860d/0UkSkPJwhZo1MIJJJPGslnX+L6SZaJ4K0RiOBeTlt8t38O uN8Cp044kjNL1lkFg3NPHzng9Om/oXvu7TddJoeYwmrVAI7/zxHLAwiimc/YEJXD zedgt4+R9otOTWD8lIezf6g5xonbKj3FXLn5FZsdEU34fy/O7+zZ6Iya/Vnt6edu VtXz97woKrq+H1EQsYkCLMzYRdPQeAeVs9vZqdloZMHHb7NQcLIaX0t/kj8QOTF+ S2zbf/kifPy1FyNpsApGLM0KlG0FmUjiKdfyWUmCCgFr9Z4JoSU= -----END CERTIFICATE-----Generated at Fri Apr 11 21:27:15 2025 by rpki-client