$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a51a9291-44f4-3bfc-a893-35a5eb20289c.roa File: a51a9291-44f4-3bfc-a893-35a5eb20289c.roa (raw, json) Hash identifier: vrfZHJzOXR9noNfnDDzrcOxJsG+zrMHAWFPSxOnqDDM= Subject key identifier: 2A:C9:57:3F:03:92:69:26:C2:33:6A:1F:6A:A3:E8:08:0F:24:E7:DE Certificate issuer: /CN=a58fe14b-04a0-43bf-b9b8-f6564f858306 Certificate serial: 010D0C9F43285848DEA11BFEA309CC6260E1CA00 Authority key identifier: 68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a51a9291-44f4-3bfc-a893-35a5eb20289c.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 32639 IP address blocks: 204.239.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:1b:fe:a3:09:cc:62:60:e1:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a58fe14b-04a0-43bf-b9b8-f6564f858306 Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=a0dfe4ef-1314-4e97-a566-22cf18a33290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3e:dd:1c:8d:9d:21:17:19:83:36:46:1b:c1: 8c:bc:18:df:75:2e:36:07:1e:34:c9:f3:c3:32:bd: 9e:94:27:59:6b:03:08:b2:83:d3:60:2f:cb:1b:09: e4:1d:09:7c:57:71:86:18:e4:35:a6:fe:82:6a:53: a7:34:dc:8b:38:3d:20:60:68:ab:6d:a2:c6:49:d4: af:fe:b7:08:64:9a:c7:fd:28:31:70:54:d1:4b:89: 33:9a:2f:f5:76:52:43:1b:46:b7:58:6f:57:6f:df: ff:86:d2:b9:6d:7f:28:24:26:39:75:cf:19:47:6b: a5:c2:9e:81:24:90:6f:72:6c:8f:c7:05:d1:db:65: da:31:4b:68:b1:39:1f:47:e7:75:0a:80:6f:61:cb: 29:cb:b2:5f:14:f6:4f:35:0c:2c:19:69:3f:1b:a2: 56:ae:6c:c8:68:52:c9:14:d8:e4:31:e6:49:8c:cd: 62:4a:2f:76:c9:4d:5d:42:68:d0:bb:26:c7:41:6f: 22:f1:2b:08:59:9f:27:c1:c0:92:6d:d3:8d:9a:0c: c7:a9:e2:ff:1c:d1:c9:4c:6b:24:04:fa:f8:56:4e: 02:99:bf:a0:27:98:f6:bb:85:38:d4:65:0f:cd:78: 96:f2:a9:87:2c:1b:6f:80:b6:36:99:2e:c8:4d:05: ca:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C9:57:3F:03:92:69:26:C2:33:6A:1F:6A:A3:E8:08:0F:24:E7:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a51a9291-44f4-3bfc-a893-35a5eb20289c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl X509v3 Authority Key Identifier: keyid:68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer sbgp-ipAddrBlock: critical IPv4: 204.239.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:81:f8:16:cb:34:65:44:cc:47:28:1b:3e:ad:09:65:eb:ff: 04:b8:88:f8:4d:32:a0:75:c9:04:8f:f9:0c:7f:0e:34:76:86: e8:51:f4:d0:95:13:05:51:b1:07:1b:d9:f9:aa:f3:2b:bd:2f: 30:0b:06:39:9e:3d:af:a0:79:4b:fd:7e:b9:51:99:58:3b:a4: e7:41:df:42:12:55:a9:13:82:1a:aa:64:6d:61:de:76:fe:b4: 63:4d:28:dd:b0:98:4b:cf:bf:33:04:80:8e:55:bb:1f:c5:e4: bf:49:00:f2:18:30:86:90:f3:50:55:92:60:2d:28:be:6a:ea: 69:88:e4:a4:5e:52:e4:44:fb:09:93:c8:ec:5b:41:5c:cf:f3: 99:0a:1e:38:2c:22:4f:4d:1e:88:0e:b2:37:28:e8:f7:42:ad: 11:85:36:2f:13:50:83:a9:3b:26:c5:c8:03:08:81:88:11:01: 7b:7a:42:2b:f2:e3:70:27:07:e2:4d:3a:ea:cc:48:db:87:15: a3:c9:15:b7:d6:64:25:84:06:72:6b:64:63:93:97:e1:4a:f3: a1:31:57:f2:21:01:e5:6a:b7:4c:cd:78:28:75:31:80:6c:ba: 7e:3f:16:d4:75:09:86:e1:b7:6d:a7:db:b9:d3:4a:ba:f2:b7: f3:27:b3:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoRv+ownMYmDhygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTU4ZmUxNGItMDRhMC00M2JmLWI5YjgtZjY1NjRmODU4 MzA2MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk YTBkZmU0ZWYtMTMxNC00ZTk3LWE1NjYtMjJjZjE4YTMzMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD7dHI2dIRcZgzZGG8GMvBjfdS42Bx40yfPD Mr2elCdZawMIsoPTYC/LGwnkHQl8V3GGGOQ1pv6CalOnNNyLOD0gYGirbaLGSdSv /rcIZJrH/SgxcFTRS4kzmi/1dlJDG0a3WG9Xb9//htK5bX8oJCY5dc8ZR2ulwp6B JJBvcmyPxwXR22XaMUtosTkfR+d1CoBvYcspy7JfFPZPNQwsGWk/G6JWrmzIaFLJ FNjkMeZJjM1iSi92yU1dQmjQuybHQW8i8SsIWZ8nwcCSbdONmgzHqeL/HNHJTGsk BPr4Vk4Cmb+gJ5j2u4U41GUPzXiW8qmHLBtvgLY2mS7ITQXKNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrJVz8DkmkmwjNqH2qj6AgPJOfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNThm ZTE0Yi0wNGEwLTQzYmYtYjliOC1mNjU2NGY4NTgzMDYvYTUxYTkyOTEtNDRmNC0z YmZjLWE4OTMtMzVhNWViMjAyODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTU4ZmUxNGItMDRhMC00M2JmLWI5 YjgtZjY1NjRmODU4MzA2L2E1OGZlMTRiLTA0YTAtNDNiZi1iOWI4LWY2NTY0Zjg1 ODMwNi5jcmwwHwYDVR0jBBgwFoAUaJD16AVPynV7txcSiBfQZS1GQRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNThmZTE0Yi0wNGEwLTQzYmYtYjliOC1mNjU2 NGY4NTgzMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACB+BbLNGVEzEcoGz6tCWXr/wS4iPhNMqB1yQSP+Qx/DjR2huhR9NCV EwVRsQcb2fmq8yu9LzALBjmePa+geUv9frlRmVg7pOdB30ISVakTghqqZG1h3nb+ tGNNKN2wmEvPvzMEgI5Vux/F5L9JAPIYMIaQ81BVkmAtKL5q6mmI5KReUuRE+wmT yOxbQVzP85kKHjgsIk9NHogOsjco6PdCrRGFNi8TUIOpOybFyAMIgYgRAXt6Qivy 43AnB+JNOurMSNuHFaPJFbfWZCWEBnJrZGOTl+FK86ExV/IhAeVqt0zNeCh1MYBs un4/FtR1CYbht22n27nTSrryt/Mnszk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:49 2025 by rpki-client