$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa File: ca248d62-3f50-35a2-9999-0258d4f72f02.roa (raw, json) Hash identifier: oG+wtd7Bzx70YimmSoK7Vb+ennFUfCpPWqtnFBGNl7A= Subject key identifier: 6D:11:42:4C:7A:80:B2:52:48:C4:9D:1E:1C:38:41:3F:07:71:AA:EB Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F43285848FD56D0962F43E676AB8A6B00 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 8014 IP address blocks: 204.236.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:d0:96:2f:43:e6:76:ab:8a:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=ad7803f2-c3f5-4bce-95e8-ad8f279ca02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:ac:37:8f:9e:b2:f1:e4:f3:83:99:65:d3: f6:34:1f:a1:1e:ff:a2:2c:7d:24:5b:50:de:18:1c: c9:cd:7f:a7:dd:b8:4e:1f:3e:a5:7c:2f:ab:30:db: de:70:a0:8d:8d:e8:90:59:47:df:d7:82:69:97:0d: 45:bc:3f:b4:99:7f:cc:89:4c:ed:82:95:d2:84:ae: c9:df:1d:1b:1c:56:49:46:9e:56:38:98:af:c2:ed: 6e:0b:3a:82:07:6d:e7:e3:8f:c9:72:c1:01:13:7d: e8:69:af:c5:e0:b3:02:d7:55:c9:1b:63:08:91:58: 64:21:ea:cf:25:30:00:ad:fe:94:03:1a:27:63:01: f3:73:a7:12:fa:d2:c9:03:1c:fc:42:1f:62:35:71: cb:7e:45:4f:81:af:a2:b9:98:cf:bb:6f:53:8f:ed: 4c:2e:9c:9a:f4:bd:a1:5c:dd:78:9d:ca:26:e6:54: ac:60:6d:a1:95:43:5e:de:8f:b6:34:62:4d:97:bc: 28:7b:ff:2a:3d:9d:b6:6a:a5:b5:d2:49:a1:19:6d: 9e:56:6a:ef:4b:85:be:89:c1:fb:75:88:ee:79:e2: 3c:cf:c1:b9:2c:f6:51:d6:31:2d:85:23:66:87:e8: e2:b7:38:7b:49:63:11:b1:e7:e2:d4:d2:43:a0:a2: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:11:42:4C:7A:80:B2:52:48:C4:9D:1E:1C:38:41:3F:07:71:AA:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/ca248d62-3f50-35a2-9999-0258d4f72f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:ee:30:d6:2f:c4:5b:1e:3d:6c:af:23:e1:f8:78:fc:dc:e5: bc:43:6e:56:17:5b:f1:13:38:84:40:bb:ba:80:79:da:b8:45: 02:c7:60:60:fc:3e:f8:fc:f6:63:84:6c:94:ce:15:2a:3b:95: 28:81:65:b1:de:55:c5:7a:d7:4d:c4:d8:61:dc:75:8b:e3:81: 09:39:19:66:15:e0:df:00:66:af:b9:8c:4a:80:c9:72:b8:28: c3:b2:b2:23:43:be:8f:7b:39:44:1f:b4:b4:3c:40:8c:a9:e1: 3e:db:49:98:a3:e9:f3:73:9b:20:25:13:8f:d2:f8:0c:cc:1a: 94:f9:f3:66:4e:83:cf:6b:63:29:18:cb:4d:d9:e6:a4:dd:b7: e2:8f:26:07:0a:dc:12:6b:4f:a7:fe:91:9e:3f:55:01:e6:71: d7:bb:10:70:92:a0:b1:63:77:12:ba:b8:62:13:e1:be:9e:e0: 4d:45:dc:86:d6:89:25:4b:c0:92:08:a1:1b:61:18:d4:b8:21: ad:5c:5c:e5:9d:c8:9d:82:8b:62:8c:be:3e:df:68:0e:f4:54: 51:20:4f:e2:a6:82:d3:5d:0b:ad:fc:e6:17:5b:2b:62:61:c9: 1c:7f:1c:38:4b:8c:8d:cc:fe:bc:17:35:cd:05:8a:9d:de:c8: c1:d0:c0:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VtCWL0PmdquKawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWQ3ODAzZjItYzNmNS00YmNlLTk1ZTgtYWQ4ZjI3OWNhMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pysN4+esvHk84OZZdP2NB+hHv+iLH0kW1De GBzJzX+n3bhOHz6lfC+rMNvecKCNjeiQWUff14Jplw1FvD+0mX/MiUztgpXShK7J 3x0bHFZJRp5WOJivwu1uCzqCB23n44/JcsEBE33oaa/F4LMC11XJG2MIkVhkIerP JTAArf6UAxonYwHzc6cS+tLJAxz8Qh9iNXHLfkVPga+iuZjPu29Tj+1MLpya9L2h XN14ncom5lSsYG2hlUNe3o+2NGJNl7woe/8qPZ22aqW10kmhGW2eVmrvS4W+icH7 dYjueeI8z8G5LPZR1jEthSNmh+jitzh7SWMRsefi1NJDoKKJ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0RQkx6gLJSSMSdHhw4QT8HcarrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvY2EyNDhkNjItM2Y1MC0z NWEyLTk5OTktMDI1OGQ0ZjcyZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXuMNYvxFsePWyvI+H4ePzc5bxDblYXW/ETOIRAu7qAedq4RQLHYGD8 Pvj89mOEbJTOFSo7lSiBZbHeVcV6103E2GHcdYvjgQk5GWYV4N8AZq+5jEqAyXK4 KMOysiNDvo97OUQftLQ8QIyp4T7bSZij6fNzmyAlE4/S+AzMGpT582ZOg89rYykY y03Z5qTdt+KPJgcK3BJrT6f+kZ4/VQHmcde7EHCSoLFjdxK6uGIT4b6e4E1F3IbW iSVLwJIIoRthGNS4Ia1cXOWdyJ2Ci2KMvj7faA70VFEgT+KmgtNdC6385hdbK2Jh yRx/HDhLjI3M/rwXNc0Fip3eyMHQwFM= -----END CERTIFICATE-----Generated at Sun Apr 6 23:56:38 2025 by rpki-client