$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/3ee3160d-a37f-372a-87a7-13fd4636c10f.roa File: 3ee3160d-a37f-372a-87a7-13fd4636c10f.roa (raw, json) Hash identifier: qjDBmTs3ZGyw4JKXO2PKnnOfQd1xJ0w5s1JVIAxh0mg= Subject key identifier: 2B:0D:6F:83:6D:8C:2F:11:30:7A:A5:E1:5A:03:1D:35:79:F9:DA:56 Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Certificate serial: 010D0C9F432858492183FFBCD8067354F3F06480 Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/3ee3160d-a37f-372a-87a7-13fd4636c10f.roa Signing time: Sun 09 Mar 2025 13:00:52 +0000 ROA not before: Sun 09 Mar 2025 13:00:52 +0000 ROA not after: Sat 07 Jun 2025 13:00:52 +0000 asID: 30176 IP address blocks: 204.11.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:21:83:ff:bc:d8:06:73:54:f3:f0:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Validity Not Before: Mar 9 13:00:52 2025 GMT Not After : Jun 7 13:00:52 2025 GMT Subject: CN=3e2d5079-7534-406e-8435-9c7f5338d6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9e:41:da:d8:5f:b6:9d:78:6f:98:30:e4:f5: 3e:00:75:0f:a6:f1:63:8b:7d:73:b4:02:23:37:7d: 34:e8:4c:93:d3:72:0a:f8:53:e1:68:5d:4f:00:8e: db:62:61:56:3b:2f:b5:26:ef:0d:4a:dd:cb:cc:2e: 2b:ed:53:9d:f0:ed:e5:60:17:23:4d:a0:45:0e:53: a3:a2:03:61:93:7e:d4:16:44:4a:ee:df:51:53:7c: 14:f3:ad:a9:1f:7f:ff:88:0f:08:ef:ee:54:64:82: 67:d8:43:97:80:ed:fa:a1:fc:3c:c8:d4:b2:1a:3a: 60:2e:3b:8f:d9:06:96:8f:61:45:9c:83:43:9d:1b: 92:29:2c:7b:aa:de:19:42:2a:28:b4:c4:02:05:b7: 1b:85:3c:7f:c5:92:a3:10:49:2c:2d:d7:2c:46:59: 08:4c:64:1c:3c:65:44:86:56:86:7f:0d:70:e5:3c: 86:99:86:03:61:ff:bc:7c:5c:65:72:85:55:38:5a: cc:e6:24:68:f0:05:f6:60:c0:0e:e2:19:da:c8:d5: f6:52:a2:82:3f:fe:66:8d:5f:a9:e7:b4:9e:11:e9: d0:23:3b:e2:5d:e0:b6:22:d2:10:30:11:1c:17:01: 14:5f:48:17:33:68:46:33:37:eb:24:ce:c9:ad:df: b3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0D:6F:83:6D:8C:2F:11:30:7A:A5:E1:5A:03:1D:35:79:F9:DA:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/3ee3160d-a37f-372a-87a7-13fd4636c10f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl X509v3 Authority Key Identifier: keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer sbgp-ipAddrBlock: critical IPv4: 204.11.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:dd:2d:63:39:25:11:5c:ea:79:b3:92:2b:73:34:b5:e1:15: 09:a1:7a:f0:83:63:64:53:f8:f2:e7:9a:7c:60:a2:9d:48:83: 81:88:f7:04:4a:7e:c8:5d:4f:62:3c:c2:22:f7:8e:28:4e:8e: 20:88:9e:0a:73:1e:90:d5:4f:d7:bf:b6:af:b7:75:6a:a7:bc: 8a:7e:27:0a:71:9e:79:2e:45:a5:6b:a1:05:3d:36:f2:48:0f: 94:27:a3:e8:69:3a:b7:03:99:9a:8b:b9:2b:b7:8f:38:8b:09: 48:66:00:11:4a:b1:bb:c1:10:e0:e1:0e:87:ad:d8:20:62:18: ae:41:1c:f5:d3:61:a6:aa:31:c8:34:f2:08:34:f8:90:fd:dc: b0:0c:d9:0d:ab:50:d5:ed:d7:71:65:9c:c9:0c:ef:63:c8:d8: 64:ff:31:d6:bb:7c:dd:61:8b:71:09:6f:5e:ef:c3:92:cc:28: ec:ae:ac:4d:05:62:14:e4:b9:70:dc:86:0f:ba:66:a9:66:9f: dd:c6:16:7c:41:7e:ab:91:2b:35:ce:48:8b:01:9b:33:72:15: 43:0c:de:d8:0c:dc:2e:a5:46:a1:fa:04:45:60:d8:89:af:58: 52:93:ad:d0:ae:c0:4f:59:6f:a2:aa:f5:43:0c:c2:ca:e8:17: 3c:5b:0e:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhg/+82AZzVPPwZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0 YzZkMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk M2UyZDUwNzktNzUzNC00MDZlLTg0MzUtOWM3ZjUzMzhkNmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ5B2thftp14b5gw5PU+AHUPpvFji31ztAIj N3006EyT03IK+FPhaF1PAI7bYmFWOy+1Ju8NSt3LzC4r7VOd8O3lYBcjTaBFDlOj ogNhk37UFkRK7t9RU3wU862pH3//iA8I7+5UZIJn2EOXgO36ofw8yNSyGjpgLjuP 2QaWj2FFnINDnRuSKSx7qt4ZQiootMQCBbcbhTx/xZKjEEksLdcsRlkITGQcPGVE hlaGfw1w5TyGmYYDYf+8fFxlcoVVOFrM5iRo8AX2YMAO4hnayNX2UqKCP/5mjV+p 57SeEenQIzviXeC2ItIQMBEcFwEUX0gXM2hGMzfrJM7Jrd+zuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsNb4NtjC8RMHql4VoDHTV5+dpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5 NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvM2VlMzE2MGQtYTM3Zi0z NzJhLTg3YTctMTNmZDQ2MzZjMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm NzQ4ZjRjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzAswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLdLWM5JRFc6nmzkitzNLXhFQmhevCDY2RT+PLnmnxgop1Ig4GI9wRK fshdT2I8wiL3jihOjiCIngpzHpDVT9e/tq+3dWqnvIp+JwpxnnkuRaVroQU9NvJI D5Qno+hpOrcDmZqLuSu3jziLCUhmABFKsbvBEODhDoet2CBiGK5BHPXTYaaqMcg0 8gg0+JD93LAM2Q2rUNXt13FlnMkM72PI2GT/Mda7fN1hi3EJb17vw5LMKOyurE0F YhTkuXDchg+6Zqlmn93GFnxBfquRKzXOSIsBmzNyFUMM3tgM3C6lRqH6BEVg2Imv WFKTrdCuwE9Zb6Kq9UMMwsroFzxbDu4= -----END CERTIFICATE-----Generated at Sat Apr 12 13:49:46 2025 by rpki-client