$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/1208c61d-795d-39aa-83bd-93a914e71179.roa File: 1208c61d-795d-39aa-83bd-93a914e71179.roa (raw, json) Hash identifier: 7IEngzeZEQ/yjHLdTDOCLzQZrX6D8HzYpsUNT/w5FNE= Subject key identifier: 54:5F:21:11:56:52:79:D5:DF:F5:C6:10:E2:FA:7E:A6:5C:85:58:96 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F432858494B6411F66273BA580E2A4080 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/1208c61d-795d-39aa-83bd-93a914e71179.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 16509 IP address blocks: 204.77.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:11:f6:62:73:ba:58:0e:2a:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=12901dac-9a13-44de-9655-f07b25f1c371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:b7:ff:22:80:5b:9c:9e:22:6e:fc:78:a7: 6f:c5:b5:c7:68:40:fc:2b:b3:5e:2a:77:62:82:2c: bd:52:3d:03:6c:75:6a:8b:e5:e8:c1:20:f4:2e:07: db:d0:2a:1c:fa:bc:a6:26:0b:c0:3a:1a:ec:79:dd: 64:8f:8e:c8:f9:d8:08:ab:b4:8f:75:2c:71:42:2b: 76:9a:0f:88:0f:e2:e2:8a:fe:67:2e:dc:d6:db:87: 11:b5:15:13:6d:47:2f:fd:98:23:00:60:90:9d:e3: fb:96:07:5d:33:57:be:8d:d0:38:04:dd:41:75:6e: db:43:fd:35:57:22:be:c3:1b:63:42:8d:0d:c1:d8: 46:cc:36:d3:fb:c1:90:c4:c0:1b:f5:47:6b:67:71: 15:e7:61:8a:42:7c:27:53:6a:da:7c:3e:42:f3:59: 2b:c4:3a:5d:03:2e:02:db:68:9e:72:7e:25:05:b1: 78:6a:4e:78:65:86:7f:fa:1a:18:71:10:03:e3:5e: 53:4f:a2:59:35:98:ac:7c:97:e4:a0:56:92:52:88: 1f:64:79:26:fa:78:3a:2c:e9:29:8b:a0:b5:5a:e6: f6:b1:68:69:63:50:64:8a:8b:9f:60:35:d2:5a:5c: fd:f7:31:78:9b:cb:a7:7c:db:d7:23:e4:10:7b:f9: e3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5F:21:11:56:52:79:D5:DF:F5:C6:10:E2:FA:7E:A6:5C:85:58:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/1208c61d-795d-39aa-83bd-93a914e71179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b9:23:19:c1:73:c2:8c:ce:a0:32:db:81:8e:32:db:02:3d: 00:5b:86:11:86:10:ae:5a:fe:73:02:93:f0:fd:5d:42:d9:d5: a5:41:1e:7f:5f:4e:e5:22:bb:19:68:e6:c0:53:78:9f:82:7a: 2a:c3:19:ef:0d:9f:a0:7a:2a:16:d7:e6:e5:1a:19:b7:d3:f7: 33:17:4c:89:ee:0c:6e:9d:52:cf:b3:78:f0:e5:de:6f:9a:13: 51:94:49:b4:a5:58:f5:4d:c7:59:da:c1:01:f0:4a:a7:db:25: 83:5f:d8:1c:f2:2f:ce:3a:b2:4e:c8:10:f7:66:88:65:5e:df: eb:5f:8c:67:1f:b8:47:65:8c:ae:4c:df:94:0a:2a:25:93:c2: bf:d3:7d:1b:52:e2:80:82:28:dc:f9:dd:c7:f7:24:70:67:81: 7c:8e:9b:50:2d:c1:34:3d:cf:16:7d:3b:89:40:1d:bb:de:f3: 62:ba:66:93:25:75:bf:29:f1:5b:e4:d9:2c:83:76:a7:78:92: f3:9e:78:45:4f:34:f1:0a:ce:55:20:f9:ad:aa:d7:5a:85:d1: 90:c5:64:84:c2:68:b9:88:1e:95:cc:d7:b7:00:1d:61:dc:5b: 9b:7d:b4:cd:31:a6:d3:93:31:c4:f5:45:ca:33:f2:ea:45:ee: 79:f6:c9:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZBH2YnO6WA4qQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk MTI5MDFkYWMtOWExMy00NGRlLTk2NTUtZjA3YjI1ZjFjMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaG3/yKAW5yeIm78eKdvxbXHaED8K7NeKndi giy9Uj0DbHVqi+XowSD0Lgfb0Coc+rymJgvAOhrsed1kj47I+dgIq7SPdSxxQit2 mg+ID+Liiv5nLtzW24cRtRUTbUcv/ZgjAGCQneP7lgddM1e+jdA4BN1BdW7bQ/01 VyK+wxtjQo0NwdhGzDbT+8GQxMAb9UdrZ3EV52GKQnwnU2rafD5C81krxDpdAy4C 22iecn4lBbF4ak54ZYZ/+hoYcRAD415TT6JZNZisfJfkoFaSUogfZHkm+ng6LOkp i6C1Wub2sWhpY1BkioufYDXSWlz99zF4m8unfNvXI+QQe/njFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRfIRFWUnnV3/XGEOL6fqZchViWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvMTIwOGM2MWQtNzk1ZC0z OWFhLTgzYmQtOTNhOTE0ZTcxMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK5IxnBc8KMzqAy24GOMtsCPQBbhhGGEK5a/nMCk/D9XULZ1aVBHn9f TuUiuxlo5sBTeJ+CeirDGe8Nn6B6KhbX5uUaGbfT9zMXTInuDG6dUs+zePDl3m+a E1GUSbSlWPVNx1nawQHwSqfbJYNf2BzyL846sk7IEPdmiGVe3+tfjGcfuEdljK5M 35QKKiWTwr/TfRtS4oCCKNz53cf3JHBngXyOm1AtwTQ9zxZ9O4lAHbve82K6ZpMl db8p8Vvk2SyDdqd4kvOeeEVPNPEKzlUg+a2q11qF0ZDFZITCaLmIHpXM17cAHWHc W5t9tM0xptOTMcT1Rcoz8upF7nn2ycY= -----END CERTIFICATE-----Generated at Sun May 11 01:28:50 2025 by rpki-client