$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa File: d301a4b3-34ea-309b-80f1-90e66068431c.roa (raw, json) Hash identifier: R9XWixdp3SWEn2CpGCS3K5n7Q8tSsXeWbk7+2LHYixI= Subject key identifier: 43:E3:D6:DB:B7:56:9D:BB:5B:03:06:88:67:BF:6E:8F:5D:61:19:25 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F43285849BDDA2386C959B094F6AC0F80 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 4323 IP address blocks: 208.54.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:23:86:c9:59:b0:94:f6:ac:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=1d40b56d-a4e6-42aa-a44d-d7387bd4dd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b7:aa:03:f5:18:c3:0b:9a:f5:57:9a:87:df: 9f:ff:4c:c1:b5:ef:50:f1:04:91:f1:ba:5c:c1:fb: fc:33:c6:71:18:f6:fa:fb:57:93:64:75:66:70:40: 69:5a:b4:cf:df:3a:ca:b3:5b:0c:d7:ef:81:04:23: 93:91:ff:f4:23:e8:ce:93:f4:a9:b6:20:21:cb:df: 1a:82:12:8c:15:73:8e:28:14:7d:8d:9b:68:9a:47: c9:66:22:ad:47:80:a0:22:ea:f3:a4:a0:50:3f:a6: 82:49:a1:16:bb:96:8d:ed:c1:64:0f:71:cc:73:c2: 06:fd:0b:fd:6e:34:91:ab:f1:93:40:78:59:88:db: a3:3c:ee:0c:ba:ff:dc:65:be:ea:dc:d8:b4:e6:2c: d2:a9:b7:e5:ad:d6:75:da:c5:56:73:c4:91:1e:79: a0:d3:dc:2f:39:aa:b0:45:93:c7:f7:21:a4:d0:04: 0a:8b:60:b4:7a:3d:7d:96:de:eb:91:4a:0d:27:ca: f1:27:91:0a:0b:dd:e7:90:df:b8:c9:5b:16:68:20: d2:1d:a9:2e:39:14:65:b9:3a:e9:5a:99:78:d0:07: ba:b7:7b:5b:eb:28:48:2a:f8:e4:48:24:48:ac:7a: b8:42:d4:f8:b6:1d:a9:ed:12:86:4b:e2:51:de:31: 4c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E3:D6:DB:B7:56:9D:BB:5B:03:06:88:67:BF:6E:8F:5D:61:19:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 208.54.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:eb:53:b1:49:8b:2d:5c:30:a1:20:32:75:28:7b:7e:96:ba: 9a:80:5a:f2:ed:a8:6b:be:d7:c5:48:fd:88:1b:59:c3:57:6a: 26:10:54:1f:a9:39:c5:aa:21:59:0d:3d:04:59:c7:66:72:17: f0:f1:41:fc:cb:f1:4c:2b:f6:0f:9e:b5:b4:5b:ba:7e:1d:f5: ca:63:88:25:8c:a8:9b:64:f3:e1:26:bd:93:22:0e:d5:1a:78: 07:56:07:17:0f:ed:e2:41:ba:cf:5a:c8:b6:42:d8:df:6b:c0: 85:a5:02:b5:87:27:f9:47:23:89:f2:f3:ca:f2:07:a6:6b:ef: 54:dc:0d:77:ed:0c:ea:00:87:fd:32:c6:07:1e:be:c0:a9:cf: 85:8f:3a:31:1b:a6:d2:e0:2e:bd:dc:b5:53:b9:90:15:6d:98: 08:78:58:ec:0b:9c:54:2d:f1:86:b9:56:5b:95:0e:71:c4:b3: 18:4e:c2:dd:6b:2c:57:b4:1a:d2:90:c2:7c:91:87:c4:d5:6a: 3e:6e:1d:7d:6a:49:10:2f:83:67:82:1d:c0:e1:45:b4:b0:20: d0:9e:ce:69:7d:18:27:dc:bc:ca:2c:e0:20:e6:95:52:1d:91: 84:f9:48:17:22:f2:58:fa:6d:ba:94:f0:c5:a5:8c:7d:12:62: 00:63:d9:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92iOGyVmwlPasD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MWQ0MGI1NmQtYTRlNi00MmFhLWE0NGQtZDczODdiZDRkZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLeqA/UYwwua9Veah9+f/0zBte9Q8QSR8bpc wfv8M8ZxGPb6+1eTZHVmcEBpWrTP3zrKs1sM1++BBCOTkf/0I+jOk/SptiAhy98a ghKMFXOOKBR9jZtomkfJZiKtR4CgIurzpKBQP6aCSaEWu5aN7cFkD3HMc8IG/Qv9 bjSRq/GTQHhZiNujPO4Muv/cZb7q3Ni05izSqbflrdZ12sVWc8SRHnmg09wvOaqw RZPH9yGk0AQKi2C0ej19lt7rkUoNJ8rxJ5EKC93nkN+4yVsWaCDSHakuORRluTrp Wpl40Ae6t3tb6yhIKvjkSCRIrHq4QtT4th2p7RKGS+JR3jFM7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPj1tu3Vp27WwMGiGe/bo9dYRklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvZDMwMWE0YjMtMzRlYS0z MDliLTgwZjEtOTBlNjYwNjg0MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANfrU7FJiy1cMKEgMnUoe36WupqAWvLtqGu+18VI/YgbWcNXaiYQVB+p OcWqIVkNPQRZx2ZyF/DxQfzL8Uwr9g+etbRbun4d9cpjiCWMqJtk8+EmvZMiDtUa eAdWBxcP7eJBus9ayLZC2N9rwIWlArWHJ/lHI4ny88ryB6Zr71TcDXftDOoAh/0y xgcevsCpz4WPOjEbptLgLr3ctVO5kBVtmAh4WOwLnFQt8Ya5VluVDnHEsxhOwt1r LFe0GtKQwnyRh8TVaj5uHX1qSRAvg2eCHcDhRbSwINCezml9GCfcvMos4CDmlVId kYT5SBci8lj6bbqU8MWljH0SYgBj2Wc= -----END CERTIFICATE-----Generated at Sat May 10 19:41:53 2025 by rpki-client