$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c9d8579-e319-330e-9e32-13f6183bb8c1.roa File: 3c9d8579-e319-330e-9e32-13f6183bb8c1.roa (raw, json) Hash identifier: Yvh6ZbBfkpJZPAh/0QJSjOG7FV3IWqldQTFidEIyYHg= Subject key identifier: C5:14:64:0F:2F:55:D1:2B:4B:87:90:64:CF:40:B4:56:0D:95:8B:85 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F43285849AD1A0286E36E8E29D73BA180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c9d8579-e319-330e-9e32-13f6183bb8c1.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 2914 IP address blocks: 204.141.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:02:86:e3:6e:8e:29:d7:3b:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=4b6ac792-88d8-4245-ac72-63bd8814bb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:97:d1:7f:5d:11:d0:d1:90:48:f8:b8:a6: 41:a3:d0:ab:c9:03:a2:85:4c:b9:c0:02:a1:27:6a: 76:f3:04:a3:50:8c:68:44:c3:7e:4f:a2:1b:82:9b: a7:0c:db:ef:84:b2:30:30:95:ec:5a:e3:08:ff:78: c2:11:6a:ca:1a:d7:c4:20:0a:e8:5c:b0:5d:ba:7a: 36:31:aa:17:68:c5:e0:2b:c2:27:66:6a:87:5a:97: f4:09:fa:86:d3:38:e0:a8:f9:e8:22:4a:56:c2:35: 2e:6b:df:16:40:2f:f6:3e:e1:9d:38:7f:9c:17:50: e6:5e:f2:c6:ea:ba:80:d3:76:7f:dc:bb:85:a9:e7: 41:d5:38:84:1f:65:0f:9d:d6:26:36:b6:59:0e:96: 48:27:2d:f6:79:da:e8:b8:8d:c2:e5:31:9b:f2:82: f8:cf:b6:38:93:71:e9:bc:dc:7d:0d:2a:45:5b:d6: 80:4d:52:a8:51:f1:35:99:19:ef:e4:32:ae:95:f9: f6:92:57:f0:1b:df:65:b3:ef:0b:af:a6:4d:b6:83: 9c:48:40:0c:61:06:0b:6c:54:52:26:20:2e:0c:28: 75:22:3d:a0:3f:13:40:d4:1e:a1:82:ef:77:9b:32: 25:59:7b:c6:67:9e:c9:ef:58:bb:25:23:f3:24:cc: 58:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:14:64:0F:2F:55:D1:2B:4B:87:90:64:CF:40:B4:56:0D:95:8B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3c9d8579-e319-330e-9e32-13f6183bb8c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:a2:5a:63:90:a2:c0:67:75:aa:43:92:88:ae:f3:98:d6:b0: 3e:36:31:a4:18:a8:0a:40:31:7e:51:2b:03:c6:00:56:9e:7d: 27:2b:5a:e8:fe:bb:91:9b:f5:1b:84:84:87:d9:92:53:3a:3e: cb:0e:00:be:87:77:51:1d:97:1c:97:bd:24:60:42:82:8c:bb: de:83:b9:ac:36:9e:8d:6a:60:44:7a:1f:fc:73:77:35:d3:64: 93:b1:93:fd:57:64:1c:71:5a:a7:43:17:67:56:17:88:09:1f: c5:f6:c9:a6:c5:cc:38:b0:e4:bb:53:58:fa:08:74:84:be:b6: 5e:61:64:7d:e5:8f:dc:3e:75:36:4e:48:c5:4d:26:c8:be:ff: 15:da:a4:41:04:12:84:d1:09:ea:59:0c:63:f0:73:af:5f:27: fd:56:c7:87:6d:ea:0d:5f:a6:74:d7:42:cc:40:fc:ec:4f:2a: aa:99:d2:f0:1f:ee:65:33:8e:a3:af:1a:60:e5:58:4c:f5:02: d8:bb:91:75:e7:39:d8:05:24:07:97:28:8b:0c:60:e0:12:40: bf:5a:d6:95:52:6b:b3:a7:42:c4:8f:fb:3a:b4:03:c2:b5:76: 9d:5d:70:21:37:cf:3c:e8:52:57:70:de:9a:41:65:91:15:01: e5:b5:7c:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgKG426OKdc7oYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NGI2YWM3OTItODhkOC00MjQ1LWFjNzItNjNiZDg4MTRiYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzmX0X9dEdDRkEj4uKZBo9CryQOihUy5wAKh J2p28wSjUIxoRMN+T6IbgpunDNvvhLIwMJXsWuMI/3jCEWrKGtfEIAroXLBduno2 MaoXaMXgK8InZmqHWpf0CfqG0zjgqPnoIkpWwjUua98WQC/2PuGdOH+cF1DmXvLG 6rqA03Z/3LuFqedB1TiEH2UPndYmNrZZDpZIJy32edrouI3C5TGb8oL4z7Y4k3Hp vNx9DSpFW9aATVKoUfE1mRnv5DKulfn2klfwG99ls+8Lr6ZNtoOcSEAMYQYLbFRS JiAuDCh1Ij2gPxNA1B6hgu93mzIlWXvGZ57J71i7JSPzJMxYcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUUZA8vVdErS4eQZM9AtFYNlYuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2M5ZDg1NzktZTMxOS0z MzBlLTllMzItMTNmNjE4M2JiOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzI0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKiWmOQosBndapDkoiu85jWsD42MaQYqApAMX5RKwPGAFaefScrWuj+ u5Gb9RuEhIfZklM6PssOAL6Hd1EdlxyXvSRgQoKMu96Duaw2no1qYER6H/xzdzXT ZJOxk/1XZBxxWqdDF2dWF4gJH8X2yabFzDiw5LtTWPoIdIS+tl5hZH3lj9w+dTZO SMVNJsi+/xXapEEEEoTRCepZDGPwc69fJ/1Wx4dt6g1fpnTXQsxA/OxPKqqZ0vAf 7mUzjqOvGmDlWEz1Ati7kXXnOdgFJAeXKIsMYOASQL9a1pVSa7OnQsSP+zq0A8K1 dp1dcCE3zzzoUldw3ppBZZEVAeW1fPY= -----END CERTIFICATE-----Generated at Sat May 10 00:00:24 2025 by rpki-client