$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa File: 5d294aa1-589d-36a0-863c-3f219e30b6f5.roa (raw, json) Hash identifier: Uz4lY156Mk08X2QZLO7nwS7fGcHAMx3RAKLh/Qpk+Mg= Subject key identifier: 80:40:2A:B7:DD:77:51:7E:71:AE:45:79:9A:E4:D1:A0:0F:AE:E2:17 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F432858491511618D6FD1FFE2959FE5C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa Signing time: Wed 05 Mar 2025 02:00:40 +0000 ROA not before: Wed 05 Mar 2025 02:00:40 +0000 ROA not after: Tue 03 Jun 2025 01:00:40 +0000 asID: 13335 IP address blocks: 204.195.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:11:61:8d:6f:d1:ff:e2:95:9f:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Mar 5 02:00:40 2025 GMT Not After : Jun 3 01:00:40 2025 GMT Subject: CN=5e04308a-1cdc-4fb5-b1c8-6ea50601d8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:06:b3:12:96:a1:bd:29:c7:a8:4d:b3:b8: 3d:2b:c9:99:97:0c:fe:8c:67:1f:08:56:4e:91:b6: f1:d0:be:f9:68:d3:db:91:2e:e9:ec:2a:53:97:d3: ed:52:35:e5:7b:8e:79:aa:91:f9:7b:c2:db:72:56: de:5d:2a:c2:3f:5a:5e:61:a8:bd:39:31:dc:0a:17: 2b:99:e2:d0:89:29:9b:7c:82:18:7d:ff:45:19:3a: 0b:ae:28:3d:ab:c5:fb:17:b6:4f:7a:c4:08:98:c1: 80:58:00:68:ad:aa:2a:a3:02:04:5a:6a:74:96:2c: 9c:28:21:45:ad:7b:4b:c8:ca:41:dc:dd:4e:50:a7: e4:f2:5c:71:ea:1b:0e:d4:45:28:41:33:9c:db:9c: 85:96:5a:60:02:f5:41:8b:b8:fc:c6:7c:e7:c4:a0: aa:fa:eb:df:5f:f2:ef:cc:c8:09:9f:92:98:9d:72: 2e:cc:38:f5:8a:1e:88:87:96:7e:09:8d:6c:94:2e: b4:0f:fa:f2:17:74:a0:6b:6d:ad:7c:df:dc:9b:0f: cf:8f:e9:9d:4b:71:d3:5e:d6:1a:1d:e0:21:8f:3a: a7:3f:e9:d2:13:a9:3a:ea:d5:a4:63:ad:f8:e8:c8: a5:4b:c3:1d:7e:e6:23:06:ec:c9:da:4c:26:b6:7c: b8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:40:2A:B7:DD:77:51:7E:71:AE:45:79:9A:E4:D1:A0:0F:AE:E2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5d294aa1-589d-36a0-863c-3f219e30b6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 204.195.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:8c:4f:55:f7:fd:b0:32:21:b5:86:78:32:85:18:2d:b9:ca: cf:bd:90:94:9f:2d:e8:c9:29:f2:d9:78:9c:8c:4c:aa:e9:8e: b7:9d:97:d9:05:3f:73:5e:66:a4:0a:72:1e:53:e6:6d:fd:de: 42:49:ed:8d:67:9c:0b:ac:7e:1e:18:f8:a0:8c:87:05:06:f4: 5e:1d:c7:89:4a:3a:2a:ec:a7:b3:d3:dc:53:d3:e9:9d:4d:d4: f4:f0:4a:4e:91:51:48:c0:c7:de:77:ff:ca:f7:3d:fe:78:cd: 66:8c:2d:59:48:30:a9:43:6d:1f:57:27:98:36:17:58:24:c4: 78:bf:c7:17:32:47:b6:a1:a0:13:26:9a:c6:0a:7f:29:ed:71: 60:de:b0:07:22:a4:a8:2c:80:4f:41:6b:bd:54:c6:cc:b6:eb: 02:25:76:98:0c:50:35:88:fe:93:30:1c:94:08:0a:06:6e:a0: 6c:16:1a:09:97:7f:3d:a9:e4:af:d9:37:de:9d:da:c2:23:40: f7:1a:03:64:58:11:cc:0a:4c:09:34:c1:22:f9:9c:63:a7:b9: 49:f4:2e:e1:49:dd:18:e1:68:8d:ad:61:09:4e:1f:74:8f:9a: d3:46:77:14:86:3a:d4:19:a9:b9:a9:65:7b:8c:ba:dc:59:48: 1f:36:0c:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkVEWGNb9H/4pWf5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk NWUwNDMwOGEtMWNkYy00ZmI1LWIxYzgtNmVhNTA2MDFkOGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjoGsxKWob0px6hNs7g9K8mZlwz+jGcfCFZO kbbx0L75aNPbkS7p7CpTl9PtUjXle455qpH5e8LbclbeXSrCP1peYai9OTHcChcr meLQiSmbfIIYff9FGToLrig9q8X7F7ZPesQImMGAWABoraoqowIEWmp0liycKCFF rXtLyMpB3N1OUKfk8lxx6hsO1EUoQTOc25yFllpgAvVBi7j8xnznxKCq+uvfX/Lv zMgJn5KYnXIuzDj1ih6Ih5Z+CY1slC60D/ryF3Sga22tfN/cmw/Pj+mdS3HTXtYa HeAhjzqnP+nSE6k66tWkY6346MilS8MdfuYjBuzJ2kwmtny45wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBAKrfdd1F+ca5FeZrk0aAPruIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNWQyOTRhYTEtNTg5ZC0z NmEwLTg2M2MtM2YyMTllMzBiNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+MT1X3/bAyIbWGeDKFGC25ys+9kJSfLejJKfLZeJyMTKrpjredl9kF P3NeZqQKch5T5m393kJJ7Y1nnAusfh4Y+KCMhwUG9F4dx4lKOirsp7PT3FPT6Z1N 1PTwSk6RUUjAx953/8r3Pf54zWaMLVlIMKlDbR9XJ5g2F1gkxHi/xxcyR7ahoBMm msYKfyntcWDesAcipKgsgE9Ba71Uxsy26wIldpgMUDWI/pMwHJQICgZuoGwWGgmX fz2p5K/ZN96d2sIjQPcaA2RYEcwKTAk0wSL5nGOnuUn0LuFJ3RjhaI2tYQlOH3SP mtNGdxSGOtQZqbmpZXuMutxZSB82DG4= -----END CERTIFICATE-----Generated at Wed May 7 11:16:29 2025 by rpki-client