$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/c2e55b8d-a044-386d-bd8e-ad58a315656c.roa File: c2e55b8d-a044-386d-bd8e-ad58a315656c.roa (raw, json) Hash identifier: Z01hrf//4qUDDGaqfXCDVtJgJWvSK3BWXZRuYMotQl8= Subject key identifier: 0B:AF:85:48:70:67:2A:7B:CC:A8:01:1D:48:4C:94:45:68:BF:62:39 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F43285849B57A0FDB97502EF7BD53C980 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/c2e55b8d-a044-386d-bd8e-ad58a315656c.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 398355 IP address blocks: 204.197.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:0f:db:97:50:2e:f7:bd:53:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=4b62d806-ce50-45b8-bb75-f1d1f75ab383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:74:59:cf:57:77:19:87:f5:57:78:9e:b7: bf:02:cb:20:fc:3b:f8:18:66:86:45:15:a9:85:57: 6d:78:de:3a:6b:91:2c:3e:ab:18:fc:06:26:95:35: 94:bf:38:71:9c:cf:8e:8c:d1:4d:61:9f:96:dc:c3: 8b:f2:4d:f4:71:94:92:31:d5:8b:b3:e1:b4:85:ae: 4e:50:85:32:61:20:2d:f4:4d:74:c6:89:c7:57:dc: 67:71:0e:62:af:c0:4f:e8:f1:d3:53:c9:63:91:7c: 62:32:9f:a6:a7:d5:5e:15:be:4b:24:0d:69:d7:a1: 3b:7a:b1:ca:ad:87:c9:3c:81:42:fe:a2:0c:a1:b3: a1:14:d9:10:5a:23:d1:c5:4c:f4:35:72:5a:9f:31: 9a:42:0b:cb:31:b8:f8:0e:e8:28:1e:2d:ca:d3:de: 7b:d4:32:49:98:6f:ae:86:92:97:a2:b2:e3:f7:bc: 19:ef:17:ef:47:6d:be:5b:dc:db:01:6d:7a:14:49: 70:5f:28:3a:ac:11:aa:64:a4:84:31:f3:d0:44:cf: 18:c3:40:cb:6a:51:15:c9:01:e7:c1:4e:0a:11:5b: 89:09:58:a1:7a:93:ed:c3:3e:f9:8d:08:60:60:5e: b4:6e:80:ac:7f:01:64:d5:5c:dc:9a:dc:c7:04:ac: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AF:85:48:70:67:2A:7B:CC:A8:01:1D:48:4C:94:45:68:BF:62:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/c2e55b8d-a044-386d-bd8e-ad58a315656c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:c2:18:35:c9:bb:e1:99:ca:b8:49:84:a8:e2:cb:3b:3f:62: 03:f7:71:43:ef:71:90:3c:21:3a:9b:1d:e6:ff:27:55:e5:fa: d9:16:1e:ab:c0:fe:51:f7:a7:e1:98:e9:c5:7d:cb:e3:41:ab: fb:94:39:60:a4:2e:69:cd:ee:49:23:8d:c9:e9:93:f0:59:38: e4:e9:16:80:7b:b4:3a:d8:c3:39:29:c0:41:e9:df:3e:08:3b: f8:63:ff:b3:c0:1a:fd:27:de:2c:24:37:47:5e:b6:e0:0b:b7: a3:41:4d:85:33:31:47:36:af:b5:38:d4:39:6b:be:e0:28:0d: 2c:f5:f8:71:2b:1b:89:b9:4f:1f:62:37:ba:7d:cb:4c:eb:ba: 90:02:15:cc:f3:4e:52:95:a6:82:4e:6c:4b:99:bf:9b:f1:8a: e8:8e:2c:72:bb:d2:99:b0:35:c6:3a:cb:bd:41:a5:b0:c6:ca: 3e:c9:fb:f1:fe:21:69:5c:22:b4:74:37:55:57:3b:63:c0:8a: 9d:41:9d:c3:31:44:b1:0f:67:bd:fa:40:a3:32:06:19:f9:41: 0f:2c:0c:cc:e9:5d:fd:cc:ad:d0:e8:0a:5d:c1:d7:a9:c6:12: 12:1b:ac:c6:38:7d:aa:15:d6:19:b3:99:4e:23:12:d8:97:c8: bc:2c:24:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eg/bl1Au971TyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NGI2MmQ4MDYtY2U1MC00NWI4LWJiNzUtZjFkMWY3NWFiMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6J0Wc9XdxmH9Vd4nre/Assg/Dv4GGaGRRWp hVdteN46a5EsPqsY/AYmlTWUvzhxnM+OjNFNYZ+W3MOL8k30cZSSMdWLs+G0ha5O UIUyYSAt9E10xonHV9xncQ5ir8BP6PHTU8ljkXxiMp+mp9VeFb5LJA1p16E7erHK rYfJPIFC/qIMobOhFNkQWiPRxUz0NXJanzGaQgvLMbj4DugoHi3K09571DJJmG+u hpKXorLj97wZ7xfvR22+W9zbAW16FElwXyg6rBGqZKSEMfPQRM8Yw0DLalEVyQHn wU4KEVuJCVihepPtwz75jQhgYF60boCsfwFk1VzcmtzHBKxufQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuvhUhwZyp7zKgBHUhMlEVov2I5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvYzJlNTViOGQtYTA0NC0z ODZkLWJkOGUtYWQ1OGEzMTU2NTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANbCGDXJu+GZyrhJhKjiyzs/YgP3cUPvcZA8ITqbHeb/J1Xl+tkWHqvA /lH3p+GY6cV9y+NBq/uUOWCkLmnN7kkjjcnpk/BZOOTpFoB7tDrYwzkpwEHp3z4I O/hj/7PAGv0n3iwkN0detuALt6NBTYUzMUc2r7U41DlrvuAoDSz1+HErG4m5Tx9i N7p9y0zrupACFczzTlKVpoJObEuZv5vxiuiOLHK70pmwNcY6y71BpbDGyj7J+/H+ IWlcIrR0N1VXO2PAip1BncMxRLEPZ736QKMyBhn5QQ8sDMzpXf3MrdDoCl3B16nG EhIbrMY4faoV1hmzmU4jEtiXyLwsJL8= -----END CERTIFICATE-----Generated at Sat May 10 20:29:38 2025 by rpki-client