$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d4693619-dbd0-388d-895c-e93673e5594f.roa File: d4693619-dbd0-388d-895c-e93673e5594f.roa (raw, json) Hash identifier: IduGJY6Od4E9dNOrJQjjoQ9b3FnZN3fvlv5ug07+krs= Subject key identifier: D6:D6:CE:56:12:C0:2C:27:EE:D7:7D:F6:F8:77:43:FA:6E:FD:2D:CC Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849BB0F70E5033AD447777C9C60 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d4693619-dbd0-388d-895c-e93673e5594f.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 1239 IP address blocks: 208.19.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:70:e5:03:3a:d4:47:77:7c:9c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=48fbf528-c346-4233-b717-36bc32196e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:07:97:78:28:e0:ae:b6:7a:6c:fc:1b:ac:b1: 93:3a:43:ff:7f:0d:de:46:e5:bb:d7:a0:61:6e:70: 8e:72:6a:84:ed:18:00:ba:29:f6:e3:3e:d7:52:e5: 5c:92:62:2b:76:22:b2:44:34:f1:3f:08:ee:87:28: d0:a0:b4:7b:6b:d9:02:28:de:11:2f:53:c1:50:14: d6:ee:fe:17:67:bc:06:2e:ed:a6:c5:f9:42:0e:75: 99:89:08:91:2f:69:e5:e2:c2:92:3d:3a:d5:da:3d: e9:8d:75:91:a2:1e:36:ad:85:f3:80:b2:8a:3f:57: 42:23:4c:79:dd:ff:42:46:12:d0:7d:a5:36:3f:80: 2b:5e:f5:4d:ab:ba:7c:63:cc:21:88:ff:34:31:81: ef:90:11:ba:57:05:68:69:01:5f:9e:33:52:a8:a1: b3:47:5d:b3:fd:a4:aa:19:d4:61:60:0e:a0:08:f0: 2e:46:1c:24:d5:be:b9:6b:00:c4:a5:5e:b9:15:a0: 6a:cd:01:dc:2e:35:ea:ee:53:26:3f:3d:4e:ee:4d: 02:0d:0e:68:2d:5b:d8:1e:b8:8c:47:fc:fe:8e:a9: 5c:07:fc:e2:fe:39:99:2d:94:73:70:59:e6:60:84: 09:48:d9:44:d5:5f:8a:86:e3:18:bc:dd:ab:7e:79: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D6:CE:56:12:C0:2C:27:EE:D7:7D:F6:F8:77:43:FA:6E:FD:2D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d4693619-dbd0-388d-895c-e93673e5594f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.19.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:70:7e:9c:f9:e0:1a:1a:10:06:b8:75:e0:4f:13:82:4c:0c: 89:36:98:43:5e:71:32:a3:9d:ec:05:2b:14:78:5c:1b:e7:5a: 7c:c0:11:8e:91:52:98:1a:a1:30:87:24:fe:e0:ee:c1:1c:c2: f5:b5:94:40:bf:ed:da:30:e2:27:ad:1e:f1:3d:ca:45:41:dd: 1b:fe:60:42:fb:69:84:ba:fe:6a:18:77:a6:f5:a8:72:4a:b5: 1a:7c:de:57:36:bc:af:b8:67:4e:ac:f8:18:b0:7c:a3:ee:f2: a1:45:66:f6:0e:44:d4:df:a5:b1:b2:8c:a3:a0:3d:b4:05:6c: 10:91:19:fe:b2:c4:cf:7a:7a:7d:22:ab:12:10:f6:c6:c6:fc: 1a:c9:bc:c0:0a:28:c8:fd:66:b4:61:86:38:e6:73:05:74:d9: 62:6d:ad:3d:54:00:49:34:69:22:03:dd:14:f6:fc:fe:53:c2: a1:04:56:e4:27:96:7b:22:e2:ef:96:0b:a0:c8:45:0a:e6:06: 29:7a:5f:ee:eb:df:ba:d3:e6:54:b1:8c:79:87:67:8a:80:2e: ad:48:aa:cc:fe:a1:fc:2f:16:63:c2:e9:ee:dd:4e:52:3f:32: 4e:ea:bf:95:20:24:f1:f1:a2:2e:b4:ca:6c:0c:c1:a7:2c:df: 82:4b:59:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3DlAzrUR3d8nGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk NDhmYmY1MjgtYzM0Ni00MjMzLWI3MTctMzZiYzMyMTk2ZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAeXeCjgrrZ6bPwbrLGTOkP/fw3eRuW716Bh bnCOcmqE7RgAuin24z7XUuVckmIrdiKyRDTxPwjuhyjQoLR7a9kCKN4RL1PBUBTW 7v4XZ7wGLu2mxflCDnWZiQiRL2nl4sKSPTrV2j3pjXWRoh42rYXzgLKKP1dCI0x5 3f9CRhLQfaU2P4ArXvVNq7p8Y8whiP80MYHvkBG6VwVoaQFfnjNSqKGzR12z/aSq GdRhYA6gCPAuRhwk1b65awDEpV65FaBqzQHcLjXq7lMmPz1O7k0CDQ5oLVvYHriM R/z+jqlcB/zi/jmZLZRzcFnmYIQJSNlE1V+KhuMYvN2rfnmoNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbWzlYSwCwn7td99vh3Q/pu/S3MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZDQ2OTM2MTktZGJkMC0z ODhkLTg5NWMtZTkzNjczZTU1OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1wfpz54BoaEAa4deBPE4JMDIk2mENecTKjnewFKxR4XBvnWnzAEY6R UpgaoTCHJP7g7sEcwvW1lEC/7dow4ietHvE9ykVB3Rv+YEL7aYS6/moYd6b1qHJK tRp83lc2vK+4Z06s+BiwfKPu8qFFZvYORNTfpbGyjKOgPbQFbBCRGf6yxM96en0i qxIQ9sbG/BrJvMAKKMj9ZrRhhjjmcwV02WJtrT1UAEk0aSID3RT2/P5TwqEEVuQn lnsi4u+WC6DIRQrmBil6X+7r37rT5lSxjHmHZ4qALq1Iqsz+ofwvFmPC6e7dTlI/ Mk7qv5UgJPHxoi60ymwMwacs34JLWZY= -----END CERTIFICATE-----Generated at Tue May 6 07:01:00 2025 by rpki-client