$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4fb890ca-03ee-3940-b03e-f9f28a46389b.roa File: 4fb890ca-03ee-3940-b03e-f9f28a46389b.roa (raw, json) Hash identifier: 2Vxhoesg4dqRCVBBBR8j53FGyo3wXXez9DZb7AaHO9g= Subject key identifier: 43:1D:44:D9:53:CC:F7:AF:5D:26:82:6D:66:40:D4:BB:35:4E:E9:45 Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Certificate serial: 010D0C9F4328584961B9A1E016988A97071BA680 Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4fb890ca-03ee-3940-b03e-f9f28a46389b.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 12083 IP address blocks: 207.98.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:a1:e0:16:98:8a:97:07:1b:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=3c9f6138-d001-4049-a17d-14e1a036b479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:4a:c8:ba:7f:21:cf:17:bc:33:b1:21:57: 0c:78:30:9b:a5:08:ee:e1:fc:2c:22:bf:f2:a4:3a: 3f:05:4d:c8:95:ae:56:db:f3:38:74:fc:49:6c:89: cb:31:a3:10:92:31:39:fe:3c:61:74:e6:1a:c0:c1: 81:12:a3:df:e3:b6:56:3d:0c:42:0a:a4:96:34:6b: 9d:04:70:45:9d:87:c5:2b:a9:76:f7:01:3a:88:9b: 00:bf:0e:ee:16:33:ab:ac:df:bd:ec:f0:f9:7a:24: 90:fb:31:33:e4:78:84:b7:a0:2d:0a:04:a1:6f:5d: ec:c2:2d:84:9e:73:45:9b:aa:5b:59:c8:77:a8:79: 24:04:17:66:84:f8:6b:74:16:76:a0:94:05:d4:cc: fe:f3:bf:c2:5f:ba:95:42:15:07:87:91:95:03:c6: 13:5e:8c:de:7a:47:7b:75:12:b1:c8:63:ca:3b:43: df:4c:20:0c:b9:78:26:4c:af:5b:a5:55:01:52:1e: 9f:36:6e:96:4e:c8:3d:b8:84:d1:b0:e9:0e:3d:4f: ca:fa:48:8b:2d:d0:74:65:fc:a5:34:9f:a5:78:3c: 97:b8:c7:76:89:75:ad:af:e7:0b:de:f5:f8:b3:d7: 24:e5:ba:3c:94:e4:fe:67:a5:5f:b9:40:3f:8e:1b: b9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1D:44:D9:53:CC:F7:AF:5D:26:82:6D:66:40:D4:BB:35:4E:E9:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4fb890ca-03ee-3940-b03e-f9f28a46389b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl X509v3 Authority Key Identifier: keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer sbgp-ipAddrBlock: critical IPv4: 207.98.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:06:8d:7b:e2:8b:29:37:29:6e:c1:36:73:0c:e9:0b:41:79: ee:5a:7c:d2:3d:d9:15:47:d9:38:0c:6e:8a:70:0a:83:c7:8b: b7:04:d4:75:72:4d:c0:06:96:f1:d0:6c:05:b7:26:0c:aa:50: fa:da:91:3b:77:ef:58:a6:ff:65:76:21:15:ae:5f:fe:3a:e3: 9e:ce:ac:f6:25:09:68:cb:a5:47:20:40:ac:47:bd:90:a6:5f: 0c:e6:c1:a6:cb:3f:de:62:a2:a3:4f:f1:8a:3f:c3:cf:79:ee: 05:d7:bc:a7:b8:61:45:44:da:7a:77:3e:23:9e:c2:10:58:99: ff:a6:d2:30:19:a0:ed:6c:a6:56:36:20:a9:9d:29:77:4b:cc: ff:e2:8f:54:93:29:88:17:83:ea:ac:46:64:51:10:8e:bb:49: 53:95:40:f0:29:5b:96:f5:2b:50:8a:1b:86:16:ff:a0:a5:e2: 3c:31:1d:99:b4:31:ab:00:dd:af:9f:30:43:c7:e1:09:1e:af: 5a:74:29:1b:90:89:6d:b8:c5:fe:52:d0:f2:24:75:2c:6b:21: b0:17:8d:71:2b:69:5a:d9:91:9c:12:b5:2d:24:d1:b4:66:4e: 3f:a3:3b:14:bd:ed:22:b1:dc:39:9e:44:a1:7b:59:c3:4e:82: 1e:76:9d:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuaHgFpiKlwcbpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm NWZlMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk M2M5ZjYxMzgtZDAwMS00MDQ5LWExN2QtMTRlMWEwMzZiNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQBKyLp/Ic8XvDOxIVcMeDCbpQju4fwsIr/y pDo/BU3Ila5W2/M4dPxJbInLMaMQkjE5/jxhdOYawMGBEqPf47ZWPQxCCqSWNGud BHBFnYfFK6l29wE6iJsAvw7uFjOrrN+97PD5eiSQ+zEz5HiEt6AtCgShb13swi2E nnNFm6pbWch3qHkkBBdmhPhrdBZ2oJQF1Mz+87/CX7qVQhUHh5GVA8YTXozeekd7 dRKxyGPKO0PfTCAMuXgmTK9bpVUBUh6fNm6WTsg9uITRsOkOPU/K+kiLLdB0Zfyl NJ+leDyXuMd2iXWtr+cL3vX4s9ck5bo8lOT+Z6VfuUA/jhu5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMdRNlTzPevXSaCbWZA1Ls1TulFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvNGZiODkwY2EtMDNlZS0z OTQwLWIwM2UtZjlmMjhhNDYzODliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2 ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2 N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz2L6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYGjXviiyk3KW7BNnMM6QtBee5afNI92RVH2TgMbopwCoPHi7cE1HVy TcAGlvHQbAW3JgyqUPrakTt371im/2V2IRWuX/46457OrPYlCWjLpUcgQKxHvZCm XwzmwabLP95ioqNP8Yo/w8957gXXvKe4YUVE2np3PiOewhBYmf+m0jAZoO1splY2 IKmdKXdLzP/ij1STKYgXg+qsRmRREI67SVOVQPApW5b1K1CKG4YW/6Cl4jwxHZm0 MasA3a+fMEPH4Qker1p0KRuQiW24xf5S0PIkdSxrIbAXjXEraVrZkZwStS0k0bRm Tj+jOxS97SKx3DmeRKF7WcNOgh52nes= -----END CERTIFICATE-----Generated at Wed May 7 00:39:12 2025 by rpki-client