$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa File: f73b5053-f5db-33cf-aecf-f99a7cff535a.roa (raw, json) Hash identifier: LjYtszio6J2vRGEAi8tGki6N5aZxYEcdZ5UzU/zr/O8= Subject key identifier: CC:F7:0B:8F:AB:32:49:76:31:F5:EF:8D:1B:CC:4F:24:67:5D:9C:46 Certificate issuer: /CN=f97b644e-a01f-43c5-83e0-146254941d5f Certificate serial: 010D0C9F43285849A35484271D0E1B85679F91C0 Authority key identifier: 6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 36290 IP address blocks: 204.16.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:84:27:1d:0e:1b:85:67:9f:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f97b644e-a01f-43c5-83e0-146254941d5f Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=89957892-668e-47a0-81c7-29ab16f4b6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:34:bc:7a:64:9a:c3:8e:34:88:02:7c:27:85: ba:69:4f:aa:22:23:d2:be:7d:ae:58:02:e8:df:56: f1:c5:b6:c0:a3:cb:71:a1:05:15:e0:71:a3:a8:6b: 87:38:89:a3:e6:38:6f:8f:3f:c6:9c:2a:03:a8:eb: bf:de:65:fc:4d:84:02:86:b1:45:c2:82:b8:df:58: 79:89:74:de:05:54:b1:4e:8c:8d:b0:f0:45:8b:10: e6:26:3b:e9:47:3e:e5:fb:09:bf:81:41:ab:83:e5: dd:c7:7a:7f:de:e7:96:24:4c:30:4d:6e:4a:56:0c: a1:b9:89:23:62:a7:55:9f:e1:1e:5d:cd:07:09:15: 19:4c:81:bb:2b:87:b0:22:65:17:07:30:61:45:c9: 7a:91:24:42:c9:6f:04:34:f0:20:65:72:c2:a7:59: 09:18:57:8c:39:95:ac:d4:81:bd:91:4f:f6:50:03: c2:e5:35:00:52:3b:d8:ed:92:0f:ca:f1:a5:55:cb: c4:ff:82:f9:8f:b5:a5:c8:f9:07:ba:a1:dd:27:ef: 0b:a2:13:9a:cd:62:29:a7:2a:23:52:77:57:bd:7e: 32:38:d2:78:77:0f:b5:16:38:ff:1f:b5:65:ba:d7: c5:a9:af:17:ed:36:75:35:7e:0f:41:23:ae:51:d3: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F7:0B:8F:AB:32:49:76:31:F5:EF:8D:1B:CC:4F:24:67:5D:9C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f73b5053-f5db-33cf-aecf-f99a7cff535a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f/f97b644e-a01f-43c5-83e0-146254941d5f.crl X509v3 Authority Key Identifier: keyid:6B:87:D5:3D:AE:FB:D6:D0:9D:2C:62:29:D1:98:5C:78:E3:10:B6:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f97b644e-a01f-43c5-83e0-146254941d5f.cer sbgp-ipAddrBlock: critical IPv4: 204.16.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:32:8b:1f:09:c0:ea:b4:7f:c2:bc:ac:0d:67:88:44:11:e1: bd:64:6a:87:f2:3c:8f:a3:ec:a6:6d:28:05:43:5f:9a:c8:cb: d5:2e:d1:10:77:af:e4:20:02:8e:bb:44:d3:6d:5c:18:db:b9: a7:f8:f3:9a:80:ea:b5:81:a1:be:c3:44:b7:0a:eb:54:fd:eb: 78:67:92:11:bc:75:5a:a8:06:3d:32:76:ff:41:54:74:1d:03: 2f:1d:57:15:be:99:5c:ac:fe:1c:5e:0b:8d:00:03:91:83:e0: ab:c4:f3:b9:8a:67:c4:80:3c:c0:af:26:b7:2e:ce:ac:af:04: db:8d:07:ed:29:9c:1a:fa:9f:43:76:3b:44:92:12:ad:77:c1: a8:31:bd:9f:31:f7:c2:ff:65:8c:a2:a6:94:f7:83:41:ef:4c: 50:7f:9b:38:35:0f:6b:84:7b:e3:22:0c:e6:a4:b2:ae:2b:db: 94:0d:f2:12:24:81:9e:e9:0f:af:98:b6:48:d1:a8:d2:cd:88: 49:ba:8f:60:26:af:08:29:e2:98:8f:fb:15:36:be:b4:e7:5f: 3d:69:f5:56:92:c0:88:3a:bd:2d:ca:f1:3e:c7:72:d1:50:5a: 1b:c8:cf:41:16:35:e2:fa:34:6b:7a:df:28:92:17:39:a3:d1: 87:1d:a7:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIQnHQ4bhWefkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk3YjY0NGUtYTAxZi00M2M1LTgzZTAtMTQ2MjU0OTQx ZDVmMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk ODk5NTc4OTItNjY4ZS00N2EwLTgxYzctMjlhYjE2ZjRiNmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTS8emSaw440iAJ8J4W6aU+qIiPSvn2uWALo 31bxxbbAo8txoQUV4HGjqGuHOImj5jhvjz/GnCoDqOu/3mX8TYQChrFFwoK431h5 iXTeBVSxToyNsPBFixDmJjvpRz7l+wm/gUGrg+Xdx3p/3ueWJEwwTW5KVgyhuYkj YqdVn+EeXc0HCRUZTIG7K4ewImUXBzBhRcl6kSRCyW8ENPAgZXLCp1kJGFeMOZWs 1IG9kU/2UAPC5TUAUjvY7ZIPyvGlVcvE/4L5j7WlyPkHuqHdJ+8LohOazWIppyoj UndXvX4yONJ4dw+1Fjj/H7VlutfFqa8X7TZ1NX4PQSOuUdM+JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMz3C4+rMkl2MfXvjRvMTyRnXZxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdi NjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYyNTQ5NDFkNWYvZjczYjUwNTMtZjVkYi0z M2NmLWFlY2YtZjk5YTdjZmY1MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk3YjY0NGUtYTAxZi00M2M1LTgz ZTAtMTQ2MjU0OTQxZDVmL2Y5N2I2NDRlLWEwMWYtNDNjNS04M2UwLTE0NjI1NDk0 MWQ1Zi5jcmwwHwYDVR0jBBgwFoAUa4fVPa771tCdLGIp0ZhceOMQtukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTdiNjQ0ZS1hMDFmLTQzYzUtODNlMC0xNDYy NTQ5NDFkNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzBAIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoyix8JwOq0f8K8rA1niEQR4b1kaofyPI+j7KZtKAVDX5rIy9Uu0RB3 r+QgAo67RNNtXBjbuaf485qA6rWBob7DRLcK61T963hnkhG8dVqoBj0ydv9BVHQd Ay8dVxW+mVys/hxeC40AA5GD4KvE87mKZ8SAPMCvJrcuzqyvBNuNB+0pnBr6n0N2 O0SSEq13wagxvZ8x98L/ZYyippT3g0HvTFB/mzg1D2uEe+MiDOaksq4r25QN8hIk gZ7pD6+YtkjRqNLNiEm6j2Amrwgp4piP+xU2vrTnXz1p9VaSwIg6vS3K8T7HctFQ WhvIz0EWNeL6NGt63yiSFzmj0Ycdp44= -----END CERTIFICATE-----Generated at Wed May 14 12:04:23 2025 by rpki-client