$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa File: 68365f48-7c66-3b0a-9514-08444a5b126b.roa (raw, json) Hash identifier: nhiLlerIu9V7NmVMGP7H03A2wJjKoSKOKtkGEGRJf2U= Subject key identifier: 3F:E3:7D:4F:2D:DC:5A:90:48:91:55:E2:20:18:0A:0A:71:76:5E:54 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F43285849350E816DDB396B8A0D6DBBC0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 33208 IP address blocks: 208.56.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:81:6d:db:39:6b:8a:0d:6d:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=6f412c6d-28c4-49f0-97d3-fa251bfaadea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0f:f9:fd:c7:2e:69:b6:f0:4b:e4:b2:18:62: fd:f9:e7:6e:6d:c1:ea:a0:20:33:eb:5b:99:b5:6b: 4e:cd:38:35:c8:fc:22:5b:60:fc:26:56:f5:e2:99: cc:1e:dd:8d:7b:f8:8b:4a:7e:4d:f5:85:aa:cb:20: de:75:65:06:04:36:b3:57:03:08:a5:07:45:f7:96: d2:af:4f:8f:75:64:21:5f:aa:c1:f2:44:34:90:64: 97:86:5f:df:6d:f3:5f:62:b9:66:b6:d7:e9:3e:8b: 06:f7:5c:2a:4f:8b:47:e4:69:ba:97:93:ae:ed:ba: ad:8e:cf:ea:d4:57:62:47:43:2e:09:41:a8:fe:83: a3:ca:6f:2e:f1:c2:46:a9:e6:d9:9b:e4:61:a6:bd: 4d:e8:9d:ab:50:c7:6a:39:5e:35:c2:ba:e1:c8:af: 66:db:a0:bc:74:bd:9e:ec:0d:41:26:3e:b9:a3:8a: 49:77:1c:6d:30:61:55:fa:8e:c9:5a:72:94:2a:1f: 6f:cc:cc:f1:7f:5d:96:f2:44:6e:85:8e:23:53:0a: 8a:cd:69:40:14:1e:36:c8:f5:87:29:62:7f:45:08: 77:eb:44:19:8e:37:33:c3:96:90:8a:e3:e7:b3:a0: 0a:ae:f4:d3:03:3e:10:60:0f:97:dd:32:a5:0b:89: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E3:7D:4F:2D:DC:5A:90:48:91:55:E2:20:18:0A:0A:71:76:5E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 208.56.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f6:86:e7:df:c9:8a:89:7a:4d:34:2d:24:b3:ce:a2:ad:92: 88:af:9a:ce:7f:3e:34:3a:f9:76:0b:1c:45:d1:dc:bb:8f:47: 7e:86:ed:9c:c0:b1:5f:74:7e:4c:2e:9c:8c:8b:a0:9e:6c:b2: c8:83:e4:60:f2:bd:49:fc:e0:a1:f3:30:6c:97:5b:96:3a:07: ea:c4:f7:7e:cb:fc:22:af:4c:83:64:8d:d3:bb:99:ac:d2:90: c9:b1:6e:c5:7d:b9:e5:9f:76:74:3d:86:a9:98:c5:d4:aa:36: fb:4f:f9:98:77:67:ca:e2:79:cf:7e:bf:94:39:0d:80:3f:3a: 4f:a3:d7:fa:1c:bf:7d:d4:35:40:af:15:7d:19:fe:e6:be:b4: 3c:db:8e:83:2c:a0:f1:3f:12:17:c6:97:66:05:ea:77:af:b4: 93:88:d9:85:52:a8:25:c0:be:24:64:07:cc:4a:9e:bf:a9:e6: 1a:da:31:5c:ea:87:4a:fb:10:81:48:54:f5:73:4f:8e:7d:41: 01:79:af:ef:8d:0e:64:18:55:e7:3b:cb:ad:30:56:5c:a8:06: aa:5f:87:69:2f:f2:88:7c:4b:e4:d5:da:a1:07:2a:f6:02:56: 08:25:47:0b:9e:00:7f:be:5c:d4:82:8e:60:af:d1:ed:11:d3: 85:b3:8b:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DoFt2zlrig1tu8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NmY0MTJjNmQtMjhjNC00OWYwLTk3ZDMtZmEyNTFiZmFhZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw/5/ccuabbwS+SyGGL9+edubcHqoCAz61uZ tWtOzTg1yPwiW2D8Jlb14pnMHt2Ne/iLSn5N9YWqyyDedWUGBDazVwMIpQdF95bS r0+PdWQhX6rB8kQ0kGSXhl/fbfNfYrlmttfpPosG91wqT4tH5Gm6l5Ou7bqtjs/q 1FdiR0MuCUGo/oOjym8u8cJGqebZm+Rhpr1N6J2rUMdqOV41wrrhyK9m26C8dL2e 7A1BJj65o4pJdxxtMGFV+o7JWnKUKh9vzMzxf12W8kRuhY4jUwqKzWlAFB42yPWH KWJ/RQh360QZjjczw5aQiuPns6AKrvTTAz4QYA+X3TKlC4nMrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/jfU8t3FqQSJFV4iAYCgpxdl5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNjgzNjVmNDgtN2M2Ni0z YjBhLTk1MTQtMDg0NDRhNWIxMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0DjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX2huffyYqJek00LSSzzqKtkoivms5/PjQ6+XYLHEXR3LuPR36G7ZzA sV90fkwunIyLoJ5sssiD5GDyvUn84KHzMGyXW5Y6B+rE937L/CKvTINkjdO7mazS kMmxbsV9ueWfdnQ9hqmYxdSqNvtP+Zh3Z8riec9+v5Q5DYA/Ok+j1/ocv33UNUCv FX0Z/ua+tDzbjoMsoPE/EhfGl2YF6nevtJOI2YVSqCXAviRkB8xKnr+p5hraMVzq h0r7EIFIVPVzT459QQF5r++NDmQYVec7y60wVlyoBqpfh2kv8oh8S+TV2qEHKvYC VgglRwueAH++XNSCjmCv0e0R04Wzi0o= -----END CERTIFICATE-----Generated at Mon May 12 22:48:55 2025 by rpki-client