$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0cd71704-0017-3db9-a7eb-b865eaca38e4.roa File: 0cd71704-0017-3db9-a7eb-b865eaca38e4.roa (raw, json) Hash identifier: 29rpUk7t2W/P1Zg9jxz30/a3WFFVx1Q8Qst7kQnWphI= Subject key identifier: 84:B0:10:19:49:0D:D7:4F:E9:75:D5:6F:CD:B9:B3:F0:C5:82:5C:7D Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584902EC08B9790A166F4568A1A0 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0cd71704-0017-3db9-a7eb-b865eaca38e4.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 11260 IP address blocks: 100.42.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:08:b9:79:0a:16:6f:45:68:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=4c8a6455-b03b-4cfe-a255-868ff4a41d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:0b:11:bc:2d:ae:ef:0d:23:68:0e:22:68: ba:af:41:5f:6e:ff:a5:18:ef:46:c2:12:60:aa:48: bc:20:f2:34:cb:60:4b:6d:cc:1b:04:75:fb:e8:22: bb:cf:9d:21:2f:4a:33:11:18:78:bf:d8:ad:24:3f: a9:5f:6a:d1:62:6a:db:62:5e:ce:69:c8:06:22:48: 18:30:a6:41:1a:47:56:0d:7b:cb:5c:ad:b5:38:05: a5:1c:5c:d8:e6:af:c0:4e:b3:ed:fa:21:05:59:05: f1:c3:2d:de:75:f0:08:24:c2:bc:2a:5f:2d:f8:a6: 9d:df:a2:ea:21:e6:b7:b5:28:b9:2b:5f:1d:70:b6: 4c:0b:7a:23:b9:88:ab:d6:36:3e:de:2e:b7:26:d9: db:36:97:d9:f9:db:08:9f:6e:5d:7b:f3:0e:6c:5c: 67:5a:bb:80:61:0b:60:15:91:a7:81:81:8d:2d:8a: e0:08:81:6a:dc:a4:09:f7:31:dc:8f:9d:fd:88:78: ff:ce:8f:81:5f:8a:5b:76:bc:0c:0a:ae:d0:31:1f: 3f:da:f0:df:46:cf:c9:54:eb:62:da:43:61:b0:26: 6c:e5:99:a6:ed:94:f2:bb:cb:9d:72:ac:cf:81:11: 37:4f:cb:2d:c6:2a:2c:82:88:86:4e:f7:f4:32:ae: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B0:10:19:49:0D:D7:4F:E9:75:D5:6F:CD:B9:B3:F0:C5:82:5C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/0cd71704-0017-3db9-a7eb-b865eaca38e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 100.42.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:49:95:0c:74:eb:f0:37:a9:a7:dd:35:ac:03:0d:6b:0c:c1: 25:b4:54:93:7b:c6:46:42:ab:8e:f2:c2:41:09:bc:3e:8e:08: 24:a8:8a:a2:63:62:d2:98:44:f1:53:7a:c1:e3:24:ac:27:05: 64:bf:f4:0d:9b:8d:48:df:c3:32:cd:bd:3a:a6:14:38:4d:ea: 13:81:be:86:32:52:b1:cd:b1:6d:df:48:e6:5f:32:b0:3e:cb: 89:e5:28:eb:ee:24:86:ae:95:ad:f1:51:86:07:bd:86:63:dc: 57:93:9c:a1:6f:4e:0f:c8:a3:c1:9c:3d:01:99:26:ad:71:bc: 25:52:bc:28:31:f2:0c:4f:23:04:51:44:7e:62:6c:2b:43:fb: c5:d1:34:4d:49:14:04:7e:ec:da:fa:17:d5:4e:17:eb:ba:54: 09:6b:0f:f1:a0:2f:eb:a9:e8:f4:7b:5e:45:48:f4:43:17:c1: f5:25:1e:f7:8d:86:47:38:5a:eb:f8:38:ae:db:36:d5:0d:29: fe:fb:28:35:a5:e4:77:98:e4:10:7c:8c:6a:01:a1:25:3d:7f: ed:c7:0b:09:37:96:38:3d:82:76:e6:94:60:4a:fb:be:85:b4: 54:73:14:87:b7:6e:88:63:a7:ea:15:1a:1c:e3:b7:2d:3f:33: eb:c5:2e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Ai5eQoWb0VooaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NGM4YTY0NTUtYjAzYi00Y2ZlLWEyNTUtODY4ZmY0YTQxZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq4LEbwtru8NI2gOImi6r0Ffbv+lGO9GwhJg qki8IPI0y2BLbcwbBHX76CK7z50hL0ozERh4v9itJD+pX2rRYmrbYl7OacgGIkgY MKZBGkdWDXvLXK21OAWlHFzY5q/ATrPt+iEFWQXxwy3edfAIJMK8Kl8t+Kad36Lq Iea3tSi5K18dcLZMC3ojuYir1jY+3i63JtnbNpfZ+dsIn25de/MObFxnWruAYQtg FZGngYGNLYrgCIFq3KQJ9zHcj539iHj/zo+BX4pbdrwMCq7QMR8/2vDfRs/JVOti 2kNhsCZs5Zmm7ZTyu8udcqzPgRE3T8stxiosgoiGTvf0Mq5vZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISwEBlJDddP6XXVb825s/DFglx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvMGNkNzE3MDQtMDAxNy0z ZGI5LWE3ZWItYjg2NWVhY2EzOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEZCrwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhJlQx06/A3qafdNawDDWsMwSW0VJN7xkZCq47ywkEJvD6OCCSoiqJj YtKYRPFTesHjJKwnBWS/9A2bjUjfwzLNvTqmFDhN6hOBvoYyUrHNsW3fSOZfMrA+ y4nlKOvuJIaula3xUYYHvYZj3FeTnKFvTg/Io8GcPQGZJq1xvCVSvCgx8gxPIwRR RH5ibCtD+8XRNE1JFAR+7Nr6F9VOF+u6VAlrD/GgL+up6PR7XkVI9EMXwfUlHveN hkc4Wuv4OK7bNtUNKf77KDWl5HeY5BB8jGoBoSU9f+3HCwk3ljg9gnbmlGBK+76F tFRzFIe3bohjp+oVGhzjty0/M+vFLng= -----END CERTIFICATE-----Generated at Mon May 5 12:02:26 2025 by rpki-client