$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa File: cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa (raw, json) Hash identifier: z0NP1D6HBUCxcoHknuvwxAjj5YnTqWKy81k4vT3WANQ= Subject key identifier: 33:6D:66:33:A1:25:24:2E:8C:4B:2A:F5:0F:1F:BB:0F:74:E1:63:1A Certificate issuer: /CN=ef573c37-3920-4b85-b5ca-50707eefe4b3 Certificate serial: 010D0C9F432858498339F49DA69D662D19745A80 Authority key identifier: AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 25617 IP address blocks: 204.9.32.0/24 maxlen: 24 204.9.33.0/24 maxlen: 24 204.9.34.0/24 maxlen: 24 204.9.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:f4:9d:a6:9d:66:2d:19:74:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef573c37-3920-4b85-b5ca-50707eefe4b3 Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=e09eeb85-3b13-4dbf-b4a5-ba54d1ce0386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:a3:5a:15:15:d2:5f:e4:e7:f6:a5:a0:c0: b5:f8:13:68:66:c8:68:88:34:e2:58:4f:3b:6d:15: 29:d5:7b:a3:77:f7:d1:cc:dd:8b:f6:c9:1c:24:b5: 48:9f:f6:b4:91:22:21:61:dc:4b:b7:5d:78:d6:6d: 87:52:83:f8:5b:d8:e4:84:a3:10:25:95:a6:a7:91: de:3d:cb:c1:ee:fb:48:8a:93:9a:c3:8d:96:6a:51: 72:57:7c:e9:2d:e2:77:74:f8:e4:7f:38:cd:05:85: ea:10:74:ef:1c:24:0f:f5:73:c2:0f:85:71:e0:b1: fb:bc:f4:f3:c5:fd:66:19:d1:23:e7:c4:6b:7e:44: e3:0e:ef:eb:71:48:5e:44:ed:8a:2f:94:d8:d0:e1: ee:de:3c:4d:aa:35:90:e6:13:bc:7a:6f:b6:65:37: 80:20:10:6c:7e:e4:b7:10:03:5d:f0:6a:c2:14:ef: 44:63:81:94:5a:fd:4f:e1:0d:f5:ab:88:41:d0:c6: 07:f1:df:0f:c1:81:e4:6b:49:2b:60:0d:57:82:80: 9a:16:0f:86:b3:3b:51:d3:b7:01:fa:a0:cf:20:71: 40:a1:ea:70:1c:03:19:8c:bf:e8:f9:cb:c4:ff:2f: 53:76:f8:63:68:c3:77:ea:63:6b:d6:5a:78:18:45: 89:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6D:66:33:A1:25:24:2E:8C:4B:2A:F5:0F:1F:BB:0F:74:E1:63:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl X509v3 Authority Key Identifier: keyid:AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer sbgp-ipAddrBlock: critical IPv4: 204.9.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:92:d2:97:fd:ad:ff:af:b7:45:e9:53:dc:f9:f9:ae:84:f3: 75:f8:c5:fc:a8:3d:aa:99:01:57:14:d1:cf:cc:0c:c9:a2:13: 10:f5:9c:99:0f:b0:86:85:96:25:21:bf:5d:13:20:1f:01:4f: bf:f3:a3:74:af:4b:9a:7e:ff:d7:1b:b6:a5:04:6c:30:9b:f0: 56:74:bd:19:df:34:4f:59:13:53:75:16:79:bd:84:16:9c:f8: 6b:1a:e8:be:8b:14:19:3a:81:5d:0f:d8:4b:4b:64:4a:22:3e: f0:dc:ed:cf:f5:50:f8:36:d0:de:b8:84:7e:4d:f0:de:c2:f0: d8:96:49:f7:f4:09:a7:3c:e3:2c:f9:c5:00:b1:b9:fa:6f:87: b1:7c:d4:32:f3:be:e2:90:62:02:79:0e:60:31:77:21:03:45: 99:f6:59:67:d8:ed:50:12:82:10:b4:1f:20:92:c5:91:b4:bb: c0:a3:a9:25:5c:cd:8d:8c:c5:52:e8:a1:69:dd:19:71:9c:be: 36:f8:40:c7:39:e1:34:91:10:14:08:80:a5:5d:08:ea:6b:13: 7d:ee:b6:87:2a:25:26:6b:6a:39:38:bf:0a:8b:9c:8e:b9:ec: 62:b1:38:3f:7a:60:bc:e9:72:25:be:7c:1d:40:56:5a:00:b3: b7:ce:9c:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOfSdpp1mLRl0WoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY1NzNjMzctMzkyMC00Yjg1LWI1Y2EtNTA3MDdlZWZl NGIzMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTA5ZWViODUtM2IxMy00ZGJmLWI0YTUtYmE1NGQxY2UwMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6jWhUV0l/k5/aloMC1+BNoZshoiDTiWE87 bRUp1Xujd/fRzN2L9skcJLVIn/a0kSIhYdxLt1141m2HUoP4W9jkhKMQJZWmp5He PcvB7vtIipOaw42WalFyV3zpLeJ3dPjkfzjNBYXqEHTvHCQP9XPCD4Vx4LH7vPTz xf1mGdEj58RrfkTjDu/rcUheRO2KL5TY0OHu3jxNqjWQ5hO8em+2ZTeAIBBsfuS3 EANd8GrCFO9EY4GUWv1P4Q31q4hB0MYH8d8PwYHka0krYA1XgoCaFg+GsztR07cB +qDPIHFAoepwHAMZjL/o+cvE/y9TdvhjaMN36mNr1lp4GEWJxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNtZjOhJSQujEsq9Q8fuw904WMaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3 M2MzNy0zOTIwLTRiODUtYjVjYS01MDcwN2VlZmU0YjMvY2JmODQ5NDktNWE0MS0z YWFiLWI2ZjktZjk2YjU5NmRkM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWY1NzNjMzctMzkyMC00Yjg1LWI1 Y2EtNTA3MDdlZWZlNGIzL2VmNTczYzM3LTM5MjAtNGI4NS1iNWNhLTUwNzA3ZWVm ZTRiMy5jcmwwHwYDVR0jBBgwFoAUqlGXAopqaIABm+jS6NlGUMvdY98wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3M2MzNy0zOTIwLTRiODUtYjVjYS01MDcw N2VlZmU0YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+S0pf9rf+vt0XpU9z5+a6E83X4xfyoPaqZAVcU0c/MDMmiExD1nJkP sIaFliUhv10TIB8BT7/zo3SvS5p+/9cbtqUEbDCb8FZ0vRnfNE9ZE1N1Fnm9hBac +Gsa6L6LFBk6gV0P2EtLZEoiPvDc7c/1UPg20N64hH5N8N7C8NiWSff0Cac84yz5 xQCxufpvh7F81DLzvuKQYgJ5DmAxdyEDRZn2WWfY7VASghC0HyCSxZG0u8CjqSVc zY2MxVLooWndGXGcvjb4QMc54TSREBQIgKVdCOprE33utocqJSZrajk4vwqLnI65 7GKxOD96YLzpciW+fB1AVloAs7fOnMI= -----END CERTIFICATE-----Generated at Mon May 12 05:43:25 2025 by rpki-client