$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa File: dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa (raw, json) Hash identifier: NH18A3B//Vf4YbnekE6WEco9oUN6+7JIHO6Qi8c9v2g= Subject key identifier: 42:39:6C:9F:EA:26:AE:05:61:F8:56:6E:44:29:88:03:1F:CC:5F:B0 Certificate issuer: /CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c Certificate serial: 010D0C9F43285849B468EA135C004A5EF2FA2280 Authority key identifier: DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa Signing time: Thu 01 May 2025 03:50:43 +0000 ROA not before: Thu 01 May 2025 03:50:43 +0000 ROA not after: Wed 30 Jul 2025 03:50:43 +0000 asID: 54223 IP address blocks: 204.145.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b4:68:ea:13:5c:00:4a:5e:f2:fa:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c Validity Not Before: May 1 03:50:43 2025 GMT Not After : Jul 30 03:50:43 2025 GMT Subject: CN=e8bd2e69-2611-4c2a-ae31-92c70bf6e896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:6d:aa:8e:df:1e:32:59:3f:b0:95:ec:cf: c6:ff:b2:ab:88:1d:f3:36:bf:88:08:b4:d8:42:fe: e9:8d:ec:b6:b0:fa:dd:2a:48:0c:a2:11:52:cb:80: f8:aa:b2:91:73:63:c2:2c:a4:49:a7:f2:d9:ee:82: 8c:db:ee:b9:44:1f:60:dd:f5:7e:13:0b:a2:a3:3b: ad:93:91:51:fa:98:31:6e:e4:fe:53:6f:20:26:cc: f1:3e:db:bd:a6:06:e7:ce:92:dc:1c:34:d0:ba:5e: 63:30:5d:53:26:8d:3d:3d:97:dd:f9:a4:30:63:1e: 64:2e:ec:a0:e3:7d:12:4a:fd:dc:d0:8b:54:22:48: 82:55:83:f0:7f:49:c4:6b:66:8d:26:c5:59:32:c9: d1:4e:1f:a0:93:d7:72:1d:aa:f0:b4:15:81:b9:f0: 02:17:1a:a5:da:f2:71:ee:cc:17:1f:36:28:53:50: cf:b7:91:54:76:f6:6e:6d:01:4c:69:d3:ad:84:19: 0f:f0:f3:7e:cf:97:96:20:a4:d7:cd:c9:03:6b:29: 23:f0:ee:2d:41:ba:45:b7:b7:63:fb:ba:9c:7a:48: 86:71:39:c3:39:26:58:29:10:c0:c2:90:e4:26:fc: 46:be:43:51:b5:b0:64:e8:bb:91:80:15:0c:7c:14: c2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:39:6C:9F:EA:26:AE:05:61:F8:56:6E:44:29:88:03:1F:CC:5F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl X509v3 Authority Key Identifier: keyid:DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer sbgp-ipAddrBlock: critical IPv4: 204.145.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:85:86:a9:63:0a:ab:bf:fe:0b:17:a2:76:9d:54:b1:6d:ab: b7:e3:63:10:f8:e5:fd:18:c8:40:e8:a0:d9:e3:61:4a:dd:df: 26:ab:2f:2c:ba:a4:67:e6:6d:59:ec:37:af:11:74:25:29:c2: 99:15:33:df:d1:29:92:70:5e:f9:22:b8:0c:8c:b4:1b:bd:82: 16:16:91:b3:15:fe:22:56:0d:9e:fd:76:48:74:b9:81:88:91: da:61:a4:95:a1:56:37:3d:7e:85:f9:ba:a7:96:a3:c2:a1:81: 18:61:84:58:13:6c:fc:3f:5c:c2:2e:25:6f:9a:28:e5:35:ff: cf:b9:19:52:48:c3:0b:b2:b6:6e:10:94:11:6f:ec:51:44:3f: dc:fa:03:49:95:02:db:42:b3:e8:fa:ad:29:77:c6:c2:e9:4b: 64:e4:72:46:59:cf:e4:b4:69:49:68:6d:38:2a:37:be:94:d1: 89:7e:73:9f:e6:f3:3e:07:52:47:0d:e7:3f:75:9d:5a:5e:9c: f3:eb:49:59:6f:68:49:2d:54:33:eb:29:18:49:99:63:b1:c2: 2d:ee:0e:0a:a1:c1:a1:20:21:55:94:a0:b4:d9:a6:a2:d2:c0: d3:ca:aa:f1:d0:d4:8b:79:e8:e2:3b:b6:d2:7a:b6:44:f1:b7: 1f:c9:12:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm0aOoTXABKXvL6IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U2NjBiY2MtNWYwNi00MzAyLWJkMDQtNzZhNmFmZjhi NDBjMB4XDTI1MDUwMTAzNTA0M1oXDTI1MDczMDAzNTA0M1owLzEtMCsGA1UEAxMk ZThiZDJlNjktMjYxMS00YzJhLWFlMzEtOTJjNzBiZjZlODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuZtqo7fHjJZP7CV7M/G/7KriB3zNr+ICLTY Qv7pjey2sPrdKkgMohFSy4D4qrKRc2PCLKRJp/LZ7oKM2+65RB9g3fV+Ewuiozut k5FR+pgxbuT+U28gJszxPtu9pgbnzpLcHDTQul5jMF1TJo09PZfd+aQwYx5kLuyg 430SSv3c0ItUIkiCVYPwf0nEa2aNJsVZMsnRTh+gk9dyHarwtBWBufACFxql2vJx 7swXHzYoU1DPt5FUdvZubQFMadOthBkP8PN+z5eWIKTXzckDaykj8O4tQbpFt7dj +7qcekiGcTnDOSZYKRDAwpDkJvxGvkNRtbBk6LuRgBUMfBTCqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI5bJ/qJq4FYfhWbkQpiAMfzF+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZTY2 MGJjYy01ZjA2LTQzMDItYmQwNC03NmE2YWZmOGI0MGMvZGZjNDM5ODctZTUyZS0z MGFhLTg1N2YtM2JkNmVmNjRkZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2U2NjBiY2MtNWYwNi00MzAyLWJk MDQtNzZhNmFmZjhiNDBjL2NlNjYwYmNjLTVmMDYtNDMwMi1iZDA0LTc2YTZhZmY4 YjQwYy5jcmwwHwYDVR0jBBgwFoAU2nV7pHGWjPj1zQTMP7gapf4X3ZgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZTY2MGJjYy01ZjA2LTQzMDItYmQwNC03NmE2 YWZmOGI0MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGFhqljCqu//gsXonadVLFtq7fjYxD45f0YyEDooNnjYUrd3yarLyy6 pGfmbVnsN68RdCUpwpkVM9/RKZJwXvkiuAyMtBu9ghYWkbMV/iJWDZ79dkh0uYGI kdphpJWhVjc9foX5uqeWo8KhgRhhhFgTbPw/XMIuJW+aKOU1/8+5GVJIwwuytm4Q lBFv7FFEP9z6A0mVAttCs+j6rSl3xsLpS2TkckZZz+S0aUlobTgqN76U0Yl+c5/m 8z4HUkcN5z91nVpenPPrSVlvaEktVDPrKRhJmWOxwi3uDgqhwaEgIVWUoLTZpqLS wNPKqvHQ1It56OI7ttJ6tkTxtx/JEks= -----END CERTIFICATE-----Generated at Tue May 13 06:44:10 2025 by rpki-client