$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa File: 3e5f7689-0ac5-3013-a3be-588929f3eeac.roa (raw, json) Hash identifier: 4q7BDZRwkcu34hc2iTEBms6ACAoOejJqcBPE3R3wb0c= Subject key identifier: 20:6B:64:E0:AD:36:DF:B6:16:14:A0:C2:47:CE:32:4C:00:A0:C1:1D Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285849D594E39AAEDFA07218236C80 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 4760 IP address blocks: 205.252.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e3:9a:ae:df:a0:72:18:23:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=3bf0ba93-a607-4e07-b3d1-df853756597d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:93:aa:26:23:c2:7b:8f:61:5a:b9:8d:5d:8a: 8e:2d:dd:6b:81:eb:db:53:ac:ef:06:cf:23:ec:f1: 89:2a:dd:f1:8e:dd:64:01:29:fa:0c:3c:b8:1e:08: 22:73:2c:95:d0:cd:c7:a1:af:00:db:37:e3:e3:9c: 6b:d4:d6:89:dc:99:53:70:c1:01:ca:dd:fa:46:bb: 94:4f:99:ec:5b:4b:49:92:6d:a9:ef:90:63:21:1d: ec:c8:9d:fb:aa:2b:c8:5d:50:06:3f:8a:87:20:54: b6:4e:d9:fa:32:a1:e9:30:5a:27:68:db:1f:b9:67: 33:8e:0b:69:5f:af:f3:1e:51:9e:8f:06:47:10:6f: 8e:a0:2a:b9:73:1c:42:fb:9d:f1:3e:77:a9:d4:e4: fd:88:3d:ae:10:25:bc:a4:68:21:bf:21:2f:eb:f3: 02:ec:66:5b:58:1d:96:cc:0d:ee:71:a7:a0:33:38: 40:36:ae:06:b2:ab:6f:8a:49:8a:1b:e4:67:54:d3: 30:1a:54:4b:e1:b1:ce:07:04:4d:26:eb:62:b3:5c: d0:74:e1:e3:0c:1e:70:65:66:75:97:74:40:50:3a: 61:5c:6d:2e:1a:6d:f8:d4:9e:90:f7:31:e0:34:d0: b2:61:d6:6a:ad:ce:36:11:e5:63:dd:61:c3:ff:74: a0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6B:64:E0:AD:36:DF:B6:16:14:A0:C2:47:CE:32:4C:00:A0:C1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 205.252.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:11:b4:10:a9:d0:cc:aa:30:8b:11:43:a7:fe:ae:95:b1:f7: 3e:58:fe:70:3a:5b:aa:31:4c:03:3a:23:ed:9f:c5:47:d0:dc: 0c:f9:37:90:df:54:3c:7c:e0:15:3d:f5:47:22:06:16:5a:bd: 39:eb:ed:bd:57:9f:00:c7:1a:05:cd:27:76:80:e9:d7:22:b2: 72:d5:1b:b2:f7:cf:91:d5:95:53:73:ce:4e:15:4d:fa:9e:7f: d3:d4:4f:28:7d:4e:dc:70:1c:50:d2:9d:ab:32:3e:6d:21:13: 61:b9:9b:38:b3:d6:c6:8f:f7:6b:87:c8:bd:47:1c:eb:ad:a7: e1:c3:8c:f9:87:4b:b9:38:40:22:6f:a9:a3:8d:e7:e3:ab:d4: 86:35:95:6e:fd:a0:e8:3c:2e:6f:30:a8:f4:d5:06:57:22:41: 82:e2:b4:bb:1e:c6:85:63:87:3c:98:14:72:77:6b:b8:a8:ac: 12:b8:c3:d8:ce:4a:01:e8:40:ea:52:97:e6:7b:be:7b:2f:d1: 7c:45:25:03:19:be:db:01:21:23:95:7b:84:d0:56:cf:20:19: 37:d2:54:4c:06:dc:60:52:a5:84:32:db:c1:16:df:61:5e:fb: 25:9c:dd:81:9d:b7:26:b5:d0:a2:f0:d1:0a:5d:33:e2:a9:f9: df:a2:28:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOOart+gchgjbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk M2JmMGJhOTMtYTYwNy00ZTA3LWIzZDEtZGY4NTM3NTY1OTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZOqJiPCe49hWrmNXYqOLd1rgevbU6zvBs8j 7PGJKt3xjt1kASn6DDy4HggicyyV0M3Hoa8A2zfj45xr1NaJ3JlTcMEByt36RruU T5nsW0tJkm2p75BjIR3syJ37qivIXVAGP4qHIFS2Ttn6MqHpMFonaNsfuWczjgtp X6/zHlGejwZHEG+OoCq5cxxC+53xPnep1OT9iD2uECW8pGghvyEv6/MC7GZbWB2W zA3ucaegMzhANq4GsqtvikmKG+RnVNMwGlRL4bHOBwRNJutis1zQdOHjDB5wZWZ1 l3RAUDphXG0uGm341J6Q9zHgNNCyYdZqrc42EeVj3WHD/3SgKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBrZOCtNt+2FhSgwkfOMkwAoMEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvM2U1Zjc2ODktMGFjNS0z MDEzLWEzYmUtNTg4OTI5ZjNlZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzfyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcRtBCp0MyqMIsRQ6f+rpWx9z5Y/nA6W6oxTAM6I+2fxUfQ3Az5N5Df VDx84BU99UciBhZavTnr7b1XnwDHGgXNJ3aA6dcisnLVG7L3z5HVlVNzzk4VTfqe f9PUTyh9TtxwHFDSnasyPm0hE2G5mziz1saP92uHyL1HHOutp+HDjPmHS7k4QCJv qaON5+Or1IY1lW79oOg8Lm8wqPTVBlciQYLitLsexoVjhzyYFHJ3a7iorBK4w9jO SgHoQOpSl+Z7vnsv0XxFJQMZvtsBISOVe4TQVs8gGTfSVEwG3GBSpYQy28EW32Fe +yWc3YGdtya10KLw0QpdM+Kp+d+iKPU= -----END CERTIFICATE-----Generated at Wed May 14 02:35:27 2025 by rpki-client