$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa File: d336f765-c7fe-3817-b529-a6906fb694ea.roa (raw, json) Hash identifier: lzK/+PjlJP3AIVyfIccn2bzQtr82wJbEFH5GaIq+mTY= Subject key identifier: 92:77:D4:C1:FE:22:FD:12:97:3D:40:47:C2:CD:18:FE:21:BF:F9:0D Certificate issuer: /CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Certificate serial: 010D0C9F4328584973DEE2099D4360EE920E5B20 Authority key identifier: 04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 40628 IP address blocks: 204.61.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e2:09:9d:43:60:ee:92:0e:5b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b38f5b7a-6c56-4279-aa50-3499b1fb606b Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=a5acbed2-f3f9-41b8-8043-e5398f22c7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:eb:fe:ba:f8:51:69:b6:38:12:24:fa:62:80: 99:2c:65:d6:bd:fc:a9:8b:30:30:a1:b1:4b:e0:91: 45:9c:79:f2:91:7b:94:41:3b:f8:39:e8:57:14:7a: 71:20:b8:90:a2:ee:4a:38:14:f4:b1:7a:88:6b:14: 8e:73:7c:90:5d:7d:2f:7b:50:84:52:a3:65:dc:4c: 5f:43:42:d3:b5:40:60:ed:a4:03:d8:fc:c1:5c:02: ae:09:cd:19:b7:be:95:39:fa:90:37:7c:ca:d7:bd: 1a:fb:c2:80:2b:5b:fd:d9:71:93:f3:a7:8c:ef:50: 9f:c3:07:23:39:a0:27:b9:0b:74:a5:47:de:03:83: 49:3a:4a:ee:da:20:fd:15:92:bf:54:fb:10:95:8c: 0e:fc:d2:e0:92:11:e1:76:26:5f:c8:cc:c1:1d:ed: 06:66:2c:d1:1c:92:fe:3e:28:46:ab:c3:47:29:e2: b3:30:4f:bc:c9:ac:f6:a2:60:b8:ae:dc:e4:2e:cf: 81:bc:da:57:4a:a3:1c:1b:20:40:68:f3:7c:3f:d3: 3d:86:a8:81:43:8a:38:20:66:6d:d9:3b:05:7e:ec: 93:72:30:11:e5:f2:84:3e:37:cb:75:9c:96:75:99: e6:b1:39:11:2e:e9:c8:25:4f:63:3f:c8:54:d5:29: 4d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:77:D4:C1:FE:22:FD:12:97:3D:40:47:C2:CD:18:FE:21:BF:F9:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/d336f765-c7fe-3817-b529-a6906fb694ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b/b38f5b7a-6c56-4279-aa50-3499b1fb606b.crl X509v3 Authority Key Identifier: keyid:04:13:C3:E2:D5:03:AC:7D:22:1A:21:48:5A:DC:22:8B:A4:87:B2:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b38f5b7a-6c56-4279-aa50-3499b1fb606b.cer sbgp-ipAddrBlock: critical IPv4: 204.61.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:13:d1:53:8a:1c:26:f1:8f:8e:57:32:07:72:d3:30:35:98: f9:1e:4a:d8:cf:37:dd:1c:ef:1e:c8:93:ed:20:0d:d2:4e:f4: a1:6a:f5:44:5b:f9:67:7c:81:2d:83:99:d1:f4:5e:5e:69:11: a1:65:a2:a7:63:75:92:61:ba:72:af:4a:7d:65:cc:ae:a4:6d: 7a:0e:66:a5:ef:17:b7:31:78:ed:e0:98:b0:96:1b:6d:12:ec: bb:87:c2:5a:67:19:08:54:24:85:b9:ef:6f:f3:2c:fb:7b:9a: e8:9d:12:31:84:51:65:07:4a:6d:40:be:ed:ab:78:65:72:c6: a6:09:54:7c:81:9c:cc:dc:3d:10:51:d6:13:0f:15:ee:3a:0d: 32:75:2e:9a:0e:31:fb:e0:1c:86:33:68:59:ac:26:04:86:93: 83:e2:6e:88:9a:a1:b1:ae:cd:72:7a:ea:cf:19:18:61:a9:07: 9c:1c:a5:d4:4c:85:4e:81:87:cc:4f:0e:cb:07:bb:bf:b0:6f: 74:cc:1b:a9:dd:54:24:66:74:78:ae:63:5e:c0:a3:a5:fd:85: 5e:b2:f1:30:3f:4a:79:3c:6e:f9:c2:37:f5:88:2d:65:74:06: c7:c0:b1:00:bf:cd:4d:44:50:74:19:e1:2e:07:37:a4:ce:c0: b4:be:e8:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uIJnUNg7pIOWyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4ZjViN2EtNmM1Ni00Mjc5LWFhNTAtMzQ5OWIxZmI2 MDZiMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk YTVhY2JlZDItZjNmOS00MWI4LTgwNDMtZTUzOThmMjJjN2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+v+uvhRabY4EiT6YoCZLGXWvfypizAwobFL 4JFFnHnykXuUQTv4OehXFHpxILiQou5KOBT0sXqIaxSOc3yQXX0ve1CEUqNl3Exf Q0LTtUBg7aQD2PzBXAKuCc0Zt76VOfqQN3zK170a+8KAK1v92XGT86eM71Cfwwcj OaAnuQt0pUfeA4NJOkru2iD9FZK/VPsQlYwO/NLgkhHhdiZfyMzBHe0GZizRHJL+ PihGq8NHKeKzME+8yaz2omC4rtzkLs+BvNpXSqMcGyBAaPN8P9M9hqiBQ4o4IGZt 2TsFfuyTcjAR5fKEPjfLdZyWdZnmsTkRLunIJU9jP8hU1SlN5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJ31MH+Iv0Slz1AR8LNGP4hv/kNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhm NWI3YS02YzU2LTQyNzktYWE1MC0zNDk5YjFmYjYwNmIvZDMzNmY3NjUtYzdmZS0z ODE3LWI1MjktYTY5MDZmYjY5NGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjM4ZjViN2EtNmM1Ni00Mjc5LWFh NTAtMzQ5OWIxZmI2MDZiL2IzOGY1YjdhLTZjNTYtNDI3OS1hYTUwLTM0OTliMWZi NjA2Yi5jcmwwHwYDVR0jBBgwFoAUBBPD4tUDrH0iGiFIWtwii6SHstUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMzhmNWI3YS02YzU2LTQyNzktYWE1MC0zNDk5 YjFmYjYwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzD0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwT0VOKHCbxj45XMgdy0zA1mPkeStjPN90c7x7Ik+0gDdJO9KFq9URb +Wd8gS2DmdH0Xl5pEaFloqdjdZJhunKvSn1lzK6kbXoOZqXvF7cxeO3gmLCWG20S 7LuHwlpnGQhUJIW572/zLPt7muidEjGEUWUHSm1Avu2reGVyxqYJVHyBnMzcPRBR 1hMPFe46DTJ1LpoOMfvgHIYzaFmsJgSGk4PiboiaobGuzXJ66s8ZGGGpB5wcpdRM hU6Bh8xPDssHu7+wb3TMG6ndVCRmdHiuY17Ao6X9hV6y8TA/Snk8bvnCN/WILWV0 BsfAsQC/zU1EUHQZ4S4HN6TOwLS+6Ec= -----END CERTIFICATE-----Generated at Fri May 2 03:25:30 2025 by rpki-client