$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa File: 2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa (raw, json) Hash identifier: oS+r17FNEd73L9QasOlYtP3rIihTQniX+iE6ntdGj7I= Subject key identifier: 13:43:5C:87:A9:EA:CC:1A:13:58:42:FF:09:6D:60:87:0D:48:07:D9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F432858498FC9C0AB08E3A6657F7A58A0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa Signing time: Fri 18 Apr 2025 01:00:47 +0000 ROA not before: Fri 18 Apr 2025 01:00:47 +0000 ROA not after: Thu 17 Jul 2025 01:00:47 +0000 asID: 214213 IP address blocks: 204.27.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c9:c0:ab:08:e3:a6:65:7f:7a:58:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 18 01:00:47 2025 GMT Not After : Jul 17 01:00:47 2025 GMT Subject: CN=59dbabd7-123e-48ab-a1c0-c3518a1414b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c3:ea:36:09:67:e6:d5:35:a4:08:b7:17:50: 5c:91:0a:51:10:a0:08:45:0f:ae:7f:10:9f:48:5d: e5:fb:77:ee:52:89:40:d9:5f:b9:8e:5a:0b:f5:3f: fd:3e:91:b5:18:e0:c1:8c:59:ba:42:56:4c:a0:2f: 7b:67:78:c9:d4:5f:e9:a1:88:63:13:c9:9c:6d:23: c9:24:11:fb:81:52:2d:01:3f:d0:09:25:56:c6:88: f1:83:d1:79:aa:c0:52:e0:10:35:1d:f2:11:df:bb: 5a:e4:b1:44:5b:08:17:88:bf:b7:2f:37:0a:99:19: 69:ff:08:17:a7:7e:89:b1:32:d0:3a:21:94:f7:fc: 64:c8:a7:7a:3b:49:f1:a4:d6:74:66:12:7e:ae:a2: 68:7b:73:81:7e:12:9e:cc:83:35:89:9c:9b:28:b7: e8:35:22:22:eb:36:ff:84:8b:17:b7:0f:9e:11:b2: 84:58:81:4d:81:5c:ba:37:e1:7d:7d:bc:ce:46:5d: e4:5b:d7:91:99:c0:2f:86:f3:95:ee:70:83:ae:ff: 74:c9:7d:64:08:fe:43:5c:31:16:8b:57:c6:9f:c7: 7e:cf:52:a7:5f:1f:8c:fa:7e:e7:9d:7b:d0:d0:d0: 0a:b0:13:11:12:08:9b:14:b7:5b:29:b2:7d:03:43: 7d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:43:5C:87:A9:EA:CC:1A:13:58:42:FF:09:6D:60:87:0D:48:07:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2b2aeff8-0463-3e4f-a14b-7e7fd9134954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.27.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e4:b8:ab:11:86:4b:64:17:7e:30:68:72:0f:94:7b:b3:06: cd:98:bd:bf:df:df:15:e2:f4:5a:35:d1:04:0a:f6:0b:56:d4: 99:2e:af:0e:65:19:d4:9d:f2:2d:b6:3c:f4:09:68:7a:b8:a1: 8e:50:6e:2f:a1:d1:1e:8a:2e:22:a3:a4:40:b1:dc:85:8e:57: c7:43:8d:0c:a3:26:97:1c:c9:87:91:09:eb:57:00:67:19:00: 2a:80:c9:b1:38:42:0a:63:47:75:a8:1c:30:a4:02:0c:27:52: 07:88:fb:59:14:63:93:c1:ff:60:ce:3d:16:7e:91:b8:19:ac: b4:55:ce:0c:aa:5d:8f:eb:1c:87:43:0f:6c:47:8b:98:40:55: 55:f9:b9:82:4e:3f:6d:eb:16:47:50:af:b3:7d:5d:4e:28:de: 1e:73:85:b9:ab:90:72:84:97:4f:26:7c:0a:6e:1f:c1:8c:89: 5c:69:90:07:a0:7b:39:94:a0:ab:df:fa:07:40:6f:96:b9:2a: 6f:a5:e5:4e:3b:75:91:ef:bc:eb:4b:2c:e3:e3:6e:f5:93:29: dd:68:9d:2e:bb:e5:20:59:24:fa:77:4c:3f:e2:65:5c:12:22: c3:3b:08:b1:f5:81:49:ca:9b:2a:fe:94:fd:8d:94:87:18:45: fd:94:27:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPycCrCOOmZX96WKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk NTlkYmFiZDctMTIzZS00OGFiLWExYzAtYzM1MThhMTQxNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8PqNgln5tU1pAi3F1BckQpREKAIRQ+ufxCf SF3l+3fuUolA2V+5jloL9T/9PpG1GODBjFm6QlZMoC97Z3jJ1F/poYhjE8mcbSPJ JBH7gVItAT/QCSVWxojxg9F5qsBS4BA1HfIR37ta5LFEWwgXiL+3LzcKmRlp/wgX p36JsTLQOiGU9/xkyKd6O0nxpNZ0ZhJ+rqJoe3OBfhKezIM1iZybKLfoNSIi6zb/ hIsXtw+eEbKEWIFNgVy6N+F9fbzORl3kW9eRmcAvhvOV7nCDrv90yX1kCP5DXDEW i1fGn8d+z1KnXx+M+n7nnXvQ0NAKsBMREgibFLdbKbJ9A0N9PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNDXIep6swaE1hC/wltYIcNSAfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmIyYWVmZjgtMDQ2My0z ZTRmLWExNGItN2U3ZmQ5MTM0OTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzkuKsRhktkF34waHIPlHuzBs2Yvb/f3xXi9Fo10QQK9gtW1Jkurw5l GdSd8i22PPQJaHq4oY5Qbi+h0R6KLiKjpECx3IWOV8dDjQyjJpccyYeRCetXAGcZ ACqAybE4QgpjR3WoHDCkAgwnUgeI+1kUY5PB/2DOPRZ+kbgZrLRVzgyqXY/rHIdD D2xHi5hAVVX5uYJOP23rFkdQr7N9XU4o3h5zhbmrkHKEl08mfApuH8GMiVxpkAeg ezmUoKvf+gdAb5a5Km+l5U47dZHvvOtLLOPjbvWTKd1onS675SBZJPp3TD/iZVwS IsM7CLH1gUnKmyr+lP2NlIcYRf2UJ5s= -----END CERTIFICATE-----Generated at Sun Apr 27 12:50:54 2025 by rpki-client