$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/92e5b62f-7306-35cc-a333-59e6a733fe31.roa File: 92e5b62f-7306-35cc-a333-59e6a733fe31.roa (raw, json) Hash identifier: n+EWUg/dVfBSbIRcbAdiiXXMGc94/CnGKKX21AK6Lb4= Subject key identifier: EE:69:27:DE:4E:95:E5:A2:5E:3F:E5:58:F9:61:C2:47:94:31:F3:22 Certificate issuer: /CN=2b43351f-c719-4221-9a96-519406f8433c Certificate serial: 010D0C9F432858491246C78E85C201DDAF857480 Authority key identifier: 57:C3:3D:1F:5B:46:16:7B:99:5D:B5:BE:A8:09:1B:FB:CF:C2:6A:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/92e5b62f-7306-35cc-a333-59e6a733fe31.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 204.15.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/2b43351f-c719-4221-9a96-519406f8433c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/2b43351f-c719-4221-9a96-519406f8433c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c7:8e:85:c2:01:dd:af:85:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b43351f-c719-4221-9a96-519406f8433c Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=d4b8af3c-c7b4-4f8c-9262-878a7c593a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:79:96:bd:fa:30:67:87:25:21:24:85:d7:b3: 6a:ef:51:42:94:c7:5e:a1:77:a2:60:7a:09:29:3e: 0b:f7:6b:46:c0:4e:35:0c:28:b2:44:52:e7:55:01: ab:bf:22:e5:85:bf:74:a2:72:ba:a9:92:36:d1:ad: a6:b1:85:16:7d:02:4a:65:8d:89:fc:74:d8:21:e5: 30:df:00:df:46:2f:52:9c:d1:0e:29:aa:c1:d9:a3: 6a:99:3e:e5:9f:15:32:7d:eb:2b:c2:16:5e:7b:45: 48:44:95:d4:69:5b:b0:e3:37:76:b3:04:fc:9b:e5: 72:fa:09:1c:de:81:b0:77:de:e7:d5:17:19:8f:08: 0b:f7:d0:68:85:43:03:fc:42:81:9d:07:35:ce:53: ef:dc:dd:24:7b:c4:a6:29:be:92:ac:d8:22:df:76: f6:06:f6:29:a9:43:48:71:d2:a8:da:9f:f9:65:1d: 12:d4:d2:10:f7:0e:9e:92:20:a5:b5:5e:09:68:b7: 96:6a:0f:39:67:06:8c:06:af:ae:ae:4f:36:45:97: 98:9e:38:d3:5b:77:97:2f:4c:04:0e:cf:df:1e:4a: e9:8e:5f:4b:56:a4:8a:7a:27:b0:5d:cb:88:ab:a9: 44:58:8f:2a:ab:4b:84:d5:03:d2:c7:69:1c:03:64: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:69:27:DE:4E:95:E5:A2:5E:3F:E5:58:F9:61:C2:47:94:31:F3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/92e5b62f-7306-35cc-a333-59e6a733fe31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/2b43351f-c719-4221-9a96-519406f8433c.crl X509v3 Authority Key Identifier: keyid:57:C3:3D:1F:5B:46:16:7B:99:5D:B5:BE:A8:09:1B:FB:CF:C2:6A:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c.cer sbgp-ipAddrBlock: critical IPv4: 204.15.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:65:cb:c3:d4:ca:b0:e5:92:42:95:9d:ec:bf:4e:a0:f1:64: 6d:35:7f:75:b8:d6:ac:1d:ce:be:41:9f:93:4c:46:fa:72:61: 25:b3:dc:97:96:1c:70:d4:b0:8b:d8:0f:3f:e9:ba:dd:24:5a: 89:6d:e5:a8:e4:60:29:ac:41:f0:05:de:d7:3b:8c:17:4a:c4: 24:87:a8:b5:2c:8f:a7:92:ae:c1:38:b3:93:fb:e6:a0:e5:55: 73:04:ec:2d:16:e4:23:53:dd:fc:0c:8a:50:26:33:66:d9:15: e9:1f:35:2a:13:0b:88:7e:d7:b7:f8:f1:8c:c1:05:e9:88:1f: 16:63:25:b5:9f:90:5f:7c:ac:8c:68:e2:7c:99:eb:8d:c3:a3: da:64:c4:64:99:6c:87:ec:af:a9:e6:f2:8d:ac:08:af:dc:ca: 07:e6:bc:f3:ca:63:5e:42:43:62:54:d6:2e:f2:cb:af:86:f4: b0:ae:d2:54:63:65:01:e4:de:14:5a:72:08:2e:81:d1:ff:29: 42:9c:a7:02:fd:c0:67:a7:25:73:2b:60:84:67:51:55:9f:c7: 79:83:24:e2:19:64:10:e3:82:04:db:31:a7:bf:6d:6b:55:3e: cc:ed:c6:33:d1:42:5b:b8:dd:33:17:ae:49:ad:f5:81:e4:aa: 0c:9c:49:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRseOhcIB3a+FdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI0MzM1MWYtYzcxOS00MjIxLTlhOTYtNTE5NDA2Zjg0 MzNjMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZDRiOGFmM2MtYzdiNC00ZjhjLTkyNjItODc4YTdjNTkzYTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23mWvfowZ4clISSF17Nq71FClMdeoXeiYHoJ KT4L92tGwE41DCiyRFLnVQGrvyLlhb90onK6qZI20a2msYUWfQJKZY2J/HTYIeUw 3wDfRi9SnNEOKarB2aNqmT7lnxUyfesrwhZee0VIRJXUaVuw4zd2swT8m+Vy+gkc 3oGwd97n1RcZjwgL99BohUMD/EKBnQc1zlPv3N0ke8SmKb6SrNgi33b2BvYpqUNI cdKo2p/5ZR0S1NIQ9w6ekiCltV4JaLeWag85ZwaMBq+urk82RZeYnjjTW3eXL0wE Ds/fHkrpjl9LVqSKeiewXcuIq6lEWI8qq0uE1QPSx2kcA2SeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5pJ95OleWiXj/lWPlhwkeUMfMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYjQz MzUxZi1jNzE5LTQyMjEtOWE5Ni01MTk0MDZmODQzM2MvOTJlNWI2MmYtNzMwNi0z NWNjLWEzMzMtNTllNmE3MzNmZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmI0MzM1MWYtYzcxOS00MjIxLTlh OTYtNTE5NDA2Zjg0MzNjLzJiNDMzNTFmLWM3MTktNDIyMS05YTk2LTUxOTQwNmY4 NDMzYy5jcmwwHwYDVR0jBBgwFoAUV8M9H1tGFnuZXbW+qAkb+8/CalkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYjQzMzUxZi1jNzE5LTQyMjEtOWE5Ni01MTk0 MDZmODQzM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzA8iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9ly8PUyrDlkkKVney/TqDxZG01f3W41qwdzr5Bn5NMRvpyYSWz3JeW HHDUsIvYDz/put0kWolt5ajkYCmsQfAF3tc7jBdKxCSHqLUsj6eSrsE4s5P75qDl VXME7C0W5CNT3fwMilAmM2bZFekfNSoTC4h+17f48YzBBemIHxZjJbWfkF98rIxo 4nyZ643Do9pkxGSZbIfsr6nm8o2sCK/cygfmvPPKY15CQ2JU1i7yy6+G9LCu0lRj ZQHk3hRacggugdH/KUKcpwL9wGenJXMrYIRnUVWfx3mDJOIZZBDjggTbMae/bWtV PsztxjPRQlu43TMXrkmt9YHkqgycSWY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:04 2025 by rpki-client