$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa File: 7281ae23-867a-34c7-a504-aa8437b8e969.roa (raw, json) Hash identifier: E+j5uG8Jd6KojIwaneoSu3A16Ut9DND/IcuAXd0oXyg= Subject key identifier: 71:60:FA:BF:0B:7A:5D:D0:3D:97:17:EB:A0:1C:F6:E7:8D:F7:A5:03 Certificate issuer: /CN=874e86b5-586f-43d7-be6f-cf21e434b31a Certificate serial: 010D0C9F4328584930DE5CC4F0C65A0A7A9A2C00 Authority key identifier: 79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 55270 IP address blocks: 204.154.142.0/23 maxlen: 23 2602:ff43::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:5c:c4:f0:c6:5a:0a:7a:9a:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874e86b5-586f-43d7-be6f-cf21e434b31a Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=46f566be-c109-4806-b72e-138e8ed62796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d5:11:42:7d:77:6c:8d:a5:5a:96:c5:18:ca: ef:4a:d5:fe:7e:9d:fe:f4:7c:be:ea:65:f4:18:ac: 68:a3:d4:9f:9a:a2:7d:1a:ef:0b:ce:52:2b:51:88: 86:6e:43:11:4d:a3:ae:a8:8f:c9:3a:d2:fe:a4:3b: 2a:bb:1e:66:a8:66:f6:49:71:53:76:59:a6:fb:4e: b3:ae:65:25:b1:68:67:92:b0:28:96:72:ef:c4:cf: bb:ef:13:63:c8:a2:7e:20:42:bb:49:58:6b:d0:cb: 32:8c:4c:fc:27:69:10:c9:03:3c:d2:d9:c6:78:eb: 46:20:76:d9:5c:37:62:98:f7:ce:d5:80:79:35:a5: ff:52:d5:9a:5a:e9:21:94:d5:c0:71:df:90:10:b3: 57:6f:28:1c:cc:ea:60:54:2f:5f:6b:43:c6:32:c4: e1:77:14:9b:1b:6d:1d:53:d5:d5:4d:51:b2:dc:9c: 66:d8:bb:cd:57:a2:d5:ce:47:ad:cc:c8:5a:48:66: a2:e9:b5:13:8a:0b:f9:72:ff:d9:f6:02:e3:c0:17: 39:4b:30:53:87:69:31:ce:f8:3d:eb:1a:22:03:30: 59:e5:2a:3e:15:25:e8:4b:d3:bb:33:b3:00:8b:29: 41:be:75:dd:91:56:61:a5:89:85:a8:b9:6b:9b:cc: 44:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:60:FA:BF:0B:7A:5D:D0:3D:97:17:EB:A0:1C:F6:E7:8D:F7:A5:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/7281ae23-867a-34c7-a504-aa8437b8e969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl X509v3 Authority Key Identifier: keyid:79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer sbgp-ipAddrBlock: critical IPv4: 204.154.142.0/23 IPv6: 2602:ff43::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:48:b4:6b:b3:17:2f:86:e9:94:ae:2d:3e:9b:d6:19:47:8c: a8:81:04:db:0f:77:43:ef:2a:30:89:5a:f5:42:34:94:ba:16: ce:b3:1a:8e:93:a1:01:eb:a4:4e:dd:6c:9c:77:41:dc:ed:8a: 6c:4b:b9:c2:d6:39:b3:4b:60:4f:e0:d1:05:4e:b5:72:85:08: 4e:b7:05:ae:fd:5a:ab:f8:98:2b:8e:a2:1d:2b:09:f4:48:04: cd:19:76:d2:d0:17:f8:13:1a:b1:3e:20:d0:70:b0:cf:c2:47: 8a:01:62:ed:9c:ea:cc:0f:dc:5d:0c:b8:de:73:41:89:fe:39: 2d:fe:e8:ab:a1:de:e5:67:79:83:5c:94:92:d5:ec:20:25:69: e3:45:48:d0:74:1d:fd:b6:6f:19:1e:36:a6:a6:fe:23:b0:f3: e2:9f:d6:9d:9a:62:23:15:8d:78:4f:8e:45:7a:b8:dc:8a:b3: 69:60:69:ab:b1:de:e0:8f:d2:a6:87:0e:22:78:23:fe:e8:2f: 68:a3:17:b3:18:4e:64:a7:36:26:4d:bd:63:12:91:38:f4:fa: f2:b0:3f:62:6d:39:41:62:6e:fe:4c:24:68:6c:97:af:e8:15: 7c:d9:3a:86:b4:e4:06:67:14:49:d6:d5:32:34:3f:65:f0:c6: e9:c0:77:8d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEkw3lzE8MZaCnqaLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc0ZTg2YjUtNTg2Zi00M2Q3LWJlNmYtY2YyMWU0MzRi MzFhMB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NDZmNTY2YmUtYzEwOS00ODA2LWI3MmUtMTM4ZThlZDYyNzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9URQn13bI2lWpbFGMrvStX+fp3+9Hy+6mX0 GKxoo9SfmqJ9Gu8LzlIrUYiGbkMRTaOuqI/JOtL+pDsqux5mqGb2SXFTdlmm+06z rmUlsWhnkrAolnLvxM+77xNjyKJ+IEK7SVhr0MsyjEz8J2kQyQM80tnGeOtGIHbZ XDdimPfO1YB5NaX/UtWaWukhlNXAcd+QELNXbygczOpgVC9fa0PGMsThdxSbG20d U9XVTVGy3Jxm2LvNV6LVzketzMhaSGai6bUTigv5cv/Z9gLjwBc5SzBTh2kxzvg9 6xoiAzBZ5So+FSXoS9O7M7MAiylBvnXdkVZhpYmFqLlrm8xEXwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHFg+r8Lel3QPZcX66Ac9ueN96UDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NzRl ODZiNS01ODZmLTQzZDctYmU2Zi1jZjIxZTQzNGIzMWEvNzI4MWFlMjMtODY3YS0z NGM3LWE1MDQtYWE4NDM3YjhlOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODc0ZTg2YjUtNTg2Zi00M2Q3LWJl NmYtY2YyMWU0MzRiMzFhLzg3NGU4NmI1LTU4NmYtNDNkNy1iZTZmLWNmMjFlNDM0 YjMxYS5jcmwwHwYDVR0jBBgwFoAUeU1ChMm712cQU58VdYLc1BLE/u0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NzRlODZiNS01ODZmLTQzZDctYmU2Zi1jZjIx ZTQzNGIzMWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBzJqOMA4E AgACMAgDBgQmAv9DADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA/SLRrsxcvhumUri0+m9YZR4yogQTbD3dD 7yowiVr1QjSUuhbOsxqOk6EB66RO3Wycd0Hc7YpsS7nC1jmzS2BP4NEFTrVyhQhO twWu/Vqr+JgrjqIdKwn0SATNGXbS0Bf4ExqxPiDQcLDPwkeKAWLtnOrMD9xdDLje c0GJ/jkt/uirod7lZ3mDXJSS1ewgJWnjRUjQdB39tm8ZHjampv4jsPPin9admmIj FY14T45FerjcirNpYGmrsd7gj9Kmhw4ieCP+6C9ooxezGE5kpzYmTb1jEpE49Pry sD9ibTlBYm7+TCRobJev6BV82TqGtOQGZxRJ1tUyND9l8MbpwHeN -----END CERTIFICATE-----Generated at Tue Apr 29 09:23:05 2025 by rpki-client