$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/20407699-399d-3a34-9a0a-cccc3acac035.roa File: 20407699-399d-3a34-9a0a-cccc3acac035.roa (raw, json) Hash identifier: 4OuMZ41flBv7llFd2voqngsYDmpiYqeMNzYfTrtl3Xs= Subject key identifier: 64:51:84:2C:C1:DB:58:38:CA:8B:91:EC:BF:70:3D:A3:07:3E:68:AB Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c Certificate serial: 010D0C9F4328584975444E4E474C161FA2B043F0 Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/20407699-399d-3a34-9a0a-cccc3acac035.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 25804 IP address blocks: 208.69.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:4e:4e:47:4c:16:1f:a2:b0:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=68f1171d-3c61-4d87-9366-afa06b94c095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2e:b0:e1:1c:ec:1e:2c:ec:7d:8f:a8:91:15: c1:20:85:46:d0:37:19:76:a2:7e:ac:58:d9:ad:1d: af:31:c6:83:1a:5d:d4:26:5f:4e:42:c6:d4:a0:6e: bd:3b:a3:f2:32:6a:51:15:ad:ca:d2:b8:de:68:f1: d8:64:df:8e:be:2d:57:26:7d:06:a9:e8:1a:d5:b9: 44:73:51:81:00:79:24:4a:10:8c:c2:63:fc:fb:dd: 6e:75:e2:c0:45:3f:7e:e0:22:d2:f0:da:25:52:1b: 60:43:f1:fa:33:4d:c8:23:fa:48:f5:c5:e1:55:a9: 60:ec:a7:f7:cb:41:2e:25:dc:6b:ab:0d:23:9b:bb: 37:f0:41:d2:ab:57:a7:74:bc:ed:2d:da:d9:36:73: b9:90:b9:05:7f:93:28:a4:9c:72:01:8f:34:d3:2b: 04:4f:64:a4:88:7b:cd:63:ee:91:56:c0:9f:9d:12: 56:0d:92:1f:df:d4:4d:00:ca:c4:6d:32:ea:e3:44: f4:ca:bd:16:1f:5a:62:79:ee:ba:ca:fd:12:54:3d: 76:85:cd:5d:95:76:ce:09:39:41:81:4b:a1:e4:5e: 4e:64:06:77:38:c9:13:cd:2f:23:6d:e1:ca:a0:3c: ef:c1:c3:c4:6c:5f:c5:0e:dd:47:33:9b:1f:ad:26: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:51:84:2C:C1:DB:58:38:CA:8B:91:EC:BF:70:3D:A3:07:3E:68:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/20407699-399d-3a34-9a0a-cccc3acac035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl X509v3 Authority Key Identifier: keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer sbgp-ipAddrBlock: critical IPv4: 208.69.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:11:d9:a9:9e:a6:52:b3:44:a9:de:ab:ec:2f:cd:0c:0f:84: f3:e2:0e:6c:2b:b7:6f:ad:e0:9b:35:2d:36:b3:7c:16:f7:a5: 25:83:31:5d:b6:4a:c9:10:9d:0a:28:38:51:bf:82:fe:ab:5d: bb:2e:8b:9f:b5:2c:97:d5:51:02:91:6d:01:e7:10:ce:f9:52: fc:1c:f8:47:0f:b3:c7:59:87:27:18:ab:a2:45:ad:17:0a:89: 70:bb:97:dc:f4:72:04:8f:b4:38:01:33:6c:84:db:f0:ba:d4: 33:b4:11:9e:0a:98:38:c6:7e:38:76:54:2d:5a:61:2a:ea:c6: 04:c3:39:42:6e:3d:5d:ff:2f:2b:f4:b4:2a:37:4c:77:c1:d2: 48:7d:42:01:8c:7a:1f:91:17:90:bd:16:79:c3:3c:9c:65:6d: ad:1d:f0:50:1a:6c:2b:40:2a:e3:c7:48:9a:16:36:ee:98:df: 6b:5e:f0:58:60:47:26:24:f1:43:12:cd:81:63:5b:dd:99:25: ad:17:fb:21:e9:ca:99:ad:d8:95:ee:24:dc:bf:ab:fd:e7:70: bd:f1:4e:b7:f0:3b:b9:2b:aa:1e:d8:4e:d1:43:e2:3a:79:a9: 6c:ed:d1:55:88:8c:3e:2e:32:18:6f:d4:d9:51:ab:d4:c5:2a: a3:55:d0:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RE5OR0wWH6KwQ/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw MDdjMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk NjhmMTE3MWQtM2M2MS00ZDg3LTkzNjYtYWZhMDZiOTRjMDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC6w4RzsHizsfY+okRXBIIVG0DcZdqJ+rFjZ rR2vMcaDGl3UJl9OQsbUoG69O6PyMmpRFa3K0rjeaPHYZN+Ovi1XJn0Gqega1blE c1GBAHkkShCMwmP8+91udeLART9+4CLS8NolUhtgQ/H6M03II/pI9cXhValg7Kf3 y0EuJdxrqw0jm7s38EHSq1endLztLdrZNnO5kLkFf5MopJxyAY800ysET2SkiHvN Y+6RVsCfnRJWDZIf39RNAMrEbTLq40T0yr0WH1piee66yv0SVD12hc1dlXbOCTlB gUuh5F5OZAZ3OMkTzS8jbeHKoDzvwcPEbF/FDt1HM5sfrSYN/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRRhCzB21g4youR7L9wPaMHPmirMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2 OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvMjA0MDc2OTktMzk5ZC0z YTM0LTlhMGEtY2NjYzNhY2FjMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0 ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EW0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0R2ameplKzRKneq+wvzQwPhPPiDmwrt2+t4Js1LTazfBb3pSWDMV22 SskQnQooOFG/gv6rXbsui5+1LJfVUQKRbQHnEM75Uvwc+EcPs8dZhycYq6JFrRcK iXC7l9z0cgSPtDgBM2yE2/C61DO0EZ4KmDjGfjh2VC1aYSrqxgTDOUJuPV3/Lyv0 tCo3THfB0kh9QgGMeh+RF5C9FnnDPJxlba0d8FAabCtAKuPHSJoWNu6Y32te8Fhg RyYk8UMSzYFjW92ZJa0X+yHpypmt2JXuJNy/q/3ncL3xTrfwO7krqh7YTtFD4jp5 qWzt0VWIjD4uMhhv1NlRq9TFKqNV0B8= -----END CERTIFICATE-----Generated at Mon Apr 28 01:23:16 2025 by rpki-client