$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8df7b4d6-d05d-3755-972a-3ca3ce19bda1.roa File: 8df7b4d6-d05d-3755-972a-3ca3ce19bda1.roa (raw, json) Hash identifier: YpeI0IYpxcNEwrWjxbbL0EzHyKfMVFE3AkfesVvISSw= Subject key identifier: 0A:96:B2:6A:85:78:B3:65:B3:2A:46:B6:E2:F5:5A:B7:B3:26:EA:4C Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F432858498CFF0FC182A9B2729477BC80 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8df7b4d6-d05d-3755-972a-3ca3ce19bda1.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 13536 IP address blocks: 216.114.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:0f:c1:82:a9:b2:72:94:77:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=f700d112-edff-4e4b-bc67-9ddf88fcfd0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:97:5c:e1:45:0d:62:5d:5c:55:54:b7:e1: f2:d9:60:5f:21:9f:10:1a:44:db:9c:bd:7b:74:9f: ad:10:e0:f5:1d:9c:30:b8:0f:27:5e:f2:29:0a:40: 46:1f:bf:0a:38:2a:77:20:32:68:8a:50:85:39:48: 4c:dd:8f:8e:25:af:2b:ba:18:49:46:31:c7:6e:9d: a7:3b:02:9b:51:1a:7c:33:ff:75:ba:f6:5c:e4:9c: 21:bc:86:ef:bb:fa:1a:25:78:7f:f6:1c:3c:74:da: a4:42:51:14:97:ea:31:a4:4e:30:cb:58:df:64:c1: dc:de:27:a6:1f:59:b3:43:f2:b6:f5:bd:b2:d4:c6: 15:c1:a4:86:00:91:9d:84:67:dd:a6:f7:3d:ce:cd: a4:62:b2:b4:52:d3:3f:97:f8:50:66:4a:b1:bb:22: c1:fc:c5:d5:4f:31:9b:cf:f1:0d:79:99:4c:c3:87: 46:cf:55:fa:ad:6f:04:d9:cf:79:29:38:d7:3a:3b: 8e:34:81:e8:0a:f8:42:fb:1e:67:14:29:61:4f:63: 9c:b4:f4:38:53:a8:8b:dd:11:94:65:39:28:db:18: 30:d5:2c:e9:3f:2a:ce:d2:cf:a5:25:74:ab:0d:3e: 89:b9:90:85:24:9e:f3:25:01:75:3d:c2:cb:cc:47: 2d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:96:B2:6A:85:78:B3:65:B3:2A:46:B6:E2:F5:5A:B7:B3:26:EA:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/8df7b4d6-d05d-3755-972a-3ca3ce19bda1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.114.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:81:de:21:40:21:58:62:71:7e:23:93:57:7d:27:77:13:82: d8:4c:13:ee:10:a2:73:a2:24:e4:01:c8:5e:8d:33:c9:bc:9c: b0:a8:f3:db:7d:1e:b0:eb:63:cc:78:40:ba:fc:e3:1c:7d:c5: 77:6b:a8:be:9a:8f:35:fe:57:7c:94:0a:be:3f:ce:99:58:ff: 93:ce:d5:4c:19:9f:6e:5a:a0:8c:be:4c:31:05:bc:c5:65:2d: 7f:f9:33:f3:81:22:70:3d:90:06:a9:3a:18:e9:77:11:f8:e4: 14:aa:72:2d:78:62:7c:61:b1:39:bf:40:b0:40:23:2e:ac:19: 97:f4:2e:26:e1:a1:9a:a1:af:89:7d:f6:a4:1b:96:f7:17:20: 4b:e9:37:8b:98:d2:81:46:4d:01:b6:5e:0b:98:d0:13:41:11: 84:1e:23:e9:6f:03:95:99:77:de:96:ca:ac:ac:c8:12:77:77: 3a:fa:d0:76:21:94:5e:40:bb:1a:0d:a6:9d:af:44:c7:6a:09: 56:06:ef:27:cc:f5:c7:01:fe:87:14:44:ff:70:a8:b2:41:40: 1c:47:46:c8:c1:72:ab:a2:3a:b2:b3:16:6c:7d:34:0a:0b:4a: 48:45:3f:1c:18:b3:7a:7f:93:40:78:26:7b:e7:1d:ef:c6:c4: 7b:7d:eb:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/w/BgqmycpR3vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZjcwMGQxMTItZWRmZi00ZTRiLWJjNjctOWRkZjg4ZmNmZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9yXXOFFDWJdXFVUt+Hy2WBfIZ8QGkTbnL17 dJ+tEOD1HZwwuA8nXvIpCkBGH78KOCp3IDJoilCFOUhM3Y+OJa8ruhhJRjHHbp2n OwKbURp8M/91uvZc5JwhvIbvu/oaJXh/9hw8dNqkQlEUl+oxpE4wy1jfZMHc3iem H1mzQ/K29b2y1MYVwaSGAJGdhGfdpvc9zs2kYrK0UtM/l/hQZkqxuyLB/MXVTzGb z/ENeZlMw4dGz1X6rW8E2c95KTjXOjuONIHoCvhC+x5nFClhT2OctPQ4U6iL3RGU ZTko2xgw1SzpPyrO0s+lJXSrDT6JuZCFJJ7zJQF1PcLLzEctOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqWsmqFeLNlsypGtuL1WrezJupMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvOGRmN2I0ZDYtZDA1ZC0z NzU1LTk3MmEtM2NhM2NlMTliZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HK4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANCB3iFAIVhicX4jk1d9J3cTgthME+4QonOiJOQByF6NM8m8nLCo89t9 HrDrY8x4QLr84xx9xXdrqL6ajzX+V3yUCr4/zplY/5PO1UwZn25aoIy+TDEFvMVl LX/5M/OBInA9kAapOhjpdxH45BSqci14YnxhsTm/QLBAIy6sGZf0LibhoZqhr4l9 9qQblvcXIEvpN4uY0oFGTQG2XguY0BNBEYQeI+lvA5WZd96WyqysyBJ3dzr60HYh lF5AuxoNpp2vRMdqCVYG7yfM9ccB/ocURP9wqLJBQBxHRsjBcquiOrKzFmx9NAoL SkhFPxwYs3p/k0B4JnvnHe/GxHt96/Y= -----END CERTIFICATE-----Generated at Tue Apr 29 02:27:48 2025 by rpki-client