$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d625dc59-e4db-3687-aff8-386106b3483e.roa File: d625dc59-e4db-3687-aff8-386106b3483e.roa (raw, json) Hash identifier: l3diYPNRaXMY5mD46iY8VJ07FnnYfkv0Oj8ajKgumss= Subject key identifier: 68:C2:77:35:78:F1:06:66:D7:27:74:06:E0:D7:0F:14:CB:5F:8C:A6 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584972E2F3FEFE7BFC4E64E95080 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d625dc59-e4db-3687-aff8-386106b3483e.roa Signing time: Mon 07 Apr 2025 16:33:16 +0000 ROA not before: Mon 07 Apr 2025 16:33:16 +0000 ROA not after: Sun 06 Jul 2025 16:33:16 +0000 asID: 81 IP address blocks: 204.85.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:72:e2:f3:fe:fe:7b:fc:4e:64:e9:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Apr 7 16:33:16 2025 GMT Not After : Jul 6 16:33:16 2025 GMT Subject: CN=7f2156e0-bbad-4771-af32-26fc3537b1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ba:04:b5:6b:49:72:e4:ee:52:ec:38:c8:94: e2:61:59:c7:40:55:e8:d0:9a:38:22:47:71:e2:7f: f2:74:68:fe:e1:7e:9f:75:9e:12:eb:1f:3c:03:43: ae:79:92:ae:b6:a5:4f:8f:78:6d:bc:f4:71:78:54: 99:4d:38:68:a2:48:e8:09:20:c3:ac:62:c5:aa:6a: 01:80:40:60:ba:28:5c:2c:28:da:a2:71:33:2b:60: 46:ce:b0:80:d2:ee:3e:bb:16:0a:8a:16:fe:43:7c: 4c:3b:f8:bf:c0:7d:2f:77:3e:42:d9:f5:c5:7a:7f: 4f:23:d1:41:cf:13:28:6a:59:af:bc:e7:4c:5f:3b: 73:e5:ea:cd:a1:89:e0:f8:cf:05:91:4f:a5:e7:36: b4:05:97:22:c5:3e:50:f2:c6:79:29:c8:17:01:94: 11:90:ae:02:96:2b:a3:e6:53:94:5d:ad:2c:55:df: dc:74:5c:42:70:06:ae:92:f2:53:64:3a:61:8c:50: 14:8c:ca:e9:da:79:8e:6b:08:af:73:c2:dd:1b:35: 6d:0c:b6:5d:7e:83:0a:ab:8c:9d:51:bf:1e:50:65: 7b:54:a6:af:12:db:38:6e:61:29:b6:bb:80:d2:c3: c6:c8:a4:09:4e:d3:90:e6:06:9a:9d:e4:fd:c1:29: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C2:77:35:78:F1:06:66:D7:27:74:06:E0:D7:0F:14:CB:5F:8C:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d625dc59-e4db-3687-aff8-386106b3483e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4c:1f:34:4e:9b:59:55:c0:68:4c:8f:9e:0f:51:bd:7b:72: b5:d3:f4:1c:17:68:2c:60:93:93:88:28:7f:b8:b4:22:87:66: a9:fd:70:ff:19:b9:44:ec:ba:5b:11:7e:82:3e:91:75:12:9b: 60:fd:68:dd:19:47:97:3c:06:8a:81:63:25:24:3a:d4:a3:f2: 95:66:d9:c5:14:92:25:b2:20:6e:04:6a:8d:e2:bc:1a:06:ab: 68:74:b8:d1:64:64:92:00:10:5c:ea:e1:bc:3a:61:77:87:51: 94:47:fc:16:c4:c4:a6:60:c8:9f:59:8b:f0:c9:5f:74:ea:38: 70:38:55:d3:e1:6b:2b:d4:db:f3:66:31:95:d5:3b:4e:6a:71: 47:4f:26:43:72:60:5b:8a:a2:a8:82:7e:0d:bc:9b:36:a1:56: cb:8d:7a:8d:ef:be:e7:29:5f:98:97:fa:a4:02:50:ca:fc:d0: 32:2e:c6:b8:a0:ac:4d:b6:cb:22:0e:6f:1d:9a:60:5c:13:74: 20:4b:d1:ea:a3:b4:7f:8e:53:5e:0e:d2:57:98:ad:e0:83:d6: b8:39:d7:5f:15:cc:be:8b:1c:37:93:1a:5f:36:d0:84:7f:c3: 59:ca:26:37:46:9d:7d:95:23:ce:64:ab:e9:50:52:59:09:a8: ab:23:30:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEly4vP+/nv8TmTpUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDQwNzE2MzMxNloXDTI1MDcwNjE2MzMxNlowLzEtMCsGA1UEAxMk N2YyMTU2ZTAtYmJhZC00NzcxLWFmMzItMjZmYzM1MzdiMWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlroEtWtJcuTuUuw4yJTiYVnHQFXo0Jo4Ikdx 4n/ydGj+4X6fdZ4S6x88A0OueZKutqVPj3htvPRxeFSZTThookjoCSDDrGLFqmoB gEBguihcLCjaonEzK2BGzrCA0u4+uxYKihb+Q3xMO/i/wH0vdz5C2fXFen9PI9FB zxMoalmvvOdMXztz5erNoYng+M8FkU+l5za0BZcixT5Q8sZ5KcgXAZQRkK4Cliuj 5lOUXa0sVd/cdFxCcAaukvJTZDphjFAUjMrp2nmOawivc8LdGzVtDLZdfoMKq4yd Ub8eUGV7VKavEts4bmEptruA0sPGyKQJTtOQ5gaaneT9wSkO5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjCdzV48QZm1yd0BuDXDxTLX4ymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDYyNWRjNTktZTRkYi0z Njg3LWFmZjgtMzg2MTA2YjM0ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzFXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFMHzROm1lVwGhMj54PUb17crXT9BwXaCxgk5OIKH+4tCKHZqn9cP8Z uUTsulsRfoI+kXUSm2D9aN0ZR5c8BoqBYyUkOtSj8pVm2cUUkiWyIG4Eao3ivBoG q2h0uNFkZJIAEFzq4bw6YXeHUZRH/BbExKZgyJ9Zi/DJX3TqOHA4VdPhayvU2/Nm MZXVO05qcUdPJkNyYFuKoqiCfg28mzahVsuNeo3vvucpX5iX+qQCUMr80DIuxrig rE22yyIObx2aYFwTdCBL0eqjtH+OU14O0leYreCD1rg5118VzL6LHDeTGl820IR/ w1nKJjdGnX2VI85kq+lQUlkJqKsjMG0= -----END CERTIFICATE-----Generated at Tue Apr 29 13:25:37 2025 by rpki-client