$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa File: 0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa (raw, json) Hash identifier: Qii5ZPoDTq0JtPFwEGVQVAVLdRReT8F47WU1D1hoxyA= Subject key identifier: 31:88:1D:06:3B:F5:AC:31:3F:4E:4E:35:D0:69:6B:D0:B2:F5:25:63 Certificate issuer: /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Certificate serial: 010D0C9F432858495529524EF2382DF34EDF51C0 Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 4540 IP address blocks: 205.236.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:52:4e:f2:38:2d:f3:4e:df:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=ab920f1a-9b7b-410d-a46c-7618331460b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b4:47:4d:9c:e7:26:2c:c2:be:91:7b:e4:b8: 1c:2b:ad:5a:d6:b3:c8:b8:bf:5f:f7:b8:55:88:a7: 25:45:ba:9e:34:b3:2e:e2:18:c6:29:24:eb:6f:a9: 91:f4:15:07:44:37:15:82:5b:50:6e:6e:40:8b:fa: 5b:58:1e:78:20:48:70:fb:ca:5d:d2:94:07:cd:86: b1:b9:b5:f2:17:15:76:88:3a:92:60:7e:e3:61:59: 6e:78:8a:e8:56:4e:96:ce:31:1d:e0:6d:4f:22:09: 37:bd:f4:37:f3:b9:ca:89:cb:d4:2d:e4:bf:2e:c0: a9:44:4b:f4:bd:af:c2:aa:35:9e:1e:a0:48:41:53: 2c:a7:80:23:29:a4:24:39:30:d2:c3:00:eb:c9:ea: 2c:d2:92:64:c2:de:09:0d:c4:cc:c6:5e:8c:18:81: 92:50:34:1d:26:d6:5c:22:c5:78:d2:13:f5:d8:d4: 87:f2:18:b1:79:61:5c:cc:e8:70:86:87:35:55:a7: 0b:6e:9c:25:31:96:00:03:a7:dd:a8:10:30:1f:f7: 4f:1c:a0:7e:79:62:65:47:12:46:0d:ac:36:af:af: bf:fd:e9:4b:c7:a5:d9:a1:05:b8:82:94:8a:1d:cb: 02:0e:d1:f7:db:d7:5c:4a:f2:61:e0:84:ce:96:6b: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:88:1D:06:3B:F5:AC:31:3F:4E:4E:35:D0:69:6B:D0:B2:F5:25:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/0ecd1b04-4594-3939-8c2e-4ce2fba12133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl X509v3 Authority Key Identifier: keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer sbgp-ipAddrBlock: critical IPv4: 205.236.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a0:0d:0c:65:31:5a:8a:00:3d:8c:0a:51:5a:84:57:ee:f6: 45:48:37:15:66:c4:9c:0b:34:52:4e:f4:a6:e4:45:18:45:d2: 1b:e3:db:9f:7b:43:4c:cf:4f:9b:e1:f9:a5:c2:5e:dd:a4:62: 61:94:74:d7:c2:ec:ee:d0:26:8d:fb:0d:5b:ef:28:b1:e2:f3: 71:ce:71:71:90:2b:86:22:b5:c9:c4:06:17:af:ff:40:58:7f: ed:4b:c5:ee:6b:97:20:6e:7b:4a:77:36:f2:c3:ca:6f:fe:51: 62:75:28:e2:9b:72:03:33:13:70:1f:3e:0c:61:ac:f7:ec:90: dd:90:e5:d9:9b:10:55:04:78:89:69:10:3a:89:70:50:f8:a2: e0:45:81:19:cd:0e:05:eb:f9:e0:5d:85:79:92:bf:d9:91:a0: c9:99:9a:05:8d:30:33:41:fd:36:ea:a4:e9:06:a2:4a:0c:f9: 1f:e2:07:c2:be:9c:f2:9b:48:02:8f:bc:e1:92:1f:17:dd:7a: 7f:fa:36:b8:5a:e9:3e:5e:c4:05:3c:96:ec:6d:9e:80:68:8b: 13:40:ee:1a:88:cf:52:6d:d9:27:ff:26:70:5a:86:1b:5d:5e: 5b:f3:ff:c3:38:97:bd:b4:19:d0:bd:e6:a1:4e:46:21:68:56: 8e:95:fb:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVJO8jgt807fUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUxMWI4ZGMtNzRiYS00N2U1LWFmNGEtN2M0ZTZiNzc3 ZDkyMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk YWI5MjBmMWEtOWI3Yi00MTBkLWE0NmMtNzYxODMzMTQ2MGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrRHTZznJizCvpF75LgcK61a1rPIuL9f97hV iKclRbqeNLMu4hjGKSTrb6mR9BUHRDcVgltQbm5Ai/pbWB54IEhw+8pd0pQHzYax ubXyFxV2iDqSYH7jYVlueIroVk6WzjEd4G1PIgk3vfQ387nKicvULeS/LsCpREv0 va/CqjWeHqBIQVMsp4AjKaQkOTDSwwDryeos0pJkwt4JDcTMxl6MGIGSUDQdJtZc IsV40hP12NSH8hixeWFczOhwhoc1VacLbpwlMZYAA6fdqBAwH/dPHKB+eWJlRxJG Daw2r6+//elLx6XZoQW4gpSKHcsCDtH329dcSvJh4ITOlmvQXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGIHQY79awxP05ONdBpa9Cy9SVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NTEx YjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRlNmI3NzdkOTIvMGVjZDFiMDQtNDU5NC0z OTM5LThjMmUtNGNlMmZiYTEyMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODUxMWI4ZGMtNzRiYS00N2U1LWFm NGEtN2M0ZTZiNzc3ZDkyLzg1MTFiOGRjLTc0YmEtNDdlNS1hZjRhLTdjNGU2Yjc3 N2Q5Mi5jcmwwHwYDVR0jBBgwFoAU1/PfqfdA8CtR2EIn8tzC4d9gdQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84NTExYjhkYy03NGJhLTQ3ZTUtYWY0YS03YzRl NmI3NzdkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzeyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGgDQxlMVqKAD2MClFahFfu9kVINxVmxJwLNFJO9KbkRRhF0hvj2597 Q0zPT5vh+aXCXt2kYmGUdNfC7O7QJo37DVvvKLHi83HOcXGQK4YitcnEBhev/0BY f+1Lxe5rlyBue0p3NvLDym/+UWJ1KOKbcgMzE3AfPgxhrPfskN2Q5dmbEFUEeIlp EDqJcFD4ouBFgRnNDgXr+eBdhXmSv9mRoMmZmgWNMDNB/TbqpOkGokoM+R/iB8K+ nPKbSAKPvOGSHxfden/6Nrha6T5exAU8luxtnoBoixNA7hqIz1Jt2Sf/JnBahhtd Xlvz/8M4l720GdC95qFORiFoVo6V+w4= -----END CERTIFICATE-----Generated at Tue Apr 29 14:30:41 2025 by rpki-client