$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d30c781b-54f5-31a4-a8d7-d650d082f76d.roa File: d30c781b-54f5-31a4-a8d7-d650d082f76d.roa (raw, json) Hash identifier: f53kVOW8d3Xl6GzaCDZuh01aPqoi2GzX0D0zeywTMxw= Subject key identifier: B0:97:7D:ED:19:7A:10:CA:D8:60:1B:A2:F8:4E:C3:6D:F3:75:3C:42 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584944694B52C826BCF18A4FDB10 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d30c781b-54f5-31a4-a8d7-d650d082f76d.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 4922 IP address blocks: 204.111.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:4b:52:c8:26:bc:f1:8a:4f:db:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=8bfb3865-9bd1-4ccb-b28a-9f620bec0ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:ed:50:44:19:bf:c5:92:fc:68:3c:11:55: fa:2f:82:de:ff:45:22:42:f9:d9:ea:ff:eb:8e:f6: 34:b2:72:29:f8:fc:41:be:93:9c:65:40:bb:34:e3: 9f:20:97:8d:aa:41:b7:0b:83:e2:cc:3e:7a:7f:dc: c8:1b:70:16:98:0f:3a:ae:86:3a:ce:bd:f1:c7:96: 11:51:c1:a5:20:95:20:a9:21:82:38:5b:7b:4e:05: 2c:e9:e9:d9:2a:73:96:74:6f:52:8b:16:1c:22:72: 75:4d:2d:80:0a:ad:27:1b:fc:a7:97:6a:28:82:4c: eb:e4:9f:63:86:0b:41:b4:8e:b5:0a:5f:4a:14:e1: aa:50:9c:a9:b6:97:f4:22:cb:2a:da:8b:0e:cb:c7: d2:4e:8f:da:55:e0:74:f3:cd:5a:5b:d3:74:58:4c: 57:b1:24:55:6b:fd:1e:ce:25:a0:44:35:5f:ec:bb: f2:43:48:be:d9:e4:2e:8a:74:19:f0:26:dc:9e:4c: 8f:7f:5b:f4:d1:0b:f7:8e:17:be:33:fb:e8:bf:33: 5e:ab:bc:fc:1a:6d:4a:b7:98:ef:16:14:49:ca:2f: 7a:17:98:1d:d5:d0:40:b3:ab:89:d5:d0:82:f6:18: 70:6a:34:cc:1b:29:c8:50:a5:01:3e:e7:ff:5d:c2: bb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:97:7D:ED:19:7A:10:CA:D8:60:1B:A2:F8:4E:C3:6D:F3:75:3C:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d30c781b-54f5-31a4-a8d7-d650d082f76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 204.111.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:29:df:12:a8:3a:37:db:9d:9e:4e:bc:82:51:a9:62:75:d6: d9:94:3a:dd:3c:77:ec:82:9c:a6:63:eb:ee:52:64:94:03:88: 17:f2:71:5b:8e:09:c8:6b:05:18:02:b8:bf:30:02:7d:90:3e: e2:56:2c:17:2c:9c:ee:4a:fc:47:4f:49:8e:3b:b0:b4:53:c5: 56:dd:f4:aa:37:8b:cc:85:d8:53:12:39:a4:19:60:1a:88:5c: 98:d4:c8:9f:4f:36:2f:d1:c7:33:b0:db:3f:3d:d1:67:b9:2f: b2:26:7c:85:a8:29:11:e7:fb:e7:51:4b:20:ad:b4:47:12:2e: da:b2:fb:db:80:56:3f:08:ed:0a:e0:f2:47:aa:24:36:f0:06: 45:e1:39:f9:f0:c2:48:e5:1b:8e:a9:dd:6d:40:76:51:6d:7c: 4a:06:10:38:50:e5:f7:d2:43:39:25:f5:2b:1e:38:e8:93:4f: 56:83:a5:29:94:c0:80:0d:45:24:3b:03:71:22:e9:17:a3:5a: 1f:e0:bb:18:d1:c0:cd:20:1a:12:bc:91:26:63:cf:00:1c:c7: dc:bb:9f:4d:37:b2:98:09:63:c5:6d:fd:b5:7a:a0:a9:ae:b0: 37:98:39:e9:4e:c5:dd:aa:e9:cc:db:b2:3d:6c:8b:67:0e:cd: de:58:a9:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElEaUtSyCa88YpP2xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk OGJmYjM4NjUtOWJkMS00Y2NiLWIyOGEtOWY2MjBiZWMwZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEjtUEQZv8WS/Gg8EVX6L4Le/0UiQvnZ6v/r jvY0snIp+PxBvpOcZUC7NOOfIJeNqkG3C4PizD56f9zIG3AWmA86roY6zr3xx5YR UcGlIJUgqSGCOFt7TgUs6enZKnOWdG9SixYcInJ1TS2ACq0nG/ynl2oogkzr5J9j hgtBtI61Cl9KFOGqUJyptpf0Issq2osOy8fSTo/aVeB0881aW9N0WExXsSRVa/0e ziWgRDVf7LvyQ0i+2eQuinQZ8CbcnkyPf1v00Qv3jhe+M/vovzNeq7z8Gm1Kt5jv FhRJyi96F5gd1dBAs6uJ1dCC9hhwajTMGynIUKUBPuf/XcK7DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCXfe0ZehDK2GAbovhOw23zdTxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvZDMwYzc4MWItNTRmNS0z MWE0LWE4ZDctZDY1MGQwODJmNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzG8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcp3xKoOjfbnZ5OvIJRqWJ11tmUOt08d+yCnKZj6+5SZJQDiBfycVuO CchrBRgCuL8wAn2QPuJWLBcsnO5K/EdPSY47sLRTxVbd9Ko3i8yF2FMSOaQZYBqI XJjUyJ9PNi/RxzOw2z890We5L7ImfIWoKRHn++dRSyCttEcSLtqy+9uAVj8I7Qrg 8keqJDbwBkXhOfnwwkjlG46p3W1AdlFtfEoGEDhQ5ffSQzkl9SseOOiTT1aDpSmU wIANRSQ7A3Ei6RejWh/guxjRwM0gGhK8kSZjzwAcx9y7n003spgJY8Vt/bV6oKmu sDeYOelOxd2q6czbsj1si2cOzd5YqS8= -----END CERTIFICATE-----Generated at Mon Apr 28 05:33:28 2025 by rpki-client