$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa File: 85936ab9-681e-3063-9c40-0a46025e36e9.roa (raw, json) Hash identifier: rsNFryb/LmlgUN9fWPbNp0gXrXaS6gh+mKspRE3uK3c= Subject key identifier: 03:F6:9E:E2:7D:63:78:3E:7C:8B:91:00:81:80:77:22:7D:02:0F:42 Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479 Certificate serial: 010D0C9F4328584929E3C7502FD713C492601400 Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 64243 IP address blocks: 205.213.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:c7:50:2f:d7:13:c4:92:60:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479 Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=5401751e-1fc6-4387-8b51-c06db99bfbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a3:8b:ef:d8:6a:73:32:d3:96:a3:9b:b7:0b: a4:53:35:ff:1a:a6:37:a0:bf:c2:0a:0c:94:b2:4a: 07:ae:28:44:4b:59:be:44:2e:1f:24:f1:21:39:fe: 45:eb:ce:56:38:ac:1a:29:16:78:a2:3f:ad:6e:b8: ed:f4:d8:2e:cc:60:9d:f5:b4:40:d6:74:ab:e6:ab: 81:8c:56:56:46:91:c8:fe:78:d1:b6:52:03:06:5e: f7:70:ad:a8:b7:8b:5d:e3:19:11:53:6a:38:3a:1f: 05:89:49:b8:88:f9:3a:da:3b:25:40:ea:8d:7f:2c: e4:7b:6c:6c:f5:52:15:86:c7:c5:54:f1:8a:a5:44: c9:36:30:bc:68:42:5b:06:bc:cd:b4:45:f4:69:97: 35:4d:15:93:45:16:4c:99:0a:f6:bc:80:53:05:b3: b6:3c:1c:9c:d7:62:30:aa:84:66:31:83:08:59:14: 56:4c:13:07:9c:83:65:16:5d:1a:94:fc:41:59:ae: da:05:1d:4e:82:31:65:b9:da:8a:4d:83:4e:84:3f: 1b:b3:7b:db:4e:07:e0:de:93:10:d4:2a:2b:66:0e: c8:5d:6d:33:ed:04:8c:78:97:5e:79:d0:1e:51:7b: 27:c4:29:62:08:bd:22:fe:39:c7:78:4b:33:70:5d: bc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F6:9E:E2:7D:63:78:3E:7C:8B:91:00:81:80:77:22:7D:02:0F:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl X509v3 Authority Key Identifier: keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer sbgp-ipAddrBlock: critical IPv4: 205.213.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:eb:4f:c7:c3:27:9e:f5:16:8a:cd:23:d5:da:d9:f8:32:5a: ad:c0:d0:55:e1:80:cf:af:98:a2:3b:d4:42:05:23:a2:46:fb: 86:69:3c:f3:2f:b5:46:5d:dc:0e:49:19:bf:83:2e:29:4f:d0: 16:e2:e4:6c:7a:90:22:69:a4:0e:2d:79:43:5e:89:d8:3c:db: 03:ee:c7:99:a7:5a:85:bd:63:da:ba:3a:65:95:05:30:c9:59: 82:9f:46:38:02:c5:6c:1c:4c:2f:ec:cd:42:1b:b3:43:b0:6b: 5a:9c:0c:9f:29:f0:d0:73:dd:27:6c:b9:5f:95:00:88:ff:21: bf:2a:36:df:7c:9f:a9:5e:11:3d:47:49:4e:0f:e7:bf:28:6a: 05:c6:68:27:f9:34:7e:a0:cd:58:c9:f1:9b:f9:3f:a4:a6:8e: fe:1d:39:fb:a4:24:04:15:2c:1c:1f:f0:50:c5:e3:64:09:47: 5f:02:fb:df:9a:d2:05:01:b4:6c:aa:ae:ba:06:6f:a0:7d:c9: 43:dd:17:74:a9:5a:73:17:70:ec:c9:24:f9:43:f1:ef:aa:fc: 10:12:06:79:a1:c8:1a:ee:91:19:7e:e7:5d:57:a3:f5:bd:75: 29:b7:02:6c:b2:84:b3:7d:f3:56:f4:cf:af:bc:90:06:a8:6d: 3f:ab:f9:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkp48dQL9cTxJJgFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwMzM5NTMtOTc1Mi00NzlkLWI5ZWUtNDIxM2NmNjQ4 NDc5MB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk NTQwMTc1MWUtMWZjNi00Mzg3LThiNTEtYzA2ZGI5OWJmYmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6OL79hqczLTlqObtwukUzX/GqY3oL/CCgyU skoHrihES1m+RC4fJPEhOf5F685WOKwaKRZ4oj+tbrjt9NguzGCd9bRA1nSr5quB jFZWRpHI/njRtlIDBl73cK2ot4td4xkRU2o4Oh8FiUm4iPk62jslQOqNfyzke2xs 9VIVhsfFVPGKpUTJNjC8aEJbBrzNtEX0aZc1TRWTRRZMmQr2vIBTBbO2PByc12Iw qoRmMYMIWRRWTBMHnINlFl0alPxBWa7aBR1OgjFludqKTYNOhD8bs3vbTgfg3pMQ 1CorZg7IXW0z7QSMeJdeedAeUXsnxCliCL0i/jnHeEszcF28hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP2nuJ9Y3g+fIuRAIGAdyJ9Ag9CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAz Mzk1My05NzUyLTQ3OWQtYjllZS00MjEzY2Y2NDg0NzkvODU5MzZhYjktNjgxZS0z MDYzLTljNDAtMGE0NjAyNWUzNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWEwMzM5NTMtOTc1Mi00NzlkLWI5 ZWUtNDIxM2NmNjQ4NDc5L2FhMDMzOTUzLTk3NTItNDc5ZC1iOWVlLTQyMTNjZjY0 ODQ3OS5jcmwwHwYDVR0jBBgwFoAUhCZLjuQsOm5/g8Ywel2MTTjmuLMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYTAzMzk1My05NzUyLTQ3OWQtYjllZS00MjEz Y2Y2NDg0NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrrT8fDJ571ForNI9Xa2fgyWq3A0FXhgM+vmKI71EIFI6JG+4ZpPPMv tUZd3A5JGb+DLilP0Bbi5Gx6kCJppA4teUNeidg82wPux5mnWoW9Y9q6OmWVBTDJ WYKfRjgCxWwcTC/szUIbs0Owa1qcDJ8p8NBz3SdsuV+VAIj/Ib8qNt98n6leET1H SU4P578oagXGaCf5NH6gzVjJ8Zv5P6Smjv4dOfukJAQVLBwf8FDF42QJR18C+9+a 0gUBtGyqrroGb6B9yUPdF3SpWnMXcOzJJPlD8e+q/BASBnmhyBrukRl+511Xo/W9 dSm3AmyyhLN981b0z6+8kAaobT+r+QE= -----END CERTIFICATE-----Generated at Wed Apr 30 08:42:34 2025 by rpki-client