$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa File: 25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa (raw, json) Hash identifier: xX2ap6ITvAVMXnR/z1j3ZEqDqE27CwigpN/N7NatICY= Subject key identifier: D6:FB:CE:CB:99:05:F8:CF:47:40:A4:B9:C9:DC:4B:C7:82:10:8A:D9 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F43285848DEA114CE2A3F81E85858BAF0 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa Signing time: Thu 13 Feb 2025 14:00:50 +0000 ROA not before: Thu 13 Feb 2025 14:00:50 +0000 ROA not after: Wed 14 May 2025 13:00:50 +0000 asID: 1239 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:de:a1:14:ce:2a:3f:81:e8:58:58:ba:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Feb 13 14:00:50 2025 GMT Not After : May 14 13:00:50 2025 GMT Subject: CN=2543b2fe-318d-41ad-98c5-0ccd802d4e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f4:53:15:6a:a2:04:ff:cf:41:50:28:0b:7d: 55:ad:b4:52:a4:61:6a:4f:ca:ad:a7:32:87:0b:ac: f8:b0:60:f1:75:31:47:4c:51:4b:3d:c9:15:ef:bf: 1b:c9:70:6d:ea:5e:ca:c7:f4:ef:84:b7:d2:81:9f: 69:6a:8c:52:72:bc:62:5a:10:f1:a2:ca:f8:c9:60: ce:f6:c6:be:ac:6e:b5:81:e0:0b:49:b2:d1:08:8c: 35:cb:79:0b:14:57:5a:66:70:c6:69:08:67:a2:fe: a2:7c:4b:41:da:3c:c9:b8:5f:bf:c4:bd:73:6b:5a: 4f:ea:ae:ff:b0:ce:04:28:ea:02:79:0e:16:08:d7: 94:b1:2b:06:b5:57:13:46:b3:29:1b:0a:e5:00:22: 11:10:8e:f1:9d:91:0d:5e:94:29:81:d5:9f:a9:49: 74:c0:91:bf:45:d1:8c:b0:14:a0:4d:df:08:40:88: 19:1f:75:5b:9c:7d:a7:2b:0b:ec:5c:97:ad:e7:15: ad:0d:96:f4:5c:f4:1f:a1:cd:55:7f:41:08:d2:f0: a3:2e:b3:dd:a7:bb:b3:20:90:e5:c8:18:c0:c4:70: 1c:83:e2:11:59:00:72:e6:a9:ae:41:aa:54:e1:0d: 80:56:3b:d2:31:20:de:d2:a9:af:78:f0:3e:fe:e2: 0d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FB:CE:CB:99:05:F8:CF:47:40:A4:B9:C9:DC:4B:C7:82:10:8A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6c:30:ff:17:4d:2c:9f:d3:a3:c8:8e:fa:77:a7:d7:cd:23: 9e:dd:16:8f:11:cd:26:ba:20:d3:ce:2d:04:54:3d:e8:49:99: 1d:54:ce:2d:47:d7:18:3f:d5:58:2a:78:ab:20:a9:5d:25:e6: 3f:20:83:e4:8b:c4:7f:6e:68:b2:67:01:77:7e:fc:93:32:1c: 3b:fb:d8:c5:82:5f:4e:66:8e:cf:6d:3c:57:ef:b2:97:81:31: a7:99:e8:c3:2b:1d:cf:be:77:2f:35:c8:28:7c:75:35:43:da: d3:44:ec:58:6f:14:93:f3:23:2d:80:52:29:db:a4:71:64:a4: 30:de:ca:b3:50:f5:bb:82:59:59:70:dd:99:71:5b:13:e8:e4: 88:0a:8a:d2:52:25:96:10:57:f3:97:cf:be:64:68:99:6f:f4: 7e:10:a0:e9:dc:9e:1a:6e:9d:41:47:9b:f6:a3:47:04:46:4e: 1e:be:7f:32:ba:8f:d1:b9:e0:08:6a:44:81:3a:d9:73:d5:e3: 4b:b3:a2:0f:85:fb:4e:da:57:55:06:04:5c:4d:c5:32:4d:92: e9:a5:c8:31:98:87:98:a4:75:f4:4c:63:37:16:cd:f1:59:a8: 00:20:20:66:33:dc:c3:34:fe:bf:c6:1b:22:00:05:85:d7:81: ad:c1:1b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoRTOKj+B6FhYuvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk MjU0M2IyZmUtMzE4ZC00MWFkLTk4YzUtMGNjZDgwMmQ0ZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/RTFWqiBP/PQVAoC31VrbRSpGFqT8qtpzKH C6z4sGDxdTFHTFFLPckV778byXBt6l7Kx/TvhLfSgZ9paoxScrxiWhDxosr4yWDO 9sa+rG61geALSbLRCIw1y3kLFFdaZnDGaQhnov6ifEtB2jzJuF+/xL1za1pP6q7/ sM4EKOoCeQ4WCNeUsSsGtVcTRrMpGwrlACIREI7xnZENXpQpgdWfqUl0wJG/RdGM sBSgTd8IQIgZH3VbnH2nKwvsXJet5xWtDZb0XPQfoc1Vf0EI0vCjLrPdp7uzIJDl yBjAxHAcg+IRWQBy5qmuQapU4Q2AVjvSMSDe0qmvePA+/uINPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb7zsuZBfjPR0CkucncS8eCEIrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMjVhMDk1YjAtMWE1Ny0z OWI1LTg1ZmYtYzdmYTM0N2ZjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlsMP8XTSyf06PIjvp3p9fNI57dFo8RzSa6INPOLQRUPehJmR1Uzi1H 1xg/1VgqeKsgqV0l5j8gg+SLxH9uaLJnAXd+/JMyHDv72MWCX05mjs9tPFfvspeB MaeZ6MMrHc++dy81yCh8dTVD2tNE7FhvFJPzIy2AUinbpHFkpDDeyrNQ9buCWVlw 3ZlxWxPo5IgKitJSJZYQV/OXz75kaJlv9H4QoOncnhpunUFHm/ajRwRGTh6+fzK6 j9G54AhqRIE62XPV40uzog+F+07aV1UGBFxNxTJNkumlyDGYh5ikdfRMYzcWzfFZ qAAgIGYz3MM0/r/GGyIABYXXga3BG/g= -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:17 2025 by rpki-client