$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/5df88610-8c98-30ff-85c8-e3bf83ed5241.roa File: 5df88610-8c98-30ff-85c8-e3bf83ed5241.roa (raw, json) Hash identifier: l54R+cBkw8MDgmhlrgasKvcpLXiyx+QrOj0Xzn3B/vc= Subject key identifier: 71:04:E1:AC:1F:A5:A1:98:E1:A2:3D:5B:2A:49:89:14:7A:99:75:72 Certificate issuer: /CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441 Certificate serial: 010D0C9F432858499F249C4E3C2576503B27A790 Authority key identifier: E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/5df88610-8c98-30ff-85c8-e3bf83ed5241.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 399341 IP address blocks: 205.207.186.0/24 maxlen: 24 2602:fa4d::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:9c:4e:3c:25:76:50:3b:27:a7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca9bd548-1117-4cc6-a0d0-94dc52a30441 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=4755b386-2953-4a41-8c53-e4a96aedd5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:35:26:89:b7:65:32:0a:9c:52:3b:b1:23:59: 28:24:65:a0:fd:e3:5d:00:91:1d:a2:7a:d3:3c:49: 0d:26:2e:fc:eb:c8:38:92:ab:a1:72:48:51:7c:d0: fb:b1:fa:74:39:e4:2e:b4:4c:f8:13:00:09:c5:f1: 9a:5e:f7:09:87:11:42:81:c8:7f:5d:42:4f:44:81: d6:d4:52:1f:87:82:e9:48:0f:f9:7e:41:ba:0b:8f: b6:57:e1:56:af:8e:00:84:94:70:57:d6:72:31:7c: 3d:18:ce:27:a3:bf:cd:c7:66:ed:62:b9:90:23:22: b3:28:68:19:42:43:c4:69:c3:0a:16:20:e1:bd:29: 09:c9:50:a1:67:c9:d0:35:f6:f9:f7:01:26:09:a1: 13:c2:64:0f:91:59:b1:ba:bc:71:6a:5f:82:81:43: 5d:d8:86:ef:41:22:ac:a1:ec:81:66:d4:29:4c:00: 74:f2:d2:42:9f:bc:8e:dd:59:94:8d:47:06:8a:c0: 9d:17:b8:f7:75:a1:6f:43:23:f4:87:63:82:15:8d: 1e:e2:13:a7:8e:df:cc:22:f6:67:0c:76:69:da:de: 75:a3:39:0d:41:53:1d:90:e2:c3:8e:45:02:5c:2c: 57:11:06:fd:90:b6:97:27:51:48:c9:4a:de:90:29: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:04:E1:AC:1F:A5:A1:98:E1:A2:3D:5B:2A:49:89:14:7A:99:75:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/5df88610-8c98-30ff-85c8-e3bf83ed5241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441/ca9bd548-1117-4cc6-a0d0-94dc52a30441.crl X509v3 Authority Key Identifier: keyid:E6:1F:97:4A:B9:E1:28:47:59:87:FA:BF:9D:AC:8C:3A:69:34:8A:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ca9bd548-1117-4cc6-a0d0-94dc52a30441.cer sbgp-ipAddrBlock: critical IPv4: 205.207.186.0/24 IPv6: 2602:fa4d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3f:d2:fc:b0:b0:ae:81:52:48:a0:6a:56:33:09:51:4b:35: b3:8a:ab:1f:5c:90:14:96:2b:fa:88:7c:74:18:19:f2:bb:23: 12:5a:87:e7:2c:9c:7f:45:46:c4:f8:ee:45:0f:ca:a6:e7:fb: 16:55:f5:51:d3:bd:b8:f5:0a:7f:19:77:d2:04:4b:b7:b4:ee: e5:29:3b:d2:cf:3f:65:65:bf:98:d2:b1:d0:31:db:87:30:c4: c0:0d:a8:a3:4b:7e:ea:7f:6d:7c:99:dd:4d:37:55:54:56:b3: 14:1f:b6:18:b0:a3:8e:e9:c9:08:b2:c9:d4:a8:c9:76:02:bb: 39:9b:64:79:a6:bb:96:df:03:57:8d:bb:67:4b:f0:07:2e:7d: 1a:f2:b0:ef:7c:27:76:10:6d:36:9e:87:ea:5e:2b:b8:d6:08: 94:b3:4c:73:16:5d:cf:21:b0:3a:cf:68:6a:e1:7e:df:61:23: ac:81:ef:a0:45:62:4d:5e:30:aa:ee:e7:c2:33:6e:76:b3:bf: 91:6a:0d:6f:e2:5d:a0:c5:04:57:2b:35:5a:d6:97:ac:db:cb: 4e:f5:7b:6d:c7:f1:c3:52:30:47:f2:62:aa:ae:61:05:7b:37: c8:86:6a:56:93:a3:84:db:42:8c:ca:aa:8f:9c:9e:be:92:d8: 4f:a8:fe:fb -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEmfJJxOPCV2UDsnp5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E5YmQ1NDgtMTExNy00Y2M2LWEwZDAtOTRkYzUyYTMw NDQxMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NDc1NWIzODYtMjk1My00YTQxLThjNTMtZTRhOTZhZWRkNWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDUmibdlMgqcUjuxI1koJGWg/eNdAJEdonrT PEkNJi7868g4kquhckhRfND7sfp0OeQutEz4EwAJxfGaXvcJhxFCgch/XUJPRIHW 1FIfh4LpSA/5fkG6C4+2V+FWr44AhJRwV9ZyMXw9GM4no7/Nx2btYrmQIyKzKGgZ QkPEacMKFiDhvSkJyVChZ8nQNfb59wEmCaETwmQPkVmxurxxal+CgUNd2IbvQSKs oeyBZtQpTAB08tJCn7yO3VmUjUcGisCdF7j3daFvQyP0h2OCFY0e4hOnjt/MIvZn DHZp2t51ozkNQVMdkOLDjkUCXCxXEQb9kLaXJ1FIyUrekCkedwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHEE4awfpaGY4aI9WypJiRR6mXVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jYTli ZDU0OC0xMTE3LTRjYzYtYTBkMC05NGRjNTJhMzA0NDEvNWRmODg2MTAtOGM5OC0z MGZmLTg1YzgtZTNiZjgzZWQ1MjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2E5YmQ1NDgtMTExNy00Y2M2LWEw ZDAtOTRkYzUyYTMwNDQxL2NhOWJkNTQ4LTExMTctNGNjNi1hMGQwLTk0ZGM1MmEz MDQ0MS5jcmwwHwYDVR0jBBgwFoAU5h+XSrnhKEdZh/q/nayMOmk0inQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jYTliZDU0OC0xMTE3LTRjYzYtYTBkMC05NGRj NTJhMzA0NDEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzc+6MA4E AgACMAgDBgAmAvpNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfP9L8sLCugVJIoGpWMwlRSzWziqsfXJAU liv6iHx0GBnyuyMSWofnLJx/RUbE+O5FD8qm5/sWVfVR07249Qp/GXfSBEu3tO7l KTvSzz9lZb+Y0rHQMduHMMTADaijS37qf218md1NN1VUVrMUH7YYsKOO6ckIssnU qMl2Ars5m2R5pruW3wNXjbtnS/AHLn0a8rDvfCd2EG02nofqXiu41giUs0xzFl3P IbA6z2hq4X7fYSOsge+gRWJNXjCq7ufCM252s7+Rag1v4l2gxQRXKzVa1pes28tO 9Xttx/HDUjBH8mKqrmEFezfIhmpWk6OE20KMyqqPnJ6+kthPqP77 -----END CERTIFICATE-----Generated at Tue Apr 29 10:17:59 2025 by rpki-client