$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3a8d338-6ad7-3358-8d87-2341d9a81f6a.roa File: b3a8d338-6ad7-3358-8d87-2341d9a81f6a.roa (raw, json) Hash identifier: HgctMQP6mv1Z+OrAFQgc5rtbeU5ouU1YvPfDMB2Mnq4= Subject key identifier: B2:2B:D1:62:D1:9C:17:3B:B2:A2:5C:4C:CF:63:48:64:9B:E2:33:71 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584988CF450FBFF4B99B5E448B00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3a8d338-6ad7-3358-8d87-2341d9a81f6a.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 397220 IP address blocks: 204.69.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:45:0f:bf:f4:b9:9b:5e:44:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=ca99d83d-4118-441f-948e-bfb059b070eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:78:e5:75:9d:33:2d:3a:80:09:78:d3:e9:6c: e1:a3:11:12:26:86:ad:a0:a9:4a:97:7e:64:a4:db: db:8b:fa:73:a3:cf:8f:3d:71:af:8b:a4:c1:5a:3b: 2d:85:e4:c0:90:12:00:0e:1f:67:71:41:8c:b4:d3: 3b:df:c7:d3:2b:d8:1f:8f:61:8c:bb:94:7e:01:51: d2:8b:b6:10:fe:ab:9d:47:e2:f8:63:05:7c:bb:52: 6c:a3:a6:a6:1f:99:a5:e5:cf:31:c1:44:18:3c:fa: 31:0d:3e:8a:d8:74:69:aa:4f:78:40:6e:f9:4d:f4: 9f:03:2a:4c:81:2d:cf:df:ef:3d:6b:1a:45:00:50: 13:2c:1f:f4:c8:c7:c6:89:f5:b0:38:ea:aa:23:8f: 77:1b:5f:33:57:44:e2:a8:60:43:5f:e5:38:87:18: 6c:01:2a:57:6f:cd:c3:c4:a5:a3:ff:8e:be:c5:82: bd:4d:fd:b5:ce:7b:a2:13:3c:bc:3d:83:4c:b5:71: f9:f3:70:5a:f6:5f:9f:30:fa:b9:f0:0d:01:f4:94: fb:67:90:74:d5:f6:6e:6e:20:bf:0a:ab:0c:36:5f: 31:4a:09:34:80:a8:7c:1d:d7:ef:49:9f:04:b3:6c: 24:95:a4:92:6d:f6:81:2e:9a:49:20:5a:25:cd:fb: f2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2B:D1:62:D1:9C:17:3B:B2:A2:5C:4C:CF:63:48:64:9B:E2:33:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b3a8d338-6ad7-3358-8d87-2341d9a81f6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 204.69.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:de:c5:ad:60:f5:e4:18:de:b1:7f:73:60:f0:c8:b4:d9:74: ea:79:2e:e1:30:bb:71:4d:9a:7b:d0:24:d1:b9:71:3b:0c:01: 60:0a:48:4c:02:8d:a9:9e:97:d4:6d:d2:5f:71:7d:33:c2:15: 54:14:89:55:ce:0d:99:14:a2:54:00:6f:74:d5:e9:32:ea:98: 45:75:64:49:e7:d0:62:6b:e2:e7:53:1f:ff:dc:f8:cd:39:ab: ca:a5:66:ea:05:5f:73:5f:91:16:cd:5c:cb:1b:b9:a3:4f:24: 41:48:0e:82:3e:2d:d7:a6:a2:87:96:cb:ef:c7:9e:32:36:6b: 5a:73:a9:bf:99:a9:ce:35:fe:de:e2:e3:e0:02:a1:6a:a6:16: cf:2f:d3:1f:27:9e:ed:b6:6f:71:14:ad:d3:7d:b4:ff:58:05: be:ec:3c:de:01:b8:17:49:60:d3:e1:03:b9:fd:52:19:ce:ee: 22:70:59:b1:f2:9b:44:f0:da:33:80:0c:22:b1:fa:91:ab:d3: 55:6c:48:b6:95:70:b1:18:d0:ad:eb:e8:b7:1f:e4:ff:ae:dc: f6:a0:3f:2f:54:aa:f9:9b:e8:bc:90:5b:0c:e7:88:f4:83:0f: 37:ca:ae:92:69:a8:41:db:c5:13:a5:08:b1:81:e9:8e:ac:13: 75:db:e3:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIz0UPv/S5m15EiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk Y2E5OWQ4M2QtNDExOC00NDFmLTk0OGUtYmZiMDU5YjA3MGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHjldZ0zLTqACXjT6WzhoxESJoatoKlKl35k pNvbi/pzo8+PPXGvi6TBWjstheTAkBIADh9ncUGMtNM738fTK9gfj2GMu5R+AVHS i7YQ/qudR+L4YwV8u1Jso6amH5ml5c8xwUQYPPoxDT6K2HRpqk94QG75TfSfAypM gS3P3+89axpFAFATLB/0yMfGifWwOOqqI493G18zV0TiqGBDX+U4hxhsASpXb83D xKWj/46+xYK9Tf21znuiEzy8PYNMtXH583Ba9l+fMPq58A0B9JT7Z5B01fZubiC/ CqsMNl8xSgk0gKh8HdfvSZ8Es2wklaSSbfaBLppJIFolzfvyrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIr0WLRnBc7sqJcTM9jSGSb4jNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjNhOGQzMzgtNmFkNy0z MzU4LThkODctMjM0MWQ5YTgxZjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjexa1g9eQY3rF/c2DwyLTZdOp5LuEwu3FNmnvQJNG5cTsMAWAKSEwC jamel9Rt0l9xfTPCFVQUiVXODZkUolQAb3TV6TLqmEV1ZEnn0GJr4udTH//c+M05 q8qlZuoFX3NfkRbNXMsbuaNPJEFIDoI+LdemooeWy+/HnjI2a1pzqb+Zqc41/t7i 4+ACoWqmFs8v0x8nnu22b3EUrdN9tP9YBb7sPN4BuBdJYNPhA7n9UhnO7iJwWbHy m0Tw2jOADCKx+pGr01VsSLaVcLEY0K3r6Lcf5P+u3PagPy9Uqvmb6LyQWwzniPSD DzfKrpJpqEHbxROlCLGB6Y6sE3Xb42M= -----END CERTIFICATE-----Generated at Sat Apr 26 19:19:36 2025 by rpki-client