$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd79fc08-e584-3b8d-8b6c-053c96e54198.roa File: cd79fc08-e584-3b8d-8b6c-053c96e54198.roa (raw, json) Hash identifier: uawSfuDrPiZix2gePbaAZKEdAyfL33AK3xwWJKHQdm8= Subject key identifier: 27:10:8E:2D:56:9C:98:CB:7C:54:4A:97:36:1B:4B:D4:0A:C5:63:81 Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Certificate serial: 010D0C9F43285848F65BDB5D7DD95BAF4415E200 Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd79fc08-e584-3b8d-8b6c-053c96e54198.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16841 IP address blocks: 63.217.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:db:5d:7d:d9:5b:af:44:15:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d205ab81-c0bb-4402-bc19-d1c3ebb84fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:28:ea:99:46:c7:26:57:72:b9:e3:51:2b:15: de:12:31:9e:5b:a7:b4:18:39:0f:77:1b:a0:9b:f9: 64:61:c1:2f:0f:a6:51:98:0e:5a:9f:2c:29:26:dc: ce:4f:49:70:d5:8f:5b:eb:39:44:f2:a6:44:6a:cb: 74:26:16:f4:85:8c:0c:81:9a:ab:c5:ce:5c:04:48: 7c:30:33:83:c5:22:83:47:66:4c:96:54:56:04:3c: a1:a1:33:dd:92:ad:79:d5:f5:70:a1:d9:e2:c9:d6: 47:dc:11:fa:cc:40:36:f4:1d:18:17:1a:06:33:86: c0:3b:07:e0:d4:b5:06:02:65:b2:e8:15:a0:06:e6: 26:98:9b:4a:1d:82:09:bb:c7:fa:78:48:27:ab:94: de:21:2d:a3:18:f5:dc:13:cc:39:c3:33:3b:14:7a: bb:b4:fe:45:93:1c:68:8d:af:ac:fe:93:dd:bf:b9: 5b:21:48:ff:c3:36:09:d0:d4:c8:e2:9f:67:a9:65: cd:7f:ec:a4:08:a9:e2:9a:ea:7c:68:53:df:16:0f: 22:c7:c9:a5:6a:8b:e1:cc:8a:54:74:e8:29:45:50: c9:5b:53:ee:aa:5d:6a:ff:5c:14:4c:70:40:1b:93: 09:02:bd:d8:b0:9e:d7:0b:57:0a:7d:ab:34:ea:ea: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:10:8E:2D:56:9C:98:CB:7C:54:4A:97:36:1B:4B:D4:0A:C5:63:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/cd79fc08-e584-3b8d-8b6c-053c96e54198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl X509v3 Authority Key Identifier: keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer sbgp-ipAddrBlock: critical IPv4: 63.217.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:d6:6b:20:3e:7b:1d:60:15:b0:fe:13:b8:d0:6a:15:f1:3e: a7:9d:17:29:b7:89:d8:f2:7a:14:7f:5f:a0:ee:ae:d3:87:3a: 57:00:74:69:a7:6a:73:4a:70:0b:2d:78:11:50:2b:2f:f3:06: 76:19:c6:9e:d9:aa:cb:55:a5:c1:e1:b1:a2:0a:97:29:6c:7c: 3a:df:ab:c4:d3:bc:46:5c:89:49:0f:ab:65:a2:0e:fb:f3:7e: 12:47:47:9a:97:8e:0e:5e:5d:a2:e0:41:78:3b:a5:8d:f2:ba: e9:f9:b9:ba:a5:34:7d:4c:8e:97:a8:8b:e0:87:14:cd:e8:eb: 70:27:8f:6f:68:94:1e:fd:56:70:f2:6c:64:f0:27:f1:a5:0a: 33:e8:df:f5:a7:f0:c7:8e:33:1c:7b:ad:11:fd:d0:08:82:0d: 14:70:15:32:ab:a4:fb:10:0e:11:05:ab:38:55:ad:e0:af:7a: ac:64:59:3c:99:52:c7:5a:21:4d:72:5a:c0:33:ee:ae:92:31: 57:a5:4a:51:29:1c:b5:2a:27:70:fa:f9:55:29:29:3a:db:dd: 0e:14:46:25:61:93:7c:a3:88:cf:18:6e:14:97:24:e4:3e:d5: 3a:a6:7d:de:0f:12:61:79:d1:b6:36:94:6f:3d:01:49:23:50: cb:2d:32:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9tdfdlbr0QV4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw YzQ4MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDIwNWFiODEtYzBiYi00NDAyLWJjMTktZDFjM2ViYjg0ZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyjqmUbHJldyueNRKxXeEjGeW6e0GDkPdxug m/lkYcEvD6ZRmA5anywpJtzOT0lw1Y9b6zlE8qZEast0Jhb0hYwMgZqrxc5cBEh8 MDODxSKDR2ZMllRWBDyhoTPdkq151fVwodniydZH3BH6zEA29B0YFxoGM4bAOwfg 1LUGAmWy6BWgBuYmmJtKHYIJu8f6eEgnq5TeIS2jGPXcE8w5wzM7FHq7tP5Fkxxo ja+s/pPdv7lbIUj/wzYJ0NTI4p9nqWXNf+ykCKnimup8aFPfFg8ix8mlaovhzIpU dOgpRVDJW1Puql1q/1wUTHBAG5MJAr3YsJ7XC1cKfas06uotPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcQji1WnJjLfFRKlzYbS9QKxWOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5 ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvY2Q3OWZjMDgtZTU4NC0z YjhkLThiNmMtMDUzYzk2ZTU0MTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9lsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrWayA+ex1gFbD+E7jQahXxPqedFym3idjyehR/X6DurtOHOlcAdGmn anNKcAsteBFQKy/zBnYZxp7ZqstVpcHhsaIKlylsfDrfq8TTvEZciUkPq2WiDvvz fhJHR5qXjg5eXaLgQXg7pY3yuun5ubqlNH1Mjpeoi+CHFM3o63Anj29olB79VnDy bGTwJ/GlCjPo3/Wn8MeOMxx7rRH90AiCDRRwFTKrpPsQDhEFqzhVreCveqxkWTyZ UsdaIU1yWsAz7q6SMVelSlEpHLUqJ3D6+VUpKTrb3Q4URiVhk3yjiM8YbhSXJOQ+ 1Tqmfd4PEmF50bY2lG89AUkjUMstMic= -----END CERTIFICATE-----Generated at Mon Apr 28 22:51:55 2025 by rpki-client