$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903837ba-0569-334a-85b9-8f8261dd9880.roa File: 903837ba-0569-334a-85b9-8f8261dd9880.roa (raw, json) Hash identifier: SanJ958L7OxBtl+jzLxoOhRZJuiZLY2OKkc6hcBuD+o= Subject key identifier: FB:A3:E8:7A:14:AE:EF:62:8E:4F:62:C7:66:4A:A7:A1:F5:88:92:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F43285849A1EF7986C101F1E329E89480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903837ba-0569-334a-85b9-8f8261dd9880.roa Signing time: Thu 24 Apr 2025 13:01:00 +0000 ROA not before: Thu 24 Apr 2025 13:01:00 +0000 ROA not after: Wed 23 Jul 2025 13:01:00 +0000 asID: 20940 IP address blocks: 204.8.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:ef:79:86:c1:01:f1:e3:29:e8:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 24 13:01:00 2025 GMT Not After : Jul 23 13:01:00 2025 GMT Subject: CN=db603401-e1bf-40be-91cd-65dc84ed2b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:57:aa:0c:de:30:df:d2:7d:6b:21:d5:52:ea: a9:ed:27:56:46:3b:1b:8e:e7:df:b1:fd:7a:cd:c1: 50:19:7e:3a:63:87:8f:95:08:21:f1:f1:e1:96:73: 70:3e:d2:d3:41:5c:f0:99:be:47:3a:5a:82:d8:3c: 67:21:74:80:63:f5:cb:ee:c8:6c:ef:d4:82:46:3c: bf:16:5b:53:1e:26:3c:c4:5e:5a:16:2a:d4:b1:79: e4:75:b5:1a:88:a7:4c:4b:fd:24:61:e5:e9:4b:1c: 1d:26:5f:5d:af:eb:0d:63:1d:ef:71:1f:4c:cf:8d: 45:8c:00:2b:bc:a2:80:12:55:4b:1e:5a:f0:6f:61: 9c:ce:ca:9e:06:97:f4:d8:32:60:65:8b:16:0a:7b: f3:73:2e:00:09:3e:7e:94:93:c1:da:51:c5:f6:61: bf:5a:e9:6b:f6:82:d7:ed:f1:57:f9:10:69:27:5c: 79:4e:f3:f8:23:eb:09:10:0c:2d:ab:c6:07:db:64: e0:85:00:ef:fb:f3:75:45:0d:51:08:33:06:8d:5b: 8f:74:e0:d2:cb:c8:2e:55:fc:63:d2:da:f2:08:84: d4:ec:ee:59:93:97:f4:09:96:5b:48:d4:6d:6a:49: b5:66:09:c6:34:26:75:10:df:f3:77:46:d5:28:db: 19:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:A3:E8:7A:14:AE:EF:62:8E:4F:62:C7:66:4A:A7:A1:F5:88:92:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/903837ba-0569-334a-85b9-8f8261dd9880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 204.8.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:63:69:7d:86:f9:54:ba:32:2a:10:b1:64:02:77:50:3c:e2: 21:cf:70:48:99:33:f5:c6:7c:93:54:ea:07:f1:dd:01:a3:cf: bb:52:47:d5:70:bf:e1:fb:30:e4:f4:41:d7:8a:9b:f0:df:23: e4:b8:09:70:d3:6f:16:df:1c:97:b2:f0:22:f4:cb:22:e2:ee: 61:0e:8b:d0:6a:1a:19:5b:b8:a4:fb:9d:c2:41:4e:5a:00:0e: 9d:6d:ed:0e:32:24:1f:14:75:4c:87:c1:ca:98:28:03:78:96: f5:1d:39:82:4f:75:79:a8:57:f0:4c:bc:1a:1a:a8:29:52:de: be:c0:e9:c7:c3:f3:ea:69:60:06:0e:fb:b1:29:e7:13:29:c7: 91:dd:59:20:cb:ee:45:6f:78:87:da:12:7c:35:b9:48:16:fa: 3d:1f:48:1d:e6:5d:34:b8:1a:50:f8:b5:76:09:c6:94:b1:b7: 68:03:bd:67:d9:64:c3:84:4d:87:8b:72:c2:d2:7b:54:47:77: 63:94:2f:c9:c9:0c:b3:b9:5a:df:7c:ab:d5:b8:3b:01:4b:61: d9:e9:51:4f:05:48:87:33:be:9a:05:06:40:8a:82:14:95:c3: a6:60:c6:7f:1b:eb:86:68:9c:8a:dc:72:35:a6:2f:89:84:ad: 92:62:8e:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73mGwQHx4ynolIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk ZGI2MDM0MDEtZTFiZi00MGJlLTkxY2QtNjVkYzg0ZWQyYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVeqDN4w39J9ayHVUuqp7SdWRjsbjuffsf16 zcFQGX46Y4ePlQgh8fHhlnNwPtLTQVzwmb5HOlqC2DxnIXSAY/XL7shs79SCRjy/ FltTHiY8xF5aFirUsXnkdbUaiKdMS/0kYeXpSxwdJl9dr+sNYx3vcR9Mz41FjAAr vKKAElVLHlrwb2GczsqeBpf02DJgZYsWCnvzcy4ACT5+lJPB2lHF9mG/Wulr9oLX 7fFX+RBpJ1x5TvP4I+sJEAwtq8YH22TghQDv+/N1RQ1RCDMGjVuPdODSy8guVfxj 0tryCITU7O5Zk5f0CZZbSNRtakm1ZgnGNCZ1EN/zd0bVKNsZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuj6HoUru9ijk9ix2ZKp6H1iJIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTAzODM3YmEtMDU2OS0z MzRhLTg1YjktOGY4MjYxZGQ5ODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZjaX2G+VS6MioQsWQCd1A84iHPcEiZM/XGfJNU6gfx3QGjz7tSR9Vw v+H7MOT0QdeKm/DfI+S4CXDTbxbfHJey8CL0yyLi7mEOi9BqGhlbuKT7ncJBTloA Dp1t7Q4yJB8UdUyHwcqYKAN4lvUdOYJPdXmoV/BMvBoaqClS3r7A6cfD8+ppYAYO +7Ep5xMpx5HdWSDL7kVveIfaEnw1uUgW+j0fSB3mXTS4GlD4tXYJxpSxt2gDvWfZ ZMOETYeLcsLSe1RHd2OUL8nJDLO5Wt98q9W4OwFLYdnpUU8FSIczvpoFBkCKghSV w6Zgxn8b64ZonIrccjWmL4mErZJijkc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:06:43 2025 by rpki-client