$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/203d4c5b-39cc-31ee-9546-b82bfe541856.roa File: 203d4c5b-39cc-31ee-9546-b82bfe541856.roa (raw, json) Hash identifier: T9HZVi5qkWcgYPRk8LsTaETmyotgRFXbSAZ8czzvmvU= Subject key identifier: AF:D9:B5:A9:AD:71:C8:CF:46:2A:15:C0:9B:7E:14:95:1A:02:E7:2B Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F43285848FD56D089B7D996462160D200 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/203d4c5b-39cc-31ee-9546-b82bfe541856.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 8014 IP address blocks: 204.236.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:d0:89:b7:d9:96:46:21:60:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=25b277f4-9623-4f40-897f-42b390d9bb95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:47:e8:aa:3d:52:2f:61:9a:31:05:6e:03: 86:76:33:67:35:24:c0:94:17:a7:ae:5e:ec:1f:08: a1:24:4e:9b:de:d6:e3:23:4b:1e:05:44:92:ea:54: b2:d6:8a:24:7a:6b:9b:ad:e6:0d:9b:b0:c8:75:a3: 2e:bb:a8:7f:31:96:7d:91:2c:e1:d6:ad:74:41:82: 04:56:17:47:af:0f:eb:83:42:c8:63:ca:cb:dd:c4: 06:64:a3:c2:53:bb:c8:0a:17:12:50:ae:c6:07:65: 8d:41:3e:99:c2:80:f4:24:e0:98:bd:65:2a:3f:59: bd:76:b9:90:40:5d:29:ec:d4:41:e9:ae:a1:27:1b: 9b:fd:23:44:9d:d8:bd:5b:2d:30:49:f7:1a:0f:3d: e0:e0:94:af:d4:bf:29:8e:b9:c2:e9:ed:85:7e:07: a7:10:75:2a:de:35:14:c7:32:96:dd:03:5e:46:67: 90:2b:76:54:61:7d:fc:ea:47:97:a1:6c:19:38:b9: 74:ad:86:45:f5:05:55:f1:ba:cd:a1:cb:23:16:52: f4:06:4a:a9:13:32:47:0b:1d:0b:1e:da:39:eb:ad: f9:95:dd:b5:2f:05:44:75:79:bb:19:c9:4b:33:88: e4:77:6b:d7:ef:da:64:b0:ce:cf:c3:d5:0c:10:1c: 8a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D9:B5:A9:AD:71:C8:CF:46:2A:15:C0:9B:7E:14:95:1A:02:E7:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/203d4c5b-39cc-31ee-9546-b82bfe541856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:4c:e8:b5:2d:99:46:b2:b6:08:b9:87:72:7d:c9:32:fd:d5: c8:99:b3:9a:44:44:19:12:af:02:57:0d:e1:8f:ef:01:a1:25: 75:7f:ad:d0:9f:95:88:7b:aa:e3:00:f6:16:bc:ff:ba:28:53: f5:0b:be:31:80:03:42:01:bd:10:ff:99:4d:0c:33:e3:d2:d0: 3a:7f:d7:63:1d:cd:da:75:55:e2:38:40:54:51:36:16:56:f2: ee:17:14:05:1f:33:8d:36:2f:ef:27:d0:07:c5:fc:a7:0f:50: f5:cc:ef:1c:99:2e:32:58:ed:04:c4:89:f8:cc:91:8f:47:b9: f1:cc:62:39:d2:79:f3:dd:7e:0f:bf:5d:7e:0b:01:e7:a1:e5: 19:59:3e:6e:a5:67:23:30:57:55:62:b7:1c:92:b5:e1:e6:04: ac:10:d8:d4:16:2c:db:a8:4b:83:34:10:75:ec:a2:6a:e4:6d: 49:21:d0:20:87:3a:ab:a9:c5:65:e1:97:62:4d:82:35:10:fa: 7a:e6:e7:ca:b6:80:cd:42:99:87:f6:f1:f5:a5:80:63:9b:55: 3d:e1:f1:68:6f:99:fa:ef:9c:46:64:21:62:98:c1:5b:71:43: ca:f6:b7:be:bb:9e:8c:d5:42:13:c0:54:b2:33:2d:93:6f:a2: eb:23:60:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VtCJt9mWRiFg0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjViMjc3ZjQtOTYyMy00ZjQwLTg5N2YtNDJiMzkwZDliYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK1H6Ko9Ui9hmjEFbgOGdjNnNSTAlBenrl7s HwihJE6b3tbjI0seBUSS6lSy1ookemubreYNm7DIdaMuu6h/MZZ9kSzh1q10QYIE VhdHrw/rg0LIY8rL3cQGZKPCU7vIChcSUK7GB2WNQT6ZwoD0JOCYvWUqP1m9drmQ QF0p7NRB6a6hJxub/SNEndi9Wy0wSfcaDz3g4JSv1L8pjrnC6e2FfgenEHUq3jUU xzKW3QNeRmeQK3ZUYX386keXoWwZOLl0rYZF9QVV8brNocsjFlL0BkqpEzJHCx0L Hto56635ld21LwVEdXm7GclLM4jkd2vX79pksM7Pw9UMEByKBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/ZtamtccjPRioVwJt+FJUaAucrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvMjAzZDRjNWItMzljYy0z MWVlLTk1NDYtYjgyYmZlNTQxODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpM6LUtmUaytgi5h3J9yTL91ciZs5pERBkSrwJXDeGP7wGhJXV/rdCf lYh7quMA9ha8/7ooU/ULvjGAA0IBvRD/mU0MM+PS0Dp/12Mdzdp1VeI4QFRRNhZW 8u4XFAUfM402L+8n0AfF/KcPUPXM7xyZLjJY7QTEifjMkY9HufHMYjnSefPdfg+/ XX4LAeeh5RlZPm6lZyMwV1VitxySteHmBKwQ2NQWLNuoS4M0EHXsomrkbUkh0CCH OqupxWXhl2JNgjUQ+nrm58q2gM1CmYf28fWlgGObVT3h8WhvmfrvnEZkIWKYwVtx Q8r2t767nozVQhPAVLIzLZNvousjYCc= -----END CERTIFICATE-----Generated at Mon Apr 28 11:51:37 2025 by rpki-client