$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa File: 99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa (raw, json) Hash identifier: FzM8yT0Qd58i419tqeoe2zwtcdZWWFgLl5JcM6af39c= Subject key identifier: 0B:B2:EA:83:9D:8D:B7:F5:83:55:30:5A:13:50:54:1F:2A:35:FE:C1 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F43285848F92685D0869D0E8ED14F2840 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 8014 IP address blocks: 204.236.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:85:d0:86:9d:0e:8e:d1:4f:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=693c3766-8a03-418d-b2a0-4db7a6f0cc28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f7:2a:54:33:18:de:3d:8b:2f:a3:bc:45:1c: 65:20:3d:69:48:cf:03:3e:7d:a5:e5:da:c2:53:88: 93:94:07:07:23:c8:32:e9:86:f8:e4:dd:05:c3:18: 44:8d:86:6b:40:4a:2d:56:23:5a:32:f7:8c:b2:97: 5a:0b:97:eb:75:19:c3:71:c4:d2:e6:b9:d4:ff:ac: 61:3a:5a:09:83:cb:3d:f5:51:49:70:94:34:a3:af: ab:ca:63:f9:4d:ed:96:68:f2:7c:e5:b0:be:e0:ee: 5a:ff:54:a7:01:69:13:ac:90:6c:40:83:f1:ac:e7: a1:ea:a8:c8:f7:25:57:f1:aa:bc:be:b6:06:39:4a: c2:3c:12:5a:88:d5:8b:32:61:79:fa:b3:70:71:68: f7:60:ff:ef:ae:5b:ee:68:a6:2d:9f:4f:2c:66:6d: 58:3e:9d:2a:cd:49:94:5e:d9:ef:d9:13:51:8a:16: ad:d5:01:96:d4:c2:01:c6:29:2e:5a:3d:e8:e2:c2: ed:8e:5f:c8:20:26:c1:1f:1c:68:41:db:80:7c:c6: 49:b1:4b:97:fe:6a:ae:6c:71:7d:51:70:b7:82:3e: f2:65:89:4c:96:38:d2:21:03:ef:71:16:89:73:85: 5d:59:30:c0:7f:5b:4d:28:d0:a5:2d:cc:a8:18:0f: 27:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B2:EA:83:9D:8D:B7:F5:83:55:30:5A:13:50:54:1F:2A:35:FE:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/99a51ba7-2395-3013-98e8-5dbcb059a9fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:1b:25:9e:c2:07:9f:72:e3:44:53:98:51:c2:4b:86:ef:91: 69:0b:4a:f3:5d:de:19:18:71:12:48:4c:31:d9:b3:8b:c1:44: a7:19:35:3a:92:13:cd:44:df:29:00:30:6e:28:cc:ec:e6:ad: 74:95:46:6c:0a:c8:f2:99:4f:fc:a6:1d:29:48:d1:ed:b2:ad: de:de:c5:21:8c:14:d1:ad:fb:ee:55:36:46:ee:e0:ec:a4:61: 74:71:58:78:f7:6c:df:4b:d8:ab:c0:61:e9:62:b8:c9:19:bc: 1c:7f:99:fc:29:42:bd:33:bd:dc:70:3d:e3:c3:9a:08:c9:b9: 16:71:bc:fa:a0:fb:af:e4:91:73:b6:6e:a6:7f:d0:e7:43:b9: 84:83:5e:7e:19:38:de:e9:64:2a:f6:35:2b:3f:22:38:a6:d8: 0e:bb:27:b9:c0:db:08:ab:63:9b:01:71:a3:30:09:3e:7e:e5: da:54:1b:3c:bb:ba:35:14:b6:34:74:f8:cc:bc:4b:a9:f0:50: de:82:a1:41:dd:4d:6d:0b:84:3f:8a:81:b0:b9:2d:3b:a4:76: c9:1d:64:11:1f:16:5a:aa:97:27:6d:ea:57:c7:d0:f4:65:ca: aa:b3:33:d6:53:18:86:ae:c9:c0:0e:94:50:52:66:c1:8f:b7: c9:df:35:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JoXQhp0OjtFPKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk NjkzYzM3NjYtOGEwMy00MThkLWIyYTAtNGRiN2E2ZjBjYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/cqVDMY3j2LL6O8RRxlID1pSM8DPn2l5drC U4iTlAcHI8gy6Yb45N0FwxhEjYZrQEotViNaMveMspdaC5frdRnDccTS5rnU/6xh OloJg8s99VFJcJQ0o6+rymP5Te2WaPJ85bC+4O5a/1SnAWkTrJBsQIPxrOeh6qjI 9yVX8aq8vrYGOUrCPBJaiNWLMmF5+rNwcWj3YP/vrlvuaKYtn08sZm1YPp0qzUmU Xtnv2RNRihat1QGW1MIBxikuWj3o4sLtjl/IICbBHxxoQduAfMZJsUuX/mqubHF9 UXC3gj7yZYlMljjSIQPvcRaJc4VdWTDAf1tNKNClLcyoGA8nWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuy6oOdjbf1g1UwWhNQVB8qNf7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvOTlhNTFiYTctMjM5NS0z MDEzLTk4ZTgtNWRiY2IwNTlhOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYbJZ7CB59y40RTmFHCS4bvkWkLSvNd3hkYcRJITDHZs4vBRKcZNTqS E81E3ykAMG4ozOzmrXSVRmwKyPKZT/ymHSlI0e2yrd7exSGMFNGt++5VNkbu4Oyk YXRxWHj3bN9L2KvAYeliuMkZvBx/mfwpQr0zvdxwPePDmgjJuRZxvPqg+6/kkXO2 bqZ/0OdDuYSDXn4ZON7pZCr2NSs/Ijim2A67J7nA2wirY5sBcaMwCT5+5dpUGzy7 ujUUtjR0+My8S6nwUN6CoUHdTW0LhD+KgbC5LTukdskdZBEfFlqqlydt6lfH0PRl yqqzM9ZTGIauycAOlFBSZsGPt8nfNTM= -----END CERTIFICATE-----Generated at Mon Apr 28 20:00:53 2025 by rpki-client