$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa File: 4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa (raw, json) Hash identifier: xaBJX8fgD0Y1tIFt/64bK8W0mTb5isXE4Ge9J+z+HPU= Subject key identifier: 2B:09:D1:B2:53:BA:F0:F7:5F:1C:3E:3E:C1:90:41:FB:84:13:3D:16 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584973DEE43801DE3DB026D67280 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 46878 IP address blocks: 208.81.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e4:38:01:de:3d:b0:26:d6:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=6b5dcb4f-eb8d-4454-b8fa-79e86e9645a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:27:22:fa:75:11:57:71:80:d9:ec:66:87:5d: b6:e3:0f:6e:a0:31:5d:ce:98:88:cc:45:78:c3:ff: 11:d1:b1:c5:13:57:5d:70:b9:0e:db:66:7f:12:80: 8b:49:e1:c0:93:a3:9e:f5:4e:84:8f:e5:99:93:4a: 6e:38:9f:47:86:4c:ce:2e:9d:96:54:6e:44:c1:7b: c2:6b:43:b8:a0:07:87:4d:00:16:59:69:3f:74:e4: 43:ac:10:22:bf:f2:c6:e8:09:70:31:7c:d6:e1:be: 7e:57:47:cd:2d:bc:5f:3c:81:84:62:a8:02:14:83: 66:68:c9:c9:fc:c8:80:da:c7:91:ae:53:ee:3d:f8: 11:ff:44:05:d4:4b:cf:c0:10:ee:df:52:c7:ed:e1: 61:1f:df:5e:3b:1e:b9:4c:7a:b7:45:95:de:d7:42: 21:d3:e5:42:c8:35:40:eb:35:72:5d:cc:49:eb:57: 9a:7a:72:d0:fc:c9:59:cd:39:8c:6f:ad:85:d6:65: 2c:73:77:7b:8e:e0:f8:9f:32:88:84:50:0e:12:7d: a1:af:83:f5:77:05:d0:4c:86:7d:b8:12:3d:43:f5: 2a:dc:72:fd:82:eb:76:61:48:50:5d:f5:a9:58:09: 4d:a2:c8:d9:0f:9f:9b:5b:5b:2c:c4:42:9a:8d:cc: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:09:D1:B2:53:BA:F0:F7:5F:1C:3E:3E:C1:90:41:FB:84:13:3D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/4bf02b8f-3329-3f25-af9d-2d641a5a954a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4c:e0:f8:a3:53:f4:88:b4:a6:f1:fe:b3:74:0b:dc:e1:b2: 9c:81:3d:6d:4f:51:05:1a:ec:3c:ea:7e:6e:92:cb:0e:27:c5: 58:11:9c:36:03:5e:f2:3a:fc:7e:8a:a2:ac:be:b1:70:d2:bb: 97:b5:e8:66:f0:15:0e:2b:f6:98:92:c3:08:5f:e9:37:51:f0: 6d:f5:7a:21:79:f7:09:88:cb:a3:9d:a8:39:42:95:78:56:b7: b9:7b:f6:c3:50:3a:e1:14:d8:d5:c1:1e:23:8e:86:ca:9a:89: 9e:2f:f8:ca:03:a6:2f:9e:01:0b:ec:8c:c0:8f:72:85:29:bb: 07:bd:c6:8f:b9:13:4d:93:e2:30:65:d1:86:44:4e:33:f9:fd: 52:a4:49:ff:0e:c6:de:e0:73:18:50:d8:74:5f:37:57:0c:65: 61:52:61:35:69:c8:0a:a5:b7:d0:a6:40:a2:35:5c:22:c3:4b: 63:d0:bf:b7:48:69:b7:09:68:1d:dc:44:6c:f5:db:e2:c8:4b: 62:ea:eb:c7:6c:99:d1:89:f0:60:1c:ac:6b:9c:64:ef:a7:28: 60:0f:dc:f0:31:d2:87:7d:83:0e:b6:f1:0e:05:76:3b:3f:b2: 06:b2:8c:e6:4d:fe:7d:b3:c0:39:06:b4:4a:2c:a5:fa:ba:5e: a3:ef:42:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3uQ4Ad49sCbWcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk NmI1ZGNiNGYtZWI4ZC00NDU0LWI4ZmEtNzllODZlOTY0NWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyci+nURV3GA2exmh1224w9uoDFdzpiIzEV4 w/8R0bHFE1ddcLkO22Z/EoCLSeHAk6Oe9U6Ej+WZk0puOJ9HhkzOLp2WVG5EwXvC a0O4oAeHTQAWWWk/dORDrBAiv/LG6AlwMXzW4b5+V0fNLbxfPIGEYqgCFINmaMnJ /MiA2seRrlPuPfgR/0QF1EvPwBDu31LH7eFhH99eOx65THq3RZXe10Ih0+VCyDVA 6zVyXcxJ61eaenLQ/MlZzTmMb62F1mUsc3d7juD4nzKIhFAOEn2hr4P1dwXQTIZ9 uBI9Q/Uq3HL9gut2YUhQXfWpWAlNosjZD5+bW1ssxEKajcxIrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsJ0bJTuvD3Xxw+PsGQQfuEEz0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvNGJmMDJiOGYtMzMyOS0z ZjI1LWFmOWQtMmQ2NDFhNWE5NTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdM4PijU/SItKbx/rN0C9zhspyBPW1PUQUa7Dzqfm6Syw4nxVgRnDYD XvI6/H6Koqy+sXDSu5e16GbwFQ4r9piSwwhf6TdR8G31eiF59wmIy6OdqDlClXhW t7l79sNQOuEU2NXBHiOOhsqaiZ4v+MoDpi+eAQvsjMCPcoUpuwe9xo+5E02T4jBl 0YZETjP5/VKkSf8Oxt7gcxhQ2HRfN1cMZWFSYTVpyAqlt9CmQKI1XCLDS2PQv7dI abcJaB3cRGz12+LIS2Lq68dsmdGJ8GAcrGucZO+nKGAP3PAx0od9gw628Q4Fdjs/ sgayjOZN/n2zwDkGtEospfq6XqPvQiY= -----END CERTIFICATE-----Generated at Sun Apr 27 04:15:11 2025 by rpki-client