$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/bd0074dc-349d-3242-a5ad-2066eb6f9200.roa File: bd0074dc-349d-3242-a5ad-2066eb6f9200.roa (raw, json) Hash identifier: cKrUDWWZEBf+RJYqt4xAZIii4ZOV6nJP7EL35P6LceM= Subject key identifier: 49:D0:98:26:6C:53:F8:37:78:06:EB:5F:E3:4E:1D:BF:52:64:6E:A3 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F432858491D71821CF5A788C35CEC8D80 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/bd0074dc-349d-3242-a5ad-2066eb6f9200.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 19198 IP address blocks: 208.81.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:82:1c:f5:a7:88:c3:5c:ec:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=c272e850-85fe-4be2-bd48-c3adf7e6612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:a6:fa:d7:c6:64:d8:99:4a:7f:fb:b5:29: 77:42:b0:db:31:40:2a:40:92:06:10:7f:a7:3f:5a: 06:1c:c3:a5:e1:ff:a8:23:e8:50:ee:ba:bd:4f:47: c2:41:bc:47:12:fd:99:dd:d9:79:8e:65:49:60:d7: 1a:4c:85:0b:c9:af:7c:11:98:91:eb:89:b9:e3:43: a5:b9:14:49:b6:71:b4:ca:43:e9:52:23:1d:38:53: ec:10:e1:e3:f6:66:8f:27:55:6a:c0:ef:66:c3:e1: 6d:08:4e:91:0b:36:82:70:dc:f3:8f:49:24:b9:7f: 0c:38:d5:85:a2:7d:f4:b4:8d:e1:64:d8:2c:34:06: 35:b0:92:64:32:64:6d:c7:bd:8e:e1:3b:82:8c:ef: 91:1d:93:20:aa:4f:3b:19:1c:ed:d0:90:57:c7:05: 81:40:89:ce:ee:3f:1b:01:b9:46:3c:7d:bb:20:29: 85:74:3a:c1:ef:3f:00:6b:97:97:b8:b0:51:4e:b5: b8:f6:21:5c:44:36:6a:e4:2c:ad:1f:3b:4c:9c:6d: a4:85:b4:51:33:85:e3:ff:84:f6:2f:a1:2c:99:10: c9:5e:f8:58:be:6e:ab:8d:34:d2:85:ba:73:06:c1: ab:19:ea:4c:62:eb:3a:75:8a:42:25:a2:08:6f:e7: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D0:98:26:6C:53:F8:37:78:06:EB:5F:E3:4E:1D:BF:52:64:6E:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/bd0074dc-349d-3242-a5ad-2066eb6f9200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:99:e4:2a:82:5b:3a:3d:fc:64:fc:22:16:8a:f0:7d:23:e8: 84:d9:07:01:39:a7:12:e0:c7:37:66:61:41:13:94:47:d7:e3: ba:a5:a3:80:e9:bb:18:17:52:5e:01:61:6f:e3:64:59:5a:91: fa:8d:e0:e7:1b:0a:f5:fb:9b:bc:46:85:35:85:91:08:7d:8d: dc:42:9b:96:fc:77:74:09:79:47:b3:dc:21:19:d8:ba:7c:00: 52:01:93:c4:2c:4e:6d:4f:82:54:1a:e1:cd:eb:1d:0a:24:7a: ce:82:71:cf:1a:f3:a0:b0:d1:67:11:97:ef:af:30:b2:f3:1b: 40:09:21:2b:53:58:72:ce:c3:08:3a:ba:94:48:ef:67:75:4e: ea:cb:7e:53:d0:5f:14:23:34:1b:0a:6f:e2:a2:15:a0:19:9b: f8:67:85:a9:04:09:69:91:c8:3a:81:61:7f:bd:7b:a1:e1:f3: 2f:a6:2b:69:d0:13:c1:27:d6:0d:29:1a:bf:97:5d:74:0f:1e: 4f:2a:83:ea:f2:0d:e2:79:c6:91:a5:f5:9a:15:5b:8b:ab:86: 09:88:70:3f:5d:35:b9:b7:eb:28:08:12:1c:94:47:d1:50:07: 9a:7c:5c:2e:24:84:bd:dc:46:56:96:a0:e5:76:22:89:47:e0: 46:9c:fe:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYIc9aeIw1zsjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YzI3MmU4NTAtODVmZS00YmUyLWJkNDgtYzNhZGY3ZTY2MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfGm+tfGZNiZSn/7tSl3QrDbMUAqQJIGEH+n P1oGHMOl4f+oI+hQ7rq9T0fCQbxHEv2Z3dl5jmVJYNcaTIULya98EZiR64m540Ol uRRJtnG0ykPpUiMdOFPsEOHj9maPJ1VqwO9mw+FtCE6RCzaCcNzzj0kkuX8MONWF on30tI3hZNgsNAY1sJJkMmRtx72O4TuCjO+RHZMgqk87GRzt0JBXxwWBQInO7j8b AblGPH27ICmFdDrB7z8Aa5eXuLBRTrW49iFcRDZq5CytHztMnG2khbRRM4Xj/4T2 L6EsmRDJXvhYvm6rjTTShbpzBsGrGepMYus6dYpCJaIIb+diYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnQmCZsU/g3eAbrX+NOHb9SZG6jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvYmQwMDc0ZGMtMzQ5ZC0z MjQyLWE1YWQtMjA2NmViNmY5MjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWZ5CqCWzo9/GT8IhaK8H0j6ITZBwE5pxLgxzdmYUETlEfX47qlo4Dp uxgXUl4BYW/jZFlakfqN4OcbCvX7m7xGhTWFkQh9jdxCm5b8d3QJeUez3CEZ2Lp8 AFIBk8QsTm1PglQa4c3rHQokes6Ccc8a86Cw0WcRl++vMLLzG0AJIStTWHLOwwg6 upRI72d1TurLflPQXxQjNBsKb+KiFaAZm/hnhakECWmRyDqBYX+9e6Hh8y+mK2nQ E8En1g0pGr+XXXQPHk8qg+ryDeJ5xpGl9ZoVW4urhgmIcD9dNbm36ygIEhyUR9FQ B5p8XC4khL3cRlaWoOV2IolH4Eac/iU= -----END CERTIFICATE-----Generated at Sat Apr 26 16:45:56 2025 by rpki-client