$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa File: d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa (raw, json) Hash identifier: VIxvVOW+xHnyZdVqgVeD7WF7QeUendEIDlrmxQ94jV0= Subject key identifier: 77:F8:37:37:1A:E0:B3:A3:F3:39:EA:EC:C3:60:B3:11:C0:8E:F1:E7 Certificate issuer: /CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Certificate serial: 010D0C9F43285849E654F40E0338C58C5E7365C0 Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 17103 IP address blocks: 208.90.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:f4:0e:03:38:c5:8c:5e:73:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=ea1831ea-3c2b-424d-8caf-1b5579c00ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3e:7b:f9:b7:5c:86:4e:0d:11:b0:66:2e:5c: e7:0e:76:90:ee:dd:6e:3a:85:d8:ae:32:13:d2:ae: 25:49:69:92:5f:54:01:35:9f:f8:a1:5a:07:45:58: d6:82:dd:f6:e6:e0:23:24:69:f8:af:56:dd:42:b5: 3d:62:08:b3:8f:d3:57:55:30:21:4e:6e:a2:41:18: ed:2f:20:06:5b:eb:b6:03:80:69:7e:32:b6:ce:fd: 8a:6f:ed:76:fc:d4:84:b4:57:d8:17:46:c4:13:51: 52:2f:6e:ff:3d:e8:28:d3:a1:0d:dd:bd:16:66:bc: ae:c1:95:7b:55:81:72:2f:db:ec:5d:cd:65:1e:16: ee:c5:10:a6:7e:a0:21:f4:ef:70:71:12:39:38:3d: f9:e6:c3:82:65:84:f9:14:46:04:1d:f0:e7:7a:ee: e5:87:06:4b:be:2d:7a:d5:ec:51:78:2c:af:1b:41: 72:2f:1c:0e:ab:39:04:85:6d:62:9e:29:35:ad:98: a0:af:9f:ec:8c:8f:c3:36:b7:d5:62:29:04:5b:18: 42:6d:98:0d:a2:d5:56:97:23:6d:d2:73:48:75:38: 5b:20:a2:21:00:52:ec:3c:d4:52:02:6c:63:7a:4a: 29:f7:6f:03:9a:ea:26:42:6e:34:e6:15:7f:17:e9: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F8:37:37:1A:E0:B3:A3:F3:39:EA:EC:C3:60:B3:11:C0:8E:F1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl X509v3 Authority Key Identifier: keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer sbgp-ipAddrBlock: critical IPv4: 208.90.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:c7:06:4c:19:07:a6:b3:77:6f:4f:80:79:ce:94:90:4f:63: 4a:f0:cc:a3:11:84:f3:40:c7:e9:98:0d:b8:84:d8:60:5b:b0: 87:45:58:f4:d7:07:02:f5:b7:88:99:56:44:3d:be:2a:b9:29: 1b:42:00:ae:5c:c0:f6:2c:03:d0:55:33:3b:00:4f:8c:0e:93: 57:2f:a5:c2:5f:b2:47:71:a1:56:55:f0:f7:4d:60:dd:c2:b5: ef:73:a8:90:ef:30:13:e9:89:57:63:8c:0b:93:a8:a6:c5:e8: 5a:de:cc:ab:31:e2:6b:cd:b2:ea:bc:35:0d:73:23:a3:1d:79: e4:09:2d:92:57:14:20:bb:1b:40:05:3c:2d:7c:f5:c7:c7:ca: 79:a5:2e:19:61:ff:7b:19:c3:f8:3b:44:e3:e7:6d:a7:66:79: f2:be:17:3d:a9:0e:5b:60:d2:ea:46:46:35:51:d7:84:6c:48: ed:78:4b:17:e8:3f:06:d8:1d:6b:d0:9c:ee:53:02:a6:5e:39: 6b:2e:64:3e:07:bd:30:ec:15:9c:c9:c3:8b:aa:97:b9:f6:0b: 29:f8:a4:68:ce:e8:ca:89:e0:57:be:4b:87:c9:ba:33:59:9e: 7e:e9:6b:d6:8c:93:00:fb:74:ed:6c:29:bc:bf:36:97:58:5b: 43:54:6b:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPQOAzjFjF5zZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNk ZTE3MB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk ZWExODMxZWEtM2MyYi00MjRkLThjYWYtMWI1NTc5YzAwZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j57+bdchk4NEbBmLlznDnaQ7t1uOoXYrjIT 0q4lSWmSX1QBNZ/4oVoHRVjWgt325uAjJGn4r1bdQrU9Ygizj9NXVTAhTm6iQRjt LyAGW+u2A4BpfjK2zv2Kb+12/NSEtFfYF0bEE1FSL27/Pego06EN3b0WZryuwZV7 VYFyL9vsXc1lHhbuxRCmfqAh9O9wcRI5OD355sOCZYT5FEYEHfDneu7lhwZLvi16 1exReCyvG0FyLxwOqzkEhW1inik1rZigr5/sjI/DNrfVYikEWxhCbZgNotVWlyNt 0nNIdThbIKIhAFLsPNRSAmxjekop928DmuomQm405hV/F+ku6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf4Nzca4LOj8znq7MNgsxHAjvHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNGIx MDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvZDNkZGIxOGYtNWVmNi0z ZmVhLWI4ZTYtZDM4MGU1MTNhMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzRiMTAwMGEtZGRkZS00NGE3LWFk OWMtMTJkMDQ5YWNkZTE3LzM0YjEwMDBhLWRkZGUtNDRhNy1hZDljLTEyZDA0OWFj ZGUxNy5jcmwwHwYDVR0jBBgwFoAUHuwP9vEdh6YT86HbKJO1hz7Ht4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQw NDlhY2RlMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTHBkwZB6azd29PgHnOlJBPY0rwzKMRhPNAx+mYDbiE2GBbsIdFWPTX BwL1t4iZVkQ9viq5KRtCAK5cwPYsA9BVMzsAT4wOk1cvpcJfskdxoVZV8PdNYN3C te9zqJDvMBPpiVdjjAuTqKbF6FrezKsx4mvNsuq8NQ1zI6MdeeQJLZJXFCC7G0AF PC189cfHynmlLhlh/3sZw/g7ROPnbadmefK+Fz2pDltg0upGRjVR14RsSO14Sxfo PwbYHWvQnO5TAqZeOWsuZD4HvTDsFZzJw4uql7n2Cyn4pGjO6MqJ4Fe+S4fJujNZ nn7pa9aMkwD7dO1sKby/NpdYW0NUa2Q= -----END CERTIFICATE-----Generated at Sun Jun 15 15:40:20 2025 by rpki-client