$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa File: 32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa (raw, json) Hash identifier: XOu0gj5ghOg0nng6Wk+YcO5hnpVtsVsXCLN/P2HzUzk= Subject key identifier: 51:7B:87:E6:EB:F6:EE:9D:D4:13:5A:D8:D6:BB:CA:D3:35:60:FE:2D Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584953C419595DB596D126905360 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 36861 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:19:59:5d:b5:96:d1:26:90:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=ae278ee8-3ecf-4d8c-bc28-153fe41e43e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a9:65:12:1c:66:4c:42:75:43:58:7b:9d:8f: b8:09:95:85:11:34:09:fa:ae:6d:4c:63:88:86:16: ac:15:c7:68:98:a9:96:0b:fb:a3:c3:72:77:cb:1f: 8c:ac:28:67:31:a1:56:a3:76:e2:40:35:1b:13:d9: 02:6f:8e:84:89:b1:a8:6b:f7:31:cd:ed:63:fd:03: 0c:02:ae:0f:87:c6:84:5c:bd:11:6c:a3:89:24:51: ac:50:76:40:e1:56:ce:aa:e8:ba:2c:f1:0a:bf:6e: d4:95:92:66:62:48:11:33:61:a3:d4:9b:fa:1d:f2: 76:4e:50:b8:7a:9c:16:75:5b:f5:8d:22:86:81:cc: 6c:c8:63:c8:a7:fb:a3:70:a2:53:16:a2:4f:2b:e5: 40:02:9a:5a:00:f2:84:69:9e:7d:83:a9:d8:9f:9d: 0e:34:07:91:c0:19:37:37:29:7a:ce:85:1b:af:49: 5d:b3:42:5d:11:2a:c0:ec:9b:72:66:d1:14:7d:83: 39:9b:ad:39:1a:48:e9:1e:c4:95:3d:a9:31:49:14: 8c:fd:2a:6e:fc:55:68:da:b9:e4:30:8b:a5:17:f3: 7a:51:cc:e0:68:98:56:16:87:e2:fc:76:33:42:80: ca:a6:6b:16:23:a7:0e:fe:85:b3:5b:1c:b7:e3:0f: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:7B:87:E6:EB:F6:EE:9D:D4:13:5A:D8:D6:BB:CA:D3:35:60:FE:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/32982901-ba1e-35a1-b683-2ccbd0d4ac50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d5:91:04:ce:29:37:6a:3b:eb:cf:1f:d0:1c:b3:ca:d8:d0: 07:e7:93:9e:67:c8:4a:b4:e5:f2:32:20:fb:d0:89:f9:27:1d: 47:fa:2b:13:70:19:de:25:0f:22:8e:5f:44:23:06:b5:a1:27: 40:a3:2c:e5:19:36:0d:a7:0e:06:d7:a8:db:83:01:d5:34:24: 77:71:d6:3f:0e:27:1a:f5:7a:29:bd:e9:29:14:29:91:2c:08: ce:88:f0:af:04:23:1b:af:12:a7:0a:39:48:5c:77:9a:26:a4: 4c:7c:1c:ad:f5:67:94:eb:41:70:b6:6e:f0:b9:c4:65:ad:18: 64:90:e7:a0:71:50:f1:b4:3b:dd:30:ca:07:c5:f1:18:a8:b1: 7c:3a:d5:ef:53:59:4f:05:d5:97:88:23:99:85:43:70:fa:f1: 26:70:a3:cc:1b:53:ba:7b:d7:a3:37:d7:45:3b:12:9c:a0:64: bf:6d:35:8a:1d:4e:eb:65:33:cb:7f:55:72:cf:d2:76:93:93: a7:bf:38:50:bc:f9:8d:1b:6a:94:27:15:e7:16:de:d7:a6:46: 73:0b:4f:71:d6:ef:26:27:b9:be:35:06:ec:bc:c8:21:0f:5b: 05:bb:12:e7:62:a9:12:2d:07:db:82:b1:7b:0d:82:4e:0c:be: 38:7d:b7:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBlZXbWW0SaQU2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk YWUyNzhlZTgtM2VjZi00ZDhjLWJjMjgtMTUzZmU0MWU0M2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6llEhxmTEJ1Q1h7nY+4CZWFETQJ+q5tTGOI hhasFcdomKmWC/ujw3J3yx+MrChnMaFWo3biQDUbE9kCb46EibGoa/cxze1j/QMM Aq4Ph8aEXL0RbKOJJFGsUHZA4VbOqui6LPEKv27UlZJmYkgRM2Gj1Jv6HfJ2TlC4 epwWdVv1jSKGgcxsyGPIp/ujcKJTFqJPK+VAAppaAPKEaZ59g6nYn50ONAeRwBk3 Nyl6zoUbr0lds0JdESrA7JtyZtEUfYM5m605GkjpHsSVPakxSRSM/Spu/FVo2rnk MIulF/N6UczgaJhWFofi/HYzQoDKpmsWI6cO/oWzWxy34w8SVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFF7h+br9u6d1BNa2Na7ytM1YP4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvMzI5ODI5MDEtYmExZS0z NWExLWI2ODMtMmNjYmQwZDRhYzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7VkQTOKTdqO+vPH9Acs8rY0Afnk55nyEq05fIyIPvQifknHUf6KxNw Gd4lDyKOX0QjBrWhJ0CjLOUZNg2nDgbXqNuDAdU0JHdx1j8OJxr1eim96SkUKZEs CM6I8K8EIxuvEqcKOUhcd5ompEx8HK31Z5TrQXC2bvC5xGWtGGSQ56BxUPG0O90w ygfF8RiosXw61e9TWU8F1ZeII5mFQ3D68SZwo8wbU7p716M310U7EpygZL9tNYod TutlM8t/VXLP0naTk6e/OFC8+Y0bapQnFecW3temRnMLT3HW7yYnub41Buy8yCEP WwW7EudiqRItB9uCsXsNgk4Mvjh9t6E= -----END CERTIFICATE-----Generated at Thu May 1 04:23:51 2025 by rpki-client