$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa File: c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa (raw, json) Hash identifier: jkVn9of2nOaYCxeNZSTzIYvAvRdDHoGpfLnKPWo5RAo= Subject key identifier: 80:36:B9:C7:BA:D2:27:D0:2D:B4:E2:0B:4B:D0:69:38:67:9D:55:71 Certificate issuer: /CN=3e08da12-c2b8-4581-b1af-e8322645d15e Certificate serial: 010D0C9F43285849A3547F7F0F4C9F23186E4B80 Authority key identifier: 8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 398448 IP address blocks: 208.93.120.0/24 maxlen: 24 208.93.121.0/24 maxlen: 24 208.93.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:7f:7f:0f:4c:9f:23:18:6e:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e08da12-c2b8-4581-b1af-e8322645d15e Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=ce91bb97-b9e4-4f0e-8d98-916da33c2326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:1e:74:cd:98:bd:4e:be:d3:2e:69:b6:07: 58:d2:a1:8b:e7:8e:17:66:75:97:44:51:9d:cb:26: 98:4d:a4:3c:37:05:d6:61:93:bd:a7:97:cc:25:23: 35:81:c3:f3:d8:bf:ee:ba:d7:58:30:ce:da:82:71: 46:4b:40:a3:1b:a7:0c:2f:db:6b:6b:80:50:da:73: b1:f5:ec:7c:bc:b4:61:24:0f:d2:26:f0:e2:97:e0: 89:c9:1c:02:d8:35:fa:60:da:89:db:54:60:82:66: bd:24:37:64:ee:b9:9b:1d:9c:0d:7c:ea:29:04:ae: cb:56:40:e1:85:a8:56:2e:83:55:d6:ac:29:57:24: 10:2b:9b:9f:26:4f:b6:05:df:67:9c:1b:65:f6:e0: f4:9d:85:08:c7:ae:51:02:55:db:b7:f1:6e:01:78: f9:b1:c6:cf:3b:eb:1f:f0:81:cf:bc:12:99:36:71: 6d:07:71:b7:cc:76:53:27:88:0b:3b:13:c4:cc:dc: 4d:4b:af:63:e2:22:a7:9e:b4:75:07:5b:2f:ca:20: 62:f9:49:0e:54:3d:a4:9a:61:78:b4:31:ee:fc:f1: f1:0f:0b:47:60:ad:d4:80:07:b4:ff:25:10:bd:9f: 68:e6:b7:c7:29:79:f2:31:61:83:9c:82:fd:eb:3a: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:36:B9:C7:BA:D2:27:D0:2D:B4:E2:0B:4B:D0:69:38:67:9D:55:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/c9cffbc5-8bcf-3fc8-a618-31d60e8546c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e/3e08da12-c2b8-4581-b1af-e8322645d15e.crl X509v3 Authority Key Identifier: keyid:8F:4F:2B:58:DA:5E:57:32:56:2B:F7:97:33:18:32:3C:17:29:0D:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3e08da12-c2b8-4581-b1af-e8322645d15e.cer sbgp-ipAddrBlock: critical IPv4: 208.93.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:af:16:74:ac:c5:98:ee:e3:04:fe:34:91:e4:27:e8:00:c7: d8:02:ad:e0:af:08:dd:96:5e:f9:92:2f:b7:89:54:bb:d7:17: ec:40:cf:24:ba:04:c1:75:f4:08:fa:9d:97:26:79:15:90:d5: 2b:50:2b:b4:66:ac:f5:70:e0:7e:d0:2e:3d:64:05:0a:31:17: 02:a7:c2:03:84:64:0a:a7:8c:d3:4b:b9:a4:dc:3e:5d:d9:b8: 82:38:80:c7:5d:8d:c5:c6:c2:0b:93:bb:dc:e5:63:44:7f:56: d0:52:90:30:c4:14:d1:7e:e3:0b:da:e1:98:46:8d:e8:1f:74: fa:b6:da:84:dd:09:2e:b3:19:ce:33:62:6e:5f:2a:dd:80:e1: 88:2f:fd:e6:38:3a:8e:01:07:ed:12:0f:fb:d1:c0:80:a6:5b: 00:1f:90:43:28:e7:ec:5d:4c:be:3a:1d:3d:1b:2c:4d:17:39: cc:e9:68:02:01:ad:22:ff:dc:e1:d1:58:cd:27:66:47:87:50: e7:ab:54:69:9d:c2:bc:9d:c3:0c:b0:e4:ab:65:44:4c:89:6c: 05:8e:bf:4f:a1:ef:1d:4b:56:1b:82:2a:34:61:92:22:9c:a4: fb:7f:cd:dc:66:b0:c0:1e:b7:18:3f:a2:fe:fd:73:fa:b9:7c: 61:f2:9f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVH9/D0yfIxhuS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UwOGRhMTItYzJiOC00NTgxLWIxYWYtZTgzMjI2NDVk MTVlMB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk Y2U5MWJiOTctYjllNC00ZjBlLThkOTgtOTE2ZGEzM2MyMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9AedM2YvU6+0y5ptgdY0qGL544XZnWXRFGd yyaYTaQ8NwXWYZO9p5fMJSM1gcPz2L/uutdYMM7agnFGS0CjG6cML9tra4BQ2nOx 9ex8vLRhJA/SJvDil+CJyRwC2DX6YNqJ21Rggma9JDdk7rmbHZwNfOopBK7LVkDh hahWLoNV1qwpVyQQK5ufJk+2Bd9nnBtl9uD0nYUIx65RAlXbt/FuAXj5scbPO+sf 8IHPvBKZNnFtB3G3zHZTJ4gLOxPEzNxNS69j4iKnnrR1B1svyiBi+UkOVD2kmmF4 tDHu/PHxDwtHYK3UgAe0/yUQvZ9o5rfHKXnyMWGDnIL96zoKowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIA2uce60ifQLbTiC0vQaThnnVVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZTA4 ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMyMjY0NWQxNWUvYzljZmZiYzUtOGJjZi0z ZmM4LWE2MTgtMzFkNjBlODU0NmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2UwOGRhMTItYzJiOC00NTgxLWIx YWYtZTgzMjI2NDVkMTVlLzNlMDhkYTEyLWMyYjgtNDU4MS1iMWFmLWU4MzIyNjQ1 ZDE1ZS5jcmwwHwYDVR0jBBgwFoAUj08rWNpeVzJWK/eXMxgyPBcpDUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZTA4ZGExMi1jMmI4LTQ1ODEtYjFhZi1lODMy MjY0NWQxNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuvFnSsxZju4wT+NJHkJ+gAx9gCreCvCN2WXvmSL7eJVLvXF+xAzyS6 BMF19Aj6nZcmeRWQ1StQK7RmrPVw4H7QLj1kBQoxFwKnwgOEZAqnjNNLuaTcPl3Z uII4gMddjcXGwguTu9zlY0R/VtBSkDDEFNF+4wva4ZhGjegfdPq22oTdCS6zGc4z Ym5fKt2A4Ygv/eY4Oo4BB+0SD/vRwICmWwAfkEMo5+xdTL46HT0bLE0XOczpaAIB rSL/3OHRWM0nZkeHUOerVGmdwrydwwyw5KtlREyJbAWOv0+h7x1LVhuCKjRhkiKc pPt/zdxmsMAetxg/ov79c/q5fGHyn24= -----END CERTIFICATE-----Generated at Mon Apr 28 12:32:25 2025 by rpki-client