$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/b0794c73-16f4-3f93-8cd1-c0e6f5e82b87.roa File: b0794c73-16f4-3f93-8cd1-c0e6f5e82b87.roa (raw, json) Hash identifier: QovV+sHGZYeKA2lN8s7ITUVZUQVdnzmrCjpnz0Av/c8= Subject key identifier: 21:5C:DF:09:BB:9D:38:C5:80:0D:7D:07:9B:71:FF:7B:4D:09:11:E1 Certificate issuer: /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Certificate serial: 010D0C9F432858498769A65558E9CDCD1829AC80 Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/b0794c73-16f4-3f93-8cd1-c0e6f5e82b87.roa Signing time: Tue 15 Apr 2025 01:00:47 +0000 ROA not before: Tue 15 Apr 2025 01:00:47 +0000 ROA not after: Mon 14 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 208.80.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:87:69:a6:55:58:e9:cd:cd:18:29:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Validity Not Before: Apr 15 01:00:47 2025 GMT Not After : Jul 14 01:00:47 2025 GMT Subject: CN=0016cf06-a96e-4a1f-be83-fd790b1c8696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4c:ad:cf:3b:a1:e4:f2:67:ec:d0:c6:55:58: a0:14:ab:4c:e7:be:7f:b4:9e:07:25:43:20:33:8b: b4:e9:46:51:05:62:e1:38:d0:68:fa:22:08:32:75: 4e:3e:2e:22:7d:5c:2c:15:50:bc:f4:6d:20:a5:c0: ba:9f:11:5c:c6:d2:7c:48:8a:8e:5e:3e:4f:99:b6: 8d:fb:17:60:ed:a2:4d:d6:c6:37:01:e7:cc:ef:52: a6:c4:c7:7d:f7:40:78:f4:0a:fe:31:26:3f:aa:b6: 62:24:63:f1:b0:40:d8:62:c3:c1:75:ac:df:2d:a6: 5c:fc:cb:27:10:45:4c:66:c3:8b:78:d2:8b:4c:98: 1d:7c:05:cc:85:66:ad:de:79:3c:e4:1c:49:02:48: 89:44:79:7f:89:2f:14:ab:c4:23:87:72:14:ae:19: 6e:a7:b7:14:fc:27:ca:a8:21:71:a2:a2:76:82:d7: 12:bd:cc:2e:42:31:4a:91:1f:be:24:7d:1f:e7:f3: f0:de:ac:dc:cf:ce:c2:cd:cd:d2:00:5e:a8:b2:78: 0b:00:94:ad:42:6b:1a:68:3a:1d:ef:a8:6f:b1:1d: a5:7c:01:03:f2:ad:93:82:16:29:3d:f8:3a:8a:ac: e8:97:9b:99:7c:3e:ec:fc:5b:32:82:61:14:bc:a1: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5C:DF:09:BB:9D:38:C5:80:0D:7D:07:9B:71:FF:7B:4D:09:11:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/b0794c73-16f4-3f93-8cd1-c0e6f5e82b87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl X509v3 Authority Key Identifier: keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer sbgp-ipAddrBlock: critical IPv4: 208.80.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:2c:90:e4:b3:29:f6:fa:e2:0b:85:a7:5b:d3:a3:76:41:27: 67:73:74:3c:33:fc:96:fb:35:ae:93:e2:d6:25:1b:c5:a7:83: 97:ba:fa:6b:86:ce:e6:00:2b:98:1e:65:74:6f:32:fa:22:d5: d7:46:38:24:0f:a6:7b:37:ce:fd:9f:07:0f:fd:6f:86:96:80: d0:3e:b7:03:df:9a:a6:6e:5e:64:bd:0a:64:f2:18:5f:4d:5a: b1:46:c1:c2:58:26:f7:15:4c:ac:8e:84:67:4f:a1:a1:f3:bf: a2:3c:d3:25:53:41:5b:aa:e1:87:aa:27:e8:62:39:a8:31:07: f4:f9:b5:2a:38:10:62:77:b0:a8:b5:24:bc:67:95:e2:24:d1: e6:c4:59:05:9e:02:b9:e7:0f:cb:7e:a6:b7:b9:ce:d9:fd:08: ff:1f:29:66:80:c2:58:db:7b:f7:bc:7f:17:c9:a4:b7:e9:a2: bd:bb:cc:8c:0a:e0:11:6c:31:cd:af:5b:0d:85:14:6c:6d:23: 63:21:af:07:34:ad:84:20:90:ba:c7:f8:23:43:91:1a:99:a9: 07:a1:6f:5e:33:38:83:81:0b:8f:89:d2:43:64:8f:f7:be:c1: 2d:74:63:7b:81:18:d4:c5:85:a8:c1:26:76:cb:90:47:10:6f: 87:77:6b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaaZVWOnNzRgprIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0YjFlNGItODlkMy00NzY5LWJhYjEtMzhkZjFkOWJi NzJlMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk MDAxNmNmMDYtYTk2ZS00YTFmLWJlODMtZmQ3OTBiMWM4Njk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUytzzuh5PJn7NDGVVigFKtM575/tJ4HJUMg M4u06UZRBWLhONBo+iIIMnVOPi4ifVwsFVC89G0gpcC6nxFcxtJ8SIqOXj5PmbaN +xdg7aJN1sY3AefM71KmxMd990B49Ar+MSY/qrZiJGPxsEDYYsPBdazfLaZc/Msn EEVMZsOLeNKLTJgdfAXMhWat3nk85BxJAkiJRHl/iS8Uq8Qjh3IUrhlup7cU/CfK qCFxoqJ2gtcSvcwuQjFKkR++JH0f5/Pw3qzcz87Czc3SAF6osngLAJStQmsaaDod 76hvsR2lfAED8q2TghYpPfg6iqzol5uZfD7s/FsygmEUvKHnowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFc3wm7nTjFgA19B5tx/3tNCRHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRi MWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5YmI3MmUvYjA3OTRjNzMtMTZmNC0z ZjkzLThjZDEtYzBlNmY1ZTgyYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0YjFlNGItODlkMy00NzY5LWJh YjEtMzhkZjFkOWJiNzJlLzgwNGIxZTRiLTg5ZDMtNDc2OS1iYWIxLTM4ZGYxZDli YjcyZS5jcmwwHwYDVR0jBBgwFoAUVQNlKvd/DK9QUvrJh8lPYgQvuDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRm MWQ5YmI3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FCBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgskOSzKfb64guFp1vTo3ZBJ2dzdDwz/Jb7Na6T4tYlG8Wng5e6+muG zuYAK5geZXRvMvoi1ddGOCQPpns3zv2fBw/9b4aWgNA+twPfmqZuXmS9CmTyGF9N WrFGwcJYJvcVTKyOhGdPoaHzv6I80yVTQVuq4YeqJ+hiOagxB/T5tSo4EGJ3sKi1 JLxnleIk0ebEWQWeArnnD8t+pre5ztn9CP8fKWaAwljbe/e8fxfJpLfpor27zIwK 4BFsMc2vWw2FFGxtI2Mhrwc0rYQgkLrH+CNDkRqZqQehb14zOIOBC4+J0kNkj/e+ wS10Y3uBGNTFhajBJnbLkEcQb4d3a50= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:47 2025 by rpki-client