$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/3090b810-4dac-3695-a43e-d330ef2f7fcc.roa File: 3090b810-4dac-3695-a43e-d330ef2f7fcc.roa (raw, json) Hash identifier: Y1cR7bivMry3LIpYUJDisSj7hyh/wOZuO/S9kgn3dww= Subject key identifier: 13:5D:8C:C6:26:17:BE:45:47:80:8B:E2:D9:8E:C8:C5:E3:FF:7A:30 Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F4328584973DEE524E2DDC4480B594080 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/3090b810-4dac-3695-a43e-d330ef2f7fcc.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 264646 IP address blocks: 8.242.189.0/24 maxlen: 24 8.242.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:e5:24:e2:dd:c4:48:0b:59:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=0f124d5d-e3be-42bc-823f-899f16fbec18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:7a:2d:0a:c4:f2:3b:63:45:39:a6:22:f4: cb:0f:59:68:6f:82:90:25:12:14:45:9d:aa:fc:92: 53:55:58:3a:e2:a0:35:4d:e6:5d:a5:22:9a:2b:af: 80:5f:93:99:69:73:d2:d3:a4:67:da:84:2e:87:32: 3d:6c:df:8d:32:dd:23:89:e3:49:c8:24:05:23:90: ca:25:8e:d1:da:75:24:39:52:06:23:8a:37:5a:2e: cc:6c:c8:4a:3f:6f:35:a8:42:4b:e9:6c:8d:61:17: 71:f0:0c:82:5e:b2:58:af:91:a0:ab:9e:dc:a5:01: 7e:96:ee:9d:fe:fe:84:8b:1d:fd:17:3f:fe:1c:c6: 9f:af:b4:83:68:55:ca:d5:8a:be:48:bf:95:6a:c4: 3b:11:21:37:69:32:b2:28:16:8e:70:76:c0:df:5a: 4e:bb:ac:35:66:4f:fa:21:a2:3f:29:ba:34:9d:e3: c0:d7:b2:a6:31:76:af:7c:1a:72:97:ec:39:1e:13: 7b:ba:96:43:97:bc:e8:4e:b5:2e:25:f9:d4:d7:e6: fd:d9:ff:ff:d3:b2:0e:40:0e:83:22:27:6e:89:01: c5:4a:28:19:1c:0f:d3:52:e3:07:2c:8c:7b:37:73: d9:95:d6:d0:6f:47:1d:37:c0:7d:05:93:22:54:e9: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5D:8C:C6:26:17:BE:45:47:80:8B:E2:D9:8E:C8:C5:E3:FF:7A:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/3090b810-4dac-3695-a43e-d330ef2f7fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 8.242.189.0-8.242.190.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:9b:1e:49:12:f9:96:53:d4:09:18:cd:14:75:ce:b3:25:09: 3b:5d:b1:c1:0b:2a:9a:f8:50:89:d3:f1:5d:dd:0d:af:f3:d3: 07:47:d6:48:24:a7:de:8b:88:bc:7a:37:96:11:54:6b:d7:61: ad:01:4c:47:71:04:68:5e:c4:a5:df:86:5c:18:49:27:70:70: 9a:17:f7:6e:c0:8e:b2:2a:0b:3a:aa:e1:84:b5:2c:2c:f3:e2: 80:3d:36:6e:8a:f2:c6:ed:24:bb:1a:57:1c:98:85:fb:e4:ca: 28:0d:63:60:cd:90:54:51:5a:37:18:9a:de:72:7d:26:9c:cd: 41:29:8d:42:7e:db:af:ec:75:21:e6:1f:13:a0:c6:bd:9b:17: fc:19:e0:41:d5:76:16:78:ce:e8:00:6d:9a:17:38:b1:ef:6d: 7d:91:98:de:fe:31:bd:63:e1:ec:31:32:93:e7:e5:48:c6:6a: 17:cc:a9:57:ce:b2:2c:f6:41:8e:b9:2a:e3:da:b6:91:65:74: 8b:eb:3a:58:e8:7a:73:eb:19:98:24:92:67:9d:15:97:08:d7: 25:c0:53:61:3b:fe:8d:08:f8:f1:c3:12:e8:1d:8a:f9:5b:28: cc:fa:08:1e:e6:31:37:e4:8c:10:14:78:a7:af:b5:e9:a4:1e: de:87:0d:d6 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWElz3uUk4t3ESAtZQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk MGYxMjRkNWQtZTNiZS00MmJjLTgyM2YtODk5ZjE2ZmJlYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49J6LQrE8jtjRTmmIvTLD1lob4KQJRIURZ2q /JJTVVg64qA1TeZdpSKaK6+AX5OZaXPS06Rn2oQuhzI9bN+NMt0jieNJyCQFI5DK JY7R2nUkOVIGI4o3Wi7MbMhKP281qEJL6WyNYRdx8AyCXrJYr5Ggq57cpQF+lu6d /v6Eix39Fz/+HMafr7SDaFXK1Yq+SL+VasQ7ESE3aTKyKBaOcHbA31pOu6w1Zk/6 IaI/Kbo0nePA17KmMXavfBpyl+w5HhN7upZDl7zoTrUuJfnU1+b92f//07IOQA6D IiduiQHFSigZHA/TUuMHLIx7N3PZldbQb0cdN8B9BZMiVOlclQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFBNdjMYmF75FR4CL4tmOyMXj/3owMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvMzA5MGI4MTAtNGRhYy0z Njk1LWE0M2UtZDMzMGVmMmY3ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAI8r0D BAAI8r4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAK5seSRL5llPUCRjNFHXOsyUJO12xwQsqmvhQidPxXd0N r/PTB0fWSCSn3ouIvHo3lhFUa9dhrQFMR3EEaF7Epd+GXBhJJ3Bwmhf3bsCOsioL OqrhhLUsLPPigD02boryxu0kuxpXHJiF++TKKA1jYM2QVFFaNxia3nJ9JpzNQSmN Qn7br+x1IeYfE6DGvZsX/BngQdV2FnjO6ABtmhc4se9tfZGY3v4xvWPh7DEyk+fl SMZqF8ypV86yLPZBjrkq49q2kWV0i+s6WOh6c+sZmCSSZ50VlwjXJcBTYTv+jQj4 8cMS6B2K+VsozPoIHuYxN+SMEBR4p6+16aQe3ocN1g== -----END CERTIFICATE-----Generated at Mon Apr 28 13:52:44 2025 by rpki-client