$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa File: a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa (raw, json) Hash identifier: nsbwYoWKm49FvhXSMs/LZZnz2YktAaCb04T0XlbG+EY= Subject key identifier: 4F:E6:79:6E:05:9E:37:17:15:CA:83:3C:BC:16:DE:2C:B2:6D:01:16 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584961B991B85D580BE011EE1370 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa Signing time: Tue 01 Apr 2025 13:01:00 +0000 ROA not before: Tue 01 Apr 2025 13:01:00 +0000 ROA not after: Mon 30 Jun 2025 13:01:00 +0000 asID: 13536 IP address blocks: 208.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:61:b9:91:b8:5d:58:0b:e0:11:ee:13:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Apr 1 13:01:00 2025 GMT Not After : Jun 30 13:01:00 2025 GMT Subject: CN=cc80f3ee-ee7d-4602-a452-328379de6f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1f:8e:57:bd:0f:8c:1a:fe:db:e6:8a:03:2e: c4:64:e1:ca:6f:bd:3b:83:aa:a9:cf:1d:d2:33:40: 41:d5:30:5a:85:b9:08:f5:2a:47:4d:9f:61:e7:1e: b6:ef:15:61:f9:e1:0f:e3:db:4c:43:04:e4:97:09: a0:83:86:01:b2:f0:bc:64:e4:75:ab:96:57:22:e9: 02:fe:df:85:81:d3:53:04:c9:0b:cb:a5:77:31:3d: e1:d1:ef:ea:38:aa:b7:68:ce:eb:7a:63:1e:cd:33: e7:e6:ae:48:ec:a7:1b:a0:28:64:00:08:77:99:d2: 1c:dc:b0:fa:0c:e8:c6:0d:61:96:23:2b:77:dc:ab: c3:af:77:22:47:41:64:a7:61:eb:2d:f4:ea:b6:31: 4e:01:9e:3f:04:b8:9b:8b:3b:e6:bb:21:13:d4:28: 63:a0:3a:ec:13:c5:9b:93:68:61:dd:43:6f:f1:65: 49:6b:47:33:06:91:1f:ce:f7:18:df:e6:f6:69:3d: fa:25:41:7a:8b:79:67:94:8e:b3:61:f9:2e:97:02: 7d:cd:26:5c:54:5a:45:47:53:92:c4:87:7f:ac:08: f1:6a:a1:ac:bb:7e:c8:1f:92:8e:9b:36:c1:05:cf: 65:94:51:fb:8b:26:7e:c3:1d:b1:6d:d1:1a:56:83: 2f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E6:79:6E:05:9E:37:17:15:CA:83:3C:BC:16:DE:2C:B2:6D:01:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:8d:cd:6d:df:d3:4b:73:5f:c5:e3:6f:4a:b9:85:d1:91:c3: e1:4a:d4:18:29:3b:99:3b:4b:6b:f4:52:f9:23:dc:ce:8c:90: dd:20:b9:85:14:ce:e8:b3:62:22:4e:b2:58:7d:7e:76:23:56: de:a3:c5:42:12:79:95:29:c4:3b:b8:f1:ee:75:f6:88:43:f4: ad:ff:2a:19:4c:7d:85:91:f7:c4:6d:92:d7:62:8b:bc:1c:ce: bd:76:75:c1:c6:40:34:35:c4:c9:6d:0f:41:32:bb:9e:b8:01: 6f:91:0a:8f:6e:a4:66:66:5e:c2:5f:39:c3:45:2f:89:a0:02: a6:e5:15:3b:34:b2:9e:44:0e:41:67:f5:b3:d1:7b:41:07:af: 4e:11:14:e3:13:2d:2d:4c:a2:4a:7c:1c:85:94:12:3b:6c:0d: 33:6c:d7:1c:03:09:67:07:3d:dc:59:b5:68:b9:41:eb:03:50: dd:55:8d:4d:72:f1:07:ae:74:af:ae:f5:c2:92:45:0c:72:cd: 5a:3b:4e:a0:a9:76:f2:5c:03:a8:01:b9:2e:95:c8:74:74:35: 1e:68:8b:a2:bc:51:47:27:c8:51:32:bd:d3:62:51:c3:b7:9e: 70:fb:3a:76:01:4b:e5:33:59:07:3b:d7:cc:23:ca:01:be:a4: b2:8d:bd:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZG4XVgL4BHuE3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk Y2M4MGYzZWUtZWU3ZC00NjAyLWE0NTItMzI4Mzc5ZGU2ZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR+OV70PjBr+2+aKAy7EZOHKb707g6qpzx3S M0BB1TBahbkI9SpHTZ9h5x627xVh+eEP49tMQwTklwmgg4YBsvC8ZOR1q5ZXIukC /t+FgdNTBMkLy6V3MT3h0e/qOKq3aM7remMezTPn5q5I7KcboChkAAh3mdIc3LD6 DOjGDWGWIyt33KvDr3ciR0Fkp2HrLfTqtjFOAZ4/BLibizvmuyET1ChjoDrsE8Wb k2hh3UNv8WVJa0czBpEfzvcY3+b2aT36JUF6i3lnlI6zYfkulwJ9zSZcVFpFR1OS xId/rAjxaqGsu37IH5KOmzbBBc9llFH7iyZ+wx2xbdEaVoMv0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/meW4FnjcXFcqDPLwW3iyybQEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYTgwZjMzMTktYTFhOS0z ZjAxLThkMDAtNGY1ZDA4M2I2ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGNzW3f00tzX8Xjb0q5hdGRw+FK1BgpO5k7S2v0Uvkj3M6MkN0guYUU zuizYiJOslh9fnYjVt6jxUISeZUpxDu48e519ohD9K3/KhlMfYWR98Rtktdii7wc zr12dcHGQDQ1xMltD0Eyu564AW+RCo9upGZmXsJfOcNFL4mgAqblFTs0sp5EDkFn 9bPRe0EHr04RFOMTLS1Mokp8HIWUEjtsDTNs1xwDCWcHPdxZtWi5QesDUN1VjU1y 8QeudK+u9cKSRQxyzVo7TqCpdvJcA6gBuS6VyHR0NR5oi6K8UUcnyFEyvdNiUcO3 nnD7OnYBS+UzWQc718wjygG+pLKNvXc= -----END CERTIFICATE-----Generated at Wed Apr 30 03:27:34 2025 by rpki-client