$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa File: 468e47db-5e5d-3b56-8599-c0d6de193ee1.roa (raw, json) Hash identifier: pw9Qtf/SG3dcEnxI8MFmiEmE/4ObjYl4EUGZWYdqRzU= Subject key identifier: FD:12:09:0E:94:25:16:D1:65:4D:C1:7C:3F:96:69:12:04:BB:40:F4 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285849350EAC1FB2FDA1EB9528A680 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 25645 IP address blocks: 208.85.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:ac:1f:b2:fd:a1:eb:95:28:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=24f453e5-c2a7-479e-a373-c4431c3c45d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ed:41:6d:e2:fa:ea:87:50:88:59:28:af:bd: bf:8f:25:3d:57:99:43:13:9d:f6:46:0d:26:15:36: 04:de:99:2c:08:32:ea:b4:12:21:e0:cc:08:aa:61: 8a:ae:4c:b3:8c:a8:45:a5:d4:bf:c2:56:c6:3a:69: 6f:41:b4:5f:06:35:4f:4e:20:aa:f7:23:b6:a4:2d: e9:27:4a:fe:16:f8:a2:88:87:8d:eb:b8:2f:9c:96: 62:d6:bb:7a:cd:54:e6:87:e4:69:53:02:d1:e0:b5: cb:a2:eb:ca:a8:74:47:b6:18:f5:3f:0f:46:47:cf: f0:d8:d1:27:ec:55:6d:fd:11:1d:49:b4:51:7e:df: 29:e7:e2:2c:c0:57:dd:77:93:18:df:2d:f8:53:ab: 5f:26:7d:fb:53:a9:71:97:92:91:7e:f6:da:c0:ad: 00:39:76:76:39:0d:8f:91:5f:c3:f8:f3:d7:9b:b5: 5e:ce:7a:21:a2:86:c1:6d:02:a9:3f:03:9c:39:ad: 22:96:59:9f:a8:69:b5:17:a9:1c:0e:29:16:cb:3d: 67:44:7c:3e:a9:b7:31:1e:1a:80:b6:34:4b:76:01: bd:e1:f9:e5:33:b6:a5:73:01:3a:88:0b:d7:70:50: d3:4c:0e:ea:dd:b9:30:af:c3:a4:b7:2c:e1:44:c3: 6b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:12:09:0E:94:25:16:D1:65:4D:C1:7C:3F:96:69:12:04:BB:40:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/468e47db-5e5d-3b56-8599-c0d6de193ee1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 208.85.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:2f:f3:4b:8e:c7:0a:86:38:ea:16:aa:4a:f1:76:61:57:24: 62:ad:45:24:82:3c:e3:16:ff:c5:93:6b:f3:3b:4e:aa:9f:cb: 02:86:35:5d:c5:81:9d:b3:02:93:a2:94:fe:d9:8f:ab:40:9f: 22:b7:98:f7:ec:25:ab:ec:c5:9e:16:53:0c:4d:29:85:90:be: ff:4f:6a:b5:06:1a:3b:69:31:f9:96:db:ed:10:6b:ad:30:b8: 74:81:d3:6f:d6:63:c6:7e:a9:87:24:d0:10:7d:6c:71:56:7e: eb:6f:3a:69:0e:4a:bd:d8:2d:01:7d:82:0e:de:28:42:04:26: 7f:64:99:fd:88:d5:2e:a8:c0:49:5b:35:70:d4:50:53:0b:e3: 86:b4:39:bc:32:21:e5:c9:de:0b:a0:1f:86:19:39:e4:17:a8: 24:22:72:9e:ac:53:02:0c:8d:52:03:81:bd:33:b2:f9:61:28: 7b:a8:fe:ef:a4:a4:fb:77:a8:9d:c2:16:2e:8a:68:9f:8b:7e: fe:4f:27:71:1a:ae:8a:c3:72:01:84:86:14:b3:2d:48:1c:3b: 91:b7:fa:1f:43:d9:94:01:e6:e5:d3:03:02:c3:d6:44:4a:68: fb:27:31:be:c1:e0:9b:f4:c2:8e:5e:93:57:16:1a:cc:f4:5e: 03:01:88:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dqwfsv2h65UopoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MjRmNDUzZTUtYzJhNy00NzllLWEzNzMtYzQ0MzFjM2M0NWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku1BbeL66odQiFkor72/jyU9V5lDE532Rg0m FTYE3pksCDLqtBIh4MwIqmGKrkyzjKhFpdS/wlbGOmlvQbRfBjVPTiCq9yO2pC3p J0r+FviiiIeN67gvnJZi1rt6zVTmh+RpUwLR4LXLouvKqHRHthj1Pw9GR8/w2NEn 7FVt/REdSbRRft8p5+IswFfdd5MY3y34U6tfJn37U6lxl5KRfvbawK0AOXZ2OQ2P kV/D+PPXm7VeznohoobBbQKpPwOcOa0illmfqGm1F6kcDikWyz1nRHw+qbcxHhqA tjRLdgG94fnlM7alcwE6iAvXcFDTTA7q3bkwr8OktyzhRMNrEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0SCQ6UJRbRZU3BfD+WaRIEu0D0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNDY4ZTQ3ZGItNWU1ZC0z YjU2LTg1OTktYzBkNmRlMTkzZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgv80uOxwqGOOoWqkrxdmFXJGKtRSSCPOMW/8WTa/M7TqqfywKGNV3F gZ2zApOilP7Zj6tAnyK3mPfsJavsxZ4WUwxNKYWQvv9ParUGGjtpMfmW2+0Qa60w uHSB02/WY8Z+qYck0BB9bHFWfutvOmkOSr3YLQF9gg7eKEIEJn9kmf2I1S6owElb NXDUUFML44a0ObwyIeXJ3gugH4YZOeQXqCQicp6sUwIMjVIDgb0zsvlhKHuo/u+k pPt3qJ3CFi6KaJ+Lfv5PJ3EarorDcgGEhhSzLUgcO5G3+h9D2ZQB5uXTAwLD1kRK aPsnMb7B4Jv0wo5ek1cWGsz0XgMBiMA= -----END CERTIFICATE-----Generated at Mon Apr 28 02:03:01 2025 by rpki-client