$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa File: 86d09460-5741-3d94-9563-aa1b63fd4a6d.roa (raw, json) Hash identifier: Yl0eq20ctTWvYzF3B2YOZAy3MdE0TUA9BPz+0SiqIy4= Subject key identifier: EE:8A:97:01:AF:98:25:84:3C:DB:AC:5F:C5:A6:65:24:CB:EB:68:17 Certificate issuer: /CN=ff3f112b-a6d8-4720-982d-117f151ed213 Certificate serial: 010D0C9F4328584965E97DECE45B5D16C3F2E880 Authority key identifier: 0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 401348 IP address blocks: 208.73.208.0/24 maxlen: 24 208.73.209.0/24 maxlen: 24 208.73.210.0/24 maxlen: 24 208.73.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7d:ec:e4:5b:5d:16:c3:f2:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f112b-a6d8-4720-982d-117f151ed213 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=780c2dd8-672a-48a0-9738-d0c06f396dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:36:26:7a:09:0f:6e:6d:99:c5:e0:51:fb:ef: 8a:df:b9:4f:09:4f:e6:7a:e1:7d:2f:c4:6f:ba:36: 06:a9:97:4f:31:22:11:4e:25:4b:36:ff:0e:5d:e4: 2d:7e:2f:59:7d:18:1d:c2:d4:d1:b6:15:d3:ac:c5: 15:bf:34:86:f1:f2:c8:da:ce:2d:65:2f:5a:de:c3: 3b:44:98:5e:f6:9a:fa:84:14:fa:59:ac:ec:de:05: 9e:14:33:68:4b:ac:14:5c:3a:5d:3c:b5:6f:60:ed: e4:a5:72:02:65:18:60:0c:35:ca:21:7e:40:a0:6e: d0:de:8f:7b:0d:c6:1a:25:3c:2f:3f:cd:56:b3:79: 77:54:d3:c1:19:23:58:94:6a:92:aa:40:bd:95:5d: 17:4e:5e:01:b8:48:44:32:0a:d3:4c:a3:4c:6e:80: 16:1e:7c:54:0e:2f:ee:ba:f9:88:9e:1b:12:58:ce: 3d:35:42:ee:8a:18:af:28:12:3e:a4:3f:42:b1:ad: 53:b7:71:37:39:14:b8:29:95:92:b8:cc:af:f9:00: 68:5b:d0:86:22:40:3a:d9:74:ca:c3:b0:ad:71:1a: 51:59:a4:cc:e2:90:b0:50:70:b2:91:b5:63:fd:8e: 13:f5:7f:65:1e:3c:9a:e8:33:73:de:b5:5d:30:82: 23:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8A:97:01:AF:98:25:84:3C:DB:AC:5F:C5:A6:65:24:CB:EB:68:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/86d09460-5741-3d94-9563-aa1b63fd4a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213/ff3f112b-a6d8-4720-982d-117f151ed213.crl X509v3 Authority Key Identifier: keyid:0F:FF:FD:6A:A7:35:68:97:F3:B2:07:52:27:FD:EE:04:62:D4:96:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff3f112b-a6d8-4720-982d-117f151ed213.cer sbgp-ipAddrBlock: critical IPv4: 208.73.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:2d:ee:de:d1:86:2d:40:af:85:26:d7:40:a0:7e:0f:df:20: 20:33:a9:43:6a:1a:42:b2:b2:ac:a6:43:96:d7:28:1b:f5:4e: 8f:31:ce:8a:6a:0b:47:01:3d:6b:b4:96:1b:66:29:b4:a5:0d: a5:48:a3:b2:8b:53:46:18:af:96:98:ef:ab:c3:73:cc:a3:27: 2f:16:6f:0e:08:73:34:a3:55:fc:a0:a8:a2:6c:0f:99:02:f2: 7b:84:4e:4d:1c:e7:1a:f7:14:a7:22:9b:ad:36:3b:87:c0:d4: 10:6c:aa:f4:81:ed:f5:a5:16:5e:de:ac:d1:74:b2:03:dc:5c: a0:e4:c4:fb:6b:52:c6:b1:cb:2b:e5:34:77:d4:59:5f:d3:3d: fc:5e:ee:89:84:90:4f:2a:00:b2:bd:ab:fa:c1:33:cc:b5:88: 7b:db:c1:80:c2:cd:ea:c2:99:bf:17:c8:45:ec:14:ce:0b:5a: 4b:1d:92:63:07:58:62:33:8f:db:90:be:5c:6e:13:98:e0:b3: 3a:bf:fa:6f:6b:cc:a5:18:29:e2:ab:f0:32:be:9d:08:1b:71: d8:0e:e0:a8:2a:03:6f:41:da:87:c2:c6:cd:2f:16:d0:65:ae: 44:9d:37:2b:e4:e8:17:3e:5d:fa:33:8f:2d:cf:e3:48:94:c5: ba:03:23:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6X3s5FtdFsPy6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzZjExMmItYTZkOC00NzIwLTk4MmQtMTE3ZjE1MWVk MjEzMB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk NzgwYzJkZDgtNjcyYS00OGEwLTk3MzgtZDBjMDZmMzk2ZGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDYmegkPbm2ZxeBR+++K37lPCU/meuF9L8Rv ujYGqZdPMSIRTiVLNv8OXeQtfi9ZfRgdwtTRthXTrMUVvzSG8fLI2s4tZS9a3sM7 RJhe9pr6hBT6Wazs3gWeFDNoS6wUXDpdPLVvYO3kpXICZRhgDDXKIX5AoG7Q3o97 DcYaJTwvP81Ws3l3VNPBGSNYlGqSqkC9lV0XTl4BuEhEMgrTTKNMboAWHnxUDi/u uvmInhsSWM49NULuihivKBI+pD9Csa1Tt3E3ORS4KZWSuMyv+QBoW9CGIkA62XTK w7CtcRpRWaTM4pCwUHCykbVj/Y4T9X9lHjya6DNz3rVdMIIjHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6KlwGvmCWEPNusX8WmZSTL62gXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNm MTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdmMTUxZWQyMTMvODZkMDk0NjAtNTc0MS0z ZDk0LTk1NjMtYWExYjYzZmQ0YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmYzZjExMmItYTZkOC00NzIwLTk4 MmQtMTE3ZjE1MWVkMjEzL2ZmM2YxMTJiLWE2ZDgtNDcyMC05ODJkLTExN2YxNTFl ZDIxMy5jcmwwHwYDVR0jBBgwFoAUD//9aqc1aJfzsgdSJ/3uBGLUlgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjNmMTEyYi1hNmQ4LTQ3MjAtOTgyZC0xMTdm MTUxZWQyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKst7t7Rhi1Ar4Um10Cgfg/fICAzqUNqGkKysqymQ5bXKBv1To8xzopq C0cBPWu0lhtmKbSlDaVIo7KLU0YYr5aY76vDc8yjJy8Wbw4IczSjVfygqKJsD5kC 8nuETk0c5xr3FKcim602O4fA1BBsqvSB7fWlFl7erNF0sgPcXKDkxPtrUsaxyyvl NHfUWV/TPfxe7omEkE8qALK9q/rBM8y1iHvbwYDCzerCmb8XyEXsFM4LWksdkmMH WGIzj9uQvlxuE5jgszq/+m9rzKUYKeKr8DK+nQgbcdgO4KgqA29B2ofCxs0vFtBl rkSdNyvk6Bc+Xfozjy3P40iUxboDIz0= -----END CERTIFICATE-----Generated at Tue Apr 29 17:30:22 2025 by rpki-client