$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa File: 42c8111b-72eb-368e-a605-4f13d00564aa.roa (raw, json) Hash identifier: yJnXtliuKZup3940WbUmNdbj+gTF7VOdH4uSWVTYsgI= Subject key identifier: 50:5F:08:15:33:32:A9:6C:87:73:C8:1E:6C:11:46:78:AF:F1:BE:4C Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F43285848F4F693F6C9C114E7AFE92180 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 14618 IP address blocks: 208.95.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:93:f6:c9:c1:14:e7:af:e9:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=6bd0d450-1786-4b8f-b49a-c5841eda1711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c7:ff:3d:cb:64:3b:6d:2d:75:46:47:5a:1f: e2:64:81:b5:da:5e:01:9a:f8:74:0e:0a:18:54:48: a8:a5:97:a7:a5:a4:86:e2:d4:8b:f3:71:b3:64:26: 10:cc:7d:9f:da:b9:c5:ae:4c:f9:7c:7a:d6:0b:75: 64:f3:cf:91:d2:39:bc:c9:89:c5:81:4d:5d:4b:ee: 9b:1f:41:05:85:37:0d:85:ca:0d:6e:20:42:71:0f: d0:3d:ab:2d:ba:96:0b:46:e8:7f:7b:2e:0a:7f:df: 67:33:83:cc:b8:15:60:29:cc:ad:5a:2b:ac:0f:85: 0e:88:89:f0:30:f7:e3:bc:b9:b0:01:b2:6d:aa:9d: fa:17:0c:78:84:bf:19:53:b9:5e:07:8a:6d:fa:07: 0c:4f:8f:c5:e5:ea:ee:45:2d:7b:9d:cb:df:1c:b1: f5:6e:ea:51:02:9a:77:5a:2b:ed:d9:a8:80:c4:d2: fa:65:ef:3f:43:b8:e6:bd:50:e1:e2:e9:99:d6:2f: e2:80:fc:a9:e8:7e:e9:f9:af:07:e6:e5:f2:a9:6e: ef:44:1e:15:b1:10:c8:a8:49:5a:cb:9a:09:86:6a: 5c:f3:80:b5:78:6b:cc:65:80:2f:ed:25:cf:7d:57: fd:1d:8b:7f:fa:8a:f1:a8:30:24:69:ad:88:3e:5c: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:5F:08:15:33:32:A9:6C:87:73:C8:1E:6C:11:46:78:AF:F1:BE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/42c8111b-72eb-368e-a605-4f13d00564aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:00:91:2a:11:22:74:4d:5b:3e:ac:c5:40:3e:02:d1:c0:37: 33:11:59:37:85:d9:26:60:50:1f:04:83:85:4d:b1:93:e6:9e: 05:3b:00:2a:f6:43:3d:ec:13:17:32:90:c8:8f:89:ca:7e:ed: 3b:05:d2:7c:99:4f:b8:db:4a:6f:03:ec:c0:2c:7b:ed:dc:c0: b9:30:ac:01:f0:cd:6a:9c:67:45:e1:35:9a:a8:42:c4:ba:8b: a2:b7:bd:df:d3:bb:b7:51:4b:69:d4:cf:62:f4:98:8f:5c:00: 3b:c5:85:bb:c8:8f:07:68:6d:3e:7f:7b:af:de:7c:af:e7:33: 99:66:da:ab:ed:cb:60:63:b1:2f:e6:78:4c:93:60:52:02:d3: ca:82:2f:58:c1:63:33:10:8c:20:fe:f2:25:49:ca:de:31:94: 10:d5:95:11:a4:f4:f5:47:43:02:9a:7d:6d:be:2c:9b:67:7f: 22:17:37:b0:80:02:f1:cf:dd:4f:50:9d:f0:10:f6:2d:a5:14: 3c:cd:88:c4:df:93:f3:8f:1f:c3:a3:ec:66:6a:67:5d:4d:ad: c8:12:8f:5a:88:2f:8a:a6:05:0a:3a:a3:c3:92:95:c9:c2:d0: 85:a9:ac:34:e8:a4:f5:4a:0c:6b:2c:d1:ef:2c:20:ad:ea:77: 77:73:9d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09pP2ycEU56/pIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NmJkMGQ0NTAtMTc4Ni00YjhmLWI0OWEtYzU4NDFlZGExNzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcf/PctkO20tdUZHWh/iZIG12l4Bmvh0DgoY VEiopZenpaSG4tSL83GzZCYQzH2f2rnFrkz5fHrWC3Vk88+R0jm8yYnFgU1dS+6b H0EFhTcNhcoNbiBCcQ/QPastupYLRuh/ey4Kf99nM4PMuBVgKcytWiusD4UOiInw MPfjvLmwAbJtqp36Fwx4hL8ZU7leB4pt+gcMT4/F5eruRS17ncvfHLH1bupRApp3 Wivt2aiAxNL6Ze8/Q7jmvVDh4umZ1i/igPyp6H7p+a8H5uXyqW7vRB4VsRDIqEla y5oJhmpc84C1eGvMZYAv7SXPfVf9HYt/+orxqDAkaa2IPlwMVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBfCBUzMqlsh3PIHmwRRniv8b5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvNDJjODExMWItNzJlYi0z NjhlLWE2MDUtNGYxM2QwMDU2NGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYAkSoRInRNWz6sxUA+AtHANzMRWTeF2SZgUB8Eg4VNsZPmngU7ACr2 Qz3sExcykMiPicp+7TsF0nyZT7jbSm8D7MAse+3cwLkwrAHwzWqcZ0XhNZqoQsS6 i6K3vd/Tu7dRS2nUz2L0mI9cADvFhbvIjwdobT5/e6/efK/nM5lm2qvty2BjsS/m eEyTYFIC08qCL1jBYzMQjCD+8iVJyt4xlBDVlRGk9PVHQwKafW2+LJtnfyIXN7CA AvHP3U9QnfAQ9i2lFDzNiMTfk/OPH8Oj7GZqZ11NrcgSj1qIL4qmBQo6o8OSlcnC 0IWprDTopPVKDGss0e8sIK3qd3dznbE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:35 2025 by rpki-client