$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/05d98a1e-5ff8-3196-abf4-ec4805322b55.roa File: 05d98a1e-5ff8-3196-abf4-ec4805322b55.roa (raw, json) Hash identifier: tqf/1dKesGkslPnOCBdZ4U4msOV7WvGwEwaJGvb74V4= Subject key identifier: 55:48:76:1F:59:B0:99:B5:EB:B2:7B:53:B5:1F:5C:ED:CA:D3:84:8A Certificate issuer: /CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3 Certificate serial: 010D0C9F43285849605419FB2534AEC84CF64980 Authority key identifier: 77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/05d98a1e-5ff8-3196-abf4-ec4805322b55.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 32777 IP address blocks: 208.115.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:19:fb:25:34:ae:c8:4c:f6:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=3871e3e0-716a-493f-8917-d8e63aacc3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:3e:42:69:fd:01:cd:92:c4:09:cb:96:2a: c2:29:d6:c9:e2:3f:d5:1c:2a:82:55:89:4f:6e:74: 10:b9:e5:78:c8:d7:2c:8f:f8:0c:63:98:4d:ff:41: c4:be:92:94:62:5b:f1:2e:16:dd:d9:b2:e1:ff:55: aa:9d:6b:46:70:aa:e1:7b:aa:7f:d2:09:b7:93:53: 8c:4e:1c:ee:e8:cb:75:66:1a:a1:a3:dc:1e:54:bb: 97:1c:22:42:b9:70:1d:dc:e0:bc:6f:b2:0a:95:23: 9f:c5:67:a0:8e:5d:24:9e:80:1b:60:64:f1:d6:09: f8:4b:ee:b6:62:0a:d9:07:d6:ec:d2:f4:d4:f4:a0: 35:f0:a4:03:6b:8f:c7:54:e7:09:10:d2:86:26:41: 05:a9:e9:f1:fb:62:82:d8:e0:8e:f1:6b:cb:77:89: 90:b1:10:86:0b:9c:57:6d:c9:7f:99:46:96:48:c5: b8:88:65:cf:bd:c1:26:35:5e:2c:73:7c:f2:e1:42: 21:d7:33:fc:89:fd:06:22:e8:60:d3:5e:ac:ad:21: 83:3b:6b:14:63:21:2f:eb:05:4d:22:22:f8:41:b1: 07:84:6e:85:11:4d:37:9f:95:ea:66:5b:2e:9c:3c: ca:7f:20:ad:df:20:0c:74:95:69:35:40:ba:a9:d9: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:48:76:1F:59:B0:99:B5:EB:B2:7B:53:B5:1F:5C:ED:CA:D3:84:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/05d98a1e-5ff8-3196-abf4-ec4805322b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl X509v3 Authority Key Identifier: keyid:77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer sbgp-ipAddrBlock: critical IPv4: 208.115.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:57:89:1f:ff:7b:05:36:5d:1f:5e:6a:50:9d:c7:04:80:c6: f0:91:ab:69:24:da:92:37:fe:ef:c4:40:cb:45:6f:35:3b:20: 1b:5d:88:5b:14:10:d8:e0:df:8f:b8:1a:1a:c6:39:dc:98:d9: c6:46:44:df:f5:f6:c7:09:66:39:f7:dc:3a:a7:7c:aa:72:87: 6f:f9:9e:b9:dc:34:fd:a3:74:0f:86:28:ab:7f:ed:2f:bd:1e: 07:d3:4c:65:46:7f:97:f9:a5:cc:27:fa:09:06:fc:56:66:5f: 35:73:41:ef:a2:8a:c7:5f:92:54:78:93:0f:6f:c2:e9:fe:30: 8f:d4:8a:16:a9:e0:ab:ea:0a:d0:d7:d2:30:3a:7a:1b:ec:2a: 7a:a1:c3:b8:e2:24:62:61:b1:6a:5a:02:f5:25:dc:4a:14:b7: 3f:a7:e2:0b:f9:70:d9:d7:77:27:46:6a:56:88:a1:2a:5f:56: 63:df:23:c3:41:f7:3e:97:03:89:b5:7c:67:57:fb:4a:84:d5: bb:3d:24:73:2f:5f:54:ed:cb:eb:f4:e5:1d:8a:8e:6c:e9:13: 9a:01:72:c0:dd:07:d7:ed:85:af:49:48:f1:39:0e:10:b9:e0: 5b:c9:3c:23:1b:d4:93:27:2e:97:b6:f8:0e:01:02:c8:cb:5e: e9:fb:9a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBn7JTSuyEz2SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ZlOGUyYzItMmE2MS00NGQ5LTk1YjctNjRlYjE4MTAz MmUzMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk Mzg3MWUzZTAtNzE2YS00OTNmLTg5MTctZDhlNjNhYWNjM2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr4+Qmn9Ac2SxAnLlirCKdbJ4j/VHCqCVYlP bnQQueV4yNcsj/gMY5hN/0HEvpKUYlvxLhbd2bLh/1WqnWtGcKrhe6p/0gm3k1OM Thzu6Mt1Zhqho9weVLuXHCJCuXAd3OC8b7IKlSOfxWegjl0knoAbYGTx1gn4S+62 YgrZB9bs0vTU9KA18KQDa4/HVOcJENKGJkEFqenx+2KC2OCO8WvLd4mQsRCGC5xX bcl/mUaWSMW4iGXPvcEmNV4sc3zy4UIh1zP8if0GIuhg016srSGDO2sUYyEv6wVN IiL4QbEHhG6FEU03n5XqZlsunDzKfyCt3yAMdJVpNUC6qdkbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVIdh9ZsJm167J7U7UfXO3K04SKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83ZmU4 ZTJjMi0yYTYxLTQ0ZDktOTViNy02NGViMTgxMDMyZTMvMDVkOThhMWUtNWZmOC0z MTk2LWFiZjQtZWM0ODA1MzIyYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2ZlOGUyYzItMmE2MS00NGQ5LTk1 YjctNjRlYjE4MTAzMmUzLzdmZThlMmMyLTJhNjEtNDRkOS05NWI3LTY0ZWIxODEw MzJlMy5jcmwwHwYDVR0jBBgwFoAUd9tPdj6fRI8goy97j3K38uwgDKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83ZmU4ZTJjMi0yYTYxLTQ0ZDktOTViNy02NGVi MTgxMDMyZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HNZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpXiR//ewU2XR9ealCdxwSAxvCRq2kk2pI3/u/EQMtFbzU7IBtdiFsU ENjg34+4GhrGOdyY2cZGRN/19scJZjn33DqnfKpyh2/5nrncNP2jdA+GKKt/7S+9 HgfTTGVGf5f5pcwn+gkG/FZmXzVzQe+iisdfklR4kw9vwun+MI/Uihap4KvqCtDX 0jA6ehvsKnqhw7jiJGJhsWpaAvUl3EoUtz+n4gv5cNnXdydGalaIoSpfVmPfI8NB 9z6XA4m1fGdX+0qE1bs9JHMvX1Tty+v05R2KjmzpE5oBcsDdB9ftha9JSPE5DhC5 4FvJPCMb1JMnLpe2+A4BAsjLXun7mrY= -----END CERTIFICATE-----Generated at Mon Apr 28 18:44:30 2025 by rpki-client