$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa File: cbf0ebb9-455c-3107-8c84-974a7f12d863.roa (raw, json) Hash identifier: ZpOh29Sv5ahp/jnPEz+Ry0IIQdggUkzr65faMIY4FH0= Subject key identifier: 02:C0:EF:49:B1:DF:BC:57:44:44:CE:58:E4:DE:4F:66:E8:5E:58:CA Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584975444DC51F564BBD5696119F Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa Signing time: Tue 08 Apr 2025 13:00:59 +0000 ROA not before: Tue 08 Apr 2025 13:00:59 +0000 ROA not after: Mon 07 Jul 2025 13:00:59 +0000 asID: 20454 IP address blocks: 64.38.208.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:75:44:4d:c5:1f:56:4b:bd:56:96:11:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Apr 8 13:00:59 2025 GMT Not After : Jul 7 13:00:59 2025 GMT Subject: CN=e88cdf67-2b52-41a6-b3bc-689bcb09f498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:21:88:7c:02:51:83:26:b6:09:1a:76:c8: 4a:08:46:33:b4:6c:6a:51:0a:f1:2f:4f:46:8b:92: 25:14:f9:f0:e5:29:b5:bf:b8:bb:31:17:69:89:8a: 00:ae:85:d0:9c:18:b3:c8:4e:6f:67:48:13:9d:0f: 52:02:55:6e:3d:a4:22:06:cc:f5:f5:80:9e:74:69: 2c:2f:1e:0a:71:80:ab:ab:55:df:d5:88:8c:ed:d4: ba:b3:02:58:e2:70:14:71:80:e9:d9:d3:eb:c2:d0: 7a:9e:e6:11:04:7b:50:3b:06:44:e8:b7:6d:2a:04: c3:09:b2:05:41:8d:4b:99:49:0d:af:12:1c:cc:73: 51:12:93:55:57:28:33:3d:12:78:34:5b:41:8e:32: 22:7d:9a:a6:13:70:f3:74:b9:c8:90:31:4d:90:2d: 89:ff:b5:49:0a:1b:e5:ba:89:34:73:c7:d0:55:2f: cd:69:30:86:cc:d0:d4:59:67:29:a6:9d:03:56:02: 32:4a:d7:b7:a6:da:00:54:c0:28:54:35:bb:2a:b6: df:5f:bf:da:1e:d6:a2:95:1c:22:0c:f1:b2:57:5b: 73:0b:16:a0:01:89:22:21:7e:6f:35:2f:29:f9:bc: f5:1e:43:b6:be:01:6b:78:f5:92:95:79:5d:37:6a: c6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C0:EF:49:B1:DF:BC:57:44:44:CE:58:E4:DE:4F:66:E8:5E:58:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/cbf0ebb9-455c-3107-8c84-974a7f12d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:30:36:73:a5:be:8a:01:6f:0f:46:2c:c4:34:cd:0f:ba:1e: cf:f1:6a:cd:38:10:bd:0b:96:b1:b5:1e:58:6c:b4:2a:cf:d6: 79:b1:8f:11:9f:f1:62:ae:a8:a5:23:fb:55:7c:e0:e9:9a:02: b2:06:ec:12:db:83:2f:dd:96:93:88:aa:42:8b:7b:05:f2:b9: 37:37:7e:6c:1d:22:ae:f0:22:42:3f:ab:86:bd:64:ef:55:cf: 96:a8:4c:38:7d:43:d6:f4:fa:ff:17:ce:a5:28:74:f1:e8:d6: e8:b6:e8:86:84:41:07:15:9f:f7:78:76:16:74:6e:8e:a3:c9: 53:50:e3:6a:20:37:e3:d0:b1:7d:ee:f1:3c:cf:bc:3a:51:11: a9:81:57:87:be:28:ee:0d:c5:24:2e:9a:88:91:00:8b:10:95: 49:82:3c:6e:f1:57:20:ef:28:ee:d6:32:d6:f3:61:22:4b:76: 6c:df:44:3c:5a:e2:7f:96:8c:b7:97:81:60:a9:a9:67:8a:e8: b4:7c:93:0d:3d:9e:99:f6:39:9c:fc:c9:41:6e:54:22:b8:3b: 98:b8:4f:c1:6f:f6:a4:b9:55:c5:d3:dc:64:7b:fe:05:53:9c: bd:8a:0c:e1:a3:0a:ee:a9:06:2a:57:0a:9d:65:48:33:52:70: 82:28:a0:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl1RE3FH1ZLvVaWEZ8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk ZTg4Y2RmNjctMmI1Mi00MWE2LWIzYmMtNjg5YmNiMDlmNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0shiHwCUYMmtgkadshKCEYztGxqUQrxL09G i5IlFPnw5Sm1v7i7MRdpiYoAroXQnBizyE5vZ0gTnQ9SAlVuPaQiBsz19YCedGks Lx4KcYCrq1Xf1YiM7dS6swJY4nAUcYDp2dPrwtB6nuYRBHtQOwZE6LdtKgTDCbIF QY1LmUkNrxIczHNREpNVVygzPRJ4NFtBjjIifZqmE3DzdLnIkDFNkC2J/7VJChvl uok0c8fQVS/NaTCGzNDUWWcppp0DVgIySte3ptoAVMAoVDW7KrbfX7/aHtailRwi DPGyV1tzCxagAYkiIX5vNS8p+bz1HkO2vgFrePWSlXldN2rGgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALA70mx37xXRETOWOTeT2boXljKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvY2JmMGViYjktNDU1Yy0z MTA3LThjODQtOTc0YTdmMTJkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEwNnOlvooBbw9GLMQ0zQ+6Hs/xas04EL0LlrG1HlhstCrP1nmxjxGf 8WKuqKUj+1V84OmaArIG7BLbgy/dlpOIqkKLewXyuTc3fmwdIq7wIkI/q4a9ZO9V z5aoTDh9Q9b0+v8XzqUodPHo1ui26IaEQQcVn/d4dhZ0bo6jyVNQ42ogN+PQsX3u 8TzPvDpREamBV4e+KO4NxSQumoiRAIsQlUmCPG7xVyDvKO7WMtbzYSJLdmzfRDxa 4n+WjLeXgWCpqWeK6LR8kw09npn2OZz8yUFuVCK4O5i4T8Fv9qS5VcXT3GR7/gVT nL2KDOGjCu6pBipXCp1lSDNScIIooIY= -----END CERTIFICATE-----Generated at Sun Apr 27 12:50:58 2025 by rpki-client