$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa File: 44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa (raw, json) Hash identifier: YRg8Hc0BgQWXoIc3Va4uSzeo0yRTiNI1Kww1/WkIFGg= Subject key identifier: 5B:3E:5C:EA:79:0C:D8:CE:8F:38:43:BF:3F:39:14:1D:60:D9:2B:31 Certificate issuer: /CN=81aef195-0247-4104-9f46-f88e0dfd6ca9 Certificate serial: 010D0C9F432858490E16C6351992D99423F708C0 Authority key identifier: 0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa Signing time: Sun 02 Mar 2025 14:00:52 +0000 ROA not before: Sun 02 Mar 2025 14:00:52 +0000 ROA not after: Sat 31 May 2025 13:00:52 +0000 asID: 21858 IP address blocks: 208.70.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0e:16:c6:35:19:92:d9:94:23:f7:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81aef195-0247-4104-9f46-f88e0dfd6ca9 Validity Not Before: Mar 2 14:00:52 2025 GMT Not After : May 31 13:00:52 2025 GMT Subject: CN=51ca7f84-a5b3-4932-9cb3-7e3229076f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:b9:72:13:01:6b:ed:34:19:f1:fd:74:69: 61:50:52:dd:1f:12:e9:7e:5a:f4:d3:5b:d2:fd:6f: 1c:ae:0f:e1:78:23:dd:c2:b0:10:1a:74:02:f6:b5: 35:6c:5f:96:21:c8:2e:c7:7c:05:54:a9:9e:97:f5: f3:27:0e:43:ad:cf:a1:d9:43:50:e9:e5:c9:19:c7: b5:6e:78:fe:93:4f:c6:c1:47:dd:11:90:42:50:ef: 1d:ba:95:84:73:01:e2:f1:91:ab:5f:4d:1b:2a:aa: 57:8c:07:7e:ce:7d:1b:32:0c:00:13:86:a3:8b:fc: 1b:7a:6a:a3:6a:21:9f:c6:ca:39:25:5e:ce:28:38: e4:18:22:e2:4a:8e:11:bd:53:86:81:e8:a0:8e:f0: 4f:fe:2a:0d:ff:06:0e:f8:6a:d8:50:fd:a0:67:b4: d5:20:ad:b2:91:ea:cd:7d:24:48:58:f0:ea:2f:0c: 88:e0:3e:7f:21:23:36:21:8b:e4:01:80:f2:33:03: 30:32:92:13:97:bd:de:b0:8a:24:6d:ce:31:39:fd: 64:9c:b4:65:c3:88:cc:54:25:4a:79:c6:3a:4d:9f: 85:f6:b4:3b:47:d4:a0:cf:a5:ee:06:3b:33:47:2b: 1f:3b:f3:04:77:19:5f:b4:fc:cd:76:b4:f6:5c:b9: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3E:5C:EA:79:0C:D8:CE:8F:38:43:BF:3F:39:14:1D:60:D9:2B:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/44da0c68-fb28-307e-afbf-ca3b5cfc37ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9/81aef195-0247-4104-9f46-f88e0dfd6ca9.crl X509v3 Authority Key Identifier: keyid:0E:84:CA:F5:7E:88:73:D1:27:C9:63:1E:5A:A1:37:56:0F:88:83:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81aef195-0247-4104-9f46-f88e0dfd6ca9.cer sbgp-ipAddrBlock: critical IPv4: 208.70.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a6:ce:60:c0:a4:d8:6d:29:e7:95:73:2f:e8:d0:41:1e:d5: 08:ff:7f:71:fd:25:f5:32:76:a2:b8:88:43:cc:2b:0a:05:39: 94:71:32:45:bc:d5:5b:27:fb:f5:f1:2d:90:d8:6b:14:03:d5: 9c:44:4a:32:5c:8e:a4:fe:a4:fd:8a:2c:ea:10:80:a6:4c:40: 4d:ee:b4:3a:59:a8:90:c1:1a:08:f4:85:d9:46:40:ce:91:ea: e6:f7:fc:63:c3:95:61:9a:be:c5:9d:95:1b:2e:e3:07:98:0b: 40:f9:75:22:1e:0b:39:a6:96:84:64:60:dc:1d:cf:54:ae:fe: 1a:5b:e0:a2:41:04:26:40:85:51:92:16:9c:5d:52:9b:55:66: 8b:4f:1d:61:3d:c0:cb:a5:d8:e8:3e:58:91:d0:d3:0f:fa:74: ff:3c:54:d1:99:11:b0:25:3b:e9:56:ee:c8:f0:42:5e:75:5c: aa:4f:37:48:c2:96:85:b6:75:13:54:38:9a:4d:2d:ae:d8:34: 10:ee:ae:3b:b2:7c:52:f9:dd:3c:25:76:e5:ed:8a:bd:0f:5a: 40:81:39:7f:af:be:2c:e9:c7:9d:6f:68:67:06:6a:e1:0e:bd: c5:f0:70:44:b1:e5:28:77:af:92:bc:a8:b2:50:f0:35:57:33: e0:c0:8e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkOFsY1GZLZlCP3CMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFhZWYxOTUtMDI0Ny00MTA0LTlmNDYtZjg4ZTBkZmQ2 Y2E5MB4XDTI1MDMwMjE0MDA1MloXDTI1MDUzMTEzMDA1MlowLzEtMCsGA1UEAxMk NTFjYTdmODQtYTViMy00OTMyLTljYjMtN2UzMjI5MDc2ZjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqa5chMBa+00GfH9dGlhUFLdHxLpflr001vS /W8crg/heCPdwrAQGnQC9rU1bF+WIcgux3wFVKmel/XzJw5Drc+h2UNQ6eXJGce1 bnj+k0/GwUfdEZBCUO8dupWEcwHi8ZGrX00bKqpXjAd+zn0bMgwAE4aji/wbemqj aiGfxso5JV7OKDjkGCLiSo4RvVOGgeigjvBP/ioN/wYO+GrYUP2gZ7TVIK2ykerN fSRIWPDqLwyI4D5/ISM2IYvkAYDyMwMwMpITl73esIokbc4xOf1knLRlw4jMVCVK ecY6TZ+F9rQ7R9Sgz6XuBjszRysfO/MEdxlftPzNdrT2XLmiSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs+XOp5DNjOjzhDvz85FB1g2SsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWFl ZjE5NS0wMjQ3LTQxMDQtOWY0Ni1mODhlMGRmZDZjYTkvNDRkYTBjNjgtZmIyOC0z MDdlLWFmYmYtY2EzYjVjZmMzN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFhZWYxOTUtMDI0Ny00MTA0LTlm NDYtZjg4ZTBkZmQ2Y2E5LzgxYWVmMTk1LTAyNDctNDEwNC05ZjQ2LWY4OGUwZGZk NmNhOS5jcmwwHwYDVR0jBBgwFoAUDoTK9X6Ic9EnyWMeWqE3Vg+Ig+owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MWFlZjE5NS0wMjQ3LTQxMDQtOWY0Ni1mODhl MGRmZDZjYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHemzmDApNhtKeeVcy/o0EEe1Qj/f3H9JfUydqK4iEPMKwoFOZRxMkW8 1Vsn+/XxLZDYaxQD1ZxESjJcjqT+pP2KLOoQgKZMQE3utDpZqJDBGgj0hdlGQM6R 6ub3/GPDlWGavsWdlRsu4weYC0D5dSIeCzmmloRkYNwdz1Su/hpb4KJBBCZAhVGS FpxdUptVZotPHWE9wMul2Og+WJHQ0w/6dP88VNGZEbAlO+lW7sjwQl51XKpPN0jC loW2dRNUOJpNLa7YNBDurjuyfFL53TwlduXtir0PWkCBOX+vvizpx51vaGcGauEO vcXwcESx5Sh3r5K8qLJQ8DVXM+DAjvw= -----END CERTIFICATE-----Generated at Tue Apr 29 05:19:46 2025 by rpki-client