$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa File: 3e3631a7-6a34-3455-850a-0ec197b42195.roa (raw, json) Hash identifier: WsjbePvVxWuO80Kbgkkz7X+iE5pxseuDmkVtQrVPbF0= Subject key identifier: 0C:1E:0A:0C:26:45:4B:83:70:EA:9D:A8:7E:8E:2A:A8:78:CF:A7:94 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F4328584988CF26D6514F1836033DD400 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 800 IP address blocks: 207.32.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:26:d6:51:4f:18:36:03:3d:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=905195b8-23c6-49e1-9764-2cf488fe3f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:df:fd:4c:98:b1:b8:b5:5f:5e:a4:bb:ec: dd:dd:7c:19:ae:59:8b:89:c7:82:0a:8d:41:ff:be: 72:1f:3b:89:7c:c7:07:90:bc:fd:4c:67:18:38:9b: df:d2:ee:57:5f:ea:59:65:fa:a0:c1:1a:29:d0:07: 08:7a:e4:69:87:e9:e4:6d:92:f6:c7:ac:83:5e:28: 08:2b:b5:82:53:b9:49:da:f8:6d:dc:83:0d:cb:01: 6a:da:69:03:02:e5:95:ca:c5:ad:3e:9d:1f:a1:9d: f3:fa:7d:ff:b2:d2:c8:a6:04:dc:2a:c2:62:76:e7: cf:02:b4:92:c4:18:50:de:41:d9:47:c8:57:59:fd: c0:f0:d2:13:34:c7:a5:1f:7c:b0:6d:5b:fa:28:a6: 6b:2d:5f:c4:dd:cf:d5:3d:dc:dd:ea:7c:88:b6:2c: dd:43:f7:90:9f:f5:4f:3d:c5:ba:df:a0:5d:ed:97: 5d:0c:db:bc:58:9f:68:ef:33:1d:b2:45:98:32:62: 1e:1a:12:ff:73:e3:cd:65:69:12:16:15:35:e7:66: af:e9:30:0a:07:ec:94:70:69:00:88:4d:96:23:c9: 3c:ba:9e:b7:a5:25:be:27:e1:38:d4:3c:a3:d1:45: 77:34:65:79:2d:13:dd:fa:ee:12:fc:e4:c4:38:c8: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1E:0A:0C:26:45:4B:83:70:EA:9D:A8:7E:8E:2A:A8:78:CF:A7:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3e3631a7-6a34-3455-850a-0ec197b42195.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 207.32.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4a:08:0a:70:61:99:ca:96:68:c6:e6:18:30:6c:98:35:6f: e2:ed:30:50:a3:9c:d4:35:71:a3:24:7e:e2:ce:ae:19:cd:87: 0e:64:2f:52:58:c6:4c:8e:ad:dd:12:12:3a:eb:21:7f:a5:c7: ba:f8:fa:70:23:91:9f:94:d4:40:75:8c:a6:75:a3:99:09:e6: 31:08:c2:af:ea:3d:f0:b0:13:04:01:c0:fb:71:0f:01:31:62: 73:ad:46:61:71:20:55:a3:12:0e:ba:b5:fc:43:ee:e5:3c:39: f4:a4:a5:64:9d:09:df:e0:e9:24:f3:18:36:48:eb:f8:72:48: 8d:58:83:ed:62:5d:c6:1f:4d:e3:17:09:16:8e:32:97:b5:24: e0:46:e5:a1:53:c2:75:96:f1:7f:de:28:87:c8:cd:57:78:b9: 2e:e2:cc:b9:5c:4c:35:14:13:46:6a:09:9c:11:18:2f:ce:74: cb:cc:c4:d6:ee:c0:8b:7d:1d:f0:0c:72:bf:2c:ee:7d:e3:23: f3:9d:68:da:fc:c9:4d:4e:3b:3f:00:3f:d9:2b:58:93:1e:f5: 55:e8:b9:b9:49:e3:6f:37:f1:c1:88:6f:fa:af:ce:46:1e:75: 08:d0:3f:7a:7f:28:a3:67:32:57:ff:08:1d:4b:c8:8d:e2:17: 54:ec:b4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzybWUU8YNgM91AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk OTA1MTk1YjgtMjNjNi00OWUxLTk3NjQtMmNmNDg4ZmUzZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubTf/UyYsbi1X16ku+zd3XwZrlmLiceCCo1B /75yHzuJfMcHkLz9TGcYOJvf0u5XX+pZZfqgwRop0AcIeuRph+nkbZL2x6yDXigI K7WCU7lJ2vht3IMNywFq2mkDAuWVysWtPp0foZ3z+n3/stLIpgTcKsJidufPArSS xBhQ3kHZR8hXWf3A8NITNMelH3ywbVv6KKZrLV/E3c/VPdzd6nyItizdQ/eQn/VP PcW636Bd7ZddDNu8WJ9o7zMdskWYMmIeGhL/c+PNZWkSFhU152av6TAKB+yUcGkA iE2WI8k8up63pSW+J+E41Dyj0UV3NGV5LRPd+u4S/OTEOMhe6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAweCgwmRUuDcOqdqH6OKqh4z6eUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvM2UzNjMxYTctNmEzNC0z NDU1LTg1MGEtMGVjMTk3YjQyMTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzyDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhKCApwYZnKlmjG5hgwbJg1b+LtMFCjnNQ1caMkfuLOrhnNhw5kL1JY xkyOrd0SEjrrIX+lx7r4+nAjkZ+U1EB1jKZ1o5kJ5jEIwq/qPfCwEwQBwPtxDwEx YnOtRmFxIFWjEg66tfxD7uU8OfSkpWSdCd/g6STzGDZI6/hySI1Yg+1iXcYfTeMX CRaOMpe1JOBG5aFTwnWW8X/eKIfIzVd4uS7izLlcTDUUE0ZqCZwRGC/OdMvMxNbu wIt9HfAMcr8s7n3jI/OdaNr8yU1OOz8AP9krWJMe9VXoublJ42838cGIb/qvzkYe dQjQP3p/KKNnMlf/CB1LyI3iF1TstB8= -----END CERTIFICATE-----Generated at Sat Apr 26 12:54:52 2025 by rpki-client