$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa File: 503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa (raw, json) Hash identifier: joXCPlNmMDwym3hXAcrANJE7f9alcFq/kfQNgspke18= Subject key identifier: 58:07:83:1F:AB:1C:B5:1A:FC:DF:B5:C4:48:B0:BC:A0:07:C8:FC:E2 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F432858497DA47180B184041612B7FD20 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 14618 IP address blocks: 208.64.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:71:80:b1:84:04:16:12:b7:fd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=eb863a56-948a-4db5-8c92-cf8764c1959b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f3:84:93:f4:e3:da:c5:5f:78:56:a7:16:1a: 21:0b:b1:59:04:7d:0d:63:0c:93:79:b2:1f:a1:3c: ba:de:54:4b:c1:f5:61:1a:30:04:09:4e:96:49:d3: c6:e9:00:9a:1c:42:78:84:78:79:a6:46:c4:de:2e: 3c:19:6b:bf:6b:7c:98:79:0d:90:77:b7:9b:12:f9: 5a:2f:ae:84:33:b5:78:a0:ab:5e:d3:8c:c7:d4:55: c3:bd:ee:af:68:a6:b5:85:09:7d:11:49:ec:e1:25: ae:d5:b2:4f:34:5d:f3:c4:e2:bd:76:ab:4e:cc:b3: 83:df:f0:c1:bf:4a:d2:c1:ae:1d:ae:3f:22:bc:80: 34:40:80:19:22:e3:e1:6b:2c:ee:0e:4d:3e:f2:4f: 5b:d1:30:25:ac:ab:f1:1b:75:81:2d:12:9a:7d:8b: 2f:53:c2:a2:10:b1:38:f8:64:97:63:62:2a:3f:1e: 4b:8b:b6:8c:8f:d8:c1:24:9c:51:91:11:23:92:f6: 34:a9:0d:64:af:d5:51:02:0e:9f:5c:e9:3c:51:70: 99:51:88:cb:ee:33:9d:63:a4:9b:19:6b:bc:33:2b: f1:f6:02:6a:7e:68:2f:91:f1:b3:3e:31:a3:8b:4a: cb:da:7d:8a:fa:b7:cf:d7:ec:91:43:45:f8:71:80: d9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:07:83:1F:AB:1C:B5:1A:FC:DF:B5:C4:48:B0:BC:A0:07:C8:FC:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/503e3aea-7ff7-3e37-9611-2fa65ee0d6b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:57:01:1e:a9:ac:be:2d:ef:83:3b:82:a6:c4:b6:54:ef:37: 68:fb:d2:75:dd:1f:b5:d7:6b:0c:13:84:31:2b:97:ca:06:bd: 1a:e5:d0:ba:d0:8f:4f:ec:5f:cb:46:73:2a:ba:cc:d0:2e:81: 8c:b0:be:65:09:ca:0e:9a:41:40:ca:a4:06:50:b9:e1:17:cd: f9:5d:57:1b:eb:7a:70:2a:49:56:ca:f0:98:5a:d8:09:d9:19: 63:3d:d8:cf:53:6b:96:89:c5:cd:c2:89:a3:80:17:99:98:8d: 13:b5:ce:77:5c:50:0b:8b:63:24:7f:99:b6:31:ce:90:45:21: 62:c7:e3:33:15:28:c8:74:62:8f:a1:86:39:78:6e:ac:60:1b: f4:da:88:d6:b7:dd:c6:37:ee:64:ed:5c:18:4c:70:35:a8:ea: d4:53:40:a6:08:a7:42:56:e1:31:db:0d:30:f1:df:fe:6d:da: ad:47:be:d6:a8:ac:57:98:ec:ba:0a:d4:9e:e9:06:96:41:a6: 25:a5:0a:81:ea:eb:09:e7:33:50:95:56:55:7d:82:f4:5e:54: 40:6d:95:06:18:a4:81:01:ba:6b:47:79:d6:a1:21:c3:fa:13: 1e:10:3e:5c:9e:c6:80:ff:48:1e:6e:a2:30:53:9c:15:8a:d2: 30:5b:fc:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHGAsYQEFhK3/SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZWI4NjNhNTYtOTQ4YS00ZGI1LThjOTItY2Y4NzY0YzE5NTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/OEk/Tj2sVfeFanFhohC7FZBH0NYwyTebIf oTy63lRLwfVhGjAECU6WSdPG6QCaHEJ4hHh5pkbE3i48GWu/a3yYeQ2Qd7ebEvla L66EM7V4oKte04zH1FXDve6vaKa1hQl9EUns4SWu1bJPNF3zxOK9dqtOzLOD3/DB v0rSwa4drj8ivIA0QIAZIuPhayzuDk0+8k9b0TAlrKvxG3WBLRKafYsvU8KiELE4 +GSXY2IqPx5Li7aMj9jBJJxRkREjkvY0qQ1kr9VRAg6fXOk8UXCZUYjL7jOdY6Sb GWu8Myvx9gJqfmgvkfGzPjGji0rL2n2K+rfP1+yRQ0X4cYDZ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgHgx+rHLUa/N+1xEiwvKAHyPziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvNTAzZTNhZWEtN2ZmNy0z ZTM3LTk2MTEtMmZhNjVlZTBkNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZXAR6prL4t74M7gqbEtlTvN2j70nXdH7XXawwThDErl8oGvRrl0LrQ j0/sX8tGcyq6zNAugYywvmUJyg6aQUDKpAZQueEXzfldVxvrenAqSVbK8Jha2AnZ GWM92M9Ta5aJxc3CiaOAF5mYjRO1zndcUAuLYyR/mbYxzpBFIWLH4zMVKMh0Yo+h hjl4bqxgG/TaiNa33cY37mTtXBhMcDWo6tRTQKYIp0JW4THbDTDx3/5t2q1Hvtao rFeY7LoK1J7pBpZBpiWlCoHq6wnnM1CVVlV9gvReVEBtlQYYpIEBumtHedahIcP6 Ex4QPlyexoD/SB5uojBTnBWK0jBb/BA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:29 2025 by rpki-client