$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa File: e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa (raw, json) Hash identifier: qu1NfdigXX55pcpEDA4JAtwvD5WM1wAXEsdEoPgjgAY= Subject key identifier: 0F:36:01:89:CD:3D:7B:B0:C3:7E:82:96:D8:50:7F:19:31:8D:34:98 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F432858497DA4718EC85D25B34A3611B8 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 208.64.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:71:8e:c8:5d:25:b3:4a:36:11:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=f4090a06-0132-42f3-ad22-f2e98699a382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ee:2b:02:96:ca:47:8c:5e:44:ad:1f:5e:8c: 5a:18:96:f0:e7:60:e3:47:f4:e7:d4:a0:ec:9e:1b: 7c:4f:ef:50:e8:5d:9b:56:ab:d9:5e:90:b1:50:00: ee:90:20:6d:de:35:20:a7:fc:7e:28:13:21:ce:78: b9:7d:e7:be:f5:5f:8d:a8:26:ae:a8:0d:30:7f:d3: a0:5d:f6:d3:b5:15:ad:8e:b3:14:f4:97:4b:62:b3: c4:f2:38:0e:24:11:26:d5:10:09:b8:0c:e7:ad:12: 47:42:ca:05:a6:66:59:23:91:30:7e:23:45:d5:37: bb:27:e8:90:22:e1:e1:49:0f:1f:17:45:1b:ea:07: 9a:d3:7c:74:fc:87:13:4e:11:a7:59:37:9f:3e:e0: 96:d3:86:a8:48:82:da:b8:b0:34:10:2e:91:49:06: 66:f1:7a:74:9f:a9:4e:8e:6a:73:05:26:14:71:75: bb:3d:df:25:cb:b6:bb:0b:96:e3:4f:94:8d:f1:08: a5:be:0e:2d:a9:82:65:9c:06:91:87:2d:48:66:5e: 5d:dd:dc:99:af:f5:59:ea:4f:b5:77:b2:fe:92:e5: 00:89:87:bb:fb:15:25:18:62:53:30:34:9a:94:e1: 2b:e7:76:39:bd:bf:3d:69:61:0a:8c:9d:ed:0d:7b: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:36:01:89:CD:3D:7B:B0:C3:7E:82:96:D8:50:7F:19:31:8D:34:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:70:e7:8a:2c:d8:25:d6:0d:fa:d5:78:f5:92:98:5c:cd:6c: 33:0a:f8:0f:24:80:c0:33:35:73:46:0f:0a:28:33:1c:93:24: 74:c3:ea:be:02:f1:f7:1d:8e:d1:f5:47:fd:ae:e7:9a:86:a2: 4b:00:a3:1b:82:9c:3c:fd:01:be:bd:c4:72:9a:f2:a5:bc:3d: 36:9a:5a:64:c3:be:06:77:9c:ee:cd:07:d2:3d:55:36:0f:da: 66:97:0d:c6:8c:01:63:a6:16:b3:bd:9c:d3:ab:9c:d1:17:3b: c6:11:ac:78:d5:8a:e7:fc:9d:ad:a0:27:50:1a:d0:b7:d1:3b: 4f:42:3d:80:7f:37:45:2e:15:b8:99:5b:20:53:5b:4d:a2:21: 0d:b9:a5:47:63:bb:3b:e4:99:fa:17:07:89:8e:f2:56:21:18: 66:5a:d4:96:35:de:89:c2:2b:5f:4b:5c:ad:5b:8b:f7:ba:4e: 72:6f:55:9b:31:18:c3:d8:23:6c:a8:f2:16:60:03:a8:96:1f: fd:fc:0f:99:f3:f9:a5:a6:51:9d:8f:1b:a8:9b:54:6f:8b:b4: 08:3e:b8:f6:e6:a9:a1:12:1a:1b:0f:61:49:94:8c:a5:09:2f: 97:ea:c3:18:ad:b9:4a:6e:dd:fa:f2:3c:09:d7:24:09:d5:4d: b0:fa:d2:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pHGOyF0ls0o2EbgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk ZjQwOTBhMDYtMDEzMi00MmYzLWFkMjItZjJlOTg2OTlhMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu4rApbKR4xeRK0fXoxaGJbw52DjR/Tn1KDs nht8T+9Q6F2bVqvZXpCxUADukCBt3jUgp/x+KBMhzni5fee+9V+NqCauqA0wf9Og XfbTtRWtjrMU9JdLYrPE8jgOJBEm1RAJuAznrRJHQsoFpmZZI5EwfiNF1Te7J+iQ IuHhSQ8fF0Ub6gea03x0/IcTThGnWTefPuCW04aoSILauLA0EC6RSQZm8Xp0n6lO jmpzBSYUcXW7Pd8ly7a7C5bjT5SN8Qilvg4tqYJlnAaRhy1IZl5d3dyZr/VZ6k+1 d7L+kuUAiYe7+xUlGGJTMDSalOEr53Y5vb89aWEKjJ3tDXvzDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA82AYnNPXuww36ClthQfxkxjTSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvZTIwODUxMGUtOTE5Yi0z YWNjLWEwMmEtOWU2Y2M5YmE1YWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxw54os2CXWDfrVePWSmFzNbDMK+A8kgMAzNXNGDwooMxyTJHTD6r4C 8fcdjtH1R/2u55qGoksAoxuCnDz9Ab69xHKa8qW8PTaaWmTDvgZ3nO7NB9I9VTYP 2maXDcaMAWOmFrO9nNOrnNEXO8YRrHjViuf8na2gJ1Aa0LfRO09CPYB/N0UuFbiZ WyBTW02iIQ25pUdjuzvkmfoXB4mO8lYhGGZa1JY13onCK19LXK1bi/e6TnJvVZsx GMPYI2yo8hZgA6iWH/38D5nz+aWmUZ2PG6ibVG+LtAg+uPbmqaESGhsPYUmUjKUJ L5fqwxituUpu3fryPAnXJAnVTbD60jo= -----END CERTIFICATE-----Generated at Sat Apr 26 17:42:46 2025 by rpki-client