$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa File: 4789457a-e489-338a-acab-d987ad29a7a6.roa (raw, json) Hash identifier: W8fjrekaIs66Ji/9TaCHu5d/MxLLYnptZktbOYuBvng= Subject key identifier: 0D:98:01:43:8B:9F:B4:F4:78:A3:C1:D8:42:74:18:8D:BB:9F:70:CA Certificate issuer: /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b Certificate serial: 010D0C9F43285848DA70FCD6973500238EDDBC20 Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 32146 IP address blocks: 208.94.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:fc:d6:97:35:00:23:8e:dd:bc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=f4c09e4b-9a7f-4538-bae4-bfe970f211d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e9:7f:58:0c:49:99:f8:96:63:8d:2f:a1:25: 8f:b0:6a:f4:8c:2f:5f:cf:c5:ae:45:7e:e8:d7:5e: 7a:c7:ce:a8:7b:62:6f:08:c6:47:20:7f:77:71:19: 8b:11:a9:93:99:27:9b:ef:0a:17:b4:d1:1d:dc:62: 4b:a6:cb:d6:c2:2f:e1:af:d0:8d:4b:f4:c2:c7:98: e6:2d:5f:32:31:eb:24:4e:4d:94:5e:9b:5a:b8:a6: eb:a6:1a:7c:ab:f5:5a:d1:0d:6d:34:e4:39:ec:79: 9c:58:45:ca:8a:32:8b:cd:c2:c3:0b:d8:dc:0e:ad: cc:f7:4e:95:33:ff:68:b6:c3:2a:72:41:08:83:a6: 4e:51:ec:ea:a2:4c:d2:ea:c3:b6:98:9d:b8:34:1f: 15:9a:d3:de:85:44:fc:69:1c:e3:32:ea:cb:e8:47: 6c:00:c6:ec:de:c0:7f:93:67:bc:33:53:10:db:ff: 26:57:36:8d:77:92:6d:94:b0:1b:40:eb:b3:04:c6: 81:6c:73:bc:33:7c:61:08:ad:ef:fa:a9:8a:46:70: d0:60:d5:c0:bf:3c:b9:5c:59:df:67:7d:a1:f2:e9: 4c:60:e5:df:24:5d:d4:2f:26:5f:0f:2f:8d:4b:07: f7:ba:f8:d4:56:ad:f3:0c:19:0d:2e:8d:0d:19:59: 9a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:98:01:43:8B:9F:B4:F4:78:A3:C1:D8:42:74:18:8D:BB:9F:70:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/4789457a-e489-338a-acab-d987ad29a7a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl X509v3 Authority Key Identifier: keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer sbgp-ipAddrBlock: critical IPv4: 208.94.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a5:3e:4e:ef:3b:07:2f:9e:cb:68:64:d0:f3:2c:c4:54:79: 4b:3d:24:9f:31:18:b7:da:f0:d5:ca:45:3e:8d:94:dc:fd:a7: 6b:80:94:b3:db:43:b7:d9:3b:ae:82:a7:36:43:37:dc:7c:7b: e4:be:62:96:8d:a4:41:81:cd:15:8c:27:0a:e5:bb:ba:9e:29: 84:2e:fb:bd:32:6e:2e:15:9d:96:b0:ef:6b:2c:ad:a4:84:fc: 8a:86:c8:65:3d:5c:6f:7d:17:9a:cc:e0:85:1d:2c:0a:35:46: 8a:bf:03:cf:a1:03:fb:d4:af:10:46:1e:1b:69:bc:c7:68:79: 5e:8f:7e:d3:a5:2d:d6:f3:05:e1:12:c1:17:20:d9:54:9b:82: b4:81:84:e6:03:2a:3d:a7:40:40:ec:af:b3:ee:f0:9b:08:13: 5b:27:6e:0a:31:8e:d4:57:40:d7:72:b1:37:17:5c:67:fa:ff: eb:85:d5:c4:83:78:db:b0:ae:3f:80:1a:bf:fe:9d:b9:68:e0: 7a:a1:94:0d:b0:6b:7f:78:f2:57:93:c6:bf:dd:2b:8c:f2:02: fa:ac:dc:20:8f:d0:25:5b:3e:7d:df:1d:a4:df:f6:42:d6:3c: 73:46:85:2a:07:d2:62:a6:2b:70:b3:4b:45:98:97:ef:f1:eb: 6e:8b:c5:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPzWlzUAI47dvCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNDE1MTMtODY5Yy00MWYyLTkzMTktMTFkMWU4Yjk1 ZTJiMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZjRjMDllNGItOWE3Zi00NTM4LWJhZTQtYmZlOTcwZjIxMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ol/WAxJmfiWY40voSWPsGr0jC9fz8WuRX7o 1156x86oe2JvCMZHIH93cRmLEamTmSeb7woXtNEd3GJLpsvWwi/hr9CNS/TCx5jm LV8yMeskTk2UXptauKbrphp8q/Va0Q1tNOQ57HmcWEXKijKLzcLDC9jcDq3M906V M/9otsMqckEIg6ZOUezqokzS6sO2mJ24NB8VmtPehUT8aRzjMurL6EdsAMbs3sB/ k2e8M1MQ2/8mVzaNd5JtlLAbQOuzBMaBbHO8M3xhCK3v+qmKRnDQYNXAvzy5XFnf Z32h8ulMYOXfJF3ULyZfDy+NSwf3uvjUVq3zDBkNLo0NGVmasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2YAUOLn7T0eKPB2EJ0GI27n3DKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0 MTUxMy04NjljLTQxZjItOTMxOS0xMWQxZThiOTVlMmIvNDc4OTQ1N2EtZTQ4OS0z MzhhLWFjYWItZDk4N2FkMjlhN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDZkNDE1MTMtODY5Yy00MWYyLTkz MTktMTFkMWU4Yjk1ZTJiL2Q2ZDQxNTEzLTg2OWMtNDFmMi05MzE5LTExZDFlOGI5 NWUyYi5jcmwwHwYDVR0jBBgwFoAUtCkCM9+TvJn+B+Gn0hP6wrmoQE4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0MTUxMy04NjljLTQxZjItOTMxOS0xMWQx ZThiOTVlMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSlPk7vOwcvnstoZNDzLMRUeUs9JJ8xGLfa8NXKRT6NlNz9p2uAlLPb Q7fZO66CpzZDN9x8e+S+YpaNpEGBzRWMJwrlu7qeKYQu+70ybi4VnZaw72ssraSE /IqGyGU9XG99F5rM4IUdLAo1Roq/A8+hA/vUrxBGHhtpvMdoeV6PftOlLdbzBeES wRcg2VSbgrSBhOYDKj2nQEDsr7Pu8JsIE1snbgoxjtRXQNdysTcXXGf6/+uF1cSD eNuwrj+AGr/+nblo4HqhlA2wa3948leTxr/dK4zyAvqs3CCP0CVbPn3fHaTf9kLW PHNGhSoH0mKmK3CzS0WYl+/x626LxdE= -----END CERTIFICATE-----Generated at Sun Apr 27 12:59:51 2025 by rpki-client