$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa File: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (raw, json) Hash identifier: PfGqQEk8hbLX1GdeH4WofEsiPjt9sX7RKU9t3NwcVLc= Subject key identifier: 1E:3E:94:F6:AB:A2:3D:29:58:F3:71:E0:95:65:EC:59:0D:6E:09:42 Certificate issuer: /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Certificate serial: 010D0C9F432858499C789FC2F9A801AF992BE8E0 Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa Signing time: Tue 22 Apr 2025 14:02:58 +0000 ROA not before: Tue 22 Apr 2025 14:02:58 +0000 ROA not after: Mon 21 Jul 2025 14:02:58 +0000 asID: 394911 IP address blocks: 208.90.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9c:78:9f:c2:f9:a8:01:af:99:2b:e8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a Validity Not Before: Apr 22 14:02:58 2025 GMT Not After : Jul 21 14:02:58 2025 GMT Subject: CN=666d4c58-2ef6-4859-8800-fed98e5a2b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:73:65:20:78:49:18:48:96:5c:17:53:c8: f5:52:dc:52:b7:d4:d3:27:11:9b:7a:77:05:5c:b5: 53:4c:91:e6:7b:1f:62:37:f2:57:d5:4d:01:04:15: 6b:6c:b4:9d:3f:14:63:d3:ed:01:53:62:00:81:b6: 43:df:86:96:70:bd:63:21:e8:f1:74:6f:db:ae:01: 8a:db:a6:f6:2e:f6:61:61:02:2d:31:ed:9a:1d:78: 2d:cf:82:c2:35:3d:e4:d1:9c:0e:30:fc:b1:1a:a4: f4:ed:27:62:82:4c:e7:03:24:81:fe:82:d6:85:15: 74:22:a4:ad:41:76:20:b9:7d:9d:8f:73:6e:be:d7: dd:86:8d:20:d0:64:60:eb:3e:7e:5a:38:f9:a1:e9: 53:ff:cc:5b:65:d2:01:d1:1a:8a:78:34:e3:b7:58: 65:ef:ba:91:ac:6a:b0:cb:51:4f:0f:68:f4:ec:f4: be:63:aa:7a:43:88:48:28:84:f8:b4:f9:ff:74:17: 6d:a1:58:8c:cd:e3:d0:d5:b5:70:88:4d:67:e2:0f: e2:d9:2c:cd:cf:eb:11:d8:72:48:3d:4d:83:e6:d5: 74:59:cd:9c:05:f3:00:25:29:d7:68:e9:46:47:3f: ce:c4:f6:2e:32:b3:d3:14:5e:91:d0:01:70:65:0c: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3E:94:F6:AB:A2:3D:29:58:F3:71:E0:95:65:EC:59:0D:6E:09:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/e5509d98-c8ea-38e0-88a8-99be28cd2866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl X509v3 Authority Key Identifier: keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer sbgp-ipAddrBlock: critical IPv4: 208.90.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:3f:f2:d2:43:d0:d5:43:36:03:34:25:68:f8:16:76:6f:3a: 99:ac:74:b9:eb:91:3e:57:1b:e2:78:06:56:c1:5f:90:c5:dc: da:df:ad:99:a8:d7:15:57:3d:92:1f:6d:a9:7c:b8:9d:92:3e: 1b:f3:07:0b:fb:57:89:11:77:d3:0b:12:26:73:a0:78:b3:c0: fb:83:40:7d:f2:72:a7:cc:3e:a6:10:21:76:10:2a:27:46:3a: 67:56:ca:83:f3:ee:14:67:43:1f:22:af:22:f3:77:0b:8a:09: 46:80:b4:d4:3c:08:45:7d:3a:52:29:ef:76:42:9d:9d:63:0c: 5c:ca:3d:76:be:47:c5:48:3c:d3:3a:59:1b:6d:0b:fd:47:f4: 5a:44:50:52:69:48:3b:69:33:e6:c6:49:7b:8d:c9:4a:c7:a3: 8c:46:45:a2:8a:09:a3:34:71:01:13:15:e5:e5:d8:04:0e:c2: 48:45:51:ee:65:b3:32:dc:1f:b5:3b:59:f9:0a:63:76:62:f4: 7e:13:c8:1b:98:c4:89:1d:eb:be:37:0e:45:3b:6c:48:6b:3f: de:83:94:7a:79:8e:af:f4:36:dc:86:51:02:45:47:cd:6f:17: ab:af:dd:61:e4:16:90:a9:9c:1c:8e:47:ff:02:0d:20:01:9b: e4:80:27:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmceJ/C+agBr5kr6OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkMWE2YjQtOTAwMy00YzFkLTlhNDgtMDI3MGJlNGFm NTBhMB4XDTI1MDQyMjE0MDI1OFoXDTI1MDcyMTE0MDI1OFowLzEtMCsGA1UEAxMk NjY2ZDRjNTgtMmVmNi00ODU5LTg4MDAtZmVkOThlNWEyYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1hzZSB4SRhIllwXU8j1UtxSt9TTJxGbencF XLVTTJHmex9iN/JX1U0BBBVrbLSdPxRj0+0BU2IAgbZD34aWcL1jIejxdG/brgGK 26b2LvZhYQItMe2aHXgtz4LCNT3k0ZwOMPyxGqT07SdigkznAySB/oLWhRV0IqSt QXYguX2dj3Nuvtfdho0g0GRg6z5+Wjj5oelT/8xbZdIB0RqKeDTjt1hl77qRrGqw y1FPD2j07PS+Y6p6Q4hIKIT4tPn/dBdtoViMzePQ1bVwiE1n4g/i2SzNz+sR2HJI PU2D5tV0Wc2cBfMAJSnXaOlGRz/OxPYuMrPTFF6R0AFwZQzIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4+lParoj0pWPNx4JVl7FkNbglCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Qx YTZiNC05MDAzLTRjMWQtOWE0OC0wMjcwYmU0YWY1MGEvZTU1MDlkOTgtYzhlYS0z OGUwLTg4YTgtOTliZTI4Y2QyODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkMWE2YjQtOTAwMy00YzFkLTlh NDgtMDI3MGJlNGFmNTBhLzMzZDFhNmI0LTkwMDMtNGMxZC05YTQ4LTAyNzBiZTRh ZjUwYS5jcmwwHwYDVR0jBBgwFoAULcO59xS4bbKlYKbZRw6ggzYFRcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2QxYTZiNC05MDAzLTRjMWQtOWE0OC0wMjcw YmU0YWY1MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FoLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKU/8tJD0NVDNgM0JWj4FnZvOpmsdLnrkT5XG+J4BlbBX5DF3NrfrZmo 1xVXPZIfbal8uJ2SPhvzBwv7V4kRd9MLEiZzoHizwPuDQH3ycqfMPqYQIXYQKidG OmdWyoPz7hRnQx8iryLzdwuKCUaAtNQ8CEV9OlIp73ZCnZ1jDFzKPXa+R8VIPNM6 WRttC/1H9FpEUFJpSDtpM+bGSXuNyUrHo4xGRaKKCaM0cQETFeXl2AQOwkhFUe5l szLcH7U7WfkKY3Zi9H4TyBuYxIkd6743DkU7bEhrP96DlHp5jq/0NtyGUQJFR81v F6uv3WHkFpCpnByOR/8CDSABm+SAJyc= -----END CERTIFICATE-----Generated at Tue Apr 29 12:05:02 2025 by rpki-client