$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca4d4694-bbd7-30fc-8b2f-2661f9f4773a.roa File: ca4d4694-bbd7-30fc-8b2f-2661f9f4773a.roa (raw, json) Hash identifier: nCiANeUsMusMK+6/iD3NcPkod5FXAzDHBVnX5fZA4mk= Subject key identifier: 58:BD:2F:DF:DD:9C:B0:A4:00:F7:DC:82:33:2F:EA:75:AB:36:55:71 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858498CFF1D2DDD4370DACB8766C0 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca4d4694-bbd7-30fc-8b2f-2661f9f4773a.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 401415 IP address blocks: 208.53.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:1d:2d:dd:43:70:da:cb:87:66:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=972c60e0-60dd-4bfd-a53a-6b3dada77de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:d4:72:28:f1:40:01:5f:e8:a7:7b:e3:59: 43:98:35:ac:bc:e2:d1:2f:52:d1:c3:20:83:1b:4a: 33:44:d1:f8:a9:48:35:0b:5b:c8:e4:4f:0d:98:ba: b0:e7:58:20:88:b6:6e:9d:37:50:55:3b:39:65:da: 68:bb:54:88:1b:8b:dc:41:bf:ab:10:f8:27:dd:88: 6d:b9:6f:74:d7:d1:fb:af:a6:65:89:0d:c1:60:8b: df:a2:b4:bf:2b:bd:3e:18:fc:7d:e5:fd:2a:39:6f: b4:0e:93:ab:da:f8:63:a2:0f:47:ca:53:94:05:cb: 26:b3:8c:08:e2:98:9b:89:a5:ec:43:96:bb:09:83: 0a:d9:1f:81:a4:c8:7a:31:47:57:9c:ea:2e:35:3e: de:26:e0:62:b6:da:0c:af:93:25:08:cf:54:9f:9c: b1:5d:cf:0d:88:42:5e:f9:3e:11:1c:2b:22:47:06: a5:48:d8:68:a0:c4:cd:30:01:de:0f:a2:cb:5d:60: cf:01:66:e4:1c:25:94:1f:81:ab:9c:5a:6f:cc:14: 09:72:1d:59:24:f0:97:61:20:4d:1a:f8:df:93:c1: b0:a8:1f:d6:11:1e:ca:55:b6:b1:fe:ce:37:75:25: fa:bb:20:20:62:16:f9:cd:ba:96:73:1d:16:e6:c0: 7a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BD:2F:DF:DD:9C:B0:A4:00:F7:DC:82:33:2F:EA:75:AB:36:55:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ca4d4694-bbd7-30fc-8b2f-2661f9f4773a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 208.53.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:fb:9a:48:4f:d9:04:9d:21:ca:cf:37:f0:14:8c:57:e2:b1: 63:2c:71:21:fb:54:a8:f8:5a:52:8f:9e:2d:e1:50:76:95:ef: 07:6d:dc:1e:ae:a4:a9:49:b8:e5:46:6d:9b:20:aa:5f:2e:91: 37:44:2f:74:cb:86:3d:25:26:01:be:dd:97:7d:d3:bf:25:a1: 2a:71:51:70:7f:4d:30:4f:06:2d:b9:f0:29:53:63:e2:61:33: 02:76:42:91:b5:ce:7a:da:e7:60:ae:3d:31:3a:bd:e5:d5:9e: 2f:d3:bc:56:58:48:fe:6a:fb:b2:e5:dd:28:e5:07:9e:10:16: 7b:f4:50:4c:fd:74:b8:30:bc:a1:11:68:a9:8a:ba:25:fe:56: 35:b1:25:34:b8:4c:29:8c:53:2b:d1:94:36:ff:b1:f8:9b:89: 1d:20:8d:8f:ba:75:e8:ed:51:f3:b1:f8:aa:9f:e5:57:8c:7d: 69:41:70:e6:41:aa:75:12:15:10:9d:a8:0f:d3:95:e1:15:5d: 8c:58:13:b2:19:20:2b:a9:3d:c8:a3:4a:48:c9:4d:72:99:54: 0b:d1:c7:03:89:ea:d5:6d:cf:e1:87:ae:7d:7f:cf:d0:93:6b: 39:3a:91:d6:35:18:5b:7a:82:6b:4f:96:fa:c1:17:a0:1a:00: 6e:30:ef:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/x0t3UNw2suHZsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OTcyYzYwZTAtNjBkZC00YmZkLWE1M2EtNmIzZGFkYTc3ZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw3UcijxQAFf6Kd741lDmDWsvOLRL1LRwyCD G0ozRNH4qUg1C1vI5E8NmLqw51ggiLZunTdQVTs5Zdpou1SIG4vcQb+rEPgn3Yht uW9019H7r6ZliQ3BYIvforS/K70+GPx95f0qOW+0DpOr2vhjog9HylOUBcsms4wI 4pibiaXsQ5a7CYMK2R+BpMh6MUdXnOouNT7eJuBittoMr5MlCM9Un5yxXc8NiEJe +T4RHCsiRwalSNhooMTNMAHeD6LLXWDPAWbkHCWUH4GrnFpvzBQJch1ZJPCXYSBN Gvjfk8GwqB/WER7KVbax/s43dSX6uyAgYhb5zbqWcx0W5sB69QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFi9L9/dnLCkAPfcgjMv6nWrNlVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvY2E0ZDQ2OTQtYmJkNy0z MGZjLThiMmYtMjY2MWY5ZjQ3NzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0DXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMz7mkhP2QSdIcrPN/AUjFfisWMscSH7VKj4WlKPni3hUHaV7wdt3B6u pKlJuOVGbZsgql8ukTdEL3TLhj0lJgG+3Zd9078loSpxUXB/TTBPBi258ClTY+Jh MwJ2QpG1znra52CuPTE6veXVni/TvFZYSP5q+7Ll3SjlB54QFnv0UEz9dLgwvKER aKmKuiX+VjWxJTS4TCmMUyvRlDb/sfibiR0gjY+6dejtUfOx+Kqf5VeMfWlBcOZB qnUSFRCdqA/TleEVXYxYE7IZICupPcijSkjJTXKZVAvRxwOJ6tVtz+GHrn1/z9CT azk6kdY1GFt6gmtPlvrBF6AaAG4w7zQ= -----END CERTIFICATE-----Generated at Mon Apr 28 10:18:49 2025 by rpki-client