$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa File: 0affa3ca-5e84-377e-8612-b0e2003b6f16.roa (raw, json) Hash identifier: 1rDD/tDwTt5LUvJs+wsZ7QEM88Ta/BKDB5YmxflugTk= Subject key identifier: 8F:D7:45:61:DF:33:03:D0:89:A9:12:16:74:E2:C3:4C:C0:E3:F3:84 Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F43285849C4D4B8B6B1A254A282C0D480 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa Signing time: Wed 07 May 2025 01:00:46 +0000 ROA not before: Wed 07 May 2025 01:00:46 +0000 ROA not after: Tue 05 Aug 2025 01:00:46 +0000 asID: 14618 IP address blocks: 208.79.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c4:d4:b8:b6:b1:a2:54:a2:82:c0:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: May 7 01:00:46 2025 GMT Not After : Aug 5 01:00:46 2025 GMT Subject: CN=5d0c42df-e72e-4d44-bdb1-8bcfdb3576fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:e4:64:0d:75:50:c2:aa:5f:f3:93:86:bc: b8:d8:06:c0:c8:2a:24:fd:43:34:0e:d0:4d:e8:27: 64:10:be:6e:59:6e:b7:0a:40:77:12:e0:8b:bc:46: 7a:1d:d5:e3:db:c7:e3:53:63:dc:65:45:b0:1f:42: 71:af:39:7a:02:73:c8:04:05:16:c3:8a:a3:55:e6: 4f:bf:1b:6c:56:0f:f4:14:80:8e:5e:39:c8:c2:f3: 08:55:0b:15:41:3a:60:b6:49:0d:c8:0b:d6:04:54: a4:24:6d:98:d4:67:c0:c9:44:43:1d:95:52:03:2e: 52:76:4e:34:6c:c0:7a:dc:8b:02:52:0a:6b:1f:a2: 80:77:ae:3a:9c:f6:49:13:63:39:06:88:7f:8f:64: fe:3d:90:4e:19:53:8a:85:e7:3c:02:1d:6a:9d:f5: 8b:5c:cc:f7:3d:fb:3b:00:43:1e:68:ea:b7:30:c8: 40:63:9a:f7:73:4a:08:18:f9:56:bb:7a:d7:01:99: 68:8f:e0:52:9e:c2:dc:8b:76:c6:50:27:25:ec:2e: ef:ca:e7:fc:5c:9f:b6:fa:c5:a8:1f:3d:ed:3b:51: e9:23:4f:4d:0b:e3:6b:ee:ee:3e:87:e5:aa:d8:c8: e6:a5:63:43:c1:4f:7e:ad:b7:27:42:25:64:1c:6f: 55:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D7:45:61:DF:33:03:D0:89:A9:12:16:74:E2:C3:4C:C0:E3:F3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d5:74:0f:7a:02:45:3d:4e:88:99:e7:4b:8a:b9:7d:2e:04: af:17:e4:a7:3e:8a:1c:5c:15:f3:5b:63:fc:e9:36:8f:0f:c7: dc:d2:c9:11:77:03:79:65:96:66:b6:52:e4:3c:2b:c1:65:20: 8c:c8:f1:ca:5b:31:b6:b5:a4:09:79:8f:6d:fb:6e:e3:69:ff: 32:b2:a3:b5:05:23:e3:56:da:d2:58:7a:ee:0b:7b:39:e4:19: de:6a:26:38:85:27:27:d3:bb:fa:db:67:5b:4f:2b:2f:dc:c6: 4c:f5:28:1b:ad:46:83:82:a1:d4:b5:5f:36:fe:19:d6:82:bd: 56:0c:fc:7b:da:88:d4:85:7a:be:53:53:8a:c7:eb:3c:d2:e2: 26:c8:21:e8:a8:a1:43:0a:33:24:fe:48:ec:35:8e:bd:f0:8f: e0:90:0c:9e:be:a4:92:bb:c5:cd:84:71:64:46:60:de:7f:07: 2b:65:74:0c:85:bc:da:77:b9:ec:38:d4:08:99:63:94:2b:12: f0:bf:bc:9e:fd:32:ad:6c:7e:33:69:d1:fb:7e:8c:8c:26:77: c6:9b:bc:41:10:0e:92:73:f8:84:dd:be:ba:79:36:e6:49:1b: 3a:e3:c0:1f:ec:4f:fd:7d:00:24:da:f7:68:18:94:92:24:66: 43:86:42:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnE1Li2saJUooLA1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI1MDUwNzAxMDA0NloXDTI1MDgwNTAxMDA0NlowLzEtMCsGA1UEAxMk NWQwYzQyZGYtZTcyZS00ZDQ0LWJkYjEtOGJjZmRiMzU3NmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwvkZA11UMKqX/OThry42AbAyCok/UM0DtBN 6CdkEL5uWW63CkB3EuCLvEZ6HdXj28fjU2PcZUWwH0Jxrzl6AnPIBAUWw4qjVeZP vxtsVg/0FICOXjnIwvMIVQsVQTpgtkkNyAvWBFSkJG2Y1GfAyURDHZVSAy5Sdk40 bMB63IsCUgprH6KAd646nPZJE2M5Boh/j2T+PZBOGVOKhec8Ah1qnfWLXMz3Pfs7 AEMeaOq3MMhAY5r3c0oIGPlWu3rXAZloj+BSnsLci3bGUCcl7C7vyuf8XJ+2+sWo Hz3tO1HpI09NC+Nr7u4+h+Wq2MjmpWNDwU9+rbcnQiVkHG9VRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/XRWHfMwPQiakSFnTiw0zA4/OEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvMGFmZmEzY2EtNWU4NC0z NzdlLTg2MTItYjBlMjAwM2I2ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnVdA96AkU9ToiZ50uKuX0uBK8X5Kc+ihxcFfNbY/zpNo8Px9zSyRF3 A3lllma2UuQ8K8FlIIzI8cpbMba1pAl5j237buNp/zKyo7UFI+NW2tJYeu4Leznk Gd5qJjiFJyfTu/rbZ1tPKy/cxkz1KButRoOCodS1Xzb+GdaCvVYM/HvaiNSFer5T U4rH6zzS4ibIIeiooUMKMyT+SOw1jr3wj+CQDJ6+pJK7xc2EcWRGYN5/BytldAyF vNp3uew41AiZY5QrEvC/vJ79Mq1sfjNp0ft+jIwmd8abvEEQDpJz+ITdvrp5NuZJ GzrjwB/sT/19ACTa92gYlJIkZkOGQoE= -----END CERTIFICATE-----Generated at Sun Jun 15 11:44:07 2025 by rpki-client