$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/a43ea527-a9e0-36fa-8d5e-c6f038a541a8.roa File: a43ea527-a9e0-36fa-8d5e-c6f038a541a8.roa (raw, json) Hash identifier: P9wOUnS5vP7YajqvqtyzWteDoKoYguM5pQ7L3BrZllw= Subject key identifier: B7:D5:74:9C:3D:1B:1F:FA:C3:40:2A:1A:0D:AC:1D:CB:1A:1D:C8:53 Certificate issuer: /CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522 Certificate serial: 010D0C9F43285848F926867A3A65CF6643AA3580 Authority key identifier: E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/a43ea527-a9e0-36fa-8d5e-c6f038a541a8.roa Signing time: Sun 23 Feb 2025 02:00:39 +0000 ROA not before: Sun 23 Feb 2025 02:00:39 +0000 ROA not after: Sat 24 May 2025 01:00:39 +0000 asID: 43009 IP address blocks: 208.93.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f9:26:86:7a:3a:65:cf:66:43:aa:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522 Validity Not Before: Feb 23 02:00:39 2025 GMT Not After : May 24 01:00:39 2025 GMT Subject: CN=96f5584a-21ff-433d-8854-95a6a2d34063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:de:4f:02:a0:83:b6:86:04:51:ba:66:15: f0:19:2d:4a:19:b9:c2:18:5e:a3:07:39:28:14:fb: ca:fc:8d:ad:21:dd:6c:57:5c:92:a2:6a:6b:f3:61: 27:96:cd:1c:cd:85:74:a4:50:74:10:ea:e8:a9:4a: a2:9f:3f:2b:26:22:11:9a:74:e1:94:7a:53:dc:04: b0:4c:0b:12:6d:a9:f7:40:11:04:8b:d9:0f:b9:21: 23:a0:2a:dd:2f:a3:74:f6:e7:c1:e3:5c:52:37:6b: 0f:d9:2d:9e:64:db:44:e5:8e:95:32:d2:92:53:92: d7:02:79:35:8f:1b:c3:11:2c:a0:72:ef:94:4b:75: 2c:2f:0f:d0:41:fc:65:c5:cf:c8:c3:44:da:11:9e: 20:f0:35:40:57:06:35:86:aa:c5:31:b3:1e:9b:4c: d0:69:0a:c0:3f:b9:5e:c0:71:16:80:8f:2d:7a:0c: e6:15:11:d0:6f:06:cc:f5:6e:35:d0:f8:b5:ce:0d: 16:f9:b6:e7:ba:ce:85:df:87:a2:b7:26:03:32:f5: 08:eb:4c:b2:42:63:9f:62:db:89:f3:6b:8a:de:35: 0d:26:c8:b8:e7:29:7c:10:12:12:6c:ab:6b:91:6d: 99:84:4c:73:71:c6:97:2d:cb:fe:52:dc:55:96:47: e0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D5:74:9C:3D:1B:1F:FA:C3:40:2A:1A:0D:AC:1D:CB:1A:1D:C8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/a43ea527-a9e0-36fa-8d5e-c6f038a541a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl X509v3 Authority Key Identifier: keyid:E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer sbgp-ipAddrBlock: critical IPv4: 208.93.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:65:6b:29:8c:62:99:36:a9:47:00:70:72:14:b3:db:1b:3f: c4:1b:90:45:61:1c:e1:71:d5:46:2d:42:eb:4b:c9:53:1b:7d: 0a:aa:e5:9a:aa:10:33:45:e8:94:a6:30:bd:c4:61:95:35:71: e8:f0:21:ab:7c:14:47:c0:19:0c:bf:cd:4b:fe:a3:60:99:3e: ac:8f:8c:f4:d3:0c:5b:fe:fb:dd:36:a3:b0:e6:db:d0:63:75: 42:c5:78:58:27:88:6a:39:8c:5d:62:4e:00:45:7b:4a:ec:8e: 01:37:69:c5:8b:10:87:29:6b:cb:ab:43:05:a9:cc:c9:9d:70: 90:db:5c:46:ac:17:f5:54:63:9d:b4:07:85:2e:69:8f:b9:9d: c2:b9:f7:1d:3f:ed:c8:0c:ca:eb:b2:df:84:d9:d3:6c:7a:40: 0d:30:30:3b:99:f1:94:8f:73:cd:4d:38:5d:b4:88:6b:12:08: 51:ec:78:b6:11:87:b1:b3:bd:7b:f2:af:42:98:06:fa:10:e4: d4:50:9b:2f:76:4b:a3:1b:23:9d:26:a8:59:3c:4d:52:5e:c7: 0c:1b:23:15:c9:b7:47:43:ad:4f:c9:ea:13:3e:4e:f3:3a:6b: 72:ee:5a:cb:52:49:8f:b6:ed:b2:09:3e:d6:84:f9:77:5c:c8: fd:12:12:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JoZ6OmXPZkOqNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYzYzJhZDMtNGU1ZS00NzU4LWIxYmUtMDdiZjRjZTk0 NTIyMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk OTZmNTU4NGEtMjFmZi00MzNkLTg4NTQtOTVhNmEyZDM0MDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWneTwKgg7aGBFG6ZhXwGS1KGbnCGF6jBzko FPvK/I2tId1sV1ySompr82Enls0czYV0pFB0EOroqUqinz8rJiIRmnThlHpT3ASw TAsSban3QBEEi9kPuSEjoCrdL6N09ufB41xSN2sP2S2eZNtE5Y6VMtKSU5LXAnk1 jxvDESygcu+US3UsLw/QQfxlxc/Iw0TaEZ4g8DVAVwY1hqrFMbMem0zQaQrAP7le wHEWgI8tegzmFRHQbwbM9W410Pi1zg0W+bbnus6F34eityYDMvUI60yyQmOfYtuJ 82uK3jUNJsi45yl8EBISbKtrkW2ZhExzccaXLcv+UtxVlkfgtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfVdJw9Gx/6w0AqGg2sHcsaHchTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjNj MmFkMy00ZTVlLTQ3NTgtYjFiZS0wN2JmNGNlOTQ1MjIvYTQzZWE1MjctYTllMC0z NmZhLThkNWUtYzZmMDM4YTU0MWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTYzYzJhZDMtNGU1ZS00NzU4LWIx YmUtMDdiZjRjZTk0NTIyLzU2M2MyYWQzLTRlNWUtNDc1OC1iMWJlLTA3YmY0Y2U5 NDUyMi5jcmwwHwYDVR0jBBgwFoAU5B1orSqhylYSk1PgdyswRyNjFRswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NjNjMmFkMy00ZTVlLTQ3NTgtYjFiZS0wN2Jm NGNlOTQ1MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F0xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFlaymMYpk2qUcAcHIUs9sbP8QbkEVhHOFx1UYtQutLyVMbfQqq5Zqq EDNF6JSmML3EYZU1cejwIat8FEfAGQy/zUv+o2CZPqyPjPTTDFv++902o7Dm29Bj dULFeFgniGo5jF1iTgBFe0rsjgE3acWLEIcpa8urQwWpzMmdcJDbXEasF/VUY520 B4UuaY+5ncK59x0/7cgMyuuy34TZ02x6QA0wMDuZ8ZSPc81NOF20iGsSCFHseLYR h7GzvXvyr0KYBvoQ5NRQmy92S6MbI50mqFk8TVJexwwbIxXJt0dDrU/J6hM+TvM6 a3LuWstSSY+27bIJPtaE+XdcyP0SEhE= -----END CERTIFICATE-----Generated at Tue Apr 29 14:19:03 2025 by rpki-client