$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4da48b61-b86f-364f-8202-7a45652e7804.roa File: 4da48b61-b86f-364f-8202-7a45652e7804.roa (raw, json) Hash identifier: PcAX8GVpVbUyZfRlGBD76lf6icRTZ2lYC5++TZZtsnE= Subject key identifier: 86:49:B8:02:4D:0C:91:66:D1:BA:25:C5:01:D2:85:CB:6A:2D:7A:FA Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F432858499F24936FEA4CCCB01AC4B7B0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4da48b61-b86f-364f-8202-7a45652e7804.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 15169 IP address blocks: 8.8.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:93:6f:ea:4c:cc:b0:1a:c4:b7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=3b99dd37-2b36-4c85-8c8e-673dfde11f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:51:3c:eb:1b:8e:3b:e7:23:e2:e9:39:11:07: a3:3c:3c:e8:0a:0f:39:db:3e:38:48:7a:21:2c:a3: 49:9d:fd:17:10:79:d9:20:96:73:82:1d:de:d7:2f: 1c:bf:31:59:1f:77:e0:30:b7:58:ce:70:75:d1:84: 9f:df:e8:3e:6b:25:e4:80:77:7e:b2:b0:c8:47:b9: 10:08:d8:e5:75:21:7d:c3:43:ed:ec:61:8d:c6:9b: cd:4b:57:63:cb:c9:17:48:14:05:f3:b5:1e:d0:83: 22:c2:51:e1:76:09:49:ab:c9:c3:02:fa:d3:bb:1c: 06:90:bb:4b:01:b4:c0:42:bc:37:bb:33:18:9c:14: 5e:8b:66:74:35:9a:aa:20:3b:0b:6d:3d:a3:92:6f: 25:9c:c9:ed:99:cc:8e:f0:48:48:c4:2f:0e:fd:2b: 89:1f:bd:3c:a5:ef:f2:70:a5:e0:f2:ca:2b:49:73: e1:c9:3b:36:e8:1b:5c:27:81:ad:3f:09:a2:e4:12: 79:09:0c:9d:80:70:35:b8:fa:cc:a7:75:86:1a:fc: a4:95:f2:d1:de:6b:f1:c3:0c:16:5c:8f:b9:22:2f: 33:72:83:15:fd:49:2d:75:c0:ce:eb:b1:37:0a:40: 1f:2a:28:c0:ef:e7:b6:de:36:bf:41:89:fa:6f:72: c2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:49:B8:02:4D:0C:91:66:D1:BA:25:C5:01:D2:85:CB:6A:2D:7A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4da48b61-b86f-364f-8202-7a45652e7804.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 8.8.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:70:cf:68:87:4a:a4:6c:fc:b5:48:35:ca:0c:fa:b7:35:ef: 41:21:7c:db:23:3b:0d:12:b2:36:82:76:a3:fd:43:7e:1d:80: 80:9d:bf:7a:09:7f:7e:dc:62:72:98:d6:31:21:9b:75:c7:b3: 83:e6:aa:e5:ba:ff:db:53:c5:fe:04:1f:cc:ea:2c:38:36:f6: 74:29:8e:3f:cf:45:70:97:46:e9:5c:87:ce:45:4a:2d:34:cf: af:a6:3b:f9:33:5b:ce:9e:9c:dd:d4:32:5d:cf:91:da:7c:db: 84:a3:b8:9e:2c:cb:8e:55:70:77:20:73:ca:0b:f7:f4:df:73: 69:f6:20:eb:9b:60:4d:66:f2:13:b3:f6:4f:f6:a5:64:ad:83: 76:1e:4a:b0:b9:5d:8e:77:cb:91:cf:b2:a7:95:bd:10:6a:0c: c8:cd:e3:01:de:d0:c2:56:5c:34:9b:c7:2e:c6:cb:18:32:e2: 26:44:b1:d2:05:00:6d:ae:01:af:93:70:e5:87:95:fb:fc:4f: 7b:3c:6a:98:a7:92:15:39:9b:36:a1:e0:0d:f6:e6:1e:c2:de: d4:47:43:e2:4d:cb:d0:08:1d:2c:8d:5e:2f:e8:0d:01:1e:16: 0e:e0:e4:20:f0:85:2a:67:b8:8e:5e:63:a9:e9:45:ec:12:eb: 71:55:d4:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJJNv6kzMsBrEt7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk M2I5OWRkMzctMmIzNi00Yzg1LThjOGUtNjczZGZkZTExZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1E86xuOO+cj4uk5EQejPDzoCg852z44SHoh LKNJnf0XEHnZIJZzgh3e1y8cvzFZH3fgMLdYznB10YSf3+g+ayXkgHd+srDIR7kQ CNjldSF9w0Pt7GGNxpvNS1djy8kXSBQF87Ue0IMiwlHhdglJq8nDAvrTuxwGkLtL AbTAQrw3uzMYnBRei2Z0NZqqIDsLbT2jkm8lnMntmcyO8EhIxC8O/SuJH708pe/y cKXg8sorSXPhyTs26BtcJ4GtPwmi5BJ5CQydgHA1uPrMp3WGGvyklfLR3mvxwwwW XI+5Ii8zcoMV/UktdcDO67E3CkAfKijA7+e23ja/QYn6b3LChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZJuAJNDJFm0bolxQHShctqLXr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNGRhNDhiNjEtYjg2Zi0z NjRmLTgyMDItN2E0NTY1MmU3ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACAgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1wz2iHSqRs/LVINcoM+rc170EhfNsjOw0SsjaCdqP9Q34dgICdv3oJ f37cYnKY1jEhm3XHs4PmquW6/9tTxf4EH8zqLDg29nQpjj/PRXCXRulch85FSi00 z6+mO/kzW86enN3UMl3Pkdp824SjuJ4sy45VcHcgc8oL9/Tfc2n2IOubYE1m8hOz 9k/2pWStg3YeSrC5XY53y5HPsqeVvRBqDMjN4wHe0MJWXDSbxy7Gyxgy4iZEsdIF AG2uAa+TcOWHlfv8T3s8apinkhU5mzah4A325h7C3tRHQ+JNy9AIHSyNXi/oDQEe Fg7g5CDwhSpnuI5eY6npRewS63FV1Pw= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:43 2025 by rpki-client