$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa File: a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa (raw, json) Hash identifier: qk+rCOZGnNFNV6hYiWySyGZ3FaiCpq1O27TO2fOpcno= Subject key identifier: 89:33:75:E1:3D:A6:89:0C:EC:76:7D:08:46:CA:53:99:E6:3C:0B:9A Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F43285849A4BAD58A0EF918496C5D7A00 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 15169 IP address blocks: 208.68.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:d5:8a:0e:f9:18:49:6c:5d:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b0999081-759d-48f6-9326-de12b90af4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c2:76:67:0c:7b:88:65:58:99:64:0b:4d:d8: b0:1e:1d:af:57:94:f8:f2:9f:39:e2:46:aa:2e:be: 55:ca:f0:55:d2:cc:45:fc:62:42:84:8c:9b:26:5b: a8:47:5e:2d:eb:03:54:cd:53:0c:4c:27:c2:05:62: d6:64:95:b4:47:af:cc:e1:58:16:94:1d:6b:3c:7a: 84:d2:d4:3d:db:bc:d4:ff:72:df:8b:11:b0:05:01: 18:d1:01:8c:44:65:95:70:91:ec:b6:cd:60:00:60: eb:1c:35:81:76:98:7e:05:dd:7e:17:68:20:ec:41: a6:d2:3a:96:f2:1e:dd:77:04:76:90:41:b1:38:77: 76:79:2c:82:a9:68:17:eb:20:17:97:e0:96:cc:09: 62:ec:4b:f7:a3:68:ea:e6:33:ee:bc:9f:4b:12:6e: f2:2b:26:55:b6:dd:68:4a:8a:1a:38:21:7c:9d:a6: 14:32:ed:a1:53:ea:41:22:37:37:c3:c9:50:91:bb: f5:0a:13:6a:91:c7:66:ee:29:99:1d:ec:2b:71:13: 0a:d6:c2:b5:b9:09:20:dc:d9:44:26:59:f8:07:f4: 8f:bf:c1:3f:ec:f4:93:94:c3:67:17:3b:6c:85:f4: 9d:83:d0:3e:de:bd:38:a5:99:6a:3e:2c:15:cf:90: 61:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:33:75:E1:3D:A6:89:0C:EC:76:7D:08:46:CA:53:99:E6:3C:0B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a1f8b28e-30b9-3cef-8e72-8cb67582b4fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ee:e3:6d:ec:a5:e6:bd:85:8c:7e:87:f4:b2:d1:e3:9d:4b: f7:ec:d7:ca:70:ca:3d:a2:04:68:38:e7:4f:2e:13:8e:06:e3: 00:68:30:ec:5e:d6:44:21:ce:56:a6:8d:69:1c:16:e4:c5:ba: b6:6a:44:95:c6:3f:ee:46:be:8f:13:72:f2:f6:e0:37:b8:98: 67:1a:94:56:fc:10:39:10:aa:8c:7c:36:9b:5a:64:dc:fd:2f: fa:9d:79:ba:6b:de:95:76:51:3f:6a:e1:75:88:0e:00:77:dc: cd:11:e0:ea:91:05:1b:5f:2d:5e:ae:45:e2:55:a9:57:b1:ad: c0:45:d3:38:88:b8:e9:b5:bd:e9:7f:fb:46:a3:4d:11:5c:80: 4e:77:cb:53:6f:fe:d3:b0:1e:b8:c4:d0:2d:67:87:5c:d4:41: fc:93:38:fc:22:00:55:4e:32:57:65:d0:95:e7:40:57:cd:ee: 04:29:00:48:41:93:5d:83:89:24:52:6f:c9:e1:9c:1a:3f:9b: 04:3f:53:15:e0:15:1f:3e:16:db:f1:13:cd:c0:1a:21:5b:29: c2:df:78:79:80:18:ed:c8:a0:3e:ef:b8:6e:03:ff:99:5c:d1: 0f:76:e4:8a:54:a8:ae:39:e0:9c:83:6b:31:83:39:1b:85:db: d0:04:ab:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutWKDvkYSWxdegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjA5OTkwODEtNzU5ZC00OGY2LTkzMjYtZGUxMmI5MGFmNGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMJ2Zwx7iGVYmWQLTdiwHh2vV5T48p854kaq Lr5VyvBV0sxF/GJChIybJluoR14t6wNUzVMMTCfCBWLWZJW0R6/M4VgWlB1rPHqE 0tQ927zU/3LfixGwBQEY0QGMRGWVcJHsts1gAGDrHDWBdph+Bd1+F2gg7EGm0jqW 8h7ddwR2kEGxOHd2eSyCqWgX6yAXl+CWzAli7Ev3o2jq5jPuvJ9LEm7yKyZVtt1o SooaOCF8naYUMu2hU+pBIjc3w8lQkbv1ChNqkcdm7imZHewrcRMK1sK1uQkg3NlE Jln4B/SPv8E/7PSTlMNnFztshfSdg9A+3r04pZlqPiwVz5BhhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkzdeE9pokM7HZ9CEbKU5nmPAuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYTFmOGIyOGUtMzBiOS0z Y2VmLThlNzItOGNiNjc1ODJiNGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACju423spea9hYx+h/Sy0eOdS/fs18pwyj2iBGg4508uE44G4wBoMOxe 1kQhzlamjWkcFuTFurZqRJXGP+5Gvo8TcvL24De4mGcalFb8EDkQqox8NptaZNz9 L/qdebpr3pV2UT9q4XWIDgB33M0R4OqRBRtfLV6uReJVqVexrcBF0ziIuOm1vel/ +0ajTRFcgE53y1Nv/tOwHrjE0C1nh1zUQfyTOPwiAFVOMldl0JXnQFfN7gQpAEhB k12DiSRSb8nhnBo/mwQ/UxXgFR8+FtvxE83AGiFbKcLfeHmAGO3IoD7vuG4D/5lc 0Q925IpUqK454JyDazGDORuF29AEq/E= -----END CERTIFICATE-----Generated at Sat Apr 26 20:51:29 2025 by rpki-client