$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/812bd8e2-91be-32db-a9c2-b24d9303ac92.roa File: 812bd8e2-91be-32db-a9c2-b24d9303ac92.roa (raw, json) Hash identifier: setWScbSwP6MNqCx8PzbSrj9EhX2mDSBimKUN1V4ofU= Subject key identifier: F2:AA:81:27:4B:FC:B4:7C:32:41:96:8A:0A:A8:F3:C2:64:EF:0D:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F432858495C2449BBFDE1535210A03740 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/812bd8e2-91be-32db-a9c2-b24d9303ac92.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 701 IP address blocks: 208.36.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:49:bb:fd:e1:53:52:10:a0:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=3a4fad07-15dc-4fdb-af69-ff74981204bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c0:ae:42:2e:f2:a3:54:1d:20:18:fc:ff:69: 0e:cf:87:28:5c:ca:18:5e:5d:fb:cd:07:e2:9d:57: 30:77:bc:64:6d:60:d0:9c:53:50:69:c8:ec:c0:bd: b9:2e:4c:e7:8f:50:86:d5:7d:b3:5f:91:7e:4e:a1: 5e:d1:5d:70:e2:21:08:cc:ce:8f:f0:c3:55:3d:87: c2:58:08:5c:3b:6a:5f:b3:e2:5b:dd:9e:80:22:21: 9c:0c:e6:36:dd:0f:8a:09:11:e1:79:01:3c:cf:3e: c6:24:10:1c:7d:7e:57:31:50:33:a7:80:c1:c6:fa: 60:e5:78:2a:b3:04:19:4c:3f:c7:ce:51:6f:a4:be: fc:48:9d:c7:cc:f0:60:ac:1b:e2:a1:aa:3a:66:66: e6:4d:01:0c:5f:64:c7:63:17:e2:87:08:ce:db:8f: 04:83:6f:3f:55:bb:32:b3:9a:cf:54:5a:cb:3f:30: 4a:e6:19:e8:0d:a2:cf:11:eb:3a:e5:76:72:2f:18: 3a:ce:ae:78:ca:69:aa:90:de:4a:37:af:de:34:66: a0:73:bc:62:55:c2:fc:ec:ab:d1:ef:e0:67:0e:3e: e9:80:d7:e5:1b:90:86:37:0c:00:04:be:ac:0a:f1: c9:05:87:e4:34:18:e6:a9:24:16:d4:ac:1f:4f:37: 41:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AA:81:27:4B:FC:B4:7C:32:41:96:8A:0A:A8:F3:C2:64:EF:0D:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/812bd8e2-91be-32db-a9c2-b24d9303ac92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.36.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:66:96:d9:d0:80:db:6b:a3:d9:dd:1a:be:03:54:2b:81:2e: b0:6b:a0:6f:04:6a:fc:ae:cc:35:e4:dd:02:5e:5e:b5:3e:3a: 0e:51:70:a7:be:e6:5a:fb:a9:d8:fa:21:94:7e:6b:6f:73:94: 9e:e1:92:6c:10:c4:9c:88:b2:30:ec:1a:9a:cc:4c:70:45:69: 51:24:97:ce:78:e4:da:51:7c:55:55:d4:ba:07:eb:14:de:8f: f0:21:07:8a:9d:14:78:07:06:b0:02:69:88:26:21:1f:a4:b0: 6a:6d:bb:b1:23:be:7a:21:35:15:3b:ac:b6:16:7a:71:e3:dd: 17:d6:2d:5d:97:9d:e8:24:e3:cb:32:2b:a6:e9:71:30:f9:79: 24:76:42:81:4d:55:47:c3:8b:35:4e:82:39:f2:64:01:fc:00: 0d:01:75:38:7c:e9:61:bc:b5:be:7e:d0:c2:fb:7c:b1:9e:e2: 34:c0:f5:f6:1d:d2:96:7a:c7:3e:81:6a:9c:b7:fa:d5:79:b5: fc:3d:41:97:c1:76:99:78:9b:c1:35:d2:9e:4b:b6:b2:24:3c: 0a:52:72:85:16:e1:7e:24:5f:25:fa:ed:4d:e7:91:89:8d:c0: 27:dc:15:e9:37:b0:fe:8d:34:a3:fd:70:fd:be:ff:a4:5c:12: c4:75:bd:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJEm7/eFTUhCgN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk M2E0ZmFkMDctMTVkYy00ZmRiLWFmNjktZmY3NDk4MTIwNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsCuQi7yo1QdIBj8/2kOz4coXMoYXl37zQfi nVcwd7xkbWDQnFNQacjswL25Lkznj1CG1X2zX5F+TqFe0V1w4iEIzM6P8MNVPYfC WAhcO2pfs+Jb3Z6AIiGcDOY23Q+KCRHheQE8zz7GJBAcfX5XMVAzp4DBxvpg5Xgq swQZTD/HzlFvpL78SJ3HzPBgrBvioao6ZmbmTQEMX2THYxfihwjO248Eg28/Vbsy s5rPVFrLPzBK5hnoDaLPEes65XZyLxg6zq54ymmqkN5KN6/eNGagc7xiVcL87KvR 7+BnDj7pgNflG5CGNwwABL6sCvHJBYfkNBjmqSQW1KwfTzdB2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKqgSdL/LR8MkGWigqo88Jk7w1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODEyYmQ4ZTItOTFiZS0z MmRiLWE5YzItYjI0ZDkzMDNhYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0CTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFmltnQgNtro9ndGr4DVCuBLrBroG8EavyuzDXk3QJeXrU+Og5RcKe+ 5lr7qdj6IZR+a29zlJ7hkmwQxJyIsjDsGprMTHBFaVEkl8545NpRfFVV1LoH6xTe j/AhB4qdFHgHBrACaYgmIR+ksGptu7EjvnohNRU7rLYWenHj3RfWLV2Xnegk48sy K6bpcTD5eSR2QoFNVUfDizVOgjnyZAH8AA0BdTh86WG8tb5+0ML7fLGe4jTA9fYd 0pZ6xz6Bapy3+tV5tfw9QZfBdpl4m8E10p5LtrIkPApScoUW4X4kXyX67U3nkYmN wCfcFek3sP6NNKP9cP2+/6RcEsR1vdc= -----END CERTIFICATE-----Generated at Sun Apr 27 10:27:04 2025 by rpki-client