$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c839d4eb-7aad-3290-9927-1223b842368b.roa File: c839d4eb-7aad-3290-9927-1223b842368b.roa (raw, json) Hash identifier: peCODq5UBPwLpvlHtO8E//94riCugjjl4bw+/9wA954= Subject key identifier: 8E:B6:3F:67:84:B3:22:D0:DD:4A:2C:6F:6E:8B:17:2E:EC:20:4D:1A Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584989866AC308CD8A9F9F80C480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c839d4eb-7aad-3290-9927-1223b842368b.roa Signing time: Tue 15 Apr 2025 19:10:24 +0000 ROA not before: Tue 15 Apr 2025 19:10:24 +0000 ROA not after: Mon 14 Jul 2025 19:10:24 +0000 asID: 0 IP address blocks: 208.217.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:89:86:6a:c3:08:cd:8a:9f:9f:80:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 15 19:10:24 2025 GMT Not After : Jul 14 19:10:24 2025 GMT Subject: CN=50f11fbd-90f7-418f-b5ff-8bff313d1b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b7:34:01:05:96:26:4c:4b:01:df:eb:99:4a: 95:e6:56:4e:4e:f0:ca:79:fa:bc:c2:4f:4f:ab:b2: b4:3e:55:6c:93:38:58:95:74:68:d4:32:09:57:50: d1:c4:2c:9a:9a:21:76:b4:30:89:d6:24:e2:d8:eb: 68:b2:8f:a2:63:fe:5a:10:fd:00:85:6f:3e:00:fa: 87:61:e6:15:68:74:c3:92:89:ad:53:bc:d3:a5:6e: b2:89:84:42:75:35:ea:bf:b9:2f:64:33:08:41:27: c0:96:b4:3c:0f:79:57:93:7f:3e:49:a6:a5:b7:fa: e8:35:b0:9a:32:34:42:7c:a9:8b:80:32:c1:5a:79: db:d3:3c:ef:f9:b2:ab:39:9b:07:54:0c:47:dc:6f: 83:a9:33:25:76:b6:3b:96:b5:cc:c6:a9:90:16:f4: 89:76:23:f4:4c:5b:5c:16:6f:bd:2b:d3:f0:37:cc: e2:23:e7:63:30:70:b9:b3:f6:7e:46:ff:2c:d0:9a: 30:fe:dd:b0:8e:48:38:eb:27:6e:d5:6d:50:61:fe: 60:4b:9a:99:ed:f8:57:ea:60:e7:03:76:3d:11:57: f5:be:cc:f4:fb:a2:b9:b2:60:09:9c:3d:69:09:d8: c9:42:b4:a4:98:0b:42:be:16:d2:cd:dc:b6:d9:a6: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:3F:67:84:B3:22:D0:DD:4A:2C:6F:6E:8B:17:2E:EC:20:4D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c839d4eb-7aad-3290-9927-1223b842368b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.217.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7b:9b:4d:9e:1f:7a:d7:05:ac:bc:6b:fd:06:55:c3:88:43: d0:c0:47:ab:cd:6e:d1:70:e2:64:4e:49:97:87:df:21:0c:51: 72:b1:f4:9c:fd:b1:d5:ac:7b:b5:3b:89:90:10:7f:3e:44:3a: 0c:79:f0:5f:99:d4:bf:65:d2:87:d8:d7:f3:30:84:ba:cd:c1: 6f:2c:26:c2:48:e4:b3:24:3e:39:b1:52:bf:f6:89:a5:f7:12: 1d:f0:06:0a:57:16:e3:e4:fe:64:ed:4d:37:71:e1:a8:7e:09: 23:59:de:36:60:bc:b7:d5:83:58:2d:fc:e0:48:1f:be:50:82: bb:4d:bc:4b:f6:0b:87:f3:db:cb:6c:d7:38:7f:86:b8:fc:1a: 78:8c:65:4a:29:3c:4b:ba:08:98:cf:82:16:69:70:2e:28:2d: 73:f6:88:0d:03:48:aa:48:6a:1c:c6:b3:81:1f:40:2b:18:d0: 84:df:2b:39:50:ad:66:72:e5:53:a2:93:00:dd:c3:01:7d:0e: 7d:10:b5:10:fc:a9:c9:4e:73:cf:86:5f:30:13:9b:35:47:06: a4:c2:9c:42:1a:8d:8d:9f:82:26:6d:01:35:5b:4f:38:81:6b: 60:51:a2:e9:02:26:2f:a4:c5:2d:f9:d0:8d:64:e9:85:51:8d: 9c:a8:75:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmJhmrDCM2Kn5+AxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MDQxNTE5MTAyNFoXDTI1MDcxNDE5MTAyNFowLzEtMCsGA1UEAxMk NTBmMTFmYmQtOTBmNy00MThmLWI1ZmYtOGJmZjMxM2QxYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLc0AQWWJkxLAd/rmUqV5lZOTvDKefq8wk9P q7K0PlVskzhYlXRo1DIJV1DRxCyamiF2tDCJ1iTi2Otoso+iY/5aEP0AhW8+APqH YeYVaHTDkomtU7zTpW6yiYRCdTXqv7kvZDMIQSfAlrQ8D3lXk38+Saalt/roNbCa MjRCfKmLgDLBWnnb0zzv+bKrOZsHVAxH3G+DqTMldrY7lrXMxqmQFvSJdiP0TFtc Fm+9K9PwN8ziI+djMHC5s/Z+Rv8s0Jow/t2wjkg46ydu1W1QYf5gS5qZ7fhX6mDn A3Y9EVf1vsz0+6K5smAJnD1pCdjJQrSkmAtCvhbSzdy22aYnYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI62P2eEsyLQ3Uosb26LFy7sIE0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzgzOWQ0ZWItN2FhZC0z MjkwLTk5MjctMTIyM2I4NDIzNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0NnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx7m02eH3rXBay8a/0GVcOIQ9DAR6vNbtFw4mROSZeH3yEMUXKx9Jz9 sdWse7U7iZAQfz5EOgx58F+Z1L9l0ofY1/MwhLrNwW8sJsJI5LMkPjmxUr/2iaX3 Eh3wBgpXFuPk/mTtTTdx4ah+CSNZ3jZgvLfVg1gt/OBIH75QgrtNvEv2C4fz28ts 1zh/hrj8GniMZUopPEu6CJjPghZpcC4oLXP2iA0DSKpIahzGs4EfQCsY0ITfKzlQ rWZy5VOikwDdwwF9Dn0QtRD8qclOc8+GXzATmzVHBqTCnEIajY2fgiZtATVbTziB a2BRoukCJi+kxS350I1k6YVRjZyodf8= -----END CERTIFICATE-----Generated at Sun Apr 27 00:22:09 2025 by rpki-client