$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/b07e1f60-f694-3dd8-b507-9eb1a932eb67.roa File: b07e1f60-f694-3dd8-b507-9eb1a932eb67.roa (raw, json) Hash identifier: IUnKHMerK1PN4vqY2GCLSrPxZCyhP11Runs2Z5Sh7L0= Subject key identifier: 75:7B:A2:D4:B9:05:C0:14:CB:7E:78:05:15:A4:F7:2D:DA:03:C1:CA Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F43285849C904DDE34E496FE78F314880 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/b07e1f60-f694-3dd8-b507-9eb1a932eb67.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 208.71.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:dd:e3:4e:49:6f:e7:8f:31:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=1ed3eca2-4822-47e1-b3d6-b2cadf243bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:bf:d4:ee:c6:f2:eb:8c:14:1b:d1:bc:1e: 6d:e1:a6:8e:8b:b5:e0:b9:f0:ca:90:aa:9f:b5:d3: 85:40:28:74:dc:88:f6:04:83:09:45:ce:88:ef:1d: f9:87:20:65:e9:e9:03:c1:24:e3:45:9a:1f:7d:9a: df:2e:b1:0f:f1:08:1a:cb:41:fc:18:df:f0:40:ee: 40:19:e4:0f:b0:eb:c3:af:d8:87:7e:54:03:13:db: d7:15:59:11:16:e3:fe:ac:92:c5:25:c1:69:76:33: 5d:a6:bb:f2:a8:40:8a:16:0f:1f:b5:ed:4a:b7:a5: db:1c:5e:d5:dc:f3:6f:36:a4:04:53:bf:ac:e5:a8: 03:3c:e6:c0:15:31:2c:1b:48:60:ca:1c:ae:5c:a4: fb:41:4f:d3:79:d3:ed:20:25:6a:e8:58:79:d4:b1: 7c:5f:bd:38:78:31:28:4d:1a:e6:2e:ed:b8:92:eb: 56:92:c7:3c:5b:6b:71:10:51:84:ac:d3:c0:3b:33: 73:f9:c6:7c:ab:23:24:62:3d:e4:2d:23:e1:86:1a: be:0e:12:ab:d5:da:bd:77:62:56:62:32:4b:60:20: 36:a4:f3:30:27:1a:c5:37:21:69:90:0d:b4:4b:f9: fa:f3:83:48:7a:7b:42:dc:14:4b:4f:8d:cb:a3:eb: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7B:A2:D4:B9:05:C0:14:CB:7E:78:05:15:A4:F7:2D:DA:03:C1:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/b07e1f60-f694-3dd8-b507-9eb1a932eb67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:40:ae:70:37:6c:a9:ab:f2:35:19:9c:d2:a8:a1:f1:ea:20: ed:e2:fd:d6:94:36:b7:07:31:b9:5f:f9:36:24:b3:15:02:64: 54:7e:a9:eb:a8:02:4c:7d:5a:ab:25:ea:78:bc:4a:dc:95:be: 50:aa:ea:cd:8f:a3:2e:c8:be:14:65:0f:17:e6:1b:0b:f8:16: c9:45:f5:9f:e6:89:a2:23:3f:d1:13:88:a2:ac:60:39:c0:2f: 14:c1:09:16:a6:89:66:09:1a:66:da:92:f9:cc:08:3c:22:47: 15:5b:6f:2d:d9:0f:2a:4d:95:a2:8d:e9:81:d9:74:76:d4:6a: 7a:2e:7b:3c:02:74:29:29:8b:eb:f1:e5:64:07:85:5f:a6:01: b7:35:3b:b3:52:60:82:d5:b7:8d:36:23:f2:82:2a:1c:7c:69: f1:13:d7:05:05:b1:d1:14:f8:44:7e:3f:d0:59:5c:3c:a9:e7: 33:84:be:01:60:51:01:43:7a:52:09:d7:01:c7:d8:b9:bd:1d: 54:ce:94:2a:74:2c:3f:bc:a7:5c:95:9c:ce:58:45:c2:5e:99: 73:76:79:ea:65:18:6b:e5:c8:ee:1c:5d:28:9a:25:be:74:9c: 90:d3:42:57:eb:fc:d5:b5:69:59:a9:56:43:48:3d:98:dd:6d: 7b:ce:c3:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBN3jTklv548xSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk MWVkM2VjYTItNDgyMi00N2UxLWIzZDYtYjJjYWRmMjQzYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8i/1O7G8uuMFBvRvB5t4aaOi7XgufDKkKqf tdOFQCh03Ij2BIMJRc6I7x35hyBl6ekDwSTjRZoffZrfLrEP8Qgay0H8GN/wQO5A GeQPsOvDr9iHflQDE9vXFVkRFuP+rJLFJcFpdjNdprvyqECKFg8fte1Kt6XbHF7V 3PNvNqQEU7+s5agDPObAFTEsG0hgyhyuXKT7QU/TedPtICVq6Fh51LF8X704eDEo TRrmLu24kutWksc8W2txEFGErNPAOzNz+cZ8qyMkYj3kLSPhhhq+DhKr1dq9d2JW YjJLYCA2pPMwJxrFNyFpkA20S/n684NIentC3BRLT43Lo+v3FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV7otS5BcAUy354BRWk9y3aA8HKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvYjA3ZTFmNjAtZjY5NC0z ZGQ4LWI1MDctOWViMWE5MzJlYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVArnA3bKmr8jUZnNKoofHqIO3i/daUNrcHMblf+TYksxUCZFR+qeuo Akx9Wqsl6ni8StyVvlCq6s2Poy7IvhRlDxfmGwv4FslF9Z/miaIjP9ETiKKsYDnA LxTBCRamiWYJGmbakvnMCDwiRxVbby3ZDypNlaKN6YHZdHbUanouezwCdCkpi+vx 5WQHhV+mAbc1O7NSYILVt402I/KCKhx8afET1wUFsdEU+ER+P9BZXDyp5zOEvgFg UQFDelIJ1wHH2Lm9HVTOlCp0LD+8p1yVnM5YRcJemXN2eeplGGvlyO4cXSiaJb50 nJDTQlfr/NW1aVmpVkNIPZjdbXvOwzk= -----END CERTIFICATE-----Generated at Sat Jun 14 23:55:50 2025 by rpki-client