$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/3454be98-ac69-3a9c-8685-24aafe29543a.roa File: 3454be98-ac69-3a9c-8685-24aafe29543a.roa (raw, json) Hash identifier: fjq3jdqy60tOAroroX0lzMGTBBCjIK75/ra4NElkqA8= Subject key identifier: FD:A8:2D:90:4D:3B:13:8F:0D:16:15:DD:DB:32:D0:3E:90:38:80:10 Certificate issuer: /CN=f509b96c-10eb-4731-ae65-8d698aade657 Certificate serial: 010D0C9F432858498655E13498E09E1E62E5F790 Authority key identifier: 88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/3454be98-ac69-3a9c-8685-24aafe29543a.roa Signing time: Mon 14 Apr 2025 15:45:11 +0000 ROA not before: Mon 14 Apr 2025 15:45:11 +0000 ROA not after: Sun 13 Jul 2025 15:45:11 +0000 asID: 8075 IP address blocks: 208.66.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:55:e1:34:98:e0:9e:1e:62:e5:f7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f509b96c-10eb-4731-ae65-8d698aade657 Validity Not Before: Apr 14 15:45:11 2025 GMT Not After : Jul 13 15:45:11 2025 GMT Subject: CN=bb44bcf4-1e5a-4131-9aeb-4502473f7a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:22:61:80:1a:76:2b:eb:67:b6:06:e0:11:3b: d4:3e:12:59:25:8c:1c:ef:94:fe:0f:a8:db:c5:0e: cf:16:f8:fb:61:2a:14:b7:b4:82:19:9b:7f:89:07: 44:a3:e2:66:10:1d:55:8b:79:3e:7e:e7:fb:70:f2: e3:ee:54:ab:01:ed:b6:ca:a7:08:f6:ac:01:70:0b: d3:35:c8:6f:2d:08:aa:8c:eb:ab:1a:54:cf:e6:89: e3:65:78:a2:10:87:dd:3b:7a:08:a1:8a:9a:7f:7b: 11:d4:ce:08:23:d9:b4:7b:e5:81:ad:69:99:fa:56: 82:fe:bc:93:b0:3a:ff:19:a9:11:99:aa:71:b2:a3: cc:4e:e4:56:03:2d:2c:98:33:bb:e6:c6:83:03:0c: 24:45:16:dd:ef:e4:07:c4:39:08:66:af:0a:b6:f7: ac:ad:83:ef:bd:8a:ce:14:7e:ae:d7:16:8d:31:e3: d4:d0:9b:fe:63:5c:63:97:af:8c:73:3f:75:e6:c4: 62:bd:b4:ab:4b:0a:43:ef:37:05:65:1b:57:cc:58: 27:be:bb:fc:46:ae:0f:3c:50:69:dc:95:03:d1:20: c7:64:76:a3:0f:27:e1:14:9f:8d:7a:ee:e4:bb:95: 8a:a7:3c:02:3c:33:87:ad:f5:e5:15:b5:0f:46:00: be:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A8:2D:90:4D:3B:13:8F:0D:16:15:DD:DB:32:D0:3E:90:38:80:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/3454be98-ac69-3a9c-8685-24aafe29543a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657/f509b96c-10eb-4731-ae65-8d698aade657.crl X509v3 Authority Key Identifier: keyid:88:F1:2C:29:3C:34:F2:31:35:BB:BA:B2:23:D4:80:4C:D5:05:62:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f509b96c-10eb-4731-ae65-8d698aade657.cer sbgp-ipAddrBlock: critical IPv4: 208.66.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:f9:2a:ed:7e:ef:ed:bf:af:82:7a:b2:53:a6:cf:85:e4:4f: a5:11:f8:82:38:0d:64:b7:43:3f:17:c0:b0:87:a2:df:98:fd: b1:e2:16:b3:d0:9f:da:ac:00:c3:3f:86:d4:9a:a6:8f:98:f8: fa:34:15:72:7c:cd:f4:02:d4:06:87:e3:ce:f0:cb:ad:3e:1a: 28:00:d7:1d:c1:d1:f3:85:69:c9:cb:ee:53:44:da:9a:37:e3: fa:6d:be:06:56:0b:74:81:a1:35:45:af:6d:f8:48:19:a5:a5: 07:f5:c0:df:8b:4c:81:f1:bb:2a:70:ce:bd:5b:97:0f:6b:2c: 40:aa:33:19:8d:95:12:f9:67:2a:b3:d0:5d:0c:a5:2a:44:cd: a6:05:99:ca:e5:44:d8:52:88:89:78:e9:08:2f:c6:31:57:7c: 36:42:65:42:2a:96:29:2b:2d:d3:1b:95:4e:1c:c5:87:d6:13: 53:e6:9a:3a:8a:bc:ae:68:a5:8c:4e:79:87:e1:d4:52:6d:ed: 20:28:c0:e0:c5:b1:0f:7f:21:08:e1:d1:29:87:50:28:dc:d3: 5f:d8:ec:4a:50:0f:ec:7e:f7:cd:6a:74:d4:32:6b:d2:23:5e: c8:04:26:0a:88:c1:77:77:ea:65:36:fe:d0:07:2f:bc:ea:37: 5a:f7:5d:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGVeE0mOCeHmLl95AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjUwOWI5NmMtMTBlYi00NzMxLWFlNjUtOGQ2OThhYWRl NjU3MB4XDTI1MDQxNDE1NDUxMVoXDTI1MDcxMzE1NDUxMVowLzEtMCsGA1UEAxMk YmI0NGJjZjQtMWU1YS00MTMxLTlhZWItNDUwMjQ3M2Y3YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyJhgBp2K+tntgbgETvUPhJZJYwc75T+D6jb xQ7PFvj7YSoUt7SCGZt/iQdEo+JmEB1Vi3k+fuf7cPLj7lSrAe22yqcI9qwBcAvT NchvLQiqjOurGlTP5onjZXiiEIfdO3oIoYqaf3sR1M4II9m0e+WBrWmZ+laC/ryT sDr/GakRmapxsqPMTuRWAy0smDO75saDAwwkRRbd7+QHxDkIZq8KtvesrYPvvYrO FH6u1xaNMePU0Jv+Y1xjl6+Mcz915sRivbSrSwpD7zcFZRtXzFgnvrv8Rq4PPFBp 3JUD0SDHZHajDyfhFJ+Neu7ku5WKpzwCPDOHrfXlFbUPRgC+2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2oLZBNOxOPDRYV3dsy0D6QOIAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5 Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5OGFhZGU2NTcvMzQ1NGJlOTgtYWM2OS0z YTljLTg2ODUtMjRhYWZlMjk1NDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjUwOWI5NmMtMTBlYi00NzMxLWFl NjUtOGQ2OThhYWRlNjU3L2Y1MDliOTZjLTEwZWItNDczMS1hZTY1LThkNjk4YWFk ZTY1Ny5jcmwwHwYDVR0jBBgwFoAUiPEsKTw08jE1u7qyI9SATNUFYowwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNTA5Yjk2Yy0xMGViLTQ3MzEtYWU2NS04ZDY5 OGFhZGU2NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ELmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADn5Ku1+7+2/r4J6slOmz4XkT6UR+II4DWS3Qz8XwLCHot+Y/bHiFrPQ n9qsAMM/htSapo+Y+Po0FXJ8zfQC1AaH487wy60+GigA1x3B0fOFacnL7lNE2po3 4/ptvgZWC3SBoTVFr234SBmlpQf1wN+LTIHxuypwzr1blw9rLECqMxmNlRL5Zyqz 0F0MpSpEzaYFmcrlRNhSiIl46QgvxjFXfDZCZUIqlikrLdMblU4cxYfWE1PmmjqK vK5opYxOeYfh1FJt7SAowODFsQ9/IQjh0SmHUCjc01/Y7EpQD+x+981qdNQya9Ij XsgEJgqIwXd36mU2/tAHL7zqN1r3Xas= -----END CERTIFICATE-----Generated at Sun May 11 19:59:26 2025 by rpki-client