$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/3153b57a-5e71-32a7-a3b2-e2c63094096f.roa File: 3153b57a-5e71-32a7-a3b2-e2c63094096f.roa (raw, json) Hash identifier: royevBryrZdME2jilYpmPnnqK3NHNYcpZoThNt3B2q8= Subject key identifier: 92:6E:14:82:0A:90:26:01:85:32:7F:80:8F:0F:F1:DE:6E:4E:B1:95 Certificate issuer: /CN=19d9b9bc-a20d-4235-acc5-045fb91a3837 Certificate serial: 010D0C9F43285849BDDA3C5A634C49CABD4E9300 Authority key identifier: DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/3153b57a-5e71-32a7-a3b2-e2c63094096f.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 11476 IP address blocks: 208.87.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:3c:5a:63:4c:49:ca:bd:4e:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19d9b9bc-a20d-4235-acc5-045fb91a3837 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=16f10742-4969-4b3e-9ba2-925df29fb6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f4:73:e0:f6:62:e1:87:50:f1:1c:78:6b:02: c0:41:0c:9d:f4:1a:67:57:03:43:55:9e:c2:ed:87: 8c:da:ca:b0:8c:f4:4e:3f:38:d7:e2:97:50:20:ee: 84:b3:d1:e7:f6:f3:64:bb:46:54:96:e4:11:75:e8: f7:ea:45:6b:58:cd:21:ec:21:66:77:6b:c6:7e:43: 36:7d:12:62:cb:35:43:5c:a9:33:97:6d:0e:ab:c1: 3b:35:b9:4f:b1:36:42:40:82:32:4c:96:a9:cb:21: 00:82:88:10:41:63:3a:e7:d2:bf:8a:d6:ce:99:fd: e4:18:41:f1:14:40:1d:d3:03:eb:0e:1e:2a:22:79: 23:1c:b2:83:f0:4e:aa:bb:1d:a9:11:70:78:6a:46: 7b:59:1a:21:1e:ba:b0:e0:d0:93:4a:9f:42:f3:45: 2b:9b:81:d6:8d:a9:12:7c:ed:ae:9c:7a:c8:77:27: a6:7a:7e:2c:ee:d8:d2:6a:de:b6:1e:a1:b9:11:71: 4a:c6:33:03:8a:5c:16:13:3a:b0:bc:ec:7d:61:47: ec:91:9a:a3:31:f0:71:db:c9:9c:78:6f:4e:fb:e0: 9e:eb:87:29:dd:f1:e8:71:f9:4c:a0:45:fd:90:ad: 72:b6:c6:fb:25:ab:dd:d8:80:e9:db:3b:8a:0f:a3: ab:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6E:14:82:0A:90:26:01:85:32:7F:80:8F:0F:F1:DE:6E:4E:B1:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/3153b57a-5e71-32a7-a3b2-e2c63094096f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl X509v3 Authority Key Identifier: keyid:DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer sbgp-ipAddrBlock: critical IPv4: 208.87.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:70:22:84:34:17:f4:03:d5:93:c7:fc:6c:87:d0:ca:a4:4c: 42:08:24:bc:ab:da:dd:77:0e:d6:fe:76:0c:8a:04:76:b1:8a: a1:9d:f5:da:8e:e4:13:e2:4c:4a:ef:fa:10:ce:f9:a9:2a:e4: fa:22:4e:40:51:60:50:84:12:4f:67:df:a8:4a:2e:18:a9:6f: 80:56:53:92:83:26:03:9a:95:1c:84:ee:f9:ed:65:df:4b:ff: 38:8b:56:4d:0f:f4:67:e0:65:cc:a1:25:7b:83:5b:7e:50:0c: 7f:86:c4:b6:5d:06:5f:1b:84:d9:50:7a:c1:86:92:de:5f:12: 08:03:45:94:37:73:d6:75:de:a6:0b:17:90:ef:04:37:65:71: e8:13:8e:60:52:97:38:7a:fe:42:b8:50:8c:8e:e9:e5:d2:43: a4:a6:11:cb:1a:e2:b0:23:06:fa:6e:9c:1e:46:bd:e1:22:cc: 2e:28:6d:95:e7:a9:24:7a:11:95:e9:8d:85:f7:b9:25:1c:24: 53:25:b7:43:9d:54:07:e5:1e:47:b5:5e:6b:6f:fd:e0:81:91: 73:62:a5:a9:1c:b8:b4:60:7a:37:7a:f5:1d:dd:d3:39:1b:fc: cd:08:01:d8:65:98:ef:8f:fc:aa:75:c5:e6:9c:f4:59:1a:3f: 45:07:2b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92jxaY0xJyr1OkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTlkOWI5YmMtYTIwZC00MjM1LWFjYzUtMDQ1ZmI5MWEz ODM3MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk MTZmMTA3NDItNDk2OS00YjNlLTliYTItOTI1ZGYyOWZiNmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPRz4PZi4YdQ8Rx4awLAQQyd9BpnVwNDVZ7C 7YeM2sqwjPROPzjX4pdQIO6Es9Hn9vNku0ZUluQRdej36kVrWM0h7CFmd2vGfkM2 fRJiyzVDXKkzl20Oq8E7NblPsTZCQIIyTJapyyEAgogQQWM659K/itbOmf3kGEHx FEAd0wPrDh4qInkjHLKD8E6qux2pEXB4akZ7WRohHrqw4NCTSp9C80Urm4HWjakS fO2unHrIdyemen4s7tjSat62HqG5EXFKxjMDilwWEzqwvOx9YUfskZqjMfBx28mc eG9O++Ce64cp3fHocflMoEX9kK1ytsb7Javd2IDp2zuKD6OrYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJuFIIKkCYBhTJ/gI8P8d5uTrGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xOWQ5 YjliYy1hMjBkLTQyMzUtYWNjNS0wNDVmYjkxYTM4MzcvMzE1M2I1N2EtNWU3MS0z MmE3LWEzYjItZTJjNjMwOTQwOTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTlkOWI5YmMtYTIwZC00MjM1LWFj YzUtMDQ1ZmI5MWEzODM3LzE5ZDliOWJjLWEyMGQtNDIzNS1hY2M1LTA0NWZiOTFh MzgzNy5jcmwwHwYDVR0jBBgwFoAU34fod3+klGLUaPSuy3vuqs5GDdEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xOWQ5YjliYy1hMjBkLTQyMzUtYWNjNS0wNDVm YjkxYTM4MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FfaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlwIoQ0F/QD1ZPH/GyH0MqkTEIIJLyr2t13Dtb+dgyKBHaxiqGd9dqO 5BPiTErv+hDO+akq5PoiTkBRYFCEEk9n36hKLhipb4BWU5KDJgOalRyE7vntZd9L /ziLVk0P9GfgZcyhJXuDW35QDH+GxLZdBl8bhNlQesGGkt5fEggDRZQ3c9Z13qYL F5DvBDdlcegTjmBSlzh6/kK4UIyO6eXSQ6SmEcsa4rAjBvpunB5GveEizC4obZXn qSR6EZXpjYX3uSUcJFMlt0OdVAflHke1Xmtv/eCBkXNipakcuLRgejd69R3d0zkb /M0IAdhlmO+P/Kp1xeac9FkaP0UHK1U= -----END CERTIFICATE-----Generated at Sun May 11 12:23:40 2025 by rpki-client