$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa File: e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa (raw, json) Hash identifier: xDfTVxFQyvBZJZktAJkB/OsAkM1g9XAFDVnK7MRVc+E= Subject key identifier: F0:CC:89:FB:FC:F1:1F:FC:29:86:18:DB:6B:B3:A1:E2:00:AB:83:44 Certificate issuer: /CN=74b24643-d6d5-4d2a-b885-83160dec7103 Certificate serial: 010D0C9F43285849CBCF877B6519F4705BF00180 Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 42 IP address blocks: 208.67.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:87:7b:65:19:f4:70:5b:f0:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=fbc96d3f-7cd6-4595-a721-33d29d9af466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bc:40:6a:f0:2e:b6:28:5d:e3:af:27:e3:08: 8d:9f:a2:51:b2:ac:d9:04:d1:e6:e6:36:56:dd:96: bd:c9:90:77:af:0b:e3:93:74:e5:96:a0:46:3f:77: 7b:77:4c:d1:4a:9a:97:2e:bc:31:f1:c6:41:6b:4b: 54:ff:27:d4:27:fa:6e:2e:3d:71:7d:a8:ab:48:2d: 93:ac:c3:df:bd:d7:8e:0b:05:67:5e:ce:58:07:41: b4:5c:eb:d3:f5:e9:11:cf:c2:7b:6b:bb:47:e5:75: 14:b0:0d:8e:89:bd:10:09:c5:38:07:5f:d6:e5:1d: 22:f2:1f:c3:f2:62:91:8a:fa:34:ff:78:58:8c:cd: 94:f1:d4:cb:91:cc:75:53:55:98:9e:ab:fe:2f:da: b6:40:c1:d0:01:d2:e3:06:09:de:a2:e2:2a:07:05: e0:72:bc:ed:45:60:f1:db:b4:1d:dd:10:5a:33:77: a1:ed:55:7b:be:d5:e7:85:78:15:4c:64:eb:ce:42: db:91:34:fc:e1:1c:30:5b:1e:c4:25:06:eb:aa:53: 1f:6c:3d:79:8c:ef:31:08:b6:b4:c9:1a:c7:f7:d9: 13:78:ac:d0:32:64:cf:a6:2f:46:57:04:e4:ae:30: af:b5:c8:c0:ef:5a:37:5c:fc:3b:cf:2d:72:22:b8: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CC:89:FB:FC:F1:1F:FC:29:86:18:DB:6B:B3:A1:E2:00:AB:83:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/e8a4e9ef-e6df-392b-b42b-db3c5f8d0b12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl X509v3 Authority Key Identifier: keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer sbgp-ipAddrBlock: critical IPv4: 208.67.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d7:41:3e:5c:40:0e:2d:da:28:75:bf:7a:52:1e:70:af:dc: c4:4f:ce:c0:9f:5e:ab:0d:da:ae:cc:30:af:e6:24:a3:e1:df: 44:9a:35:f1:58:80:50:6a:45:48:f5:f4:25:06:82:17:10:f0: 05:e0:93:e8:1e:0d:24:eb:0d:8d:22:ef:8e:fe:2c:96:63:41: 7d:11:f8:0d:11:02:44:a0:08:14:39:67:90:47:c9:84:1f:74: cf:f7:28:c3:65:9d:7f:0d:3d:43:43:63:7a:d8:f9:b3:2b:7a: a4:2e:6d:cc:01:6c:1c:85:6e:6b:13:16:0e:9c:33:58:6f:63: 5e:98:88:df:bd:41:18:53:ae:83:13:5e:7d:4e:1b:0f:84:ab: a6:24:27:42:65:8b:69:17:ef:f9:f7:02:35:2b:50:f0:96:ff: 20:eb:54:1c:08:ff:e5:1b:87:e2:c1:a4:27:b5:81:ac:ef:99: 48:43:84:a9:00:c7:9e:35:1b:1d:58:6e:ff:44:c1:9c:db:a1: 22:1b:0c:a0:3c:72:a4:89:2e:77:0e:a1:13:f8:fd:1c:b6:cf: 42:d4:80:8a:65:69:7b:15:df:b3:49:49:54:c0:7d:e7:d6:fc: 05:f6:10:83:a1:a2:4d:46:a8:20:8d:a4:eb:13:f6:20:53:1d: b1:03:c8:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz4d7ZRn0cFvwAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3 MTAzMB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZmJjOTZkM2YtN2NkNi00NTk1LWE3MjEtMzNkMjlkOWFmNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7xAavAutihd468n4wiNn6JRsqzZBNHm5jZW 3Za9yZB3rwvjk3TllqBGP3d7d0zRSpqXLrwx8cZBa0tU/yfUJ/puLj1xfairSC2T rMPfvdeOCwVnXs5YB0G0XOvT9ekRz8J7a7tH5XUUsA2Oib0QCcU4B1/W5R0i8h/D 8mKRivo0/3hYjM2U8dTLkcx1U1WYnqv+L9q2QMHQAdLjBgneouIqBwXgcrztRWDx 27Qd3RBaM3eh7VV7vtXnhXgVTGTrzkLbkTT84RwwWx7EJQbrqlMfbD15jO8xCLa0 yRrH99kTeKzQMmTPpi9GVwTkrjCvtcjA71o3XPw7zy1yIricDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDMifv88R/8KYYY22uzoeIAq4NEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvZThhNGU5ZWYtZTZkZi0z OTJiLWI0MmItZGIzYzVmOGQwYjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4 ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2 MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ENYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfXQT5cQA4t2ih1v3pSHnCv3MRPzsCfXqsN2q7MMK/mJKPh30SaNfFY gFBqRUj19CUGghcQ8AXgk+geDSTrDY0i747+LJZjQX0R+A0RAkSgCBQ5Z5BHyYQf dM/3KMNlnX8NPUNDY3rY+bMreqQubcwBbByFbmsTFg6cM1hvY16YiN+9QRhTroMT Xn1OGw+Eq6YkJ0Jli2kX7/n3AjUrUPCW/yDrVBwI/+Ubh+LBpCe1gazvmUhDhKkA x541Gx1Ybv9EwZzboSIbDKA8cqSJLncOoRP4/Ry2z0LUgIplaXsV37NJSVTAfefW /AX2EIOhok1GqCCNpOsT9iBTHbEDyOs= -----END CERTIFICATE-----Generated at Sun May 11 02:29:40 2025 by rpki-client