$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa File: 9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa (raw, json) Hash identifier: YEuyEcqgCsL3lHsqYO69/g3gUAcepJtMMcjz5zLpX3s= Subject key identifier: FC:12:FA:7B:47:50:23:DC:F3:F3:CB:52:68:EA:15:D8:C5:C9:2E:AF Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F432858491246C7C311A8F9FBB83D8160 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3565 IP address blocks: 208.68.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c7:c3:11:a8:f9:fb:b8:3d:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6a1a95be-549e-48f1-aefd-6633c66bce79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:a8:cd:ee:20:73:f1:c1:4f:9d:9f:05:79: 59:d6:72:2e:3d:dd:30:cb:32:00:43:c7:22:4a:5b: 87:65:94:05:ae:08:ec:d0:43:71:f6:83:42:86:d2: 36:40:c0:89:ed:f0:75:18:54:b7:6c:9d:46:57:41: 49:4b:bf:e0:b1:36:e0:54:3b:58:e9:25:69:62:1e: 4d:83:c8:73:19:94:7e:7e:fa:2a:7e:46:5b:91:44: da:32:c2:88:40:6d:7e:2f:b2:8e:3a:b1:d0:fa:36: 76:55:9c:db:ca:f0:2d:fa:fd:52:02:19:57:64:10: e8:fd:2d:1b:b6:35:35:5d:9f:a3:57:90:33:a2:ea: 48:19:54:ea:e5:12:40:94:7e:1a:6e:62:f1:ba:3e: 7a:fb:d8:ee:38:40:fb:dc:cc:3f:5b:31:c6:e1:67: 87:47:b6:cb:d4:3f:83:a0:e8:ca:43:10:b7:e5:be: f4:68:6e:3e:86:78:bf:4a:11:0d:5b:26:87:11:73: 8a:a8:c4:18:81:4c:0b:14:21:4f:6e:37:dd:b9:df: 4c:95:73:e9:94:95:62:0f:6c:a5:33:16:d6:f6:91: 93:49:3e:2a:bd:e1:d5:a3:2a:21:f5:69:2c:8c:39: f7:52:5d:c8:4c:ad:79:a8:85:9e:4c:39:3e:32:cf: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:12:FA:7B:47:50:23:DC:F3:F3:CB:52:68:EA:15:D8:C5:C9:2E:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9cd4e0a1-e6cb-3e71-ac91-8d50484d063c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f6:1b:c4:1e:87:8a:fb:97:f3:27:37:40:d1:b3:38:67:dc: 8d:2f:10:10:be:45:b7:4d:e7:e6:9d:9b:bb:09:d4:ed:84:2c: 77:e5:59:f5:2b:db:6d:da:6e:88:ea:f2:ac:98:46:a3:b3:e3: 91:c8:ff:74:6e:7d:33:11:9a:4b:6d:32:77:f3:25:b6:e3:a2: 23:f9:3b:cd:fc:26:44:90:b6:cf:41:21:82:0a:bd:71:09:1f: 91:53:12:bc:ce:89:9b:71:ae:ce:d1:25:3e:06:70:d4:5b:a2: 81:f9:ce:cb:d0:da:2d:ca:ec:91:cb:86:ca:87:15:78:26:76: 10:b0:e2:76:f8:a0:70:ed:f1:a3:c9:b4:23:9d:96:58:dc:43: e5:3d:c8:41:c1:3c:ef:a5:37:f7:15:aa:88:a6:4f:bf:ee:97: 96:0f:02:16:4a:f8:eb:34:aa:5d:53:39:48:2e:bf:5e:6c:90: 76:02:bc:0a:98:f2:b4:e5:4b:95:db:81:c5:6a:df:55:30:fb: f7:1a:89:6f:69:6f:a4:bc:b5:52:84:cb:93:e7:a3:fa:70:6b: 9c:44:60:72:98:47:f0:aa:fd:30:de:88:cd:36:b1:36:9e:1f: ad:f3:28:52:87:13:3e:f4:01:d3:87:49:a0:21:95:42:4f:56: 3b:b2:c3:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsfDEaj5+7g9gWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmExYTk1YmUtNTQ5ZS00OGYxLWFlZmQtNjYzM2M2NmJjZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuKoze4gc/HBT52fBXlZ1nIuPd0wyzIAQ8ci SluHZZQFrgjs0ENx9oNChtI2QMCJ7fB1GFS3bJ1GV0FJS7/gsTbgVDtY6SVpYh5N g8hzGZR+fvoqfkZbkUTaMsKIQG1+L7KOOrHQ+jZ2VZzbyvAt+v1SAhlXZBDo/S0b tjU1XZ+jV5AzoupIGVTq5RJAlH4abmLxuj56+9juOED73Mw/WzHG4WeHR7bL1D+D oOjKQxC35b70aG4+hni/ShENWyaHEXOKqMQYgUwLFCFPbjfdud9MlXPplJViD2yl MxbW9pGTST4qveHVoyoh9WksjDn3Ul3ITK15qIWeTDk+Ms/kwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwS+ntHUCPc8/PLUmjqFdjFyS6vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvOWNkNGUwYTEtZTZjYi0z ZTcxLWFjOTEtOGQ1MDQ4NGQwNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH2G8Qeh4r7l/MnN0DRszhn3I0vEBC+RbdN5+adm7sJ1O2ELHflWfUr 223abojq8qyYRqOz45HI/3RufTMRmkttMnfzJbbjoiP5O838JkSQts9BIYIKvXEJ H5FTErzOiZtxrs7RJT4GcNRbooH5zsvQ2i3K7JHLhsqHFXgmdhCw4nb4oHDt8aPJ tCOdlljcQ+U9yEHBPO+lN/cVqoimT7/ul5YPAhZK+Os0ql1TOUguv15skHYCvAqY 8rTlS5XbgcVq31Uw+/caiW9pb6S8tVKEy5Pno/pwa5xEYHKYR/Cq/TDeiM02sTae H63zKFKHEz70AdOHSaAhlUJPVjuyw64= -----END CERTIFICATE-----Generated at Fri May 9 20:55:50 2025 by rpki-client