$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/325f96a9-8212-3d9f-9012-04fbdabcb0ae.roa File: 325f96a9-8212-3d9f-9012-04fbdabcb0ae.roa (raw, json) Hash identifier: 3lSx/evXzskCMTHcdIpqPiTvGOE3FlrFhedaKIq/mOI= Subject key identifier: CF:CB:CA:4F:29:B8:FF:12:C1:ED:7E:82:C6:1E:CC:55:C6:39:0D:13 Certificate issuer: /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Certificate serial: 010D0C9F43285849849EF5899DAE5FA526B80E80 Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/325f96a9-8212-3d9f-9012-04fbdabcb0ae.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 8075 IP address blocks: 208.80.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:f5:89:9d:ae:5f:a5:26:b8:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=20d3b748-37ce-464e-bad2-a33fddff9904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:c8:5d:68:40:2c:dd:27:cd:bd:5e:76:4c: 74:5a:e5:7e:79:86:4c:f7:96:b2:81:09:04:51:25: eb:35:98:1a:62:70:32:97:87:ec:28:d9:23:f1:4f: 34:5f:88:55:f7:7d:2e:78:9f:31:cd:b1:18:eb:94: 52:4c:e6:87:f1:ed:31:5f:5e:8a:8b:e0:2b:39:42: 43:b7:02:f5:93:92:2b:6a:8f:4c:5d:18:ee:6a:a6: 9e:5e:5e:18:76:fb:c5:34:91:75:79:63:9e:61:12: 2f:e6:11:61:e3:4b:bb:e4:f5:33:40:f7:27:1b:2e: de:83:0e:53:9b:8f:cc:19:1c:c3:8f:66:dc:b9:e0: 5b:c4:5e:68:c7:b9:68:5c:e6:3d:7b:68:d8:95:1b: 11:60:d7:f0:3a:a1:8f:81:59:55:6c:a3:8d:78:41: 3d:44:eb:bc:45:81:fc:13:04:c6:ea:93:f3:6c:96: 6a:60:ca:8e:5b:e2:aa:9c:e7:dd:ae:ac:b6:6b:35: d2:21:09:c8:19:6f:a4:c0:57:42:9f:a0:e8:6a:52: 45:99:2f:17:2c:d7:9a:e7:b0:cd:cb:9b:9e:f5:09: e4:f6:39:1f:05:34:70:a2:4a:d0:44:f9:58:f6:1d: a7:6f:af:c9:33:7d:28:66:16:66:44:f4:ba:c0:f3: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CB:CA:4F:29:B8:FF:12:C1:ED:7E:82:C6:1E:CC:55:C6:39:0D:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/325f96a9-8212-3d9f-9012-04fbdabcb0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl X509v3 Authority Key Identifier: keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer sbgp-ipAddrBlock: critical IPv4: 208.80.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:28:9c:d1:31:9c:31:56:1a:7b:cc:00:4e:5c:aa:0b:40:9f: 83:74:9e:db:7e:43:41:96:cd:ff:57:c1:a7:4c:e3:04:08:a4: 1a:c6:0e:56:7c:0c:e6:8e:4f:d3:c3:8b:38:e5:b9:8f:6a:4a: bd:1b:5d:9d:28:9d:b0:8f:af:d7:2a:13:aa:e4:2a:3a:34:44: ce:a9:6f:be:37:8c:eb:22:a4:cf:eb:1e:e9:40:d7:25:02:31: 39:be:91:c0:9a:24:b8:dd:48:47:de:fc:49:67:6d:17:55:a4: a4:66:31:f4:11:52:76:61:9f:b3:9e:b0:33:8f:66:cf:b6:11: 36:8d:20:0e:09:2f:ab:fb:0c:14:72:b9:69:09:90:17:d2:9f: e6:e3:03:77:f5:a8:0d:25:00:6a:cc:02:41:d2:8c:2c:0d:75: 60:5c:49:7f:50:31:f7:b5:06:d9:57:96:06:a5:3b:7f:9f:82: 92:45:75:81:31:2f:63:f2:53:27:7b:90:b3:26:eb:8e:10:bc: e0:84:82:3e:62:8b:23:68:85:11:78:7e:b6:d7:68:19:45:d0: 03:a8:5b:38:3c:aa:47:91:3f:48:67:30:f0:19:45:2e:dc:ed: a3:0c:3f:4d:5a:1b:fa:78:4c:f9:08:3f:91:25:70:89:2a:0a: 31:49:de:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvWJna5fpSa4DoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0YjFlNGItODlkMy00NzY5LWJhYjEtMzhkZjFkOWJi NzJlMB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk MjBkM2I3NDgtMzdjZS00NjRlLWJhZDItYTMzZmRkZmY5OTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9LIXWhALN0nzb1edkx0WuV+eYZM95aygQkE USXrNZgaYnAyl4fsKNkj8U80X4hV930ueJ8xzbEY65RSTOaH8e0xX16Ki+ArOUJD twL1k5Irao9MXRjuaqaeXl4YdvvFNJF1eWOeYRIv5hFh40u75PUzQPcnGy7egw5T m4/MGRzDj2bcueBbxF5ox7loXOY9e2jYlRsRYNfwOqGPgVlVbKONeEE9ROu8RYH8 EwTG6pPzbJZqYMqOW+KqnOfdrqy2azXSIQnIGW+kwFdCn6DoalJFmS8XLNea57DN y5ue9Qnk9jkfBTRwokrQRPlY9h2nb6/JM30oZhZmRPS6wPMWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/Lyk8puP8Swe1+gsYezFXGOQ0TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRi MWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5YmI3MmUvMzI1Zjk2YTktODIxMi0z ZDlmLTkwMTItMDRmYmRhYmNiMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0YjFlNGItODlkMy00NzY5LWJh YjEtMzhkZjFkOWJiNzJlLzgwNGIxZTRiLTg5ZDMtNDc2OS1iYWIxLTM4ZGYxZDli YjcyZS5jcmwwHwYDVR0jBBgwFoAUVQNlKvd/DK9QUvrJh8lPYgQvuDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRm MWQ5YmI3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FCGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAonNExnDFWGnvMAE5cqgtAn4N0ntt+Q0GWzf9XwadM4wQIpBrGDlZ8 DOaOT9PDizjluY9qSr0bXZ0onbCPr9cqE6rkKjo0RM6pb743jOsipM/rHulA1yUC MTm+kcCaJLjdSEfe/ElnbRdVpKRmMfQRUnZhn7OesDOPZs+2ETaNIA4JL6v7DBRy uWkJkBfSn+bjA3f1qA0lAGrMAkHSjCwNdWBcSX9QMfe1BtlXlgalO3+fgpJFdYEx L2PyUyd7kLMm644QvOCEgj5iiyNohRF4frbXaBlF0AOoWzg8qkeRP0hnMPAZRS7c 7aMMP01aG/p4TPkIP5ElcIkqCjFJ3qg= -----END CERTIFICATE-----Generated at Sat May 10 21:06:31 2025 by rpki-client