$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ea8315b4-3094-36b6-a30b-241f777e01f2.roa File: ea8315b4-3094-36b6-a30b-241f777e01f2.roa (raw, json) Hash identifier: 9jMCWPd1Rjp6J9Y+RlpCrVz0hJs50QQo8nTNKHGolzk= Subject key identifier: F7:6F:A7:B1:CC:13:57:DC:A4:2C:BC:AB:74:EF:C5:DA:83:50:80:38 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F43285849CC21F2E0B5DDE562176ECC80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ea8315b4-3094-36b6-a30b-241f777e01f2.roa Signing time: Fri 09 May 2025 15:47:08 +0000 ROA not before: Fri 09 May 2025 15:47:08 +0000 ROA not after: Thu 07 Aug 2025 15:47:08 +0000 asID: 36549 IP address blocks: 208.26.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cc:21:f2:e0:b5:dd:e5:62:17:6e:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: May 9 15:47:08 2025 GMT Not After : Aug 7 15:47:08 2025 GMT Subject: CN=d016f9e1-34f7-4855-80c3-637cd5169555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:bf:68:ca:64:2d:c6:1c:c6:99:1b:fe:c7: 66:bf:74:de:22:14:44:e8:8a:6c:47:ec:a6:de:cc: 91:19:6c:ab:ef:1c:98:84:89:3e:72:fa:00:a0:a2: 02:8e:dc:81:06:44:ec:7c:fa:b0:26:54:82:66:60: 84:43:cf:8b:73:dd:9c:26:d9:60:58:eb:a1:cc:5e: e0:3d:b3:9f:21:7f:13:38:80:31:78:94:70:66:88: a0:ed:75:ca:0c:87:c6:11:f0:c5:0b:1d:07:33:0d: 31:ab:7c:1c:24:34:5c:91:76:43:30:39:5e:4d:de: a3:06:0a:23:07:ad:89:75:cb:98:51:43:f3:09:c2: a1:db:49:65:e4:6d:bb:da:a2:e6:07:aa:3d:31:52: ee:fd:c2:7b:87:89:6b:0d:fc:5a:e6:4f:ee:8f:a4: c0:20:4b:3b:d1:2d:f9:f3:e4:2d:f1:9a:6f:9a:7a: bf:9a:fb:1e:05:c5:d1:e2:be:02:8d:c0:16:4c:21: 2f:bf:00:6c:65:3a:38:b4:ce:66:5a:bf:d5:d8:8e: b8:a8:23:c1:3f:42:1e:f4:3f:77:07:31:a4:b7:ce: 21:6f:36:cf:df:b8:58:b9:0a:30:15:c6:f8:34:19: d0:d1:77:6c:02:3c:9b:27:7d:27:0d:ce:5f:b3:74: 0b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6F:A7:B1:CC:13:57:DC:A4:2C:BC:AB:74:EF:C5:DA:83:50:80:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ea8315b4-3094-36b6-a30b-241f777e01f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.26.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:6f:00:94:6e:d8:1c:a0:0d:b9:b5:e8:1f:ab:a7:8a:3e:62: 92:96:36:b5:a1:d3:42:d6:80:0e:58:60:62:1d:83:db:4e:85: 64:52:e2:59:46:f6:8a:79:8a:81:0b:8f:e4:04:c9:25:bf:35: 4d:75:c2:cf:06:5f:02:ce:1f:dd:77:07:04:b1:be:ac:53:70: 8d:46:99:3a:a5:26:2b:ba:13:15:4c:b3:a3:cf:06:17:6b:b3: 9a:f3:ee:cc:f7:6e:ab:86:21:04:34:48:28:b6:13:ea:50:28: 05:a1:97:54:60:65:c4:9e:ff:f6:76:ec:90:fb:d0:e9:28:70: 22:d6:cc:22:e4:b3:1e:e8:6c:66:b7:1e:3c:da:50:5a:06:a7: 48:d2:2f:63:35:db:5a:dd:3a:6c:8f:a5:6d:c8:b7:25:69:bc: 3b:a4:19:7b:fd:5b:90:da:91:66:16:6c:89:70:3e:c6:0a:20: 9a:ec:7a:a3:4b:a6:d7:b1:6d:00:58:61:7f:64:af:6f:6d:08: 45:24:cd:a4:8e:db:f3:8b:72:e5:3b:3a:a5:e2:21:da:dd:3f: d6:06:56:9a:5b:43:02:21:8c:53:f4:9e:6e:9b:f4:78:71:f8: 5d:fd:7a:ec:56:64:d7:46:13:9e:30:ea:dd:5b:32:ac:e1:33: 36:95:43:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnMIfLgtd3lYhduzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDUwOTE1NDcwOFoXDTI1MDgwNzE1NDcwOFowLzEtMCsGA1UEAxMk ZDAxNmY5ZTEtMzRmNy00ODU1LTgwYzMtNjM3Y2Q1MTY5NTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxem/aMpkLcYcxpkb/sdmv3TeIhRE6IpsR+ym 3syRGWyr7xyYhIk+cvoAoKICjtyBBkTsfPqwJlSCZmCEQ8+Lc92cJtlgWOuhzF7g PbOfIX8TOIAxeJRwZoig7XXKDIfGEfDFCx0HMw0xq3wcJDRckXZDMDleTd6jBgoj B62JdcuYUUPzCcKh20ll5G272qLmB6o9MVLu/cJ7h4lrDfxa5k/uj6TAIEs70S35 8+Qt8Zpvmnq/mvseBcXR4r4CjcAWTCEvvwBsZTo4tM5mWr/V2I64qCPBP0Ie9D93 BzGkt84hbzbP37hYuQowFcb4NBnQ0XdsAjybJ30nDc5fs3QLxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdvp7HME1fcpCy8q3TvxdqDUIA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZWE4MzE1YjQtMzA5NC0z NmI2LWEzMGItMjQxZjc3N2UwMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0BpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNvAJRu2BygDbm16B+rp4o+YpKWNrWh00LWgA5YYGIdg9tOhWRS4llG 9op5ioELj+QEySW/NU11ws8GXwLOH913BwSxvqxTcI1GmTqlJiu6ExVMs6PPBhdr s5rz7sz3bquGIQQ0SCi2E+pQKAWhl1RgZcSe//Z27JD70OkocCLWzCLksx7obGa3 HjzaUFoGp0jSL2M121rdOmyPpW3ItyVpvDukGXv9W5DakWYWbIlwPsYKIJrseqNL ptexbQBYYX9kr29tCEUkzaSO2/OLcuU7OqXiIdrdP9YGVppbQwIhjFP0nm6b9Hhx +F39euxWZNdGE54w6t1bMqzhMzaVQ7Q= -----END CERTIFICATE-----Generated at Sat May 10 14:14:26 2025 by rpki-client