$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa File: 279b99c7-6717-3c8a-974d-137532afc328.roa (raw, json) Hash identifier: HK6OywXbHAJ8VfV2aScmpfKdc9ueBIviz7mKj6vKofU= Subject key identifier: 97:17:34:B9:98:59:38:8F:61:75:7D:B5:F9:88:5D:D5:E8:29:AF:C7 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F43285849BC74AD8840B769B072FBAE00 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa Signing time: Sun 04 May 2025 01:00:47 +0000 ROA not before: Sun 04 May 2025 01:00:47 +0000 ROA not after: Sat 02 Aug 2025 01:00:47 +0000 asID: 10397 IP address blocks: 208.85.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bc:74:ad:88:40:b7:69:b0:72:fb:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: May 4 01:00:47 2025 GMT Not After : Aug 2 01:00:47 2025 GMT Subject: CN=01ee3297-9605-46d3-b70b-7a69d231fdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e6:67:aa:05:3d:a4:3f:86:b0:e0:91:83:dd: ec:ef:3b:51:0b:d1:ce:d6:51:f8:c7:4b:86:45:46: 96:a2:be:80:c8:2b:71:8d:ff:1c:82:af:f4:ca:99: 9a:ab:72:58:26:da:f6:a6:c0:af:e0:7f:7a:40:f3: c5:00:4a:03:d6:48:13:b4:fa:36:c5:d6:96:02:da: 99:d5:64:80:0f:32:88:2f:a8:43:c2:be:ad:ef:5a: 73:3b:f6:96:7b:ab:ad:8a:8d:01:d1:4e:ea:2f:0d: 9f:74:f2:15:b3:ef:7d:8e:82:d5:5b:5f:78:b3:19: 70:fc:71:f7:b1:d1:6f:f7:6a:f2:39:a1:06:70:67: 87:51:44:c3:95:90:9f:6a:38:ce:26:ff:60:e1:3f: 01:12:8c:9d:12:1a:f3:39:a6:4e:a8:1d:8b:d0:33: df:7d:b7:bb:e9:14:14:dd:e7:86:35:7a:85:d1:8d: 71:75:bc:c4:db:3c:dc:b2:59:d9:88:96:42:2c:8e: 82:d4:ca:55:8b:c4:8c:f2:1b:b2:13:8a:ae:e8:e1: 5c:f4:70:c3:e2:52:b5:f4:1b:be:37:e8:6a:3c:44: 37:eb:ff:d0:37:26:df:2a:81:e4:8e:8c:48:7f:4d: 8f:b0:88:5a:b7:0b:4e:79:d1:5e:b0:b4:ac:a2:4d: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:17:34:B9:98:59:38:8F:61:75:7D:B5:F9:88:5D:D5:E8:29:AF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/279b99c7-6717-3c8a-974d-137532afc328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 208.85.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:74:44:bd:6e:d5:0a:53:39:54:a4:55:e3:90:a3:8c:85:75: 65:b5:dc:8e:f4:08:84:9c:15:aa:73:f4:f7:d2:42:5d:6c:e6: b3:51:b9:7f:5e:fd:53:c1:e5:69:21:f4:2d:8b:7c:de:f3:66: 12:99:85:9e:a1:a9:7b:2a:f2:27:72:c3:be:f9:3b:59:08:15: c9:5f:9c:62:94:84:90:29:c8:b8:1a:24:ed:b0:54:4c:18:17: 30:8a:d6:39:aa:d1:b1:46:0b:81:03:f1:d1:0b:81:55:a5:af: be:d0:1e:4b:7c:10:8b:e7:0c:b9:c6:5d:d3:88:11:ba:12:79: 0f:74:40:69:01:ca:11:ad:4b:33:db:76:35:5f:19:1c:3c:8c: 85:40:ca:66:fa:1f:62:4c:2d:52:f2:52:68:51:69:82:c1:3d: d1:d1:49:3e:68:39:c3:dc:96:98:51:eb:63:3b:33:47:00:21: 4a:63:6a:be:e0:43:d2:52:b0:71:ac:ae:3f:fb:24:2b:40:b5: cb:4f:bf:9f:c3:45:ac:ec:fc:44:09:d4:d5:1f:ea:9d:c3:d0: c3:ea:b6:3b:d3:94:4c:5f:a3:7f:42:f0:e8:cb:e4:53:9c:ec: 58:30:60:f1:38:49:e8:cc:74:f0:bb:38:a2:e4:48:02:d8:62: e2:35:15:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm8dK2IQLdpsHL7rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI1MDUwNDAxMDA0N1oXDTI1MDgwMjAxMDA0N1owLzEtMCsGA1UEAxMk MDFlZTMyOTctOTYwNS00NmQzLWI3MGItN2E2OWQyMzFmZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOZnqgU9pD+GsOCRg93s7ztRC9HO1lH4x0uG RUaWor6AyCtxjf8cgq/0ypmaq3JYJtr2psCv4H96QPPFAEoD1kgTtPo2xdaWAtqZ 1WSADzKIL6hDwr6t71pzO/aWe6utio0B0U7qLw2fdPIVs+99joLVW194sxlw/HH3 sdFv92ryOaEGcGeHUUTDlZCfajjOJv9g4T8BEoydEhrzOaZOqB2L0DPffbe76RQU 3eeGNXqF0Y1xdbzE2zzcslnZiJZCLI6C1MpVi8SM8huyE4qu6OFc9HDD4lK19Bu+ N+hqPEQ36//QNybfKoHkjoxIf02PsIhatwtOedFesLSsok2zwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcXNLmYWTiPYXV9tfmIXdXoKa/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMjc5Yjk5YzctNjcxNy0z YzhhLTk3NGQtMTM3NTMyYWZjMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FWBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV0RL1u1QpTOVSkVeOQo4yFdWW13I70CIScFapz9PfSQl1s5rNRuX9e /VPB5Wkh9C2LfN7zZhKZhZ6hqXsq8idyw775O1kIFclfnGKUhJApyLgaJO2wVEwY FzCK1jmq0bFGC4ED8dELgVWlr77QHkt8EIvnDLnGXdOIEboSeQ90QGkByhGtSzPb djVfGRw8jIVAymb6H2JMLVLyUmhRaYLBPdHRST5oOcPclphR62M7M0cAIUpjar7g Q9JSsHGsrj/7JCtAtctPv5/DRazs/EQJ1NUf6p3D0MPqtjvTlExfo39C8OjL5FOc 7FgwYPE4SejMdPC7OKLkSALYYuI1FQ8= -----END CERTIFICATE-----Generated at Mon May 12 04:00:13 2025 by rpki-client