$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa File: 3c5788b1-7c82-3275-9457-c61ff52b2890.roa (raw, json) Hash identifier: iYnp9bJcQLjATjTUVMBMvAc7UQqVURfFKyc06MjNERY= Subject key identifier: 32:13:19:93:7B:76:6A:F3:79:0C:79:08:73:B3:61:59:CE:0B:9C:83 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F43285849B9AA004992CE98959BFD1DE0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 397422 IP address blocks: 208.56.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:00:49:92:ce:98:95:9b:fd:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=3f329580-6783-4dd6-93e9-981eccbc05dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:f6:71:ed:72:71:e2:36:b6:3b:2b:be:00: a4:37:91:56:cd:22:40:f9:53:9c:75:41:80:ac:75: 4b:53:09:8c:59:4c:ef:c6:72:ea:b1:aa:b3:7f:e1: 95:55:a0:05:05:12:34:d5:2c:16:11:50:7f:b4:bb: 85:05:20:bd:eb:66:12:ff:c3:58:cb:44:18:0a:94: 6a:9b:79:57:65:b2:58:a4:19:5a:fe:9b:83:87:51: 10:c0:3a:90:65:82:10:e1:c9:08:bc:07:72:76:3c: e5:a2:da:77:bd:b5:38:c1:ec:6e:11:ab:72:8e:8a: c4:32:26:f1:62:04:9d:77:31:93:f9:8e:77:99:cc: 23:5c:81:75:07:e9:2f:6b:9d:c7:b4:00:21:c5:88: ec:91:f4:c9:35:67:b6:2c:7a:88:85:8e:4b:9a:3b: c0:2d:25:50:61:cf:20:b0:91:cd:75:bf:92:71:3f: a1:80:66:05:b7:62:c8:ef:93:53:7c:fe:09:02:b7: 0f:26:83:97:ea:52:70:c1:43:2e:f4:fd:37:28:8d: 72:e5:52:1b:62:75:36:49:b5:3d:4c:0c:ef:43:99: 45:04:cb:7d:e6:07:2d:f9:eb:bf:34:1c:0f:ae:8e: 44:cd:76:73:9e:55:a4:5c:b1:12:15:d8:ab:03:7e: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:13:19:93:7B:76:6A:F3:79:0C:79:08:73:B3:61:59:CE:0B:9C:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3c5788b1-7c82-3275-9457-c61ff52b2890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 208.56.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f3:a1:56:53:75:59:3e:04:3a:c7:09:bc:9f:64:c6:09:bd: 54:74:3d:4e:c8:71:1d:04:03:fd:7f:ad:f0:2e:64:f4:09:57: 77:af:54:0d:80:b0:eb:6f:0f:23:8f:e9:3f:fe:b4:f4:56:8e: 66:d7:0d:02:7b:6b:83:ec:e9:81:c4:60:30:29:ae:54:f7:a3: 9c:ab:98:d2:2e:27:83:4c:40:b5:81:71:5d:76:b4:70:7f:48: 83:72:de:9a:e3:51:ab:2f:70:86:5d:5c:ad:84:ec:3a:6b:98: 15:51:a8:3b:d3:2f:66:2b:94:ea:a8:1f:85:c7:88:8a:54:f0: e8:78:aa:53:54:98:b6:cb:79:15:42:be:b3:e4:c6:00:4c:e9: ef:22:56:7b:d4:b3:d8:84:6c:14:bc:42:3b:55:86:b3:fb:4f: 5a:34:86:e8:49:66:35:68:50:f0:97:c8:b0:d3:53:ba:fe:a4: 78:c9:30:a8:f8:cd:47:04:05:fd:e6:1f:d2:e5:fa:75:62:b9: f2:ad:fa:29:80:02:19:ca:a0:f4:e5:0b:71:6d:35:39:f1:09: db:11:a0:5d:37:1c:40:6b:c9:84:62:50:09:f4:26:8f:66:bf: 02:fe:d3:a4:8a:1d:77:99:a0:f1:38:b4:3f:18:3f:4d:5e:ea: b0:e6:58:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgBJks6YlZv9HeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk M2YzMjk1ODAtNjc4My00ZGQ2LTkzZTktOTgxZWNjYmMwNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLX2ce1yceI2tjsrvgCkN5FWzSJA+VOcdUGA rHVLUwmMWUzvxnLqsaqzf+GVVaAFBRI01SwWEVB/tLuFBSC962YS/8NYy0QYCpRq m3lXZbJYpBla/puDh1EQwDqQZYIQ4ckIvAdydjzlotp3vbU4wexuEatyjorEMibx YgSddzGT+Y53mcwjXIF1B+kva53HtAAhxYjskfTJNWe2LHqIhY5LmjvALSVQYc8g sJHNdb+ScT+hgGYFt2LI75NTfP4JArcPJoOX6lJwwUMu9P03KI1y5VIbYnU2SbU9 TAzvQ5lFBMt95gct+eu/NBwPro5EzXZznlWkXLESFdirA35ogwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDITGZN7dmrzeQx5CHOzYVnOC5yDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvM2M1Nzg4YjEtN2M4Mi0z Mjc1LTk0NTctYzYxZmY1MmIyODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjzoVZTdVk+BDrHCbyfZMYJvVR0PU7IcR0EA/1/rfAuZPQJV3evVA2A sOtvDyOP6T/+tPRWjmbXDQJ7a4Ps6YHEYDAprlT3o5yrmNIuJ4NMQLWBcV12tHB/ SINy3prjUasvcIZdXK2E7DprmBVRqDvTL2YrlOqoH4XHiIpU8Oh4qlNUmLbLeRVC vrPkxgBM6e8iVnvUs9iEbBS8QjtVhrP7T1o0huhJZjVoUPCXyLDTU7r+pHjJMKj4 zUcEBf3mH9Ll+nViufKt+imAAhnKoPTlC3FtNTnxCdsRoF03HEBryYRiUAn0Jo9m vwL+06SKHXeZoPE4tD8YP01e6rDmWJw= -----END CERTIFICATE-----Generated at Thu May 8 16:20:26 2025 by rpki-client