$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/58aa95c4-289f-3da8-af22-c505cd4dad19.roa File: 58aa95c4-289f-3da8-af22-c505cd4dad19.roa (raw, json) Hash identifier: 9phg45C5GrLdHpfxMR8P4+4BBL8cVp7niwLhrQJVZ4E= Subject key identifier: FE:32:8A:F6:49:01:06:24:EB:CE:BA:4D:1D:30:67:49:33:68:6E:E7 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F43285849C20ACFE6F860066D97D9C780 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/58aa95c4-289f-3da8-af22-c505cd4dad19.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 11351 IP address blocks: 208.125.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:cf:e6:f8:60:06:6d:97:d9:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=f3d55724-a707-44db-98d2-e9011724a256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:0f:45:81:fc:2a:ad:e7:5a:e8:7f:eb:71: 04:4b:2e:5e:7a:0f:7f:7a:6e:07:ed:00:7c:5d:72: 43:c0:d6:55:ca:f0:61:5b:08:9f:b8:68:04:1b:c3: cb:bb:e6:e9:45:a2:f2:aa:2a:50:b9:6e:a4:70:1e: 58:6f:ab:7c:62:86:4f:9a:19:3c:c3:3d:d0:d1:d0: 2a:aa:4f:0b:09:c1:3a:4c:50:dc:d2:3f:c5:34:4b: 31:62:e2:7a:a0:dd:7d:ac:fc:47:85:de:dc:c0:3b: e5:c6:80:1f:85:7c:3f:fc:e6:ef:45:a1:04:c5:ad: 29:5c:b9:7d:17:ba:ea:f0:96:46:e1:84:5a:94:6a: 64:25:2d:ef:65:2c:91:93:82:b8:4d:43:cc:24:37: 3b:5b:f7:63:81:4a:20:a6:30:7f:c9:70:c9:69:48: c2:df:7c:08:7d:74:8f:b3:b0:60:fd:d4:e2:72:3a: 44:0e:fb:19:94:4b:0b:dc:df:9b:6a:17:20:f7:24: cb:2d:ec:45:82:27:e3:fc:d2:e7:29:9f:27:8e:df: b5:9b:5a:56:ee:71:a1:90:67:62:f3:c0:bf:06:e1: a8:41:81:32:c5:4e:ad:b7:98:2b:fd:f4:23:59:35: aa:09:31:7a:15:7a:97:b9:fd:2e:83:79:d0:16:fe: 98:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:32:8A:F6:49:01:06:24:EB:CE:BA:4D:1D:30:67:49:33:68:6E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/58aa95c4-289f-3da8-af22-c505cd4dad19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 208.125.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:14:de:2d:d1:54:12:22:dd:b6:c1:ee:9e:da:9b:70:67:f3: 40:ed:50:5b:9a:f7:bd:65:0e:75:d1:1e:ff:5b:e2:bf:ab:17: 78:98:eb:29:69:01:cf:61:c0:35:33:e3:8e:06:cd:93:7a:39: 31:b0:df:92:16:05:e8:9c:88:ae:c2:36:85:00:3c:32:50:ed: ee:d6:43:e3:16:27:a2:f8:f5:df:90:2e:cb:8c:32:39:5f:6a: 70:c4:bd:32:cd:bf:83:2e:7a:07:5d:75:24:3a:03:a1:7d:74: d3:91:c6:86:63:34:f7:66:5b:07:62:d6:c8:65:71:1b:0a:14: 19:0a:ac:ce:2d:29:56:3e:79:b3:bd:8d:52:5e:66:ae:51:24: 63:3b:4c:0d:1e:7f:e6:dd:e9:74:d4:ce:83:b3:29:4c:13:89: 8f:45:18:72:08:53:0d:c9:12:29:94:e0:4b:e0:35:bb:3a:cf: 38:aa:f2:1e:79:8b:73:8c:de:57:d0:5f:7d:18:23:1d:e5:00: 23:17:f0:d0:ed:5a:e5:c3:98:b7:34:99:4b:f2:5a:c5:08:93: cb:8e:da:db:8b:8a:28:40:69:7e:f3:1a:06:42:b4:b4:8a:8d: 6c:c5:31:b9:08:5c:87:8a:f9:46:d0:ff:73:4c:84:e2:29:f0: 62:8e:57:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCs/m+GAGbZfZx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk ZjNkNTU3MjQtYTcwNy00NGRiLTk4ZDItZTkwMTE3MjRhMjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYoPRYH8Kq3nWuh/63EESy5eeg9/em4H7QB8 XXJDwNZVyvBhWwifuGgEG8PLu+bpRaLyqipQuW6kcB5Yb6t8YoZPmhk8wz3Q0dAq qk8LCcE6TFDc0j/FNEsxYuJ6oN19rPxHhd7cwDvlxoAfhXw//ObvRaEExa0pXLl9 F7rq8JZG4YRalGpkJS3vZSyRk4K4TUPMJDc7W/djgUogpjB/yXDJaUjC33wIfXSP s7Bg/dTicjpEDvsZlEsL3N+bahcg9yTLLexFgifj/NLnKZ8njt+1m1pW7nGhkGdi 88C/BuGoQYEyxU6tt5gr/fQjWTWqCTF6FXqXuf0ug3nQFv6YawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4yivZJAQYk6866TR0wZ0kzaG7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNThhYTk1YzQtMjg5Zi0z ZGE4LWFmMjItYzUwNWNkNGRhZDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0H2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0U3i3RVBIi3bbB7p7am3Bn80DtUFua971lDnXRHv9b4r+rF3iY6ylp Ac9hwDUz444GzZN6OTGw35IWBeiciK7CNoUAPDJQ7e7WQ+MWJ6L49d+QLsuMMjlf anDEvTLNv4MuegdddSQ6A6F9dNORxoZjNPdmWwdi1shlcRsKFBkKrM4tKVY+ebO9 jVJeZq5RJGM7TA0ef+bd6XTUzoOzKUwTiY9FGHIIUw3JEimU4EvgNbs6zziq8h55 i3OM3lfQX30YIx3lACMX8NDtWuXDmLc0mUvyWsUIk8uO2tuLiihAaX7zGgZCtLSK jWzFMbkIXIeK+UbQ/3NMhOIp8GKOV6o= -----END CERTIFICATE-----Generated at Sun May 11 16:56:38 2025 by rpki-client