$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e60b1122-fba9-3ca4-8966-6895e509d217.roa File: e60b1122-fba9-3ca4-8966-6895e509d217.roa (raw, json) Hash identifier: qXE/y9R7ZdsToYNXHg7it+IFhiFjbfytxJa8H0mG90w= Subject key identifier: AA:F0:73:E2:5E:43:08:00:E0:BE:94:17:11:EB:31:E9:3C:DA:DB:A2 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F432858498CFF03558DADF02614E9E400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e60b1122-fba9-3ca4-8966-6895e509d217.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 19905 IP address blocks: 208.38.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:03:55:8d:ad:f0:26:14:e9:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=e2210b9f-aa7d-4f01-95e1-642bbc2f2553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:2a:a7:fb:73:53:b5:74:50:2c:f9:11:1b: 88:ac:79:f0:d8:2e:5b:cb:4b:30:02:5a:ac:e1:4f: aa:cc:3f:cc:de:8d:1a:4f:2e:d9:1e:af:48:a3:00: 15:24:cb:75:ca:d7:3f:ac:12:22:1f:80:00:6f:cb: 8b:fb:3f:7e:dd:be:93:ac:f8:d3:e2:98:8e:8b:cd: 3e:03:54:3d:e2:ae:09:63:35:de:20:42:49:4b:d7: 60:ee:80:79:b6:40:f2:9e:5e:77:b9:e8:4d:16:ba: cf:0a:fc:19:ef:2f:79:3a:ed:0d:d7:cd:76:0f:64: 2a:8e:56:8b:40:a0:92:85:f7:ec:1c:06:61:7b:08: 54:93:97:97:b5:7d:07:2e:66:88:cd:02:1b:66:48: 12:e9:8f:b2:c2:42:2f:ea:3b:30:0e:ca:72:d4:cc: c8:cc:d5:29:8e:45:3b:a6:ff:4a:fe:8c:69:35:29: f9:d8:99:80:1b:92:76:69:9d:be:42:da:59:dd:7b: b1:eb:aa:56:f4:cc:91:ca:4d:48:56:02:e6:b7:66: ca:c2:44:3c:10:b8:10:90:64:4b:c2:b6:ff:97:36: da:c9:ac:01:9f:19:fc:83:3a:2c:fd:ca:e6:ca:0e: eb:21:f1:48:86:7a:cf:f3:a6:37:be:60:3d:8a:e6: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F0:73:E2:5E:43:08:00:E0:BE:94:17:11:EB:31:E9:3C:DA:DB:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e60b1122-fba9-3ca4-8966-6895e509d217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 208.38.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:d8:67:ba:f3:0a:47:07:30:5e:6f:6d:60:09:06:c0:59:ae: d9:3f:3b:26:a4:69:a9:40:27:b7:7c:2f:01:48:50:37:da:61: 14:73:0b:40:1b:2c:56:71:f7:ed:5a:f3:70:f5:b1:0b:a2:79: d8:b6:58:42:60:c6:b5:b0:7f:a9:d6:33:58:9d:0c:54:e1:ca: da:11:13:87:eb:b9:43:11:05:24:63:5a:54:77:97:8b:ba:55: b9:05:cc:db:63:9f:52:5a:b7:df:32:bb:79:c1:53:eb:7a:2b: ae:02:36:d2:db:0f:c4:88:fe:85:29:55:96:4b:96:e4:5f:64: 12:3a:fe:39:df:cb:e1:c7:09:b4:98:75:1a:0e:93:4f:f8:9e: bc:3b:f9:65:24:cd:82:30:46:96:10:3e:d2:9f:22:cc:3c:3b: d9:9f:13:3f:25:7d:f7:15:f7:18:22:c9:de:3b:28:89:6f:3a: 49:a6:7b:f5:b9:22:42:fc:61:03:b9:18:44:83:e9:66:28:73: 7f:ea:12:38:1e:35:04:49:eb:a8:8b:04:8b:aa:39:20:ac:b9: 93:7d:91:64:74:0a:e9:0c:6c:9e:0e:ad:31:a3:81:78:39:8b: 91:ab:0b:d4:af:59:a3:de:97:d6:9c:d6:76:36:2a:f0:96:4c: 65:11:a6:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wNVja3wJhTp5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk ZTIyMTBiOWYtYWE3ZC00ZjAxLTk1ZTEtNjQyYmJjMmYyNTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg8qp/tzU7V0UCz5ERuIrHnw2C5by0swAlqs 4U+qzD/M3o0aTy7ZHq9IowAVJMt1ytc/rBIiH4AAb8uL+z9+3b6TrPjT4piOi80+ A1Q94q4JYzXeIEJJS9dg7oB5tkDynl53uehNFrrPCvwZ7y95Ou0N1812D2QqjlaL QKCShffsHAZhewhUk5eXtX0HLmaIzQIbZkgS6Y+ywkIv6jswDspy1MzIzNUpjkU7 pv9K/oxpNSn52JmAG5J2aZ2+QtpZ3Xux66pW9MyRyk1IVgLmt2bKwkQ8ELgQkGRL wrb/lzbayawBnxn8gzos/crmyg7rIfFIhnrP86Y3vmA9iuZDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrwc+JeQwgA4L6UFxHrMek82tuiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTYwYjExMjItZmJhOS0z Y2E0LTg5NjYtNjg5NWU1MDlkMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0CY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANTYZ7rzCkcHMF5vbWAJBsBZrtk/OyakaalAJ7d8LwFIUDfaYRRzC0Ab LFZx9+1a83D1sQuiedi2WEJgxrWwf6nWM1idDFThytoRE4fruUMRBSRjWlR3l4u6 VbkFzNtjn1Jat98yu3nBU+t6K64CNtLbD8SI/oUpVZZLluRfZBI6/jnfy+HHCbSY dRoOk0/4nrw7+WUkzYIwRpYQPtKfIsw8O9mfEz8lffcV9xgiyd47KIlvOkmme/W5 IkL8YQO5GESD6WYoc3/qEjgeNQRJ66iLBIuqOSCsuZN9kWR0CukMbJ4OrTGjgXg5 i5GrC9SvWaPel9ac1nY2KvCWTGURpog= -----END CERTIFICATE-----Generated at Sun May 11 19:21:08 2025 by rpki-client