$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/09d041f4-b4ec-34bb-8e06-4fe1c31d692b.roa File: 09d041f4-b4ec-34bb-8e06-4fe1c31d692b.roa (raw, json) Hash identifier: ndGWwqK9LSE7tYD/FbUxT3DW+fZKRAhDBP4rd30wW1Y= Subject key identifier: 85:4F:0E:F3:18:C6:E0:76:BB:0A:D8:2D:AA:C3:0F:75:96:64:85:BF Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285849A4BAC10C1F59FE5C1046EC40 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/09d041f4-b4ec-34bb-8e06-4fe1c31d692b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36040 IP address blocks: 208.117.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:c1:0c:1f:59:fe:5c:10:46:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cbb1b953-165b-4f69-988e-f7cdc6e91e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:d6:30:2c:49:c9:05:55:42:ee:31:76:c8: 15:96:9b:5f:b3:72:a2:af:9d:5e:c8:99:2f:ad:ea: 53:3c:9d:2d:36:82:17:a4:18:1f:cc:7d:f2:07:9a: b7:e6:96:74:8c:5e:cc:8e:3c:ce:9b:9d:c0:b7:03: 83:b2:c9:d4:4e:00:ae:f3:c6:3a:8d:1e:d3:ee:b5: b8:7a:18:8e:b7:1b:3e:d6:8a:11:a9:b6:ea:70:37: fe:57:ad:b4:75:fe:e7:a2:88:09:c2:ec:08:d2:07: 4c:e8:42:d3:97:09:85:26:2c:2b:a3:68:af:fe:c2: d4:65:67:de:3e:5b:76:7d:bc:87:84:bb:d5:fd:d7: 42:0f:52:a4:18:70:a3:27:02:04:b5:8f:07:f6:e1: 7d:cd:d2:f0:7e:0b:0a:24:0f:4c:1e:24:6b:70:d6: f2:a4:7b:5e:50:17:da:57:2e:9f:6f:b6:73:ca:22: d9:1f:c0:05:3c:02:c2:8c:95:cd:4d:11:39:82:e3: 09:5a:ee:df:17:41:2e:37:8d:ef:f0:7a:13:89:1f: 5f:ad:65:57:1f:98:fc:1a:53:8d:75:09:ed:f6:ef: ac:f9:9e:80:ef:c1:a8:2a:ca:55:32:39:40:67:38: 31:fb:0a:9c:a2:93:3f:64:ff:d6:e0:d7:a8:dd:d4: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4F:0E:F3:18:C6:E0:76:BB:0A:D8:2D:AA:C3:0F:75:96:64:85:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/09d041f4-b4ec-34bb-8e06-4fe1c31d692b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b4:ea:6e:be:c2:47:e4:35:73:86:aa:f2:74:3b:24:fc:2f: c8:d4:2c:1d:a3:3d:77:f3:6f:ec:94:9a:d2:eb:12:3d:30:da: 68:78:7a:81:a7:fb:d8:a7:29:5c:49:37:2d:d8:18:fe:71:5a: 8a:d6:f3:e9:69:be:12:b9:61:17:40:13:6f:12:37:43:d0:c0: d5:3f:7b:ae:3a:bb:a1:4b:0a:10:cc:3f:4b:87:67:3d:1f:2b: 1d:a6:d8:b8:84:56:43:36:ec:fb:0a:ef:e9:4a:f6:3b:c6:eb: 67:4c:26:50:21:54:a6:81:d8:00:78:7e:06:bb:10:73:7c:7e: 84:6c:53:45:0b:64:4e:91:f3:10:fc:99:3a:94:4d:cb:5f:f5: 3d:2c:57:09:07:52:3b:e9:3a:81:4b:6d:3b:6b:8b:83:5a:aa: cf:a2:77:05:b3:80:09:c9:ba:0d:53:c7:38:02:cf:79:50:98: 19:1a:dc:6e:40:23:7b:70:6c:fd:c0:60:51:8b:7a:29:b8:33: 6b:fd:6f:47:4f:3e:a4:0d:b0:70:64:8c:27:e8:8a:6d:20:19: 33:c9:83:96:3f:47:a4:aa:17:08:c1:38:c7:17:b8:9e:fb:4e: 3e:0e:3a:17:fc:9d:7e:70:42:ca:be:0d:f9:2c:1e:13:0a:85: 98:02:51:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkusEMH1n+XBBG7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2JiMWI5NTMtMTY1Yi00ZjY5LTk4OGUtZjdjZGM2ZTkxZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF3WMCxJyQVVQu4xdsgVlptfs3Kir51eyJkv repTPJ0tNoIXpBgfzH3yB5q35pZ0jF7MjjzOm53AtwODssnUTgCu88Y6jR7T7rW4 ehiOtxs+1ooRqbbqcDf+V620df7noogJwuwI0gdM6ELTlwmFJiwro2iv/sLUZWfe Plt2fbyHhLvV/ddCD1KkGHCjJwIEtY8H9uF9zdLwfgsKJA9MHiRrcNbypHteUBfa Vy6fb7ZzyiLZH8AFPALCjJXNTRE5guMJWu7fF0EuN43v8HoTiR9frWVXH5j8GlON dQnt9u+s+Z6A78GoKspVMjlAZzgx+wqcopM/ZP/W4Neo3dQH4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVPDvMYxuB2uwrYLarDD3WWZIW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMDlkMDQxZjQtYjRlYy0z NGJiLThlMDYtNGZlMWMzMWQ2OTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADa06m6+wkfkNXOGqvJ0OyT8L8jULB2jPXfzb+yUmtLrEj0w2mh4eoGn +9inKVxJNy3YGP5xWorW8+lpvhK5YRdAE28SN0PQwNU/e646u6FLChDMP0uHZz0f Kx2m2LiEVkM27PsK7+lK9jvG62dMJlAhVKaB2AB4fga7EHN8foRsU0ULZE6R8xD8 mTqUTctf9T0sVwkHUjvpOoFLbTtri4Naqs+idwWzgAnJug1TxzgCz3lQmBka3G5A I3twbP3AYFGLeim4M2v9b0dPPqQNsHBkjCfoim0gGTPJg5Y/R6SqFwjBOMcXuJ77 Tj4OOhf8nX5wQsq+DfksHhMKhZgCUT8= -----END CERTIFICATE-----Generated at Sat May 10 13:44:04 2025 by rpki-client