$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5814a07b-efd6-3e80-b326-1f12e0a1c0e3.roa File: 5814a07b-efd6-3e80-b326-1f12e0a1c0e3.roa (raw, json) Hash identifier: odKVV+hDUGqkIsBTi2FHzWziw6W2BoFvTQn4QO3qDy0= Subject key identifier: 70:6E:A3:49:FE:92:CD:81:2C:58:46:CA:76:E3:E4:45:17:71:A4:3A Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285849A4BAB879B17E1A4894845300 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5814a07b-efd6-3e80-b326-1f12e0a1c0e3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36040 IP address blocks: 208.117.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:b8:79:b1:7e:1a:48:94:84:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=6af2ffe0-4372-4ae3-a7ec-e0e5c33103bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:31:68:45:f5:5d:49:51:43:77:56:71:5a:39: 72:e0:c9:c8:ef:29:8e:40:51:ed:d3:95:65:23:a6: 0f:12:2c:5c:3e:2b:28:89:09:31:66:41:c5:57:b5: 79:81:c1:ca:93:8d:a7:26:ad:73:08:bf:e1:c4:91: 12:61:bd:16:ea:63:3f:25:da:bc:1f:95:51:58:01: 43:33:97:4a:9a:59:49:9b:af:dd:9b:71:89:01:45: 8a:d2:37:95:76:36:2a:fb:34:bc:32:f7:15:93:29: 6f:16:0f:e5:c7:ea:46:65:4c:71:a9:33:b1:1a:98: 3a:8c:e1:b5:b6:56:da:ff:3f:49:01:d0:aa:f0:4e: 94:bd:67:07:63:4c:3c:dd:77:bd:27:8a:f8:d9:e3: b1:fb:42:39:ce:7e:5b:49:4c:c7:dc:ea:4f:c3:ad: 9f:ef:4b:b7:c2:c9:7b:e0:68:c4:f2:75:b6:2e:c2: ff:ca:36:1e:0c:5c:c0:2e:80:22:81:fd:c6:f4:d1: cf:aa:70:ab:15:6e:c6:cd:de:a1:32:00:9d:b1:13: f8:06:82:6e:2e:41:46:2f:c4:7d:03:a0:c3:df:3f: aa:65:2b:01:02:70:a3:d6:06:5b:f8:b5:11:44:20: dc:45:42:29:41:f8:ef:55:a0:b0:f4:ab:7d:36:e0: ed:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6E:A3:49:FE:92:CD:81:2C:58:46:CA:76:E3:E4:45:17:71:A4:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5814a07b-efd6-3e80-b326-1f12e0a1c0e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3d:e5:68:a7:83:e3:29:f1:6c:e8:c3:a7:3d:8f:e3:00:d4: 68:04:17:7b:ca:7f:bc:bb:22:34:b1:8d:12:83:e8:92:9d:a1: 75:79:44:e5:43:39:02:85:9f:34:c9:40:7b:a2:28:96:dd:36: d4:5b:df:1a:5b:58:ed:d6:93:f7:c8:05:5e:01:f6:8f:8b:1d: dc:30:7c:80:4f:44:5a:71:c7:44:af:84:45:31:de:8c:39:a1: 20:bf:71:5b:fa:f7:2f:c8:35:b1:9b:04:32:6d:c7:c2:61:15: bd:be:63:90:1c:5f:18:26:1f:c4:93:64:31:df:3f:2e:9d:66: b7:66:1a:e2:51:16:5f:51:2b:90:75:0a:ae:02:0b:99:66:d1: 92:ca:10:09:ae:c8:11:33:ac:05:88:73:fa:10:21:14:0a:32: 29:be:41:8e:46:2c:c7:30:ff:b4:4f:03:9b:42:5d:b0:42:32: 23:fa:d8:53:48:b3:b0:57:5d:29:69:cd:00:6f:7c:ca:31:9b: 69:22:7b:00:91:47:9a:3d:3d:07:a6:bf:13:5a:90:a3:e1:8a: a1:f9:59:ec:46:b3:1d:c4:45:b2:4c:d7:87:8d:bb:77:f1:00: 72:73:e7:d4:14:9a:ac:5b:52:a6:4a:60:a2:d9:ac:a7:fa:56: 65:aa:69:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurh5sX4aSJSEUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NmFmMmZmZTAtNDM3Mi00YWUzLWE3ZWMtZTBlNWMzMzEwM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzFoRfVdSVFDd1ZxWjly4MnI7ymOQFHt05Vl I6YPEixcPisoiQkxZkHFV7V5gcHKk42nJq1zCL/hxJESYb0W6mM/Jdq8H5VRWAFD M5dKmllJm6/dm3GJAUWK0jeVdjYq+zS8MvcVkylvFg/lx+pGZUxxqTOxGpg6jOG1 tlba/z9JAdCq8E6UvWcHY0w83Xe9J4r42eOx+0I5zn5bSUzH3OpPw62f70u3wsl7 4GjE8nW2LsL/yjYeDFzALoAigf3G9NHPqnCrFW7Gzd6hMgCdsRP4BoJuLkFGL8R9 A6DD3z+qZSsBAnCj1gZb+LURRCDcRUIpQfjvVaCw9Kt9NuDtOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBuo0n+ks2BLFhGynbj5EUXcaQ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvNTgxNGEwN2ItZWZkNi0z ZTgwLWIzMjYtMWYxMmUwYTFjMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk95Wing+Mp8Wzow6c9j+MA1GgEF3vKf7y7IjSxjRKD6JKdoXV5ROVD OQKFnzTJQHuiKJbdNtRb3xpbWO3Wk/fIBV4B9o+LHdwwfIBPRFpxx0SvhEUx3ow5 oSC/cVv69y/INbGbBDJtx8JhFb2+Y5AcXxgmH8STZDHfPy6dZrdmGuJRFl9RK5B1 Cq4CC5lm0ZLKEAmuyBEzrAWIc/oQIRQKMim+QY5GLMcw/7RPA5tCXbBCMiP62FNI s7BXXSlpzQBvfMoxm2kiewCRR5o9PQemvxNakKPhiqH5WexGsx3ERbJM14eNu3fx AHJz59QUmqxbUqZKYKLZrKf6VmWqadY= -----END CERTIFICATE-----Generated at Sun May 11 04:31:17 2025 by rpki-client