$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa File: 933424d9-7724-3d56-928c-ad8645ab2fa2.roa (raw, json) Hash identifier: MDKC0O9QQMfvkfh/9EoE3TNQ1r+qlZVhc2J6hENJH9E= Subject key identifier: CD:66:86:33:0D:A9:68:06:65:7E:23:A7:CC:A2:6E:AB:AA:EE:4D:C1 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285849A4BB5CD3C93A26473BF2F9F0 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36040 IP address blocks: 208.117.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5c:d3:c9:3a:26:47:3b:f2:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d647776b-16b4-4a8b-9fdb-9647fb0d041b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3e:3b:87:f1:53:0d:8d:21:8f:8f:df:84:f8: f4:f8:71:b2:df:f5:00:a4:c1:e3:44:46:d7:1a:63: 50:ae:e6:2e:fc:a8:0e:86:b4:46:4c:cb:93:09:3a: a7:70:e6:fa:51:77:1d:d7:03:cf:c0:9b:7b:6f:07: c9:fb:b7:79:2c:d0:aa:9a:16:6c:f3:bf:6c:dc:ce: e5:45:c9:0f:ef:92:dc:58:d5:9b:40:c5:dd:40:a7: e3:f5:b9:53:58:0c:38:fd:be:09:7c:27:e1:33:a2: a2:e0:4f:8c:1b:e9:48:ab:b9:cb:0e:90:bc:16:f3: 4e:10:15:8c:d8:a0:39:87:0e:73:72:ca:f6:58:41: 51:14:3a:e4:42:8c:3f:57:72:ed:b0:47:8b:a8:59: 01:5e:75:c3:93:b2:58:cb:fb:99:c4:cb:7f:c1:a0: 30:f4:7c:28:20:12:53:d1:d9:52:79:5d:ab:fe:64: 03:94:e8:14:1a:6a:32:6a:69:9f:50:68:4f:61:48: 07:33:30:1d:73:bd:ad:e7:b5:65:9f:05:62:1d:54: 0c:59:98:61:50:9e:41:fe:6b:f6:44:f8:cd:31:4f: 8f:e0:85:36:81:a1:4e:89:3b:c9:26:c5:bc:e3:68: ad:a0:7e:5a:67:36:0a:23:01:c8:61:81:53:bc:c6: 17:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:66:86:33:0D:A9:68:06:65:7E:23:A7:CC:A2:6E:AB:AA:EE:4D:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:95:5e:7b:2d:8c:a1:e9:98:e5:01:f1:14:e8:f4:7f:23:f2: 09:92:cd:af:9f:fb:41:0f:2b:75:21:cb:3b:92:8a:8c:a5:3f: 3a:92:21:9e:4d:be:01:e8:ec:4c:e2:40:27:74:a7:96:d9:77: 40:a6:53:05:f8:a4:14:62:dc:f0:ac:57:67:03:e5:99:e2:99: f1:b0:a4:28:53:c0:ea:2b:83:54:35:6a:98:35:a9:7c:37:ae: 56:ef:08:cb:12:f1:18:ba:ac:6b:5f:5d:09:fd:ab:b2:81:6d: 9b:cd:44:4f:b0:b4:ce:b5:be:f9:11:6e:b2:d6:38:3e:31:ad: af:ef:c4:ed:ff:66:48:4e:56:1f:17:6d:5d:ed:0d:18:a1:a5: f7:75:a4:0b:e1:ac:9d:b1:da:fa:5e:b3:94:c7:4f:63:4d:5a: 2e:b9:0b:10:d6:26:23:a1:18:5c:5c:cc:27:ae:e9:41:ae:b4: b5:3a:ec:f1:35:10:90:f8:2a:eb:dc:8e:7d:50:ac:4f:a5:9d: 3d:da:04:a2:87:b7:2b:28:3b:f0:8c:fd:3e:2c:72:0e:b8:f2: 4c:05:54:de:f9:f0:2b:57:9b:4f:bb:83:3b:14:3f:6e:4d:a4: 59:ad:a1:cd:a6:b1:05:2b:d0:5f:c1:4e:76:a8:c1:96:da:78: 49:a7:1b:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1zTyTomRzvy+fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDY0Nzc3NmItMTZiNC00YThiLTlmZGItOTY0N2ZiMGQwNDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz47h/FTDY0hj4/fhPj0+HGy3/UApMHjREbX GmNQruYu/KgOhrRGTMuTCTqncOb6UXcd1wPPwJt7bwfJ+7d5LNCqmhZs879s3M7l RckP75LcWNWbQMXdQKfj9blTWAw4/b4JfCfhM6Ki4E+MG+lIq7nLDpC8FvNOEBWM 2KA5hw5zcsr2WEFRFDrkQow/V3LtsEeLqFkBXnXDk7JYy/uZxMt/waAw9HwoIBJT 0dlSeV2r/mQDlOgUGmoyammfUGhPYUgHMzAdc72t57VlnwViHVQMWZhhUJ5B/mv2 RPjNMU+P4IU2gaFOiTvJJsW842itoH5aZzYKIwHIYYFTvMYXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1mhjMNqWgGZX4jp8yibquq7k3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvOTMzNDI0ZDktNzcyNC0z ZDU2LTkyOGMtYWQ4NjQ1YWIyZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaVXnstjKHpmOUB8RTo9H8j8gmSza+f+0EPK3UhyzuSioylPzqSIZ5N vgHo7EziQCd0p5bZd0CmUwX4pBRi3PCsV2cD5ZnimfGwpChTwOorg1Q1apg1qXw3 rlbvCMsS8Ri6rGtfXQn9q7KBbZvNRE+wtM61vvkRbrLWOD4xra/vxO3/ZkhOVh8X bV3tDRihpfd1pAvhrJ2x2vpes5THT2NNWi65CxDWJiOhGFxczCeu6UGutLU67PE1 EJD4Kuvcjn1QrE+lnT3aBKKHtysoO/CM/T4scg648kwFVN758CtXm0+7gzsUP25N pFmtoc2msQUr0F/BTnaowZbaeEmnG7s= -----END CERTIFICATE-----Generated at Sat May 10 16:38:00 2025 by rpki-client