$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa File: f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa (raw, json) Hash identifier: IbI0aE53lfzjMcmclrMawvddGYcWI4uweTx06wSY9fo= Subject key identifier: DD:53:12:8A:AD:BF:2A:C5:3B:4E:60:87:D1:2D:FB:B0:03:F1:CA:55 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F43285849A4BABBCD5FC9B131A820F680 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36040 IP address blocks: 208.65.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bb:cd:5f:c9:b1:31:a8:20:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=007d4998-9ca8-4ae2-ac79-3e39962615e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:8c:a2:94:3c:80:da:59:90:d7:e5:d4:89: ea:cd:f7:f5:35:13:18:6b:8d:55:70:15:84:33:48: bb:bf:72:c5:2d:90:72:24:c1:ff:42:73:5b:17:59: d7:f0:6d:f3:ed:cb:c1:fb:d1:24:1c:4c:70:16:f4: 8e:5a:0d:bf:92:a2:8d:52:70:84:ee:2b:9c:b9:b1: a3:be:26:ae:97:b6:e4:ca:cd:7a:49:36:80:6d:ee: 3b:03:6a:1a:aa:df:96:4b:91:b4:30:61:cc:40:f6: c8:f8:f6:1c:9d:dc:58:06:e5:25:c4:39:3d:d9:06: 1a:e1:13:45:09:cf:90:d0:3a:94:f0:86:50:0c:01: 13:32:3f:8b:ad:21:55:c6:06:b6:a2:61:38:c8:9f: 04:54:80:a4:ed:23:eb:dc:84:7c:41:d4:9b:83:49: 6d:bf:84:f0:61:e7:e6:b0:06:79:b4:f2:2b:79:41: 21:ee:11:57:5a:7d:8a:70:61:6f:7e:ae:9a:cb:0e: d9:2e:80:8f:96:ef:76:53:af:06:1e:7a:95:50:20: 5e:09:52:83:e0:73:13:4a:12:72:29:0c:50:09:29: 35:a1:8b:ae:c3:98:e0:5b:a3:fe:47:8b:8f:2f:e7: bd:ae:b5:42:30:c0:d0:25:54:16:34:c3:c1:b7:b4: c5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:53:12:8A:AD:BF:2A:C5:3B:4E:60:87:D1:2D:FB:B0:03:F1:CA:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f96571a9-cb8d-349b-aaa0-378f0bcf05b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.65.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:1c:25:2f:39:0f:83:a6:7a:fb:19:44:61:b4:0a:e3:bb:92: ce:a9:47:12:0f:70:7c:64:b4:3d:b4:84:65:53:1f:59:4b:ec: 62:aa:69:a9:a1:bf:e8:34:10:ad:50:bc:79:70:f3:46:cc:cd: f0:85:12:a3:3c:af:20:3a:8e:c0:83:61:f0:e4:fa:38:87:6b: 3f:07:cc:51:70:9f:b0:e7:94:50:d2:0e:0c:4e:08:cf:57:58: db:26:88:0b:d4:8d:c6:14:68:46:1d:e1:16:99:5b:67:f2:01: 4d:dc:df:e0:0a:ae:e8:08:72:7c:aa:24:83:33:7e:c5:dc:48: 04:ef:6f:2c:79:7b:c4:47:18:a2:5f:3d:11:b4:79:1c:11:81: cc:57:a1:ee:b6:b6:7d:95:39:0b:7a:1a:f5:40:2e:c6:b2:a8: 96:5a:3e:9d:b2:2e:1d:35:37:68:31:2c:50:e1:a8:83:30:6f: a8:dc:86:58:0d:a1:f4:ad:7f:bf:d0:55:a7:c2:0a:6d:31:4b: c7:b0:d1:05:e3:a8:80:eb:89:dd:9a:92:05:8b:55:45:83:65: f4:8a:55:c3:aa:7d:2f:93:8b:82:18:aa:92:da:d9:d4:8d:5b: 3d:c8:ae:a5:e7:ad:71:9c:4a:9e:38:aa:a7:71:db:5c:6d:d0: e7:27:30:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkurvNX8mxMagg9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDA3ZDQ5OTgtOWNhOC00YWUyLWFjNzktM2UzOTk2MjYxNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyWMopQ8gNpZkNfl1Inqzff1NRMYa41VcBWE M0i7v3LFLZByJMH/QnNbF1nX8G3z7cvB+9EkHExwFvSOWg2/kqKNUnCE7iucubGj viaul7bkys16STaAbe47A2oaqt+WS5G0MGHMQPbI+PYcndxYBuUlxDk92QYa4RNF Cc+Q0DqU8IZQDAETMj+LrSFVxga2omE4yJ8EVICk7SPr3IR8QdSbg0ltv4TwYefm sAZ5tPIreUEh7hFXWn2KcGFvfq6ayw7ZLoCPlu92U68GHnqVUCBeCVKD4HMTShJy KQxQCSk1oYuuw5jgW6P+R4uPL+e9rrVCMMDQJVQWNMPBt7TF2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1TEoqtvyrFO05gh9Et+7AD8cpVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZjk2NTcxYTktY2I4ZC0z NDliLWFhYTAtMzc4ZjBiY2YwNWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABocJS85D4OmevsZRGG0CuO7ks6pRxIPcHxktD20hGVTH1lL7GKqaamh v+g0EK1QvHlw80bMzfCFEqM8ryA6jsCDYfDk+jiHaz8HzFFwn7DnlFDSDgxOCM9X WNsmiAvUjcYUaEYd4RaZW2fyAU3c3+AKrugIcnyqJIMzfsXcSATvbyx5e8RHGKJf PRG0eRwRgcxXoe62tn2VOQt6GvVALsayqJZaPp2yLh01N2gxLFDhqIMwb6jchlgN ofStf7/QVafCCm0xS8ew0QXjqIDrid2akgWLVUWDZfSKVcOqfS+Ti4IYqpLa2dSN Wz3IrqXnrXGcSp44qqdx21xt0OcnMHE= -----END CERTIFICATE-----Generated at Sun May 11 03:43:35 2025 by rpki-client