$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa File: 60ee8622-9109-33d6-910b-dbcc8263baa3.roa (raw, json) Hash identifier: cQ5WeIlXElUIvxjYk1ZqK3ktM5hZIh0sty9nRvJBUhE= Subject key identifier: D8:1A:F7:E3:D7:4B:A6:0A:E7:E0:0A:26:0B:A4:52:8A:8A:2B:74:08 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F432858498E647E9F555DC25207555E80 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 396112 IP address blocks: 208.40.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:7e:9f:55:5d:c2:52:07:55:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=3c5390b0-930a-4c7d-80a5-e1b58bbd786d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cc:7b:d4:39:a5:f6:1d:3a:39:3c:97:93:93: 50:03:d7:a1:43:62:c8:e5:d7:c5:fb:b1:ad:e8:27: 77:13:5c:12:09:c0:67:c7:01:e3:9d:a9:bd:2e:7d: d6:31:d1:bb:95:aa:8c:a6:2b:9d:9a:f8:ad:e4:0c: 5f:9e:6d:9e:7e:c6:e6:a0:15:b4:db:18:5a:36:eb: ea:25:2e:21:54:c0:fb:03:ae:0b:68:bd:84:da:6c: 93:98:fc:0a:f5:5c:57:94:50:43:39:c9:09:43:16: 75:68:a7:fb:b1:c9:a6:fd:e5:80:7d:62:61:58:28: 66:ca:ad:df:dd:e9:08:9a:2f:ed:e6:30:0b:a3:1b: de:0a:1d:da:54:97:d7:e0:a6:f4:48:2d:5f:1e:13: fd:b7:c7:8d:cd:e2:54:ed:7e:8b:29:43:93:36:d0: 16:6f:53:fd:4d:c2:8b:2a:56:da:16:db:01:c3:fc: 95:5e:28:15:3a:39:63:92:65:a4:66:8f:24:29:72: f6:f3:98:e4:d2:07:a7:f9:44:bc:83:09:15:3d:e1: 2b:4b:a0:cb:f1:54:c1:f5:b8:21:4b:f0:9b:2e:c7: f7:fc:96:98:09:62:72:4d:f1:41:94:f6:30:b1:8a: 62:3f:51:1c:17:18:60:b9:0c:5f:a3:19:c9:f9:0c: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1A:F7:E3:D7:4B:A6:0A:E7:E0:0A:26:0B:A4:52:8A:8A:2B:74:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 208.40.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:14:fd:8c:68:be:52:97:28:57:8b:83:1b:03:1e:66:6e:84: fb:44:50:1a:c0:45:c0:1e:8e:4c:ed:18:f8:ac:5a:f4:95:36: 48:f3:d0:dd:b4:ac:07:02:e0:30:e9:0b:eb:c1:dc:05:07:f7: 3b:c0:67:8a:1e:20:1a:6e:3c:85:62:25:a0:55:a5:5e:53:23: 78:33:be:f2:07:83:73:6c:ec:8f:c0:66:58:d4:50:fd:c0:04: 6e:ac:94:7a:af:f1:5b:06:86:0d:f6:7e:3f:48:e5:56:67:b5: 93:50:99:03:e1:fe:a1:6b:cd:be:3e:dd:c8:39:48:1b:a1:f0: 02:fb:2a:c4:6a:89:db:f0:81:eb:91:a9:e1:d1:92:80:47:8a: f7:01:e2:bb:4a:aa:e0:4e:1e:a1:7f:1f:35:8e:21:cf:4f:28: 06:1d:fc:d7:08:af:36:4a:fb:ab:3a:83:63:6d:75:de:29:48: 75:33:38:dd:e4:47:99:d2:14:22:8c:9a:5c:2b:87:d0:b9:d1: 23:cd:f5:b8:01:4f:5f:1e:e1:a9:55:62:fd:7e:1b:6a:ea:2d: 27:ee:72:8d:7e:cb:1f:e7:42:b1:06:25:70:76:43:a8:90:ff: 74:29:91:c7:68:5b:96:72:c2:78:53:93:b5:71:d1:3a:c3:50: 4f:bc:12:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZH6fVV3CUgdVXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk M2M1MzkwYjAtOTMwYS00YzdkLTgwYTUtZTFiNThiYmQ3ODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisx71Dml9h06OTyXk5NQA9ehQ2LI5dfF+7Gt 6Cd3E1wSCcBnxwHjnam9Ln3WMdG7laqMpiudmvit5Axfnm2efsbmoBW02xhaNuvq JS4hVMD7A64LaL2E2myTmPwK9VxXlFBDOckJQxZ1aKf7scmm/eWAfWJhWChmyq3f 3ekImi/t5jALoxveCh3aVJfX4Kb0SC1fHhP9t8eNzeJU7X6LKUOTNtAWb1P9TcKL KlbaFtsBw/yVXigVOjljkmWkZo8kKXL285jk0gen+US8gwkVPeErS6DL8VTB9bgh S/CbLsf3/JaYCWJyTfFBlPYwsYpiP1EcFxhguQxfoxnJ+Qxl9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNga9+PXS6YK5+AKJgukUoqKK3QIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNjBlZTg2MjItOTEwOS0z M2Q2LTkxMGItZGJjYzgyNjNiYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Cj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsU/YxovlKXKFeLgxsDHmZuhPtEUBrARcAejkztGPisWvSVNkjz0N20 rAcC4DDpC+vB3AUH9zvAZ4oeIBpuPIViJaBVpV5TI3gzvvIHg3Ns7I/AZljUUP3A BG6slHqv8VsGhg32fj9I5VZntZNQmQPh/qFrzb4+3cg5SBuh8AL7KsRqidvwgeuR qeHRkoBHivcB4rtKquBOHqF/HzWOIc9PKAYd/NcIrzZK+6s6g2Ntdd4pSHUzON3k R5nSFCKMmlwrh9C50SPN9bgBT18e4alVYv1+G2rqLSfuco1+yx/nQrEGJXB2Q6iQ /3QpkcdoW5ZywnhTk7Vx0TrDUE+8Esw= -----END CERTIFICATE-----Generated at Sat May 10 14:35:55 2025 by rpki-client