$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa File: 12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa (raw, json) Hash identifier: WzLimMKoO8DP70APmG2k30hAS2DqgH2r5O8nIPQ4oeI= Subject key identifier: 01:9B:9D:B7:A3:07:EA:C0:FC:FD:C9:31:24:28:21:E2:B2:B9:82:07 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F43285849ABB498E860E8232633C9BFC7 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 40805 IP address blocks: 208.96.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:98:e8:60:e8:23:26:33:c9:bf:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=a8683f17-8fb1-481e-aa26-f98deadea00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0f:b9:0d:49:8f:ab:f5:fb:53:3e:41:e2:eb: e0:38:88:96:b0:65:50:c7:c3:f8:6a:8e:ad:f9:e2: 51:83:7d:37:1c:a9:b7:2a:2b:37:9c:f8:07:ab:44: d2:7d:25:b3:49:0f:a3:e9:39:86:ef:80:94:c9:02: 8b:02:37:74:86:37:aa:83:bd:fc:04:82:45:93:ad: f0:49:c7:9d:13:8e:23:cd:b6:e7:03:58:54:30:74: 41:7c:3e:5f:a2:ca:92:5f:ea:b0:1b:86:fc:85:f4: 40:ce:4b:79:74:8f:c7:4e:fc:0e:f3:0a:16:82:18: 20:d6:d1:1d:f1:39:d2:4a:37:68:ba:ff:5c:59:9c: ca:62:b5:18:07:e7:d2:fd:b8:38:2d:f1:08:e4:87: 7b:6f:36:46:ac:d9:6d:ba:97:0e:1c:99:de:0f:38: 65:93:ea:37:02:34:1c:b6:7f:16:35:10:5b:59:15: a4:4a:72:3c:8b:82:a4:fc:f1:ee:b0:89:7b:b6:fc: cd:db:0b:4b:f6:2e:47:c5:3e:19:58:65:b6:2d:ba: 41:03:96:af:9c:5c:a7:b2:58:36:31:19:40:b6:74: e4:86:b4:12:0a:f7:8d:97:7f:2c:29:80:a3:89:01: 6e:fd:15:66:11:74:3c:ef:bb:49:88:07:ad:88:5a: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9B:9D:B7:A3:07:EA:C0:FC:FD:C9:31:24:28:21:E2:B2:B9:82:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/12d8e2ee-af89-3b84-8705-f36f7f8c97b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.96.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:ce:2d:79:36:86:37:8d:27:86:e1:af:51:a6:e6:05:c5:8e: 5b:74:f6:be:4e:78:36:3c:c6:7e:ca:62:c3:53:88:05:d9:ea: f8:d7:1d:be:ab:fe:3c:6c:06:70:86:86:2f:d4:56:db:c5:ce: 26:47:86:ac:f3:0b:09:27:6e:0b:d1:2a:a3:4c:40:94:bf:01: 90:21:2f:be:46:08:80:6d:18:1f:82:47:b0:18:17:60:5d:ca: 00:7e:01:58:1b:30:af:7d:dc:16:03:3d:7d:a4:ce:84:cf:02: 25:cd:c5:dc:b5:b8:6c:ea:a3:83:bb:1d:49:89:ac:09:29:60: 58:98:4a:13:bf:93:8c:c0:f4:b9:84:13:15:a1:f2:5f:c3:6c: 3f:cc:70:c6:63:a6:cf:26:09:c8:29:ae:37:df:d0:5f:86:c5: ca:e4:3e:f7:7b:7f:8c:b5:b8:2a:1f:cc:70:30:92:ce:00:46: 95:41:6e:6c:63:37:5c:bd:e5:71:01:3c:64:c4:a2:14:df:5e: 76:51:48:6f:12:13:d4:75:75:de:0d:ea:50:99:4f:f8:57:c0: 40:b7:e9:79:7c:4a:10:f3:90:05:da:88:dc:75:f8:f4:22:3c: b8:d7:7a:3e:51:7e:ef:d8:77:f3:79:91:52:54:df:e8:cd:46: 13:b3:ba:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJjoYOgjJjPJv8cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YTg2ODNmMTctOGZiMS00ODFlLWFhMjYtZjk4ZGVhZGVhMDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA+5DUmPq/X7Uz5B4uvgOIiWsGVQx8P4ao6t +eJRg303HKm3Kis3nPgHq0TSfSWzSQ+j6TmG74CUyQKLAjd0hjeqg738BIJFk63w ScedE44jzbbnA1hUMHRBfD5fosqSX+qwG4b8hfRAzkt5dI/HTvwO8woWghgg1tEd 8TnSSjdouv9cWZzKYrUYB+fS/bg4LfEI5Id7bzZGrNltupcOHJneDzhlk+o3AjQc tn8WNRBbWRWkSnI8i4Kk/PHusIl7tvzN2wtL9i5HxT4ZWGW2LbpBA5avnFynslg2 MRlAtnTkhrQSCveNl38sKYCjiQFu/RVmEXQ877tJiAetiFph4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGbnbejB+rA/P3JMSQoIeKyuYIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMTJkOGUyZWUtYWY4OS0z Yjg0LTg3MDUtZjM2ZjdmOGM5N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0GCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzOLXk2hjeNJ4bhr1Gm5gXFjlt09r5OeDY8xn7KYsNTiAXZ6vjXHb6r /jxsBnCGhi/UVtvFziZHhqzzCwknbgvRKqNMQJS/AZAhL75GCIBtGB+CR7AYF2Bd ygB+AVgbMK993BYDPX2kzoTPAiXNxdy1uGzqo4O7HUmJrAkpYFiYShO/k4zA9LmE ExWh8l/DbD/McMZjps8mCcgprjff0F+GxcrkPvd7f4y1uCofzHAwks4ARpVBbmxj N1y95XEBPGTEohTfXnZRSG8SE9R1dd4N6lCZT/hXwEC36Xl8ShDzkAXaiNx1+PQi PLjXej5Rfu/Yd/N5kVJU3+jNRhOzuss= -----END CERTIFICATE-----Generated at Sat May 10 20:03:24 2025 by rpki-client