$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa File: 11cff431-9278-3524-bc39-08ba7453130b.roa (raw, json) Hash identifier: cX2yxlqyxWJPZXvWpZ49h7dsTphky1RnOsttKFaOqmo= Subject key identifier: 35:AA:67:BC:CD:85:51:46:DD:26:89:E8:39:EC:4F:AD:A7:0A:A9:21 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F43285849CBCFA08649B385E86C035200 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 203724 IP address blocks: 208.81.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a0:86:49:b3:85:e8:6c:03:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=f70254e8-671b-437d-bd22-5afbb545938f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:44:3c:c8:73:4e:92:d9:19:6f:a1:a9:6a: 73:33:23:96:d7:d8:10:88:27:61:1a:b7:df:63:76: f5:18:8b:4f:c9:3c:59:da:82:9d:a9:0a:ab:3e:44: 20:6f:88:38:78:f9:5f:b4:55:d3:08:13:9d:3e:f0: 12:1c:b9:a1:bb:78:ce:03:78:ad:fd:df:06:0f:81: cd:d4:2f:ed:c4:99:25:fa:2b:71:a8:cc:c7:7e:ee: 10:d8:84:9f:f2:39:fa:4e:a7:32:8a:98:dc:41:4a: 2f:c7:da:71:6c:d6:30:55:6c:d6:cf:33:75:da:c5: 84:b3:00:f6:20:4d:c4:34:fb:73:86:7c:14:ef:f7: b0:93:83:50:da:d7:f2:7e:e9:49:3c:65:85:43:5e: dd:31:a2:8d:06:83:eb:aa:e9:ec:d1:e5:dd:95:65: 04:92:9a:0f:a2:56:1e:a7:04:20:96:0c:74:d7:81: 7e:a1:c9:7d:cf:3d:24:a9:2d:93:2a:e8:d8:f4:be: 33:b6:0f:a0:06:31:98:da:66:fb:28:92:c4:79:8e: f4:e5:b9:43:e5:b3:19:83:54:35:4d:dd:9d:9f:2a: 11:1b:1b:35:f3:09:9a:c0:1c:ef:66:6b:f7:c7:16: 60:9d:8c:ba:ea:8b:21:3c:cd:3d:c0:46:3e:fb:14: 1b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AA:67:BC:CD:85:51:46:DD:26:89:E8:39:EC:4F:AD:A7:0A:A9:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.81.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5b:35:03:28:5f:66:07:e8:e0:1d:d0:d9:d8:c1:a0:19:80: 3e:ab:ad:cb:f2:44:f8:f0:ae:5a:b9:a9:36:c5:0c:54:d4:5c: 9f:82:60:93:a1:23:64:23:53:61:55:42:08:53:58:40:76:0d: f1:4d:91:06:32:61:bb:85:27:4b:86:92:a3:97:4a:6b:55:3b: 3d:f2:5d:ae:fc:87:af:cb:75:d6:a7:57:b3:af:c2:40:75:61: b3:db:72:3c:7b:75:89:d0:8c:4f:ec:29:7f:36:92:0c:7e:19: 95:e9:d9:12:f2:86:c0:54:f9:9e:a1:f1:dd:59:78:71:80:dc: 8e:05:c7:c8:63:88:ed:6f:28:9d:52:b7:54:24:bd:a0:6d:27: 71:31:f5:a4:1d:a6:a4:64:fe:c8:b5:a2:89:6b:90:ec:81:79: 7c:1e:9f:93:ce:ec:ab:b0:12:da:df:9e:16:82:73:30:4f:60: 51:71:c9:6f:48:22:17:6a:8f:3f:d8:af:d8:09:41:18:02:e4: c5:16:a5:55:58:41:ef:d1:b4:ea:dd:0d:3b:3c:b9:00:a2:72: f3:45:5d:08:c3:95:88:5e:c8:fa:9e:6b:70:39:22:26:ca:50: 4f:d0:84:c0:b8:54:a6:9a:37:15:2a:82:30:aa:f8:c1:8d:8b: 26:45:b4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6CGSbOF6GwDUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZjcwMjU0ZTgtNjcxYi00MzdkLWJkMjItNWFmYmI1NDU5MzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGhEPMhzTpLZGW+hqWpzMyOW19gQiCdhGrff Y3b1GItPyTxZ2oKdqQqrPkQgb4g4ePlftFXTCBOdPvASHLmhu3jOA3it/d8GD4HN 1C/txJkl+itxqMzHfu4Q2ISf8jn6TqcyipjcQUovx9pxbNYwVWzWzzN12sWEswD2 IE3ENPtzhnwU7/ewk4NQ2tfyfulJPGWFQ17dMaKNBoPrquns0eXdlWUEkpoPolYe pwQglgx014F+ocl9zz0kqS2TKujY9L4ztg+gBjGY2mb7KJLEeY705blD5bMZg1Q1 Td2dnyoRGxs18wmawBzvZmv3xxZgnYy66oshPM09wEY++xQb1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWqZ7zNhVFG3SaJ6DnsT62nCqkhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMTFjZmY0MzEtOTI3OC0z NTI0LWJjMzktMDhiYTc0NTMxMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5bNQMoX2YH6OAd0NnYwaAZgD6rrcvyRPjwrlq5qTbFDFTUXJ+CYJOh I2QjU2FVQghTWEB2DfFNkQYyYbuFJ0uGkqOXSmtVOz3yXa78h6/LddanV7OvwkB1 YbPbcjx7dYnQjE/sKX82kgx+GZXp2RLyhsBU+Z6h8d1ZeHGA3I4Fx8hjiO1vKJ1S t1QkvaBtJ3Ex9aQdpqRk/si1oolrkOyBeXwen5PO7KuwEtrfnhaCczBPYFFxyW9I Ihdqjz/Yr9gJQRgC5MUWpVVYQe/RtOrdDTs8uQCicvNFXQjDlYheyPqea3A5IibK UE/QhMC4VKaaNxUqgjCq+MGNiyZFtCk= -----END CERTIFICATE-----Generated at Sun May 11 04:29:56 2025 by rpki-client