$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa File: d8d9475d-3273-347c-bebb-562c1777f770.roa (raw, json) Hash identifier: l4e9kjmu1AeSoJhvwdunYHRPy9FeNdBcwKfoscr6XxI= Subject key identifier: E0:CA:48:48:09:29:AE:11:5A:82:59:84:02:65:B0:FE:6A:4F:07:D0 Certificate issuer: /CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Certificate serial: 010D0C9F43285849BDDA1F94D928D6377A852100 Authority key identifier: 87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa Signing time: Sun 04 May 2025 13:01:00 +0000 ROA not before: Sun 04 May 2025 13:01:00 +0000 ROA not after: Sat 02 Aug 2025 13:01:00 +0000 asID: 6939 IP address blocks: 208.65.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bd:da:1f:94:d9:28:d6:37:7a:85:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Validity Not Before: May 4 13:01:00 2025 GMT Not After : Aug 2 13:01:00 2025 GMT Subject: CN=5227522e-98d7-4a4e-be86-e5f41af17ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:92:fb:57:b7:f7:3b:d4:f9:70:b9:fc:16: f5:88:7e:4a:a3:66:84:44:ab:b9:6f:67:b8:2e:a3: 41:50:3f:ae:7e:d7:30:0c:56:c6:6a:56:eb:4d:15: 7f:b8:c3:e3:90:83:2b:a9:ba:e5:9a:fe:96:8b:b4: 65:fe:6b:45:5c:66:85:f9:08:ab:24:df:f7:f3:00: 39:86:ab:db:38:db:a7:d4:f9:b5:1c:f8:a3:fa:d8: 91:a5:2a:b8:d5:ad:79:1e:7d:cf:a3:82:39:78:5d: 9f:e0:d7:29:85:4a:58:65:7e:4a:39:c7:24:20:61: 02:58:be:36:10:b5:3c:29:02:37:9c:e4:2c:ce:25: 8f:e0:73:5b:d6:98:bb:b0:e9:1e:7c:92:8a:ad:f8: ef:c8:c2:c2:8a:c7:93:d4:0e:3a:79:c7:8a:d6:cc: 6c:05:9a:ff:14:bf:e2:62:fd:12:da:e4:69:52:80: 41:d9:6b:9b:d7:84:e1:f8:10:27:10:60:59:dc:27: 36:cd:d2:57:ab:eb:18:06:39:19:b0:96:e0:d3:b1: 63:85:83:65:95:ca:93:54:ed:e9:49:7b:16:d2:92: d6:09:ff:a8:92:8b:9a:2e:c7:5d:bd:b6:f7:b7:62: 20:ee:75:c6:2c:17:0d:17:b6:51:ac:44:2e:5c:a7: 85:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CA:48:48:09:29:AE:11:5A:82:59:84:02:65:B0:FE:6A:4F:07:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl X509v3 Authority Key Identifier: keyid:87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer sbgp-ipAddrBlock: critical IPv4: 208.65.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1b:6c:bd:f8:51:ef:17:d5:62:66:f4:cd:fd:47:40:30:e5: 63:5f:02:90:48:65:45:f1:fc:f6:ea:ce:fc:16:f6:c2:34:9a: 9d:9f:29:67:ca:fe:79:77:4c:8a:ac:45:51:5a:32:0d:c8:14: a3:e3:61:61:22:96:77:b7:dc:01:27:b5:2c:0d:59:9f:7e:78: ac:7c:02:ec:a3:75:68:66:10:13:03:88:87:5e:4f:14:5d:84: 01:23:e5:07:15:28:68:06:70:d4:03:b8:57:8c:f9:29:1b:ce: 9a:ff:a3:36:1e:d6:f8:de:50:b0:60:41:94:85:7d:86:36:50: 59:3a:13:24:27:b6:89:71:d1:8c:2d:28:9b:b4:8c:15:7a:ef: 93:45:ad:1f:a3:5e:41:70:64:09:c1:10:8b:fe:3b:57:c5:9f: 1d:bb:f3:f3:fe:03:90:b8:ef:87:29:36:18:40:4c:95:c8:6e: 09:e1:dd:27:97:dd:3b:cf:0b:3d:f5:4b:7e:0e:5a:71:3c:0f: 6d:b7:f9:8d:93:37:80:ef:5b:66:35:48:f8:1a:06:84:ed:89: e8:fd:f2:57:b7:59:c1:7a:f4:ff:e6:8e:c2:8c:89:ec:d4:4b: fe:c6:fd:93:f9:1e:20:28:eb:5c:20:b8:da:49:8d:71:b9:25: ed:00:46:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm92h+U2SjWN3qFIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiNzA0NWQtMmQ1Zi00YzU2LWJmYTQtZTM1Zjc0NWE2 MWY4MB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk NTIyNzUyMmUtOThkNy00YTRlLWJlODYtZTVmNDFhZjE3YWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH6S+1e39zvU+XC5/Bb1iH5Ko2aERKu5b2e4 LqNBUD+uftcwDFbGalbrTRV/uMPjkIMrqbrlmv6Wi7Rl/mtFXGaF+QirJN/38wA5 hqvbONun1Pm1HPij+tiRpSq41a15Hn3Po4I5eF2f4NcphUpYZX5KOcckIGECWL42 ELU8KQI3nOQsziWP4HNb1pi7sOkefJKKrfjvyMLCiseT1A46eceK1sxsBZr/FL/i Yv0S2uRpUoBB2Wub14Th+BAnEGBZ3Cc2zdJXq+sYBjkZsJbg07FjhYNllcqTVO3p SXsW0pLWCf+okouaLsddvbb3t2Ig7nXGLBcNF7ZRrEQuXKeFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODKSEgJKa4RWoJZhAJlsP5qTwfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3 MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVmNzQ1YTYxZjgvZDhkOTQ3NWQtMzI3My0z NDdjLWJlYmItNTYyYzE3NzdmNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2ZiNzA0NWQtMmQ1Zi00YzU2LWJm YTQtZTM1Zjc0NWE2MWY4L2NmYjcwNDVkLTJkNWYtNGM1Ni1iZmE0LWUzNWY3NDVh NjFmOC5jcmwwHwYDVR0jBBgwFoAUhwj6zBq9YZAPQRQZOmoB/dpea44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVm NzQ1YTYxZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsbbL34Ue8X1WJm9M39R0Aw5WNfApBIZUXx/PbqzvwW9sI0mp2fKWfK /nl3TIqsRVFaMg3IFKPjYWEilne33AEntSwNWZ9+eKx8AuyjdWhmEBMDiIdeTxRd hAEj5QcVKGgGcNQDuFeM+Skbzpr/ozYe1vjeULBgQZSFfYY2UFk6EyQntolx0Ywt KJu0jBV675NFrR+jXkFwZAnBEIv+O1fFnx278/P+A5C474cpNhhATJXIbgnh3SeX 3TvPCz31S34OWnE8D223+Y2TN4DvW2Y1SPgaBoTtiej98le3WcF69P/mjsKMiezU S/7G/ZP5HiAo61wguNpJjXG5Je0ARj4= -----END CERTIFICATE-----Generated at Sat May 10 05:00:36 2025 by rpki-client